$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: vkhaNrKiB1HJqv4ti6ZvrLfVtaE5NM2ZU7JEsmFpesw= Subject key identifier: 73:5F:5A:AD:F9:16:FC:18:2A:F5:CC:CF:55:54:92:C7:00:54:E7:24 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 32A72E92E21DEC33FCB24771ABF0C95D37D68134 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 04E3 Signing time: Wed 18 Jun 2025 10:51:06 +0000 Manifest this update: Wed 18 Jun 2025 10:46:06 +0000 Manifest next update: Sat 21 Jun 2025 13:15:06 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: xDoay5hT14TvKd5bG8VRJtEp5w9cPVyDLWOpH/sJiuo=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a7:2e:92:e2:1d:ec:33:fc:b2:47:71:ab:f0:c9:5d:37:d6:81:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Jun 18 10:46:06 2025 GMT Not After : Jun 21 13:15:06 2025 GMT Subject: CN=735F5AADF916FC182AF5CCCF555492C70054E724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:80:1c:3d:e3:27:bc:36:cb:32:df:f7:4a: 27:c3:82:14:7a:7a:7b:ab:95:c4:af:7b:57:3c:bd: 1c:a9:a8:e4:28:3c:a4:1f:34:c2:f6:f5:d8:2d:bc: fc:be:20:1b:ba:99:48:61:8d:37:e1:5d:ad:31:f1: 6d:56:9a:38:6a:84:6c:a1:aa:9b:0e:a6:d6:0f:b4: 88:50:96:df:a0:32:66:30:2a:08:d3:c9:04:f1:8a: cf:f4:25:c8:c7:79:70:50:b3:2e:b1:88:dd:4b:96: 67:c3:88:c8:d5:a9:59:07:06:25:74:d8:03:20:49: c1:e2:c2:96:72:b6:8f:67:82:14:75:d6:e9:37:c8: 2d:23:e9:d9:e5:1e:47:48:7f:2e:d0:b7:16:cc:ff: 56:67:ff:30:7c:e3:86:90:98:d5:48:9d:23:88:14: 46:cb:64:e7:15:ce:a9:28:21:7c:f1:81:92:cd:fc: e1:2d:9a:41:a3:9e:01:1d:86:b1:b1:2b:1b:a5:1c: 1e:89:19:0a:04:4a:ab:c4:f4:90:f3:76:b0:15:45: b3:8d:80:80:c6:0a:ae:60:dd:d2:5a:0d:6a:3e:68: a5:29:21:b0:94:7d:a1:20:4b:ef:35:2e:05:08:44: ee:99:93:f6:3a:48:3e:72:0f:89:f7:61:bd:d4:ad: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:5A:AD:F9:16:FC:18:2A:F5:CC:CF:55:54:92:C7:00:54:E7:24 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:88:76:97:41:ba:57:e9:58:24:78:7e:6c:d0:6c:49:24: 93:96:da:b4:98:3f:b8:4d:c0:c3:b5:76:de:01:ce:55:8b:1c: 0a:26:2f:da:f7:0e:07:ce:98:c6:aa:31:05:cd:80:72:e4:ff: 2c:be:d7:d9:6d:ba:c2:78:a3:23:67:d6:97:20:fa:c2:a1:25: c2:bc:a9:44:5c:9b:bf:b2:9f:34:9b:0e:69:07:1d:94:7e:6c: 22:4d:05:ef:da:94:ea:65:3b:db:38:0b:4c:70:2d:67:be:aa: 84:f9:19:7b:e6:e6:51:84:d3:c7:a4:64:63:9e:2f:bd:ad:c9: 46:7d:2b:be:e7:0d:1b:bc:24:c1:13:12:73:5a:ae:fb:b3:72: 16:70:0f:57:fb:c2:c0:5f:5d:a6:c0:4f:de:32:63:ee:12:00: 62:9b:06:55:be:59:bc:1b:b3:2b:1c:05:fe:9b:c7:4e:a8:d0: cb:fa:62:7a:4e:43:ac:03:05:a8:43:00:52:56:5d:d3:32:a3: ff:5f:75:41:c1:56:ac:02:f9:61:2e:f9:d1:49:1e:b9:bb:58: bf:df:09:4f:4e:1b:99:b9:a8:51:16:99:9c:e0:21:e7:bb:36: 7a:33:11:04:b0:de:06:18:72:a4:8e:8f:34:88:e3:4c:f3:6b: 9a:fc:e5:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqcukuId7DP8skdxq/DJXTfWgTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA2MTgxMDQ2MDZaFw0yNTA2MjExMzE1MDZaMDMxMTAvBgNV BAMTKDczNUY1QUFERjkxNkZDMTgyQUY1Q0NDRjU1NTQ5MkM3MDA1NEU3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkT4AcPeMnvDbLMt/3SifDghR6 enurlcSve1c8vRypqOQoPKQfNML29dgtvPy+IBu6mUhhjTfhXa0x8W1WmjhqhGyh qpsOptYPtIhQlt+gMmYwKgjTyQTxis/0JcjHeXBQsy6xiN1LlmfDiMjVqVkHBiV0 2AMgScHiwpZyto9nghR11uk3yC0j6dnlHkdIfy7QtxbM/1Zn/zB844aQmNVInSOI FEbLZOcVzqkoIXzxgZLN/OEtmkGjngEdhrGxKxulHB6JGQoESqvE9JDzdrAVRbON gIDGCq5g3dJaDWo+aKUpIbCUfaEgS+81LgUIRO6Zk/Y6SD5yD4n3Yb3UrVt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc19arfkW/Bgq9czPVVSSxwBU5yQwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuiiHaXQbpX6VgkeH5s0GxJJJOW2rSYP7hN wMO1dt4BzlWLHAomL9r3DgfOmMaqMQXNgHLk/yy+19ltusJ4oyNn1pcg+sKhJcK8 qURcm7+ynzSbDmkHHZR+bCJNBe/alOplO9s4C0xwLWe+qoT5GXvm5lGE08ekZGOe L72tyUZ9K77nDRu8JMETEnNarvuzchZwD1f7wsBfXabAT94yY+4SAGKbBlW+Wbwb syscBf6bx06o0Mv6YnpOQ6wDBahDAFJWXdMyo/9fdUHBVqwC+WEu+dFJHrm7WL/f CU9OG5m5qFEWmZzgIee7NnozEQSw3gYYcqSOjzSI40zza5r85dY= -----END CERTIFICATE-----Generated at Wed Jun 18 19:20:50 2025 by rpki-client