$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: pQUIhRxaYRL5Gomv8f7NdicLq3OYeZ9vwAYDaMcu+CM= Subject key identifier: EF:DA:0A:F8:9A:03:94:2B:25:A6:EA:A7:93:47:75:22:F8:DA:CE:3D Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 1A5F59D9007BFCB1D1890495650DB2A360CE4F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04C7 Signing time: Sat 26 Apr 2025 08:11:53 +0000 Manifest this update: Sat 26 Apr 2025 08:06:53 +0000 Manifest next update: Tue 29 Apr 2025 11:54:53 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: Xe5kD4QV+izs2nqez9UUHJYZVOSnBXDN5iBkEe4WUQM=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: hLJJn2S5+JhUGblcfmNr2hxZF8gqjaXVnEFEQc7K6gU=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: yDIVt2Oe51IhyNjITRNsqJhRBffQBwktI1JnUAMjM6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 11:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5f:59:d9:00:7b:fc:b1:d1:89:04:95:65:0d:b2:a3:60:ce:4f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: Apr 26 08:06:53 2025 GMT Not After : Apr 29 11:54:53 2025 GMT Subject: CN=EFDA0AF89A03942B25A6EAA793477522F8DACE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:6d:67:54:02:0f:45:a5:d8:3c:d4:91:ad: c9:8c:aa:f8:b3:4a:fd:81:0c:d6:2e:79:54:95:ce: 46:a6:e6:da:6d:94:b1:03:e3:a7:a5:58:37:a9:6f: 36:64:a2:41:64:f5:64:e2:81:c7:50:0e:7d:5e:c2: 72:58:23:97:b9:bd:30:21:19:11:b6:90:47:b1:bb: 81:2d:df:5f:d2:a0:7f:62:b5:ba:89:32:02:66:53: d5:b1:0f:d4:c3:b0:34:b3:78:75:cf:1d:b3:1a:f9: a2:c5:3d:41:50:26:a0:90:a0:3c:9b:68:7e:c9:d3: 79:70:88:8b:e0:44:93:83:3b:58:c8:63:8b:a6:e9: a2:f3:b9:56:3c:20:5e:b8:c0:1c:11:4f:60:75:46: 7b:df:ae:c9:82:19:0c:67:60:ea:02:e0:ee:91:57: 67:68:e7:85:3e:70:3a:75:0c:6b:8d:39:b7:d1:49: 35:63:25:9d:78:3b:10:90:9a:e4:9d:8c:83:95:a6: e5:4a:c6:a7:a8:fc:c8:09:e4:8a:8b:8d:c8:1d:ed: 07:bd:99:d6:0f:d7:2b:7a:41:97:7d:a7:ff:df:86: 4b:74:df:89:4f:13:d8:b5:5b:cb:a1:19:c6:6b:33: ec:3b:07:ae:b5:5b:28:df:c2:50:ef:ca:0e:1f:a7: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DA:0A:F8:9A:03:94:2B:25:A6:EA:A7:93:47:75:22:F8:DA:CE:3D X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:da:81:10:49:a8:e0:7d:1e:f9:68:12:7a:c0:27:db:4f:43: 3d:f6:fa:d6:f7:28:e7:cf:29:01:68:b1:33:a5:bd:01:ac:25: 82:5b:93:ad:10:df:31:47:1b:cc:af:6c:ba:1c:81:f6:fa:13: e2:42:b3:c5:48:88:65:cc:07:6d:c2:b4:34:e2:ba:9a:66:8b: 1a:58:9c:01:fa:44:f2:c6:31:ce:f1:06:1f:b3:de:21:c3:89: 7d:05:90:b4:7d:b9:e4:79:3e:75:68:05:94:9a:e9:0f:23:25: 9c:d1:80:ea:52:4a:4a:45:17:6e:87:76:d9:09:d1:3c:0f:9a: c9:36:96:63:da:1e:41:7c:d7:79:14:a9:2c:cd:c5:34:31:bb: d0:52:04:f2:6e:87:54:80:96:50:48:e4:29:ef:db:a8:f0:9b: 91:c6:18:c2:22:c9:ab:ba:f3:5d:62:8e:7a:10:8e:57:b5:2b: 46:2f:13:cc:15:56:4a:27:99:68:eb:0f:36:dc:e3:9c:36:b9: c0:74:71:55:c2:8b:6b:9b:d2:d5:ff:e9:6c:aa:59:fa:72:c5: 5a:7a:80:ea:18:b0:3d:4f:cd:78:55:5b:a5:cd:7a:50:f1:ef: 96:48:98:4e:06:56:5a:5e:3d:44:d4:76:ab:40:ec:dd:cd:2a: 88:67:fa:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGl9Z2QB7/LHRiQSVZQ2yo2DOT3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA0MjYwODA2NTNaFw0yNTA0MjkxMTU0NTNaMDMxMTAvBgNV BAMTKEVGREEwQUY4OUEwMzk0MkIyNUE2RUFBNzkzNDc3NTIyRjhEQUNFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C21nVAIPRaXYPNSRrcmMqviz Sv2BDNYueVSVzkam5tptlLED46elWDepbzZkokFk9WTigcdQDn1ewnJYI5e5vTAh GRG2kEexu4Et31/SoH9itbqJMgJmU9WxD9TDsDSzeHXPHbMa+aLFPUFQJqCQoDyb aH7J03lwiIvgRJODO1jIY4um6aLzuVY8IF64wBwRT2B1RnvfrsmCGQxnYOoC4O6R V2do54U+cDp1DGuNObfRSTVjJZ14OxCQmuSdjIOVpuVKxqeo/MgJ5IqLjcgd7Qe9 mdYP1yt6QZd9p//fhkt034lPE9i1W8uhGcZrM+w7B661WyjfwlDvyg4fp1BZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79oK+JoDlCslpuqnk0d1Ivjazj0wHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7agRBJqOB9HvloEnrAJ9tPQz32+tb3KOfP KQFosTOlvQGsJYJbk60Q3zFHG8yvbLocgfb6E+JCs8VIiGXMB23CtDTiuppmixpY nAH6RPLGMc7xBh+z3iHDiX0FkLR9ueR5PnVoBZSa6Q8jJZzRgOpSSkpFF26HdtkJ 0TwPmsk2lmPaHkF813kUqSzNxTQxu9BSBPJuh1SAllBI5Cnv26jwm5HGGMIiyau6 811ijnoQjle1K0YvE8wVVkonmWjrDzbc45w2ucB0cVXCi2ub0tX/6WyqWfpyxVp6 gOoYsD1PzXhVW6XNelDx75ZImE4GVlpePUTUdqtA7N3NKohn+sw= -----END CERTIFICATE-----Generated at Mon Apr 28 05:22:53 2025 by rpki-client