$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: iO04Yg4qorkBBWb0eqJU6A8v2NBQJXNxfIzhosYbYks= Subject key identifier: 36:71:D6:F8:A4:21:71:F2:F9:D0:24:6E:4D:42:BE:B0:F7:CA:C1:4E Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 73331115D39EB7DD8BCB8876C2F5251FCA02F767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 018A Signing time: Sun 27 Apr 2025 19:41:37 +0000 Manifest this update: Sun 27 Apr 2025 19:36:37 +0000 Manifest next update: Thu 01 May 2025 05:19:37 +0000 Files and hashes: 1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: RLhg9rJ/5B4XLu7IGn3XPsmv8oOGI05hQTzSvEzwwNM=) 2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: h87GIrTJMQyGb0m1sPwlgli09SuNOJCczFxB7rjFa/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:33:11:15:d3:9e:b7:dd:8b:cb:88:76:c2:f5:25:1f:ca:02:f7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Apr 27 19:36:37 2025 GMT Not After : May 1 05:19:37 2025 GMT Subject: CN=3671D6F8A42171F2F9D0246E4D42BEB0F7CAC14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:a5:91:c6:81:09:f1:65:31:6e:b5:af:fd: a6:f8:e7:c7:8a:7d:f2:67:68:85:f6:78:bc:af:fd: f2:ae:01:00:1f:f2:07:80:59:d6:ac:ea:be:07:69: 6f:c7:92:79:32:0f:ce:0c:cf:97:e5:77:31:bf:69: 03:b6:0f:be:22:4c:06:a5:50:6d:7d:83:80:3b:85: 57:45:10:f0:79:44:6f:34:e8:c5:5e:59:96:71:b4: 14:a5:f9:ab:f7:60:b7:4b:89:35:0b:66:3e:36:09: d6:c8:5a:9b:52:aa:ba:5e:63:60:5a:bb:a8:ad:b3: 04:11:08:df:66:66:73:8c:f6:be:e5:33:e8:d3:a0: fd:a6:45:58:b8:59:86:eb:34:05:54:b9:21:70:65: ad:d4:9c:ac:0e:66:66:6c:26:2b:e6:d4:81:75:e7: f2:8f:c2:95:43:bf:b1:52:aa:67:41:3a:ce:e9:1a: cd:29:87:50:58:99:66:ac:18:42:c6:ca:e9:32:78: 92:ed:16:e6:ea:5d:b8:1b:29:49:bb:d0:11:61:b7: 3e:52:3a:28:08:32:20:8c:57:c8:8b:5e:05:3f:69: 75:a0:62:61:c3:b7:33:9e:64:1a:0f:a2:0e:dd:03: 9a:fd:25:bc:af:61:a6:24:86:12:5d:18:2a:44:24: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:D6:F8:A4:21:71:F2:F9:D0:24:6E:4D:42:BE:B0:F7:CA:C1:4E X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:bc:f8:12:06:ea:c4:d6:cf:df:5b:bb:c3:c2:d7:34:62:af: e2:9f:4b:49:be:72:62:db:bd:ba:ee:91:1b:7a:f7:07:39:98: cd:dc:08:2f:19:7f:e4:1e:cf:76:bd:de:95:b0:5f:51:b9:e3: 84:8e:91:da:96:52:04:d4:f3:d6:cb:26:c8:22:ca:33:15:29: 99:e5:a1:ac:b7:15:bf:0f:0d:2d:de:06:ba:f2:43:c5:68:1e: 4d:b0:bc:49:42:67:25:0d:0d:a8:b6:c2:ff:24:0e:08:e8:36: cd:12:f7:d1:75:21:9c:9c:21:8a:36:7c:8d:49:52:24:e9:a9: 52:51:cc:dc:ab:8d:ee:6b:62:38:82:4a:ea:23:56:7b:3f:d6: e8:be:3b:fe:c1:3b:c0:8d:83:44:00:19:6f:8b:7d:da:4d:d5: f6:91:f2:2f:fe:ad:eb:98:a4:8d:ec:e7:ed:9b:34:c7:f1:56: 26:6b:1d:86:69:07:7c:d2:f4:2b:59:91:cc:af:40:60:a6:2b: 24:94:85:ef:cc:0a:0d:b4:79:57:67:a3:34:20:00:43:74:ae: 89:25:57:d2:fd:4d:54:5d:5a:0f:6b:35:f5:69:5e:0d:85:83: 49:11:4c:b0:4d:1b:13:b5:0a:8e:c2:a0:92:a2:c2:eb:f8:94: da:d4:89:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczMRFdOet92Ly4h2wvUlH8oC92cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTA0MjcxOTM2MzdaFw0yNTA1MDEwNTE5MzdaMDMxMTAvBgNV BAMTKDM2NzFENkY4QTQyMTcxRjJGOUQwMjQ2RTRENDJCRUIwRjdDQUMxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenaWRxoEJ8WUxbrWv/ab458eK ffJnaIX2eLyv/fKuAQAf8geAWdas6r4HaW/HknkyD84Mz5fldzG/aQO2D74iTAal UG19g4A7hVdFEPB5RG806MVeWZZxtBSl+av3YLdLiTULZj42CdbIWptSqrpeY2Ba u6itswQRCN9mZnOM9r7lM+jToP2mRVi4WYbrNAVUuSFwZa3UnKwOZmZsJivm1IF1 5/KPwpVDv7FSqmdBOs7pGs0ph1BYmWasGELGyukyeJLtFubqXbgbKUm70BFhtz5S OigIMiCMV8iLXgU/aXWgYmHDtzOeZBoPog7dA5r9JbyvYaYkhhJdGCpEJJsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnHW+KQhcfL50CRuTUK+sPfKwU4wHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG8+BIG6sTWz99bu8PC1zRir+KfS0m+cmLb vbrukRt69wc5mM3cCC8Zf+Qez3a93pWwX1G544SOkdqWUgTU89bLJsgiyjMVKZnl oay3Fb8PDS3eBrryQ8VoHk2wvElCZyUNDai2wv8kDgjoNs0S99F1IZycIYo2fI1J UiTpqVJRzNyrje5rYjiCSuojVns/1ui+O/7BO8CNg0QAGW+LfdpN1faR8i/+reuY pI3s5+2bNMfxViZrHYZpB3zS9CtZkcyvQGCmKySUhe/MCg20eVdnozQgAEN0rokl V9L9TVRdWg9rNfVpXg2Fg0kRTLBNGxO1Co7CoJKiwuv4lNrUiY4= -----END CERTIFICATE-----Generated at Tue Apr 29 17:27:26 2025 by rpki-client