$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: zqqAt244LErEbIVZQ/dg/by+14GWDMZaBMEi4pVk508= Subject key identifier: 9C:F8:60:4D:6B:16:8C:D1:C9:8E:CA:B7:81:47:D6:49:C6:4A:A3:BE Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 425F36F27A8E48FBAE1A8123DDADE6A0C5040D19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: F6 Signing time: Mon 28 Apr 2025 04:04:36 +0000 Manifest this update: Mon 28 Apr 2025 03:59:36 +0000 Manifest next update: Thu 01 May 2025 10:15:36 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: R5u3ULVWSN50NNzryren1lhxDqTWCWHSXCGoPDAUEWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 10:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5f:36:f2:7a:8e:48:fb:ae:1a:81:23:dd:ad:e6:a0:c5:04:0d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Apr 28 03:59:36 2025 GMT Not After : May 1 10:15:36 2025 GMT Subject: CN=9CF8604D6B168CD1C98ECAB78147D649C64AA3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:25:9d:0b:c9:bd:f2:ef:a8:23:06:49:b1: 47:e1:de:96:ca:a5:2a:e3:d1:27:13:2d:1b:d7:ef: 04:47:d6:5c:1d:ae:97:d3:f4:5f:bb:e4:3b:60:b6: 77:78:9c:1a:bc:87:05:64:5e:b9:80:9d:a8:bf:b3: e5:16:89:ee:3b:bc:f8:05:7b:44:0c:4e:d1:f4:ed: c4:d8:9e:96:9b:46:eb:be:7f:88:cf:91:38:73:12: 25:f7:88:7c:de:f0:a2:8e:ef:59:fa:ed:ef:69:23: 3b:bf:8e:71:cd:0e:0f:2d:68:bd:5d:e5:d8:46:8a: cb:c9:b4:a2:7a:c5:84:11:38:b5:55:bd:83:e2:2f: e7:c3:b0:ef:b5:50:fc:90:15:00:80:21:61:92:ee: e4:69:0b:0d:36:9d:1e:3c:6b:d6:45:fa:e4:8e:6b: 4b:3c:3d:07:ab:12:d9:bc:e5:3e:6c:93:6d:69:fd: 4f:f7:80:d9:d1:88:aa:35:3f:d4:01:6f:4d:ce:2c: ce:af:81:c4:2b:33:b0:07:6c:ee:6d:9e:22:97:ce: 5a:16:fb:88:e5:a3:9b:77:cb:92:35:81:76:ce:32: 79:0a:9c:10:80:56:a0:6e:80:e8:c1:cb:60:78:62: 5c:ad:b0:7f:6d:45:aa:9d:52:96:dc:04:fb:39:f8: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F8:60:4D:6B:16:8C:D1:C9:8E:CA:B7:81:47:D6:49:C6:4A:A3:BE X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:46:96:65:42:ea:6c:44:28:2d:0f:54:52:9b:2b:c8:aa:16: be:5f:00:df:8f:69:28:b1:a2:44:9c:3a:6c:43:46:fd:ff:87: 71:e5:ca:fd:11:b3:e1:3e:b7:be:a4:3b:12:eb:ef:36:6a:c8: 3d:33:16:5d:ca:b1:75:9e:a6:c3:38:a2:d3:3c:22:7b:e0:04: 36:d1:1e:e8:ac:8a:38:35:ef:d4:01:d0:10:74:6f:7a:3a:34: ed:c7:78:bd:58:89:01:97:c2:08:87:73:6d:55:eb:a2:ca:e0: 34:17:83:a1:09:ea:c9:b5:1f:1a:31:87:7d:01:98:76:e5:c2: 17:be:96:a8:f3:0c:5b:ff:26:f5:c0:21:f7:5c:eb:4f:ac:64: 1f:b4:52:4c:96:2f:8b:ba:4a:c9:57:ab:b4:f3:3a:16:b0:b4: ff:be:ee:39:85:ad:52:2b:39:a3:b6:82:b6:30:93:e8:e2:6d: 0d:cf:57:ee:f5:e9:c2:e7:88:18:78:54:91:e3:ba:50:a9:cd: 94:54:9e:4a:14:9f:72:e9:5d:33:fa:d6:c0:46:79:79:5b:4f: c9:2b:90:f9:41:82:b7:50:0a:7c:41:ad:70:5f:b2:04:35:0d: 75:6c:6c:5c:70:0a:ea:5e:09:52:87:c8:8e:b1:80:61:e8:a5: 25:67:fe:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQl828nqOSPuuGoEj3a3moMUEDRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA0MjgwMzU5MzZaFw0yNTA1MDExMDE1MzZaMDMxMTAvBgNV BAMTKDlDRjg2MDRENkIxNjhDRDFDOThFQ0FCNzgxNDdENjQ5QzY0QUEzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS9yWdC8m98u+oIwZJsUfh3pbK pSrj0ScTLRvX7wRH1lwdrpfT9F+75Dtgtnd4nBq8hwVkXrmAnai/s+UWie47vPgF e0QMTtH07cTYnpabRuu+f4jPkThzEiX3iHze8KKO71n67e9pIzu/jnHNDg8taL1d 5dhGisvJtKJ6xYQROLVVvYPiL+fDsO+1UPyQFQCAIWGS7uRpCw02nR48a9ZF+uSO a0s8PQerEtm85T5sk21p/U/3gNnRiKo1P9QBb03OLM6vgcQrM7AHbO5tniKXzloW +4jlo5t3y5I1gXbOMnkKnBCAVqBugOjBy2B4YlytsH9tRaqdUpbcBPs5+C4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPhgTWsWjNHJjsq3gUfWScZKo74wHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJGlmVC6mxEKC0PVFKbK8iqFr5fAN+PaSix okScOmxDRv3/h3Hlyv0Rs+E+t76kOxLr7zZqyD0zFl3KsXWepsM4otM8InvgBDbR Huisijg179QB0BB0b3o6NO3HeL1YiQGXwgiHc21V66LK4DQXg6EJ6sm1Hxoxh30B mHblwhe+lqjzDFv/JvXAIfdc60+sZB+0UkyWL4u6SslXq7TzOhawtP++7jmFrVIr OaO2grYwk+jibQ3PV+716cLniBh4VJHjulCpzZRUnkoUn3LpXTP61sBGeXlbT8kr kPlBgrdQCnxBrXBfsgQ1DXVsbFxwCupeCVKHyI6xgGHopSVn/ss= -----END CERTIFICATE-----Generated at Wed Apr 30 11:31:17 2025 by rpki-client