$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: Vzke/xeybFUvC+A+E4YdjDHNnFhDIserV+RbzHhoIK8= Subject key identifier: 79:61:13:DB:C3:31:B4:80:EF:92:A1:0B:6A:27:6A:23:D7:E2:5A:7E Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 2267FA65B620B9EDE9F8D4047B130EA5EEDB0B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: 9D Signing time: Sat 14 Jun 2025 17:31:39 +0000 Manifest this update: Sat 14 Jun 2025 17:26:39 +0000 Manifest next update: Wed 18 Jun 2025 04:05:39 +0000 Files and hashes: 1: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: khEVLFQtH+a45cc9yGf67pi2XkwhJ0LBpc+mc2azWiQ=) 2: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: bYo0zSG/Y+l/kRQWqzhvCy7R5Romzqih1iDCz89t3mk=) 3: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: qGUv354O5bgjhTMZ45JMcvyFGWQg1EdVxERPegJoKCQ=) 4: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: 0j3hfkZqJ2BoUpu1y6NJK5bP+3XEPGYsj7zXdyutyvA=) 5: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: 2CpAucK+rvU21eAZmyDV5IqqR6dCAIafzExn8g2LOMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:67:fa:65:b6:20:b9:ed:e9:f8:d4:04:7b:13:0e:a5:ee:db:0b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Jun 14 17:26:39 2025 GMT Not After : Jun 18 04:05:39 2025 GMT Subject: CN=796113DBC331B480EF92A10B6A276A23D7E25A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:f4:83:c6:04:a2:98:07:06:ef:33:50:c8: 01:00:01:af:b8:05:bb:ee:57:f3:9c:7c:19:a1:95: 07:38:47:86:c8:fd:3a:e8:64:3e:41:63:e0:d4:59: 25:99:a8:61:ce:b8:16:6d:8e:c2:62:be:76:5a:3a: fe:7a:5d:ac:06:8c:ed:d7:6b:e9:6d:9f:cf:b1:0d: 51:5e:cd:a9:f8:86:b3:5d:2a:da:96:86:07:32:d9: ef:5c:68:b1:54:23:85:27:e8:55:4f:74:38:64:a5: 09:90:38:1f:7b:5d:83:87:7d:55:67:3a:a9:74:0b: 83:10:4d:af:2f:e5:a2:2c:44:89:f1:62:fc:9d:2f: e1:54:df:b8:a0:01:26:e3:42:d9:14:3c:46:81:38: ae:45:5b:88:a1:e4:bd:03:f0:cf:14:2f:15:00:67: bd:d1:23:a2:65:74:4a:18:9a:77:71:6c:92:b0:15: 7f:ee:9d:f8:c3:58:6e:07:84:e7:58:84:10:a8:77: 3e:50:ab:78:95:d6:91:4c:09:4d:d3:2b:0f:54:cd: 1a:6d:bf:97:8c:75:3c:79:f1:ca:86:fd:ad:36:2e: 59:ca:fb:d7:ad:f6:e9:b6:e9:d2:fc:9d:81:2e:79: 2f:17:00:a9:3a:b0:c7:0f:f7:09:7e:23:2c:2c:ef: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:13:DB:C3:31:B4:80:EF:92:A1:0B:6A:27:6A:23:D7:E2:5A:7E X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e6:31:71:14:72:cf:57:04:e9:34:60:58:28:c3:a7:19:3c: c5:51:8d:3d:cf:84:1f:15:9c:28:21:33:22:b1:e0:c7:69:b6: 14:56:04:91:16:46:15:e2:65:e2:c2:7e:ba:d0:2e:db:d4:32: a3:f2:eb:48:5a:19:32:c8:e2:f7:33:30:b2:dc:2f:41:17:e0: e9:73:25:46:74:78:7b:db:39:78:4f:38:59:44:02:a7:10:be: bb:69:e5:56:1b:23:95:1d:7d:a1:bc:d3:bc:0f:a6:9e:d0:e9: 8d:a8:2c:a5:d3:27:cb:79:c4:0b:26:65:67:7a:c8:7b:8c:25: de:86:3f:1d:33:01:80:3d:5a:83:3e:83:16:5a:0d:b9:17:a4: 48:35:db:f5:71:b4:9a:bb:d9:7c:ad:d1:11:42:4a:fa:77:be: 2b:f6:f4:a6:97:c0:12:4d:f7:6b:27:bf:6b:23:3d:62:d4:27: 6a:39:ab:b7:65:c2:3b:c7:6d:c0:a9:01:0d:4c:6d:75:c5:a8: a1:a7:bb:e6:d8:05:25:20:76:a8:a3:ad:b4:2a:78:c6:72:6e: 76:6c:d9:3e:51:bc:a7:71:12:f4:06:07:99:63:2b:58:60:14: ee:da:1f:a3:1e:1b:f6:e7:c4:f2:01:d9:9c:09:f4:b7:eb:d7: cc:f4:e8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImf6ZbYgue3p+NQEexMOpe7bC4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNTA2MTQxNzI2MzlaFw0yNTA2MTgwNDA1MzlaMDMxMTAvBgNV BAMTKDc5NjExM0RCQzMzMUI0ODBFRjkyQTEwQjZBMjc2QTIzRDdFMjVBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0fSDxgSimAcG7zNQyAEAAa+4 BbvuV/OcfBmhlQc4R4bI/TroZD5BY+DUWSWZqGHOuBZtjsJivnZaOv56XawGjO3X a+ltn8+xDVFezan4hrNdKtqWhgcy2e9caLFUI4Un6FVPdDhkpQmQOB97XYOHfVVn Oql0C4MQTa8v5aIsRInxYvydL+FU37igASbjQtkUPEaBOK5FW4ih5L0D8M8ULxUA Z73RI6JldEoYmndxbJKwFX/unfjDWG4HhOdYhBCodz5Qq3iV1pFMCU3TKw9UzRpt v5eMdTx58cqG/a02LlnK+9et9um26dL8nYEueS8XAKk6sMcP9wl+Iyws7yQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWET28MxtIDvkqELaidqI9fiWn4wHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrmMXEUcs9XBOk0YFgow6cZPMVRjT3PhB8V nCghMyKx4MdpthRWBJEWRhXiZeLCfrrQLtvUMqPy60haGTLI4vczMLLcL0EX4Olz JUZ0eHvbOXhPOFlEAqcQvrtp5VYbI5UdfaG807wPpp7Q6Y2oLKXTJ8t5xAsmZWd6 yHuMJd6GPx0zAYA9WoM+gxZaDbkXpEg12/VxtJq72Xyt0RFCSvp3viv29KaXwBJN 92snv2sjPWLUJ2o5q7dlwjvHbcCpAQ1MbXXFqKGnu+bYBSUgdqijrbQqeMZybnZs 2T5RvKdxEvQGB5ljK1hgFO7aH6MeG/bnxPIB2ZwJ9Lfr18z06HA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:53 2025 by rpki-client