$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: YTWJPzeaTsKPZjflIlEVBrywo8ht+MkhkFqGB7dMy2o= Subject key identifier: 75:AD:E4:31:BC:05:3E:BB:4D:7A:A9:8B:0D:CE:99:87:7E:84:6B:BF Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 5035284F360AEF71F7A41C321389D34C617477D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: F1 Signing time: Sun 27 Apr 2025 19:11:08 +0000 Manifest this update: Sun 27 Apr 2025 19:06:08 +0000 Manifest next update: Wed 30 Apr 2025 23:09:08 +0000 Files and hashes: 1: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: XdoCsWdG5l0KPbVHLaob8v0fZfMBcEgk5Fb9c45AC2w=) 2: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: CTs5Uh+PUGuoZ85gWtFwiFdp4wiz7Vv/jmvFnjE17aI=) 3: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: 6++ZieIwa3uSozZCgkOKKp7p30r/ihEDLaswCcTnNnQ=) 4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: H2J4JSb5UH/5sePhesBbTP5rDy1+Emy+Jg2bpdpPsu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 23:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:35:28:4f:36:0a:ef:71:f7:a4:1c:32:13:89:d3:4c:61:74:77:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Apr 27 19:06:08 2025 GMT Not After : Apr 30 23:09:08 2025 GMT Subject: CN=75ADE431BC053EBB4D7AA98B0DCE99877E846BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:d1:1b:93:0e:90:af:89:51:2b:89:6b:c0: 9f:14:f3:48:58:f5:04:2c:44:ab:04:34:58:6e:d3: f4:17:9f:51:8e:b3:af:a7:11:fe:97:46:29:66:06: c2:1a:dd:17:5c:f1:af:49:0e:62:5a:b8:c0:41:15: 3c:ad:f5:8a:69:ff:21:22:e2:30:74:44:80:9b:52: 71:86:64:24:47:5a:5e:72:2d:a5:4e:f8:4a:91:74: a3:d8:8b:58:5c:f6:de:5c:5c:9b:d4:43:c2:07:76: 6b:42:ea:87:95:80:08:4c:cb:d1:b9:e1:35:f9:84: b8:3c:6c:77:26:2a:51:95:b5:ba:fe:1a:35:1c:90: fd:ef:5b:b3:a0:6a:cb:c7:ee:f5:72:3d:10:71:be: 87:c4:9e:78:9b:7e:b6:62:d4:7b:22:ed:08:f5:7c: d3:c3:ba:5e:6d:98:f5:1f:91:1b:30:97:37:f6:ab: f1:97:92:17:9f:d6:6e:98:4c:ad:ba:3c:89:61:ca: 85:86:3c:dd:af:ff:3f:7a:65:2d:b1:66:b9:1c:ea: f2:75:59:92:de:02:85:c7:5d:c7:e5:2b:2c:e3:28: 64:f0:ac:76:89:d6:75:43:70:3a:32:4c:cf:c2:f3: a6:e8:8b:65:34:61:21:1c:4e:d3:f7:db:a2:ae:c1: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AD:E4:31:BC:05:3E:BB:4D:7A:A9:8B:0D:CE:99:87:7E:84:6B:BF X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c4:76:26:14:ef:07:d6:a4:23:ee:75:6f:16:31:36:da:f5: 1c:65:06:d4:f5:61:ae:8d:59:b7:77:d2:76:a5:aa:9f:6c:da: 2c:e1:5d:e0:7e:91:d6:7b:d6:14:15:74:68:40:ef:2f:00:81: c5:e1:a9:28:7e:a0:7e:18:44:12:9b:be:79:03:ca:25:67:f1: 23:8c:81:25:be:d7:8c:13:0d:b1:a3:b2:03:6d:86:0b:5d:90: e9:f1:b0:87:c2:fb:8e:90:69:06:24:85:b8:63:53:f2:47:b0: 4d:eb:c5:a7:e0:dd:63:65:37:aa:6c:f0:71:95:ea:e4:aa:f1: 68:d4:53:e7:84:cf:d7:43:c7:64:ef:58:76:0d:d3:00:c5:79: 3c:3c:41:1c:65:03:88:b0:2b:cb:09:53:ab:0b:7c:cb:64:cc: d7:03:c3:ce:fe:d9:c0:21:74:e3:50:bb:31:dd:62:25:88:db: 52:05:ba:78:26:99:e3:89:cb:ca:78:e2:79:60:0f:84:08:25: b2:e2:46:9b:f1:58:cf:3d:eb:f4:b9:08:f5:f5:7b:72:63:af: fe:1e:4b:78:d7:99:1f:88:95:10:83:cb:59:4e:c4:05:25:a8: 0b:eb:da:1e:70:9a:f2:09:0f:ba:6a:3b:82:69:49:a4:50:21: 64:d6:1c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDUoTzYK73H3pBwyE4nTTGF0d9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNTA0MjcxOTA2MDhaFw0yNTA0MzAyMzA5MDhaMDMxMTAvBgNV BAMTKDc1QURFNDMxQkMwNTNFQkI0RDdBQTk4QjBEQ0U5OTg3N0U4NDZCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYdEbkw6Qr4lRK4lrwJ8U80hY 9QQsRKsENFhu0/QXn1GOs6+nEf6XRilmBsIa3Rdc8a9JDmJauMBBFTyt9Ypp/yEi 4jB0RICbUnGGZCRHWl5yLaVO+EqRdKPYi1hc9t5cXJvUQ8IHdmtC6oeVgAhMy9G5 4TX5hLg8bHcmKlGVtbr+GjUckP3vW7OgasvH7vVyPRBxvofEnnibfrZi1Hsi7Qj1 fNPDul5tmPUfkRswlzf2q/GXkhef1m6YTK26PIlhyoWGPN2v/z96ZS2xZrkc6vJ1 WZLeAoXHXcflKyzjKGTwrHaJ1nVDcDoyTM/C86boi2U0YSEcTtP326KuwfDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUda3kMbwFPrtNeqmLDc6Zh36Ea78wHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDEdiYU7wfWpCPudW8WMTba9RxlBtT1Ya6N Wbd30nalqp9s2izhXeB+kdZ71hQVdGhA7y8AgcXhqSh+oH4YRBKbvnkDyiVn8SOM gSW+14wTDbGjsgNthgtdkOnxsIfC+46QaQYkhbhjU/JHsE3rxafg3WNlN6ps8HGV 6uSq8WjUU+eEz9dDx2TvWHYN0wDFeTw8QRxlA4iwK8sJU6sLfMtkzNcDw87+2cAh dONQuzHdYiWI21IFungmmeOJy8p44nlgD4QIJbLiRpvxWM896/S5CPX1e3Jjr/4e S3jXmR+IlRCDy1lOxAUlqAvr2h5wmvIJD7pqO4JpSaRQIWTWHJE= -----END CERTIFICATE-----Generated at Wed Apr 30 00:15:43 2025 by rpki-client