$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: Pq4Z5a9N/3V3pAdePAedtElXakfw7AW5QQhtobu1K+U= Subject key identifier: 97:0E:49:47:77:CE:16:72:5B:1F:FF:32:14:BC:48:4A:0C:1A:6C:F4 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 3E8C943259B0D9DEF4DAE75DBDCBABF8E65C8305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 8C Signing time: Sun 27 Apr 2025 11:11:08 +0000 Manifest this update: Sun 27 Apr 2025 11:06:08 +0000 Manifest next update: Wed 30 Apr 2025 14:18:08 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: HxfpWwdt5FCkj2f/UQQoECD1sg8rCl4cjYLtEI2SWJc=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: +7YR+QuAeVk3+sgZlcgzGSfoLo31AJ2VMqC4Rm6spP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8c:94:32:59:b0:d9:de:f4:da:e7:5d:bd:cb:ab:f8:e6:5c:83:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Apr 27 11:06:08 2025 GMT Not After : Apr 30 14:18:08 2025 GMT Subject: CN=970E494777CE16725B1FFF3214BC484A0C1A6CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:51:89:c3:dc:ca:1b:59:26:3a:56:4b:cc: d0:35:45:a4:9a:fe:6a:d9:df:68:7a:16:8d:be:70: c0:e4:49:54:64:4b:87:30:a0:66:84:d4:14:f1:08: 0f:ff:b7:c6:67:1f:88:88:e2:9a:bc:52:73:af:bf: 5c:eb:69:7b:ad:43:a6:e5:82:16:36:4b:dc:7c:8d: ab:3b:df:44:68:0e:32:43:8c:9c:13:5c:d1:11:87: 3e:64:5a:f4:bd:1a:2f:e6:ff:06:a4:bd:ad:61:99: 04:9e:25:f3:cd:fc:04:d1:f8:ca:dd:12:79:50:ad: d6:f0:1e:f6:73:fa:f1:f8:9b:1a:b6:65:8e:ba:06: 42:23:86:6c:cb:2d:96:89:29:fc:68:77:e1:40:42: fd:0b:1a:46:e5:18:1d:14:c9:a6:f4:81:9d:05:e9: f4:d8:b9:aa:69:95:5b:3d:d1:15:81:b9:9c:3a:a5: 6e:d9:3e:26:ff:42:76:13:36:b5:4e:19:f6:b5:1b: 38:60:49:5b:a1:5c:dd:9f:23:5d:33:6e:3b:a7:14: 7d:63:8e:48:6e:c3:e6:7f:b0:58:b9:7d:91:e4:7b: e0:da:d8:90:b5:da:23:36:1b:a5:6d:b7:c2:5f:19: 6a:13:3f:67:58:d8:df:9f:40:8a:a7:11:28:72:da: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:49:47:77:CE:16:72:5B:1F:FF:32:14:BC:48:4A:0C:1A:6C:F4 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:50:af:5a:f6:35:40:db:56:86:e9:bc:17:1a:d4:c7:fe:c3: cd:f5:60:9d:e3:27:34:d4:ba:6a:4b:27:50:fe:7c:22:d0:9a: ef:73:5f:ed:00:95:7b:37:e9:e3:e3:86:96:b8:3a:bd:ac:32: 6d:29:b7:91:42:2a:5f:a7:1c:a5:31:b2:ed:b0:b5:61:25:db: 11:9e:74:ae:ed:0d:7e:a1:b3:d5:de:cd:44:ad:f9:12:b4:61: bf:c5:18:bc:bc:c4:38:2c:e1:00:78:19:72:53:95:8a:0a:d5: 96:3c:3a:03:fd:d7:93:b2:83:f1:c0:f7:f8:0d:86:3b:1a:1c: 19:7c:bb:9e:2e:e1:ea:89:08:56:c7:7c:ce:ee:53:56:f5:08: 64:2a:04:23:f7:a0:8c:01:57:5d:3a:d0:85:3c:d9:01:b9:63: 71:b8:b1:83:68:b2:a8:00:84:71:be:63:7f:02:68:53:62:11: 00:e7:0b:e2:39:3c:b3:72:fa:11:55:a5:06:52:56:a2:0d:2f: bd:27:a7:e3:72:9f:f4:13:33:fe:d1:d8:c8:8e:46:64:1f:3f: 94:ec:2a:e7:e8:af:80:b3:16:20:14:46:69:3c:68:3d:09:01: 34:4c:a4:31:79:29:b0:ad:1d:6b:e4:04:90:13:6e:ac:2c:04: 29:19:79:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoyUMlmw2d702uddvcur+OZcgwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA0MjcxMTA2MDhaFw0yNTA0MzAxNDE4MDhaMDMxMTAvBgNV BAMTKDk3MEU0OTQ3NzdDRTE2NzI1QjFGRkYzMjE0QkM0ODRBMEMxQTZDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxFGJw9zKG1kmOlZLzNA1RaSa /mrZ32h6Fo2+cMDkSVRkS4cwoGaE1BTxCA//t8ZnH4iI4pq8UnOvv1zraXutQ6bl ghY2S9x8jas730RoDjJDjJwTXNERhz5kWvS9Gi/m/wakva1hmQSeJfPN/ATR+Mrd EnlQrdbwHvZz+vH4mxq2ZY66BkIjhmzLLZaJKfxod+FAQv0LGkblGB0Uyab0gZ0F 6fTYuapplVs90RWBuZw6pW7ZPib/QnYTNrVOGfa1GzhgSVuhXN2fI10zbjunFH1j jkhuw+Z/sFi5fZHke+Da2JC12iM2G6Vtt8JfGWoTP2dY2N+fQIqnEShy2nn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlw5JR3fOFnJbH/8yFLxISgwabPQwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNQr1r2NUDbVobpvBca1Mf+w831YJ3jJzTU umpLJ1D+fCLQmu9zX+0AlXs36ePjhpa4Or2sMm0pt5FCKl+nHKUxsu2wtWEl2xGe dK7tDX6hs9XezUSt+RK0Yb/FGLy8xDgs4QB4GXJTlYoK1ZY8OgP915Oyg/HA9/gN hjsaHBl8u54u4eqJCFbHfM7uU1b1CGQqBCP3oIwBV1060IU82QG5Y3G4sYNosqgA hHG+Y38CaFNiEQDnC+I5PLNy+hFVpQZSVqINL70np+Nyn/QTM/7R2MiORmQfP5Ts Kufor4CzFiAURmk8aD0JATRMpDF5KbCtHWvkBJATbqwsBCkZea4= -----END CERTIFICATE-----Generated at Mon Apr 28 04:29:30 2025 by rpki-client