$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: GMVT6w82G0Lqd5aWgHG1Ujw1mcjX07jRZX9d8nLUAWg= Subject key identifier: 21:1B:57:8B:16:3E:F1:0E:B9:8E:7B:85:5C:8B:DC:02:DA:9D:96:60 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 03A779C6149A16DDFA28EF75181B850140D6974D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: B9 Signing time: Mon 28 Apr 2025 23:21:07 +0000 Manifest this update: Mon 28 Apr 2025 23:16:07 +0000 Manifest next update: Fri 02 May 2025 07:11:07 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: sVBgVW5Yw47DmSH8Q/dPif3wekm0wePL4+2L8DuBxsA=) 3: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a7:79:c6:14:9a:16:dd:fa:28:ef:75:18:1b:85:01:40:d6:97:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Apr 28 23:16:07 2025 GMT Not After : May 2 07:11:07 2025 GMT Subject: CN=211B578B163EF10EB98E7B855C8BDC02DA9D9660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:2e:c5:a0:e0:41:16:27:69:4b:50:cb:2b: df:e1:71:09:be:3e:a0:c3:1b:a5:ba:af:97:74:d6: 20:8e:11:8f:2c:5b:67:a5:0d:62:a2:af:f4:43:64: 3b:e1:ed:e8:c0:26:8f:4e:79:11:98:53:42:db:26: 58:15:b6:7d:3d:01:cd:5d:6d:1d:72:e9:c1:da:62: a8:71:52:37:3f:96:4d:fa:8e:13:7c:10:6a:5a:f1: b6:ef:07:b4:fe:70:cb:94:18:53:af:b1:64:a5:98: 4c:d1:2c:1c:cd:f0:cc:87:2c:02:a8:e6:4a:b3:97: 84:ec:8a:48:20:70:65:f5:dc:b6:0b:e8:1a:84:63: f9:ba:75:65:af:08:51:89:9a:fc:51:3d:82:cf:67: 3d:a7:2b:56:71:ac:66:31:e8:32:0a:fd:13:a7:8e: 65:65:6c:90:0b:2b:1d:fc:94:7e:31:e5:23:3b:21: 24:e4:82:4b:12:65:db:cd:53:a3:08:93:a0:32:b8: cf:f5:1f:5e:9c:bd:91:89:b3:83:90:8d:9f:2c:5b: e4:1a:fd:1a:2a:b5:0b:2a:5c:29:6e:c9:90:2e:4a: af:0d:93:e2:fd:11:33:dd:ca:49:89:f9:71:75:b2: 13:8b:70:67:0f:d7:63:f5:e2:31:a1:3b:e6:2d:5d: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:57:8B:16:3E:F1:0E:B9:8E:7B:85:5C:8B:DC:02:DA:9D:96:60 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:70:10:3a:1b:b4:64:11:c9:13:ad:f0:45:4e:05:0a:43:f1: ad:5f:90:ec:96:68:bd:da:3d:73:c2:23:cd:3e:ef:5e:03:10: c2:33:54:44:36:8f:d8:b9:17:7d:4b:1f:fa:63:73:85:76:5d: d0:bf:86:6c:86:a9:4f:8a:de:44:0a:00:0a:5e:bb:71:81:a3: fb:99:4b:fc:64:d7:43:28:71:41:c7:43:39:b8:9d:36:8f:48: f0:06:b4:8c:26:0f:62:42:25:51:6b:18:f2:70:ad:78:ce:5f: 24:9b:99:32:0e:f8:12:31:18:c7:a7:7b:b0:27:63:3b:e5:3f: 74:60:71:f1:87:89:98:54:6d:98:de:78:fc:4e:f6:6c:a1:e9: 98:0c:6b:8b:70:24:96:d4:bb:36:52:7e:5a:59:07:dd:83:ff: 21:b3:bc:50:05:cb:5b:b7:46:2b:f9:d8:97:c9:40:2d:63:0e: c4:0d:d2:98:79:ff:d1:ef:77:36:7d:ab:77:e2:61:b3:42:d2: ff:e4:24:5c:77:ba:57:93:cd:3e:f8:e6:7d:be:d3:ed:bd:e1: 8d:dc:df:1f:57:16:66:39:06:74:bd:51:8b:e5:d5:b3:b8:6c: b8:be:4d:c5:d8:b2:2d:1c:48:f4:b2:7e:69:54:8d:e7:62:0a: 16:8b:dc:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6d5xhSaFt36KO91GBuFAUDWl00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA0MjgyMzE2MDdaFw0yNTA1MDIwNzExMDdaMDMxMTAvBgNV BAMTKDIxMUI1NzhCMTYzRUYxMEVCOThFN0I4NTVDOEJEQzAyREE5RDk2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5C7FoOBBFidpS1DLK9/hcQm+ PqDDG6W6r5d01iCOEY8sW2elDWKir/RDZDvh7ejAJo9OeRGYU0LbJlgVtn09Ac1d bR1y6cHaYqhxUjc/lk36jhN8EGpa8bbvB7T+cMuUGFOvsWSlmEzRLBzN8MyHLAKo 5kqzl4TsikggcGX13LYL6BqEY/m6dWWvCFGJmvxRPYLPZz2nK1ZxrGYx6DIK/ROn jmVlbJALKx38lH4x5SM7ISTkgksSZdvNU6MIk6AyuM/1H16cvZGJs4OQjZ8sW+Qa /RoqtQsqXCluyZAuSq8Nk+L9ETPdykmJ+XF1shOLcGcP12P14jGhO+YtXRLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIRtXixY+8Q65jnuFXIvcAtqdlmAwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZwEDobtGQRyROt8EVOBQpD8a1fkOyWaL3a PXPCI80+714DEMIzVEQ2j9i5F31LH/pjc4V2XdC/hmyGqU+K3kQKAApeu3GBo/uZ S/xk10MocUHHQzm4nTaPSPAGtIwmD2JCJVFrGPJwrXjOXySbmTIO+BIxGMene7An YzvlP3RgcfGHiZhUbZjeePxO9myh6ZgMa4twJJbUuzZSflpZB92D/yGzvFAFy1u3 Riv52JfJQC1jDsQN0ph5/9HvdzZ9q3fiYbNC0v/kJFx3uleTzT745n2+0+294Y3c 3x9XFmY5BnS9UYvl1bO4bLi+TcXYsi0cSPSyfmlUjediChaL3KE= -----END CERTIFICATE-----Generated at Wed Apr 30 12:24:37 2025 by rpki-client