$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: YDPj2/HXkFyXBRahBZRZe+o3ec2dxtT0InoCvwZipZk= Subject key identifier: 58:A3:01:28:BE:AB:2C:8F:CF:90:93:67:DA:53:C2:71:78:6F:61:F4 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 767DF1017CCC29118A999B96274F76DE35C829B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01BD Signing time: Tue 29 Apr 2025 21:10:47 +0000 Manifest this update: Tue 29 Apr 2025 21:05:47 +0000 Manifest next update: Sat 03 May 2025 04:08:47 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: YQMZzvxfmsmy9h1wHUcogOoOn4pUAVno6CW+sg54bI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7d:f1:01:7c:cc:29:11:8a:99:9b:96:27:4f:76:de:35:c8:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 29 21:05:47 2025 GMT Not After : May 3 04:08:47 2025 GMT Subject: CN=58A30128BEAB2C8FCF909367DA53C271786F61F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:2c:b7:ee:86:64:8e:fc:03:37:64:39:70: 8f:2a:7d:b7:dd:0d:19:98:5e:23:4e:97:a1:89:60: d6:55:bf:25:9b:40:d8:f2:21:0f:47:3c:24:4f:6f: 0c:fc:6d:69:7a:d3:20:38:98:25:b4:8e:6a:1b:3d: 68:92:54:00:42:da:62:d6:ea:41:aa:d2:0e:44:6d: c8:25:1d:18:42:b8:6b:75:d6:5c:45:d6:9e:db:a1: da:9f:10:fc:9a:6b:51:ac:94:e4:10:6c:73:4e:8c: a5:93:e4:7a:8b:ce:56:84:ac:6d:99:ad:b0:35:8b: fd:19:16:26:16:c5:d0:56:74:db:7e:85:0e:86:fe: a6:11:24:60:3b:d4:5c:52:03:1f:44:9f:31:40:8d: ed:d9:f3:6b:b7:b8:ac:c7:8a:5b:11:7f:c3:a4:ea: 4d:4a:99:7a:8c:e4:91:c5:ee:69:1a:e1:07:8d:32: 0a:83:33:a7:20:79:f9:da:e2:46:86:ff:74:94:fa: 2c:8c:2d:b8:31:6e:85:42:05:a3:f8:63:6c:79:88: fe:78:57:6c:33:28:7d:ef:d4:e5:7d:36:1e:18:26: 86:48:58:f8:18:49:07:54:f5:64:5d:ae:91:b7:93: 32:8d:bd:82:8f:7e:ff:c2:52:f6:e2:72:3e:23:91: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:01:28:BE:AB:2C:8F:CF:90:93:67:DA:53:C2:71:78:6F:61:F4 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d4:16:50:30:08:a2:e6:b7:79:5e:9a:f3:7d:4f:27:a5:a7: 78:48:1e:95:2c:e8:66:9d:b1:4a:3f:62:35:47:a9:b2:4c:ab: d3:c7:d7:da:11:c1:dc:6a:0d:bb:05:f7:bf:8d:e1:3f:f1:99: c2:2e:38:d5:e5:ae:78:75:8f:fc:7d:73:24:50:12:44:88:1a: a2:d3:4c:7c:a7:75:c5:e4:2b:db:73:d5:8d:75:dc:19:7b:d7: 09:b2:10:f9:c6:f0:2a:14:c6:2c:28:2c:b3:26:45:17:5a:cd: 49:f9:4a:df:7c:82:ab:45:05:92:ef:da:d0:b9:31:c9:83:de: 68:46:24:8f:e2:a9:4e:da:7a:c8:89:5e:d6:96:c3:a5:2c:ba: 4b:d6:cf:14:fe:22:ef:76:97:49:14:ba:17:86:0e:b3:59:35: f1:ee:26:dc:3e:7d:7c:ac:c4:b2:1c:99:80:36:ef:94:59:c2: 79:4f:47:6c:90:59:9e:cb:7d:bb:c4:65:71:0e:37:d8:e0:b9: 2b:fa:11:3c:92:06:d9:67:3f:f2:90:c5:08:ae:c2:b8:43:83: 42:3a:6d:13:a0:f2:de:bb:f1:ac:a9:3c:a9:6e:74:06:06:7d: 8d:78:66:06:7d:d2:bc:39:3f:76:cc:01:7f:24:d2:35:18:50: 24:d8:0f:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdn3xAXzMKRGKmZuWJ0923jXIKbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA0MjkyMTA1NDdaFw0yNTA1MDMwNDA4NDdaMDMxMTAvBgNV BAMTKDU4QTMwMTI4QkVBQjJDOEZDRjkwOTM2N0RBNTNDMjcxNzg2RjYxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl+Sy37oZkjvwDN2Q5cI8qfbfd DRmYXiNOl6GJYNZVvyWbQNjyIQ9HPCRPbwz8bWl60yA4mCW0jmobPWiSVABC2mLW 6kGq0g5EbcglHRhCuGt11lxF1p7bodqfEPyaa1GslOQQbHNOjKWT5HqLzlaErG2Z rbA1i/0ZFiYWxdBWdNt+hQ6G/qYRJGA71FxSAx9EnzFAje3Z82u3uKzHilsRf8Ok 6k1KmXqM5JHF7mka4QeNMgqDM6cgefna4kaG/3SU+iyMLbgxboVCBaP4Y2x5iP54 V2wzKH3v1OV9Nh4YJoZIWPgYSQdU9WRdrpG3kzKNvYKPfv/CUvbicj4jkT0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKMBKL6rLI/PkJNn2lPCcXhvYfQwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvUFlAwCKLmt3lemvN9Tyelp3hIHpUs6Gad sUo/YjVHqbJMq9PH19oRwdxqDbsF97+N4T/xmcIuONXlrnh1j/x9cyRQEkSIGqLT THyndcXkK9tz1Y113Bl71wmyEPnG8CoUxiwoLLMmRRdazUn5St98gqtFBZLv2tC5 McmD3mhGJI/iqU7aesiJXtaWw6UsukvWzxT+Iu92l0kUuheGDrNZNfHuJtw+fXys xLIcmYA275RZwnlPR2yQWZ7LfbvEZXEON9jguSv6ETySBtlnP/KQxQiuwrhDg0I6 bROg8t678aypPKludAYGfY14ZgZ90rw5P3bMAX8k0jUYUCTYD9A= -----END CERTIFICATE-----Generated at Wed Apr 30 06:24:52 2025 by rpki-client