$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: 5K7r4ujB95gi5gDcqsZpgLcJHmlaaRPnxL/oZj2ikYc= Subject key identifier: C7:AF:15:A4:2D:D8:E1:13:52:F7:7B:06:1F:28:6D:AB:76:23:70:05 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 2C387BF2319F3C5FC89CC06FC7298DE2337E8CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04E1 Signing time: Mon 16 Jun 2025 00:32:13 +0000 Manifest this update: Mon 16 Jun 2025 00:27:13 +0000 Manifest next update: Thu 19 Jun 2025 05:53:13 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) 3: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: 4DeDHHvyBODTylvJ0+MT1MpWO9hSROxoNhWJ3t1KOUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:38:7b:f2:31:9f:3c:5f:c8:9c:c0:6f:c7:29:8d:e2:33:7e:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Jun 16 00:27:13 2025 GMT Not After : Jun 19 05:53:13 2025 GMT Subject: CN=C7AF15A42DD8E11352F77B061F286DAB76237005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:83:5f:95:69:0a:7d:ca:e0:d1:be:2c:ae: 58:68:10:ee:f8:a3:e5:7c:ea:ac:7d:89:e4:59:ac: 02:ad:44:5c:10:18:f3:96:5b:78:eb:ac:1e:28:0d: 04:fd:5d:55:af:84:08:04:36:0f:f8:25:2c:ca:ca: 9f:0a:6d:2e:ea:36:f7:20:ed:c7:24:c0:22:3d:16: 13:ec:41:4b:a8:c2:11:5c:78:fa:bd:88:6f:8a:b9: 7b:f9:e8:4a:2c:6b:37:1e:6a:81:8c:4c:d8:b9:97: 04:42:46:2b:66:67:d6:99:bc:ee:4e:79:07:6b:35: 91:2b:27:a2:27:b3:9c:56:0c:3d:0a:c7:1d:d3:1a: 83:55:f9:6a:b8:41:0b:7a:ac:76:91:61:17:cb:24: 7f:37:19:64:f9:a3:b4:cb:b3:13:fc:3c:8a:20:84: 02:71:9a:cb:42:42:7c:3b:fd:c1:16:cd:36:cd:bd: 2b:8d:05:b8:84:25:34:e0:89:67:e7:e8:09:43:23: 5c:4d:ad:c2:32:2b:28:fc:2b:ce:d0:b0:84:1c:8d: 9c:bb:e5:b6:a9:f5:a6:f3:c2:7d:a2:c8:65:8d:e6: 9b:e8:71:5e:4b:66:ce:7e:97:87:12:b5:ab:90:7c: ea:a8:d9:40:a0:c5:dc:ea:9a:22:3a:ae:0b:4e:e1: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AF:15:A4:2D:D8:E1:13:52:F7:7B:06:1F:28:6D:AB:76:23:70:05 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:40:5c:bd:96:36:1f:66:3c:ea:4a:d3:22:d5:58:78:58:8a: d8:c2:b4:67:e5:5d:02:f0:d9:c0:ba:7a:67:9c:d1:f5:36:45: a7:f6:4d:32:a3:61:0e:cd:b1:67:43:95:84:43:8f:45:4b:b8: ad:60:89:a3:54:bb:49:6e:33:ba:09:ae:13:bf:9b:45:df:96: df:3a:a3:0b:d1:50:cf:2d:96:8e:7d:54:02:48:50:1f:4c:30: d5:99:f3:4c:ac:87:7e:3b:07:d4:28:1f:80:a4:62:ec:3f:26: a9:0d:f3:46:e3:95:f5:6c:ab:fa:5c:f1:5a:51:53:3e:19:0c: 3a:cb:47:c0:3b:a3:b6:98:86:8b:3b:53:bb:f9:a7:c1:3b:91: d1:5e:67:9d:3b:75:13:38:58:62:f3:04:18:2d:68:2a:2d:3d: f6:20:f7:bc:50:6a:49:f1:61:45:0e:48:45:f7:07:03:94:03: 86:b2:43:7a:52:0f:65:78:78:84:26:17:64:b7:dc:3a:1f:b8: fb:83:5e:7f:84:17:a2:55:d9:91:44:7a:d4:a2:b8:b0:2e:81: 50:d6:bb:99:d8:51:d6:83:a3:b8:a2:cd:51:8b:44:59:df:76: 06:35:a7:e9:2f:6f:b9:06:58:f4:63:19:5a:b7:be:2a:88:0b: cd:2b:c3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDh78jGfPF/InMBvxymN4jN+jL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA2MTYwMDI3MTNaFw0yNTA2MTkwNTUzMTNaMDMxMTAvBgNV BAMTKEM3QUYxNUE0MkREOEUxMTM1MkY3N0IwNjFGMjg2REFCNzYyMzcwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlINflWkKfcrg0b4srlhoEO74 o+V86qx9ieRZrAKtRFwQGPOWW3jrrB4oDQT9XVWvhAgENg/4JSzKyp8KbS7qNvcg 7cckwCI9FhPsQUuowhFcePq9iG+KuXv56EosazceaoGMTNi5lwRCRitmZ9aZvO5O eQdrNZErJ6Ins5xWDD0Kxx3TGoNV+Wq4QQt6rHaRYRfLJH83GWT5o7TLsxP8PIog hAJxmstCQnw7/cEWzTbNvSuNBbiEJTTgiWfn6AlDI1xNrcIyKyj8K87QsIQcjZy7 5bap9abzwn2iyGWN5pvocV5LZs5+l4cStauQfOqo2UCgxdzqmiI6rgtO4fN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx68VpC3Y4RNS93sGHyhtq3YjcAUwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFAXL2WNh9mPOpK0yLVWHhYitjCtGflXQLw 2cC6emec0fU2Raf2TTKjYQ7NsWdDlYRDj0VLuK1giaNUu0luM7oJrhO/m0Xflt86 owvRUM8tlo59VAJIUB9MMNWZ80ysh347B9QoH4CkYuw/JqkN80bjlfVsq/pc8VpR Uz4ZDDrLR8A7o7aYhos7U7v5p8E7kdFeZ507dRM4WGLzBBgtaCotPfYg97xQaknx YUUOSEX3BwOUA4ayQ3pSD2V4eIQmF2S33DofuPuDXn+EF6JV2ZFEetSiuLAugVDW u5nYUdaDo7iizVGLRFnfdgY1p+kvb7kGWPRjGVq3viqIC80rw/g= -----END CERTIFICATE-----Generated at Mon Jun 16 06:15:26 2025 by rpki-client