$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: GBQN6WxuPGD2lrGpXhki0ZIcNGz8AHwfik/Vb/YwECw= Subject key identifier: FB:A4:9C:F8:F6:6D:C0:C9:5F:A0:01:63:A2:61:2E:FD:AA:66:DA:8D Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 25D8DF8EA7B14AF282C47F638F61DFD2610E3D64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 04CE Signing time: Sat 03 May 2025 08:51:06 +0000 Manifest this update: Sat 03 May 2025 08:46:06 +0000 Manifest next update: Tue 06 May 2025 13:35:06 +0000 Files and hashes: 1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: pAtRdNjNqhbHCi8npQZPCHcu1lUgus06t2Gksu6YK+4=) 2: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: TKlrYYxdW4d0W7hA0lV/DSzBaApabiKYJpgjro7Ns1Y=) 3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=) 4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 10:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d8:df:8e:a7:b1:4a:f2:82:c4:7f:63:8f:61:df:d2:61:0e:3d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: May 3 08:46:06 2025 GMT Not After : May 6 13:35:06 2025 GMT Subject: CN=FBA49CF8F66DC0C95FA00163A2612EFDAA66DA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:92:fa:3e:7e:70:53:4a:ef:56:fc:14:70:08: 68:8a:4f:c6:25:c5:9e:cd:f5:4e:cd:86:d9:f5:81: b4:a3:7f:0d:55:0f:fc:40:4a:9d:8f:c0:d4:5e:d4: c8:d4:71:f3:56:23:e9:a8:bc:23:81:06:c7:b6:41: ca:a3:bc:13:bd:d2:15:43:cc:9f:02:cb:39:46:dd: 37:d7:2c:94:41:38:66:2a:4c:9a:a3:66:78:ce:6f: ba:2d:f8:4e:50:b0:88:70:d7:68:ca:3c:f1:5f:4f: 90:ac:91:31:ea:4c:87:4d:3b:82:98:fa:e8:15:23: e5:f2:3e:2a:f8:d6:54:db:7d:09:0f:75:ee:1e:38: a3:85:0e:e4:a0:a4:4f:e8:6b:df:66:89:19:a2:42: 9a:23:1d:78:8d:e6:64:c4:c8:98:13:5f:f1:48:2c: d2:80:fc:b3:f5:db:6c:aa:00:92:03:dd:0a:fe:a4: e3:c4:4a:56:36:a5:c3:75:5c:94:9b:9a:97:1b:1d: 07:33:ad:1d:47:e7:73:c8:b4:d4:e6:c3:3a:dd:37: 57:94:13:ea:d3:d4:51:fc:ce:c6:c0:a5:79:73:0e: c2:18:07:a4:76:1a:2f:4b:64:f9:db:9d:3e:b4:0d: cc:bd:f4:58:94:81:f8:f0:6f:52:36:b8:ae:56:12: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A4:9C:F8:F6:6D:C0:C9:5F:A0:01:63:A2:61:2E:FD:AA:66:DA:8D X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:84:b7:8e:0b:0f:0a:22:20:46:8c:e6:1d:6d:9b:86:24:b9: 53:33:2e:5b:0b:eb:c3:40:1c:d4:75:a2:9c:5a:80:cc:ca:90: b5:64:85:2b:b1:2c:77:68:53:f8:6c:c5:9f:bf:bc:55:fe:64: d7:8b:72:43:6e:18:ee:c8:a1:79:9a:89:c9:c1:65:33:ef:74: 75:6d:da:91:c0:7f:c6:24:69:db:27:05:3a:f8:85:b5:0a:70: a3:e8:f5:4c:60:83:1e:6a:1f:64:ef:ee:a3:a8:46:12:c6:cd: 32:74:1d:18:31:35:d6:57:67:4e:5e:94:37:ad:70:80:84:0f: af:e3:ec:b7:e3:ab:bb:d8:4e:1f:0c:e6:88:c2:04:57:ef:3c: 8f:d0:93:63:1a:3f:16:c2:f0:0e:7e:ea:52:9a:00:2b:77:89: 2d:f7:c7:63:41:fb:33:64:85:98:a0:73:29:2b:2b:05:b2:cd: 09:8d:1f:06:d0:42:d0:16:a0:df:46:bd:a7:db:c6:87:6e:6a: 37:4c:52:c6:d3:ac:45:6b:a5:b3:7c:19:4b:3e:69:5d:47:c9: 1f:55:93:23:ce:97:74:68:92:f8:8d:77:1a:de:03:8b:49:32: f3:0c:5c:dd:ed:57:f1:df:a2:e6:cd:b5:20:1a:b1:18:f2:69: 72:89:ab:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdjfjqexSvKCxH9jj2Hf0mEOPWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA1MDMwODQ2MDZaFw0yNTA1MDYxMzM1MDZaMDMxMTAvBgNV BAMTKEZCQTQ5Q0Y4RjY2REMwQzk1RkEwMDE2M0EyNjEyRUZEQUE2NkRBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjkvo+fnBTSu9W/BRwCGiKT8Yl xZ7N9U7Nhtn1gbSjfw1VD/xASp2PwNRe1MjUcfNWI+movCOBBse2QcqjvBO90hVD zJ8CyzlG3TfXLJRBOGYqTJqjZnjOb7ot+E5QsIhw12jKPPFfT5CskTHqTIdNO4KY +ugVI+XyPir41lTbfQkPde4eOKOFDuSgpE/oa99miRmiQpojHXiN5mTEyJgTX/FI LNKA/LP122yqAJID3Qr+pOPESlY2pcN1XJSbmpcbHQczrR1H53PItNTmwzrdN1eU E+rT1FH8zsbApXlzDsIYB6R2Gi9LZPnbnT60Dcy99FiUgfjwb1I2uK5WEvKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+6Sc+PZtwMlfoAFjomEu/apm2o0wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiEt44LDwoiIEaM5h1tm4YkuVMzLlsL68NA HNR1opxagMzKkLVkhSuxLHdoU/hsxZ+/vFX+ZNeLckNuGO7IoXmaicnBZTPvdHVt 2pHAf8YkadsnBTr4hbUKcKPo9Uxggx5qH2Tv7qOoRhLGzTJ0HRgxNdZXZ05elDet cICED6/j7Lfjq7vYTh8M5ojCBFfvPI/Qk2MaPxbC8A5+6lKaACt3iS33x2NB+zNk hZigcykrKwWyzQmNHwbQQtAWoN9GvafbxoduajdMUsbTrEVrpbN8GUs+aV1HyR9V kyPOl3RokviNdxreA4tJMvMMXN3tV/HfoubNtSAasRjyaXKJqwA= -----END CERTIFICATE-----Generated at Sat May 3 12:36:14 2025 by rpki-client