$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 4u9yETihCLDGzRnRRS8MMGuae2m/AQOoFk2ZG5anNiQ= Subject key identifier: 09:3A:E4:77:E2:43:9A:D0:79:E7:91:DE:F8:2E:46:3B:F0:C9:1E:BD Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 1CCD87E2EBF4DA565EB3865D1935A9C8D249B224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01E1 Signing time: Sat 14 Jun 2025 05:01:04 +0000 Manifest this update: Sat 14 Jun 2025 04:56:04 +0000 Manifest next update: Tue 17 Jun 2025 08:54:04 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: zTzEqxhNAcUB5xQHcgKG76rB//5v9JlPuIuc6nHWoEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 08:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cd:87:e2:eb:f4:da:56:5e:b3:86:5d:19:35:a9:c8:d2:49:b2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Jun 14 04:56:04 2025 GMT Not After : Jun 17 08:54:04 2025 GMT Subject: CN=093AE477E2439AD079E791DEF82E463BF0C91EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:dc:c0:aa:ea:73:f4:e6:3c:bf:88:8c:89: 48:b0:5e:05:32:1e:96:72:80:b6:a4:af:b9:5c:26: e3:57:cf:68:22:e3:60:74:4b:08:5d:66:99:e9:c6: 50:ba:db:b7:b6:9b:e2:96:98:c5:62:6f:53:86:72: d0:cc:bc:be:e0:18:cc:fe:d1:3b:4d:f4:b6:b7:6c: 18:1b:ad:af:87:dc:0a:22:a9:be:ef:38:1e:f0:06: 7a:7c:38:88:13:31:19:49:a1:0e:5a:db:b1:55:75: 16:bf:43:27:cb:c2:dc:13:85:9a:13:6d:6a:6e:ad: 49:23:bd:c9:91:db:41:2d:b8:28:2e:91:b7:bb:9b: 71:7f:65:39:8f:62:9e:64:0e:e9:ae:b3:74:d2:d7: 2c:14:52:e5:ee:e7:96:af:f7:43:be:f6:9d:77:f2: 19:9b:22:85:4c:70:33:15:2c:37:e4:0d:bb:9a:c0: e4:64:0b:f2:b8:24:6a:d8:d9:e1:a6:6c:9f:d6:f9: eb:0a:29:18:f0:d2:34:74:6f:9c:da:b2:a3:68:a9: db:68:bf:9c:1e:da:7a:1e:34:c7:42:69:96:4b:62: 0e:e2:38:33:70:9e:dc:1b:c2:9e:34:75:8a:44:fa: 72:e7:d8:72:14:db:1d:57:73:10:b9:49:98:44:cf: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:E4:77:E2:43:9A:D0:79:E7:91:DE:F8:2E:46:3B:F0:C9:1E:BD X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:45:06:1c:fd:a8:70:83:7f:10:2e:06:9a:7a:d0:f7:2c:c3: 16:78:0a:34:71:ce:dd:4b:4b:74:cc:4d:e9:97:d6:d6:a8:d2: f4:12:71:19:47:1e:45:fb:b2:d0:81:22:52:c7:fa:ee:f4:75: 0c:3e:b5:71:f1:51:30:b7:66:7b:41:38:64:e4:fa:d6:be:3f: 51:59:fe:db:d8:ca:ad:c3:b2:d5:51:10:8e:ad:8a:8a:e7:c0: a8:7b:de:96:32:78:a5:c9:8f:17:97:22:57:29:a4:05:c8:23: 32:bb:fd:21:ae:75:d5:ab:60:1e:3a:f0:c3:b0:04:11:5e:07: 39:ac:fd:b4:83:ec:78:b1:fb:11:e1:85:c6:c7:d9:c5:c5:2b: 8f:08:a9:9d:bc:f4:37:7b:06:b3:bd:a7:59:9e:b5:40:1d:10: f8:f5:49:94:9f:56:6e:b9:e8:de:52:33:25:be:e4:b6:f3:b9: 7d:69:ee:e7:30:45:68:7f:a6:c2:cd:ea:19:38:27:ca:71:4f: aa:05:a7:cf:56:02:90:28:66:57:7f:d5:b1:de:a6:57:a7:fc: 6a:89:c7:23:22:0a:82:44:e7:f7:fd:ac:f7:47:59:e4:22:93: 90:a7:e6:9b:c2:27:9b:37:f5:cd:3f:a8:c5:02:6c:ef:06:76: cb:69:e9:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM2H4uv02lZes4ZdGTWpyNJJsiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA2MTQwNDU2MDRaFw0yNTA2MTcwODU0MDRaMDMxMTAvBgNV BAMTKDA5M0FFNDc3RTI0MzlBRDA3OUU3OTFERUY4MkU0NjNCRjBDOTFFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCNzAqupz9OY8v4iMiUiwXgUy HpZygLakr7lcJuNXz2gi42B0SwhdZpnpxlC627e2m+KWmMVib1OGctDMvL7gGMz+ 0TtN9La3bBgbra+H3Aoiqb7vOB7wBnp8OIgTMRlJoQ5a27FVdRa/QyfLwtwThZoT bWpurUkjvcmR20EtuCgukbe7m3F/ZTmPYp5kDumus3TS1ywUUuXu55av90O+9p13 8hmbIoVMcDMVLDfkDbuawORkC/K4JGrY2eGmbJ/W+esKKRjw0jR0b5zasqNoqdto v5we2noeNMdCaZZLYg7iODNwntwbwp40dYpE+nLn2HIU2x1XcxC5SZhEz8q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCTrkd+JDmtB555He+C5GO/DJHr0wHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1FBhz9qHCDfxAuBpp60PcswxZ4CjRxzt1L S3TMTemX1tao0vQScRlHHkX7stCBIlLH+u70dQw+tXHxUTC3ZntBOGTk+ta+P1FZ /tvYyq3DstVREI6tiornwKh73pYyeKXJjxeXIlcppAXIIzK7/SGuddWrYB468MOw BBFeBzms/bSD7Hix+xHhhcbH2cXFK48IqZ289Dd7BrO9p1metUAdEPj1SZSfVm65 6N5SMyW+5LbzuX1p7ucwRWh/psLN6hk4J8pxT6oFp89WApAoZld/1bHeplen/GqJ xyMiCoJE5/f9rPdHWeQik5Cn5pvCJ5s39c0/qMUCbO8Gdstp6QU= -----END CERTIFICATE-----Generated at Mon Jun 16 05:14:12 2025 by rpki-client