$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: MsjmIe3Qq6+bIZDt92JGjPSofMeKkOoBTKCZCzKv0DQ= Subject key identifier: 01:61:39:86:77:09:A3:20:27:B9:DB:22:9C:97:2D:E6:8F:3B:9A:54 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 462FCC557C58B5E69E5E7F27D562FBAD83A46C5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 058F Signing time: Sat 26 Apr 2025 00:00:03 +0000 Manifest this update: Fri 25 Apr 2025 23:55:03 +0000 Manifest next update: Tue 29 Apr 2025 09:41:03 +0000 Files and hashes: 1: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) 2: AS24203.roa (hash: iUUx6/7Vijwx93IUbiSye/ssw8bJSAcdA6IGTt4AxyQ=) 3: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: IQR2/3+t+R51Ti3Tcn9eivYWV4mjNSc0ezt+bhtdOeY=) 4: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2f:cc:55:7c:58:b5:e6:9e:5e:7f:27:d5:62:fb:ad:83:a4:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Apr 25 23:55:03 2025 GMT Not After : Apr 29 09:41:03 2025 GMT Subject: CN=016139867709A32027B9DB229C972DE68F3B9A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:06:bb:2e:c1:8e:c4:8f:8f:58:5c:5d:cc:ab: 54:7d:db:68:56:51:08:51:07:4d:95:47:4b:cd:45: 0f:41:a2:17:8c:43:5a:c5:4c:c7:84:26:8e:0b:85: 99:0e:56:64:cd:a6:c4:8b:c5:87:ff:ae:34:82:55: 35:b7:0f:46:cb:82:7c:3b:71:a4:90:28:f9:b7:ab: 56:f1:9c:b7:b6:8b:6d:1b:f0:b6:71:f6:e4:ca:a9: 32:38:52:55:8a:d0:3a:ff:90:cc:bd:19:3d:aa:ae: 71:ed:8a:83:d1:d3:fc:2b:9e:9f:07:6b:38:38:7e: c3:a0:ca:a7:e5:b9:cd:94:2d:9f:ca:31:69:f0:7e: e5:af:d3:df:95:df:6a:e5:b6:6f:d5:3e:db:4c:30: 81:e5:43:b6:bc:ad:fd:66:7b:43:ae:e3:a0:dc:4f: f2:72:91:3a:50:a7:0a:70:a8:45:fe:51:ed:87:22: 73:fa:4f:5f:d0:06:ff:27:07:d1:a0:a9:17:fa:49: 31:44:7c:38:b7:18:d9:f0:1e:1a:3e:8f:b7:97:0e: 44:62:5b:52:e6:7f:ef:10:dd:02:90:d6:65:88:92: b4:c5:36:8f:c7:ca:01:0e:c9:89:d8:ca:da:26:59: 8e:7b:c7:55:5b:95:c8:a2:12:15:44:80:47:01:d6: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:39:86:77:09:A3:20:27:B9:DB:22:9C:97:2D:E6:8F:3B:9A:54 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:cb:0c:ac:33:eb:3b:82:03:f3:a2:32:b8:97:06:e0:4a:4a: 8c:e8:d5:62:bc:17:97:a9:76:59:4b:fd:07:cf:cc:eb:32:a4: 7e:ee:59:75:4a:3f:e1:7a:82:09:d5:27:82:0f:70:30:51:ab: 54:ee:64:c7:29:18:08:fe:33:b2:d2:92:8e:7f:2c:96:f0:f3: 71:19:aa:0d:3b:4e:c0:0c:66:f0:ba:01:1c:13:b7:08:d7:7e: 2e:79:3a:ca:f3:84:e1:8e:10:8b:52:70:93:9f:ff:3f:db:24: d0:b3:0c:f5:4f:ae:9f:d8:69:6d:0f:dc:22:13:b5:89:90:ec: c8:33:ed:81:70:44:3a:18:63:a6:c9:97:80:82:c4:db:92:7e: 5b:ea:4e:7a:d0:f7:6f:16:c7:0f:32:9c:81:39:1a:9e:0a:99: 69:6a:05:f8:ff:7a:fd:81:85:1f:95:aa:db:9b:77:72:0e:30: 46:a4:35:ef:25:af:7d:b5:e0:05:e4:9a:99:61:91:f8:41:ea: a4:03:48:88:75:b9:f3:b3:fa:a7:f1:5a:36:a4:3c:d4:96:9b: 06:51:50:62:8d:ca:02:5e:26:18:ac:03:e1:ab:d3:e5:57:a2: 7e:24:bc:12:71:56:59:29:b5:86:38:03:94:db:48:15:8b:3f: 70:d7:d7:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURi/MVXxYteaeXn8n1WL7rYOkbFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA0MjUyMzU1MDNaFw0yNTA0MjkwOTQxMDNaMDMxMTAvBgNV BAMTKDAxNjEzOTg2NzcwOUEzMjAyN0I5REIyMjlDOTcyREU2OEYzQjlBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBrsuwY7Ej49YXF3Mq1R922hW UQhRB02VR0vNRQ9BoheMQ1rFTMeEJo4LhZkOVmTNpsSLxYf/rjSCVTW3D0bLgnw7 caSQKPm3q1bxnLe2i20b8LZx9uTKqTI4UlWK0Dr/kMy9GT2qrnHtioPR0/wrnp8H azg4fsOgyqfluc2ULZ/KMWnwfuWv09+V32rltm/VPttMMIHlQ7a8rf1me0Ou46Dc T/JykTpQpwpwqEX+Ue2HInP6T1/QBv8nB9GgqRf6STFEfDi3GNnwHho+j7eXDkRi W1Lmf+8Q3QKQ1mWIkrTFNo/HygEOyYnYytomWY57x1VblciiEhVEgEcB1lbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWE5hncJoyAnudsinJct5o87mlQwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnLDKwz6zuCA/OiMriXBuBKSozo1WK8F5ep dllL/QfPzOsypH7uWXVKP+F6ggnVJ4IPcDBRq1TuZMcpGAj+M7LSko5/LJbw83EZ qg07TsAMZvC6ARwTtwjXfi55OsrzhOGOEItScJOf/z/bJNCzDPVPrp/YaW0P3CIT tYmQ7Mgz7YFwRDoYY6bJl4CCxNuSflvqTnrQ928Wxw8ynIE5Gp4KmWlqBfj/ev2B hR+Vqtubd3IOMEakNe8lr3214AXkmplhkfhB6qQDSIh1ufOz+qfxWjakPNSWmwZR UGKNygJeJhisA+Gr0+VXon4kvBJxVlkptYY4A5TbSBWLP3DX12U= -----END CERTIFICATE-----Generated at Sun Apr 27 17:32:16 2025 by rpki-client