$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: UxD+D0lJUEKZaWTP0i2gDtixvOFBFKeukaeAi439oak= Subject key identifier: 42:3B:13:C1:70:85:E3:76:AD:23:82:77:43:B6:FF:3F:D2:F8:2A:99 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 4BF77DE11E62D14A0CB101773BEA2F7C3569E219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 0371 Signing time: Mon 28 Apr 2025 05:40:02 +0000 Manifest this update: Mon 28 Apr 2025 05:35:01 +0000 Manifest next update: Thu 01 May 2025 05:56:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: cm9fjwujr7LlKVpcGyjsx1oK21kngz01CTDT0I0yyjs=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 4: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 05:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f7:7d:e1:1e:62:d1:4a:0c:b1:01:77:3b:ea:2f:7c:35:69:e2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Apr 28 05:35:01 2025 GMT Not After : May 1 05:56:01 2025 GMT Subject: CN=423B13C17085E376AD23827743B6FF3FD2F82A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:ea:f7:02:b4:b0:b2:c3:23:81:a8:71:de: ee:50:35:d5:6a:3d:c9:86:51:4b:9b:d5:06:7a:ae: 9e:2b:57:4c:cd:d5:4e:32:5e:36:11:48:4f:0f:59: 70:88:b4:e0:a9:21:2a:b1:b9:60:6d:ff:38:e4:e9: d9:5d:c7:76:82:cd:40:b1:74:3a:b3:e0:6f:4a:84: 7a:86:f8:65:1e:1c:c1:c8:7d:a8:93:36:0e:ac:fe: 76:f5:7b:24:fd:c3:10:58:ca:7b:1a:74:4c:0d:ff: de:c7:f7:7d:40:c0:c3:2f:ad:00:31:db:3e:23:e1: 0c:ae:da:2e:a8:e6:67:07:95:f1:76:1c:18:63:f0: 58:74:a7:83:5c:9c:66:17:02:7b:91:eb:8a:5c:2f: 60:58:1b:3d:d0:47:80:e4:73:7a:c1:0c:c9:c3:f7: f9:6c:3d:fc:f1:b7:7f:90:e8:5c:ae:19:7a:da:0d: 0b:9d:39:3f:4e:86:29:50:a1:2a:34:bc:2e:0e:c5: 22:25:f4:a6:8b:6a:86:b5:e9:83:d5:0d:e8:c0:c0: 3a:f4:36:56:2a:ef:6d:fd:d3:d0:fc:ad:d4:9d:38: 3b:67:1e:57:d5:4c:38:82:af:d4:b9:dc:0b:45:93: 0f:53:45:8f:fa:f5:9d:b1:b3:f9:63:63:5c:4c:1b: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:13:C1:70:85:E3:76:AD:23:82:77:43:B6:FF:3F:D2:F8:2A:99 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2f:f8:6e:6d:ed:18:12:43:2f:28:62:6d:51:5a:b8:e3:79: 48:46:0a:2f:19:84:c5:ef:4d:7b:9d:68:0d:47:f1:51:3c:3c: bb:6e:be:c0:2c:25:7e:5e:a5:6b:53:d5:c6:93:47:0f:ab:70: c5:6e:da:d1:f7:f9:f0:c5:87:66:e3:76:f6:ca:3e:ab:06:2e: 84:9a:e5:23:df:07:d9:20:27:dc:8e:9d:96:76:3a:a6:58:32: c9:c9:b6:3b:b7:db:5e:4e:f0:ae:e9:b9:89:ca:0b:33:8f:c8: c4:af:87:82:0a:60:ac:21:43:a1:b2:82:7d:af:43:e8:ac:9a: fc:9d:5f:5b:30:be:b6:df:84:dd:b8:57:52:57:14:ac:d6:0b: 3d:27:44:24:83:32:9c:d4:74:e6:74:32:5c:b3:6f:8d:f8:45: e8:55:c3:a8:35:44:50:f3:38:f4:b0:48:80:b7:ee:43:61:00: ff:c6:a8:a2:9e:97:7a:82:31:70:64:15:d7:42:c3:5e:54:30: 67:a7:3a:a5:45:d6:75:34:d6:63:1e:fc:5d:fa:a1:d7:32:c5: cf:55:1a:8d:08:67:a6:c8:7a:dc:cb:71:ab:0e:53:48:53:66: 02:c8:b8:80:f0:65:17:80:f8:4f:63:f3:f6:63:45:5b:56:6f: bf:fe:a4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/d94R5i0UoMsQF3O+ovfDVp4hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA0MjgwNTM1MDFaFw0yNTA1MDEwNTU2MDFaMDMxMTAvBgNV BAMTKDQyM0IxM0MxNzA4NUUzNzZBRDIzODI3NzQzQjZGRjNGRDJGODJBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabOr3ArSwssMjgahx3u5QNdVq PcmGUUub1QZ6rp4rV0zN1U4yXjYRSE8PWXCItOCpISqxuWBt/zjk6dldx3aCzUCx dDqz4G9KhHqG+GUeHMHIfaiTNg6s/nb1eyT9wxBYynsadEwN/97H931AwMMvrQAx 2z4j4Qyu2i6o5mcHlfF2HBhj8Fh0p4NcnGYXAnuR64pcL2BYGz3QR4Dkc3rBDMnD 9/lsPfzxt3+Q6FyuGXraDQudOT9OhilQoSo0vC4OxSIl9KaLaoa16YPVDejAwDr0 NlYq723909D8rdSdODtnHlfVTDiCr9S53AtFkw9TRY/69Z2xs/ljY1xMG8ENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQjsTwXCF43atI4J3Q7b/P9L4KpkwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYv+G5t7RgSQy8oYm1RWrjjeUhGCi8ZhMXv TXudaA1H8VE8PLtuvsAsJX5epWtT1caTRw+rcMVu2tH3+fDFh2bjdvbKPqsGLoSa 5SPfB9kgJ9yOnZZ2OqZYMsnJtju3215O8K7puYnKCzOPyMSvh4IKYKwhQ6Gygn2v Q+ismvydX1swvrbfhN24V1JXFKzWCz0nRCSDMpzUdOZ0Mlyzb434RehVw6g1RFDz OPSwSIC37kNhAP/GqKKel3qCMXBkFddCw15UMGenOqVF1nU01mMe/F36odcyxc9V Go0IZ6bIetzLcasOU0hTZgLIuIDwZReA+E9j8/ZjRVtWb7/+pBo= -----END CERTIFICATE-----Generated at Tue Apr 29 12:13:44 2025 by rpki-client