$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: I8i6pxBw83h4rqIlEdg85GwKd/wqoSPeh0+Yf48xCuo= Subject key identifier: 1C:AE:C6:A0:1C:7F:1E:EF:F3:14:B8:4B:07:51:C0:91:08:94:46:22 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 200E3CC24D93D0335F5715A49A57DB425A83B0C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: AC Signing time: Tue 17 Jun 2025 02:50:36 +0000 Manifest this update: Tue 17 Jun 2025 02:45:36 +0000 Manifest next update: Fri 20 Jun 2025 08:43:36 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) 2: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 3: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: 6gDiTGXZ9Wie2WkPLzLe6JK3cEn8WxHZz+v9DXPH1ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 08:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0e:3c:c2:4d:93:d0:33:5f:57:15:a4:9a:57:db:42:5a:83:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Jun 17 02:45:36 2025 GMT Not After : Jun 20 08:43:36 2025 GMT Subject: CN=1CAEC6A01C7F1EEFF314B84B0751C09108944622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:b7:b6:77:0b:d0:dc:a2:ab:2e:cd:4a:0f: cb:6f:1d:b7:1a:a0:ed:71:b9:a6:b1:d1:f2:bd:02: 00:6e:d9:a0:a7:dc:a4:29:35:25:98:69:83:d6:0d: bd:96:9a:b1:f7:5d:f5:05:e5:9f:af:94:e9:c0:26: e1:cf:29:e5:b4:cc:29:a3:5a:56:4c:72:d9:2a:6c: e9:24:c8:51:fa:ff:32:7f:d9:4b:66:a7:49:b4:25: 0a:11:0d:aa:67:d3:c5:c1:ce:65:99:1e:9c:33:1b: 11:a0:45:dc:d5:0e:69:5f:f2:f0:ef:61:74:b7:4d: bb:fe:3e:36:46:59:a6:6b:39:0a:69:e2:52:91:96: 19:74:01:28:0d:21:c2:18:3b:66:c5:90:2c:19:a3: 71:a5:41:de:d9:ad:54:9a:26:4a:89:5a:09:7d:f7: a4:79:d4:37:a0:19:ec:ee:d1:ad:d8:a0:66:22:d5: a6:eb:2f:9e:71:bc:db:16:cf:c8:ae:bb:9c:fb:e4: e9:8d:ca:70:63:fe:8f:bd:0c:07:0a:5f:df:49:02: 48:1d:46:3b:16:02:59:f1:39:cc:5f:32:8b:41:93: f8:ec:d9:85:da:9e:cf:30:a8:bd:24:26:4a:7d:15: 04:b5:bb:e7:96:2d:98:f8:78:ff:70:a0:45:3d:7b: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:C6:A0:1C:7F:1E:EF:F3:14:B8:4B:07:51:C0:91:08:94:46:22 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:67:a1:7f:cc:6e:2f:22:f1:c3:32:b7:8b:77:cc:2e:a4: 4d:7e:01:0f:83:25:08:79:3b:28:a1:33:53:ff:81:e9:f2:bc: 39:d6:2b:a9:36:41:94:ae:a0:a7:e3:f9:8f:31:53:0f:c5:a4: ab:a7:26:77:93:5f:f1:8d:0f:51:eb:36:27:e8:ce:cf:9e:cb: 12:4b:ed:91:34:59:44:69:ba:83:c0:91:18:ca:b9:a5:74:a0: ea:a7:9a:b6:c4:7e:a3:56:44:b1:25:62:83:28:7a:ba:b4:ac: 5b:e9:23:07:aa:ff:5d:06:65:21:fc:e9:41:20:ec:2e:b6:87: dc:78:c5:1f:b4:dc:70:c2:05:bb:e0:10:63:e1:c6:36:e5:52: f0:f9:ae:6b:05:67:e7:85:ab:04:be:43:51:92:08:9f:be:61: 7f:fb:83:1f:7b:cd:22:f1:14:3c:a0:7a:2d:51:9a:d3:87:30: ae:6c:01:35:1e:f7:e1:87:53:a5:a9:82:2d:2c:2d:48:a4:81: de:ee:4b:e7:4b:e2:1e:71:a7:f6:a6:9a:55:8f:64:8b:3f:7e: 0b:0f:35:6e:26:bd:04:e9:9b:0f:b9:ab:d8:ca:9b:3e:ae:75: de:81:1a:e6:ef:42:5f:fb:c6:d3:ed:bb:6f:1f:3a:c2:9c:4f: e7:72:bf:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIA48wk2T0DNfVxWkmlfbQlqDsMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA2MTcwMjQ1MzZaFw0yNTA2MjAwODQzMzZaMDMxMTAvBgNV BAMTKDFDQUVDNkEwMUM3RjFFRUZGMzE0Qjg0QjA3NTFDMDkxMDg5NDQ2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZt7e2dwvQ3KKrLs1KD8tvHbca oO1xuaax0fK9AgBu2aCn3KQpNSWYaYPWDb2WmrH3XfUF5Z+vlOnAJuHPKeW0zCmj WlZMctkqbOkkyFH6/zJ/2Utmp0m0JQoRDapn08XBzmWZHpwzGxGgRdzVDmlf8vDv YXS3Tbv+PjZGWaZrOQpp4lKRlhl0ASgNIcIYO2bFkCwZo3GlQd7ZrVSaJkqJWgl9 96R51DegGezu0a3YoGYi1abrL55xvNsWz8iuu5z75OmNynBj/o+9DAcKX99JAkgd RjsWAlnxOcxfMotBk/js2YXans8wqL0kJkp9FQS1u+eWLZj4eP9woEU9eyZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHK7GoBx/Hu/zFLhLB1HAkQiURiIwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX2Z6F/zG4vIvHDMreLd8wupE1+AQ+DJQh5 OyihM1P/genyvDnWK6k2QZSuoKfj+Y8xUw/FpKunJneTX/GND1HrNifozs+eyxJL 7ZE0WURpuoPAkRjKuaV0oOqnmrbEfqNWRLElYoMoerq0rFvpIweq/10GZSH86UEg 7C62h9x4xR+03HDCBbvgEGPhxjblUvD5rmsFZ+eFqwS+Q1GSCJ++YX/7gx97zSLx FDygei1RmtOHMK5sATUe9+GHU6Wpgi0sLUikgd7uS+dL4h5xp/ammlWPZIs/fgsP NW4mvQTpmw+5q9jKmz6udd6BGubvQl/7xtPtu28fOsKcT+dyv9Y= -----END CERTIFICATE-----Generated at Tue Jun 17 22:18:10 2025 by rpki-client