$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: RM4QHslEQpx5ctaJ/Ct96rz6ASH1l9orqcsKkaBWUYc= Subject key identifier: 20:13:BC:77:FA:0A:9C:22:F2:62:F0:10:F8:C2:B8:3C:8A:F1:D5:AB Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 39C2508DA8A68D65711F8F8275B483EE9F56C666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 045B Signing time: Tue 17 Jun 2025 04:02:17 +0000 Manifest this update: Tue 17 Jun 2025 03:57:17 +0000 Manifest next update: Fri 20 Jun 2025 07:32:17 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: rOVRYda2BidqzWJgO1lgUJEyrRVHzw5jrrqgqPkYW3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:50:8d:a8:a6:8d:65:71:1f:8f:82:75:b4:83:ee:9f:56:c6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Jun 17 03:57:17 2025 GMT Not After : Jun 20 07:32:17 2025 GMT Subject: CN=2013BC77FA0A9C22F262F010F8C2B83C8AF1D5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:99:65:89:97:b9:30:fd:6a:37:25:73:4f: 73:0f:a7:9c:4e:96:f1:ed:6d:19:bc:26:18:6f:95: 89:cc:95:ed:6d:a3:48:f3:fa:cf:74:8c:40:b1:0a: 28:19:35:03:74:21:74:f4:f6:8c:a8:bb:9e:31:c6: d1:b7:3c:33:f8:5f:1d:fe:53:95:01:93:f9:d0:6b: 73:a4:fd:70:81:9e:89:5d:d5:a8:3f:f5:9c:64:3b: 32:59:43:96:2e:5f:fc:12:42:a8:0f:34:94:86:65: b9:ef:2b:bc:7a:c8:fa:13:92:89:fd:bf:93:a6:87: dc:ee:a0:03:45:f1:01:04:54:4a:f2:c8:74:82:54: f5:30:a7:1b:45:e4:e6:14:e8:2b:62:14:94:21:b7: 67:1c:1a:14:5c:a6:ff:12:b3:95:52:7e:42:9a:5c: b3:50:bb:de:4c:b0:00:9b:39:c8:cc:26:56:9e:aa: 7b:09:d3:08:2c:f4:f0:87:c6:17:8a:33:44:fe:4f: 16:45:6c:94:31:70:24:5c:ae:19:61:44:0b:5e:06: 3a:33:64:9f:93:24:d9:09:c5:c2:8f:5d:02:d3:69: a1:32:6b:07:73:e6:9f:b4:b2:3a:00:b1:a5:bc:51: 25:5b:7e:47:7a:3d:ce:05:af:63:31:95:a3:33:ac: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:BC:77:FA:0A:9C:22:F2:62:F0:10:F8:C2:B8:3C:8A:F1:D5:AB X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:69:41:0f:35:19:23:8c:4c:c3:b1:73:b4:78:15:e5:c7:4b: be:1f:9d:6c:1f:27:08:b6:42:e0:17:89:8e:51:bc:82:31:9d: 56:a9:c3:75:4a:77:4f:59:4d:1a:12:00:44:2a:71:2f:aa:ba: 24:39:69:8d:33:93:b0:e9:50:31:ba:ec:92:70:fe:e0:86:ab: 94:1c:48:12:84:38:42:16:87:bd:54:a2:57:5d:95:91:95:79: 70:1f:c0:4b:e9:2d:3f:e4:af:de:33:67:be:8c:ba:83:c5:e0: 86:ae:ec:56:e0:f6:f8:a3:62:61:86:cc:16:73:4b:f7:31:c6: 1e:11:e7:4c:f2:a8:de:19:5b:30:26:be:ea:99:51:e9:f0:1f: a3:bb:d4:6f:9d:7d:86:fa:73:e0:c2:13:a1:90:a3:84:18:f3: 89:2a:54:8e:b3:fb:5a:2b:e3:ed:1e:66:4e:49:53:c2:8b:80: a9:b3:ab:ef:79:7e:00:13:00:2a:bc:3a:e4:aa:60:af:81:2b: ef:ad:50:c5:5d:0e:71:58:04:48:e0:71:d6:06:b0:29:96:a7: d2:04:4f:27:0c:16:da:89:e8:41:69:5f:ba:78:bf:56:47:6c: 86:01:93:51:6b:10:4e:41:3a:ed:5d:29:98:da:61:37:b0:b6: 8b:0b:a2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcJQjaimjWVxH4+CdbSD7p9WxmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA2MTcwMzU3MTdaFw0yNTA2MjAwNzMyMTdaMDMxMTAvBgNV BAMTKDIwMTNCQzc3RkEwQTlDMjJGMjYyRjAxMEY4QzJCODNDOEFGMUQ1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t5lliZe5MP1qNyVzT3MPp5xO lvHtbRm8JhhvlYnMle1to0jz+s90jECxCigZNQN0IXT09oyou54xxtG3PDP4Xx3+ U5UBk/nQa3Ok/XCBnold1ag/9ZxkOzJZQ5YuX/wSQqgPNJSGZbnvK7x6yPoTkon9 v5Omh9zuoANF8QEEVEryyHSCVPUwpxtF5OYU6CtiFJQht2ccGhRcpv8Ss5VSfkKa XLNQu95MsACbOcjMJlaeqnsJ0wgs9PCHxheKM0T+TxZFbJQxcCRcrhlhRAteBjoz ZJ+TJNkJxcKPXQLTaaEyawdz5p+0sjoAsaW8USVbfkd6Pc4Fr2MxlaMzrBgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBO8d/oKnCLyYvAQ+MK4PIrx1aswHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9pQQ81GSOMTMOxc7R4FeXHS74fnWwfJwi2 QuAXiY5RvIIxnVapw3VKd09ZTRoSAEQqcS+quiQ5aY0zk7DpUDG67JJw/uCGq5Qc SBKEOEIWh71UolddlZGVeXAfwEvpLT/kr94zZ76MuoPF4Iau7Fbg9vijYmGGzBZz S/cxxh4R50zyqN4ZWzAmvuqZUenwH6O71G+dfYb6c+DCE6GQo4QY84kqVI6z+1or 4+0eZk5JU8KLgKmzq+95fgATACq8OuSqYK+BK++tUMVdDnFYBEjgcdYGsCmWp9IE TycMFtqJ6EFpX7p4v1ZHbIYBk1FrEE5BOu1dKZjaYTewtosLot8= -----END CERTIFICATE-----Generated at Thu Jun 19 04:49:19 2025 by rpki-client