$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: 5YyUOK11JRJoTmaX6Xbhr5xw6K07TImNVX6HHuIN108= Subject key identifier: 34:E7:6A:8C:14:22:9C:7D:38:AE:36:DD:64:2A:3A:D9:72:50:29:23 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 4DA19E9270F45CEE1975714D421509794C546610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 01E1 Signing time: Tue 29 Apr 2025 17:31:37 +0000 Manifest this update: Tue 29 Apr 2025 17:26:37 +0000 Manifest next update: Fri 02 May 2025 23:33:37 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) 2: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: TSwL5Qh+E+niGlTBorzBZQkMaPLyQLupl723nPAKXsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a1:9e:92:70:f4:5c:ee:19:75:71:4d:42:15:09:79:4c:54:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Apr 29 17:26:37 2025 GMT Not After : May 2 23:33:37 2025 GMT Subject: CN=34E76A8C14229C7D38AE36DD642A3AD972502923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:8c:19:b8:f7:03:e4:26:e4:1a:68:1c:35: cd:c6:6a:45:f9:d9:24:00:05:bd:02:e7:9a:4d:0a: 02:f6:76:39:3c:60:0f:02:2f:44:05:d3:4a:a1:25: ec:57:60:94:87:59:e5:3e:75:ca:36:8e:eb:b0:32: d4:7b:cd:cc:44:08:86:63:43:7d:b2:ce:98:80:4a: c7:34:ae:72:98:a0:2b:a6:c0:ff:b6:21:0f:e6:ff: b8:5b:2b:30:b8:01:23:04:10:97:d7:84:17:66:3c: d7:b8:a3:51:8b:e8:90:8b:c4:ff:db:4f:f6:5f:ea: 29:3e:7d:de:54:6d:3e:5c:8b:8d:55:bd:98:6b:3f: 5b:3e:7b:38:d9:78:70:7a:5a:2d:67:5d:66:a0:7c: fb:d1:5e:38:49:c0:de:07:0c:a4:2f:5a:20:c1:74: 55:8e:1a:d8:c2:74:d5:a0:c0:63:bf:42:a3:02:dd: ae:84:b7:e3:a7:5f:40:0c:62:e9:7b:08:9f:16:59: b9:15:7e:8c:3f:c8:16:03:da:a5:c1:eb:fa:5b:d5: 70:c6:8f:6c:05:4b:be:e9:c0:b5:fe:61:8e:ed:b2: 10:7b:68:6e:ce:6d:b2:f7:c1:a4:25:30:96:15:f7: ca:d5:7c:76:81:95:92:a9:56:f8:21:ae:91:49:35: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E7:6A:8C:14:22:9C:7D:38:AE:36:DD:64:2A:3A:D9:72:50:29:23 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:47:21:e2:73:a0:14:0e:b5:ac:bc:23:bb:7c:32:d2:ab:74: 0f:ef:0c:27:44:b8:a0:0d:21:e4:be:83:19:67:c9:54:f3:7a: 49:fd:5d:ff:24:d0:37:f0:df:09:ab:40:69:93:f2:be:43:db: 21:79:5e:e4:a5:e4:ae:ef:62:80:0b:00:10:5c:c0:5f:e2:d5: 4b:6b:55:35:39:42:68:ca:dc:3f:d4:8e:ba:fe:8b:92:6c:71: 9c:79:69:cb:25:72:0c:95:5a:bb:46:71:42:88:cb:bf:d6:34: ee:b4:13:22:a7:75:37:ff:fe:ed:ce:f2:ba:bb:06:6b:a1:3d: a4:ed:89:bb:f2:d2:6c:d9:b3:52:43:56:14:2b:b6:4e:cc:ed: 9a:10:96:8f:d2:2f:b2:a1:33:76:14:b9:d5:6a:1f:b2:04:e6: 73:48:97:35:50:ef:31:18:4a:41:ff:1e:a9:50:0d:89:e6:30: 9d:28:da:64:de:fd:e9:df:21:9b:99:13:fb:21:12:e1:99:9a: fb:2c:33:b0:72:ca:62:aa:5d:58:67:c2:cf:04:fe:54:5b:96: ef:d5:07:38:72:11:c3:63:cb:27:58:ca:f6:50:d3:91:75:e9: 13:57:a5:23:de:89:09:b7:53:14:72:80:20:f5:3d:97:52:62: bd:5f:3a:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaGeknD0XO4ZdXFNQhUJeUxUZhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA0MjkxNzI2MzdaFw0yNTA1MDIyMzMzMzdaMDMxMTAvBgNV BAMTKDM0RTc2QThDMTQyMjlDN0QzOEFFMzZERDY0MkEzQUQ5NzI1MDI5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUIwZuPcD5CbkGmgcNc3GakX5 2SQABb0C55pNCgL2djk8YA8CL0QF00qhJexXYJSHWeU+dco2juuwMtR7zcxECIZj Q32yzpiASsc0rnKYoCumwP+2IQ/m/7hbKzC4ASMEEJfXhBdmPNe4o1GL6JCLxP/b T/Zf6ik+fd5UbT5ci41VvZhrP1s+ezjZeHB6Wi1nXWagfPvRXjhJwN4HDKQvWiDB dFWOGtjCdNWgwGO/QqMC3a6Et+OnX0AMYul7CJ8WWbkVfow/yBYD2qXB6/pb1XDG j2wFS77pwLX+YY7tshB7aG7ObbL3waQlMJYV98rVfHaBlZKpVvghrpFJNXVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNOdqjBQinH04rjbdZCo62XJQKSMwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENHIeJzoBQOtay8I7t8MtKrdA/vDCdEuKAN IeS+gxlnyVTzekn9Xf8k0Dfw3wmrQGmT8r5D2yF5XuSl5K7vYoALABBcwF/i1Utr VTU5QmjK3D/Ujrr+i5JscZx5acslcgyVWrtGcUKIy7/WNO60EyKndTf//u3O8rq7 BmuhPaTtibvy0mzZs1JDVhQrtk7M7ZoQlo/SL7KhM3YUudVqH7IE5nNIlzVQ7zEY SkH/HqlQDYnmMJ0o2mTe/enfIZuZE/shEuGZmvssM7ByymKqXVhnws8E/lRblu/V BzhyEcNjyydYyvZQ05F16RNXpSPeiQm3UxRygCD1PZdSYr1fOpI= -----END CERTIFICATE-----Generated at Wed Apr 30 03:44:48 2025 by rpki-client