$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: cHNXHTCoijYMvmpicdof+fQbHZShWbWb02/SInB7B/I= Subject key identifier: B2:AC:58:2E:17:A5:5B:9D:1C:1A:61:E2:08:4D:0A:4B:D6:63:E2:5B Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 7739C7EC00DE54291C17576D46FABA76C3B6AFD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 01CD Signing time: Mon 16 Jun 2025 03:31:29 +0000 Manifest this update: Mon 16 Jun 2025 03:26:29 +0000 Manifest next update: Thu 19 Jun 2025 07:59:29 +0000 Files and hashes: 1: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: uvDej/b6SQN1bUzGFSr/xix1yQIjgQs9KICwKMg3V1A=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:39:c7:ec:00:de:54:29:1c:17:57:6d:46:fa:ba:76:c3:b6:af:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Jun 16 03:26:29 2025 GMT Not After : Jun 19 07:59:29 2025 GMT Subject: CN=B2AC582E17A55B9D1C1A61E2084D0A4BD663E25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:ed:d8:5e:c3:75:04:58:a4:3d:e7:70:af: 9f:72:56:a0:51:b8:63:5c:2c:4a:77:ce:d7:14:87: 20:50:48:30:54:04:8b:ed:61:d4:46:9b:7d:03:03: 1d:b1:97:2a:51:62:4e:76:8d:ce:30:74:72:65:fb: ee:8e:e2:38:ff:7a:22:66:f4:5c:51:34:72:b4:fd: 91:21:82:ad:d2:27:25:3f:d9:1c:00:67:7e:4b:ca: 53:bb:c8:0d:68:7d:42:58:4c:cf:4e:04:db:ba:40: 72:10:8f:a5:71:32:0c:4b:98:1e:f9:26:5b:6f:47: 87:2f:bf:61:fe:a4:0c:d7:82:cb:df:a3:f8:31:a2: 66:4a:29:cb:ef:4b:4b:a9:2f:45:32:25:4b:62:4d: 34:25:09:df:d5:86:4c:be:b4:69:05:13:44:6c:96: e1:3d:0e:ae:d5:74:5b:32:84:d3:eb:b2:34:c3:7d: f1:94:1e:68:64:49:c9:e3:d7:51:ef:56:02:2e:3d: 6c:35:53:90:e8:0a:bd:22:f5:87:45:43:3a:d8:f4: 00:eb:f4:4f:3f:50:db:b2:bd:cc:bf:2d:9e:4c:bf: ae:29:b3:38:86:4d:42:26:6f:b4:af:65:7b:30:65: c4:15:c7:b6:bf:79:6c:9e:3b:07:f8:27:b0:ca:ab: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AC:58:2E:17:A5:5B:9D:1C:1A:61:E2:08:4D:0A:4B:D6:63:E2:5B X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:45:e8:c4:fd:5f:f4:ff:a9:a5:59:11:5d:d6:1c:e9:d4:d2: b4:54:1a:b8:d4:16:9b:10:7b:c4:8b:04:dc:66:bb:a9:da:9f: 41:37:d3:da:d7:e6:3f:1a:ac:b3:4f:2e:7e:41:2d:ad:8b:15: c4:21:99:12:54:3d:5a:eb:a1:31:98:0a:98:17:f0:e5:0f:f1: 70:fe:77:25:0e:60:47:19:01:a1:aa:c4:de:99:76:23:b7:50: 55:48:d3:25:a6:20:c3:5e:3b:c7:5b:14:9c:bd:19:ac:72:28: e6:fa:83:a1:44:9c:7d:f0:d8:9e:51:4a:12:5e:12:ea:c0:49: b9:8a:3c:9a:41:47:0b:62:38:64:ad:11:6f:29:ea:74:8c:18: 78:f1:09:51:b1:c1:9d:e0:e4:3f:f7:e7:b0:e4:dc:4c:b0:8f: 4f:d4:15:b3:ac:c8:c4:7b:23:83:d3:97:50:b5:a4:5d:d0:3e: 8a:c5:c2:76:99:ac:96:27:90:4a:44:8f:23:9a:f9:75:d9:6a: e5:eb:e9:77:8c:e6:4a:6c:48:bc:55:67:67:1d:79:76:2e:0a: 08:34:68:70:cb:44:c2:f2:70:72:f4:d2:ee:34:80:4b:19:0b: 2c:e0:b1:6c:da:76:86:73:17:53:2a:01:e9:9b:41:72:de:dc: 71:c2:fc:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdznH7ADeVCkcF1dtRvq6dsO2r9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTA2MTYwMzI2MjlaFw0yNTA2MTkwNzU5MjlaMDMxMTAvBgNV BAMTKEIyQUM1ODJFMTdBNTVCOUQxQzFBNjFFMjA4NEQwQTRCRDY2M0UyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfie3YXsN1BFikPedwr59yVqBR uGNcLEp3ztcUhyBQSDBUBIvtYdRGm30DAx2xlypRYk52jc4wdHJl++6O4jj/eiJm 9FxRNHK0/ZEhgq3SJyU/2RwAZ35LylO7yA1ofUJYTM9OBNu6QHIQj6VxMgxLmB75 JltvR4cvv2H+pAzXgsvfo/gxomZKKcvvS0upL0UyJUtiTTQlCd/Vhky+tGkFE0Rs luE9Dq7VdFsyhNPrsjTDffGUHmhkScnj11HvVgIuPWw1U5DoCr0i9YdFQzrY9ADr 9E8/UNuyvcy/LZ5Mv64psziGTUImb7SvZXswZcQVx7a/eWyeOwf4J7DKqwdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqxYLhelW50cGmHiCE0KS9Zj4lswHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1F6MT9X/T/qaVZEV3WHOnU0rRUGrjUFpsQ e8SLBNxmu6nan0E309rX5j8arLNPLn5BLa2LFcQhmRJUPVrroTGYCpgX8OUP8XD+ dyUOYEcZAaGqxN6ZdiO3UFVI0yWmIMNeO8dbFJy9GaxyKOb6g6FEnH3w2J5RShJe EurASbmKPJpBRwtiOGStEW8p6nSMGHjxCVGxwZ3g5D/357Dk3Eywj0/UFbOsyMR7 I4PTl1C1pF3QPorFwnaZrJYnkEpEjyOa+XXZauXr6XeM5kpsSLxVZ2cdeXYuCgg0 aHDLRMLycHL00u40gEsZCyzgsWzadoZzF1MqAembQXLe3HHC/KU= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:17 2025 by rpki-client