$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: lUrFfOt9ZKr1PXX8F9+vYq0mrZIwFoXremfgKiKy858= Subject key identifier: 31:1B:87:6B:D3:03:E7:F5:CA:0B:52:75:2E:8E:40:D9:A0:89:B8:C0 Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 4AA70E1219492B433858E00DC6C597F9D05547EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 01BC Signing time: Thu 01 May 2025 01:11:05 +0000 Manifest this update: Thu 01 May 2025 01:06:05 +0000 Manifest next update: Sun 04 May 2025 11:42:05 +0000 Files and hashes: 1: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (hash: 8gYVBvfPaAS+dDq/ck+SYq8jSqJeSZctfFM5ZSDT6o0=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: bUeRMlPqkwApg7Vb4bvig1i36cI8bzbJodoDN6nlTb0=) 3: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: cGnWglBNg94uqu2e6fKft+/NTBNVmXsxphiGl6bRRTY=) 4: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (hash: 01jHh+FfyPAbJeYQk+m56wOnb+AW1a+9NjO91/TsYUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 11:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a7:0e:12:19:49:2b:43:38:58:e0:0d:c6:c5:97:f9:d0:55:47:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: May 1 01:06:05 2025 GMT Not After : May 4 11:42:05 2025 GMT Subject: CN=311B876BD303E7F5CA0B52752E8E40D9A089B8C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:fc:69:00:b7:91:f0:61:24:00:12:a2:15: dc:6c:9e:94:57:0d:46:bb:6b:d6:63:24:9f:70:2e: 55:ca:16:35:29:5d:9c:69:4b:97:0e:a5:f4:6b:ae: 43:9c:77:38:71:86:d0:bc:f3:7c:52:5b:5c:57:02: 34:b8:5b:0d:b4:2c:e3:1d:f7:da:ae:2c:65:5c:06: 0e:1f:d0:14:39:c6:e8:f1:d5:3a:52:3f:36:fb:d4: f4:7a:1f:34:08:80:6e:94:a7:4a:ce:eb:27:3c:0b: 4d:8c:45:82:f5:9d:83:ef:70:48:81:b8:76:12:b4: 0b:0f:0c:2d:57:db:af:42:f2:11:7f:f4:4c:e2:3f: f9:2e:be:72:10:cb:db:71:8f:88:64:4f:77:c4:da: cb:1e:1c:c4:4c:14:d3:b9:0c:8d:dd:17:17:6e:2c: 40:03:8d:9d:77:8f:6e:c8:fc:21:b7:b1:5a:c3:e1: 22:c1:82:09:3f:82:57:5f:0c:f9:ab:dc:f8:f0:73: 0e:ea:12:1a:04:35:b9:af:6b:b8:45:02:ae:7f:4a: 8a:a2:db:be:67:08:87:9b:a0:25:b3:b8:f2:27:e5: b2:34:2d:98:e4:1a:ce:62:bc:f4:cd:4f:aa:de:fc: fe:be:cd:5e:59:ef:72:80:47:d7:b5:77:8b:1d:c8: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:87:6B:D3:03:E7:F5:CA:0B:52:75:2E:8E:40:D9:A0:89:B8:C0 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cf:23:e2:ea:7c:04:cc:37:8c:2c:d1:9d:15:62:ec:d7:20: b7:bf:90:5c:29:e1:9d:38:02:fc:72:31:0b:51:40:78:16:77: f6:85:31:92:bb:2c:77:4c:68:bb:f0:6d:dd:4a:14:eb:7b:d2: 6c:b8:2d:53:f1:63:6a:1d:b0:94:75:12:d0:6e:80:b1:e2:a5: 7b:38:ad:34:27:ec:0e:26:91:30:ec:40:ea:31:e4:3c:f7:e6: e2:18:87:12:4b:2b:85:4b:68:2e:9b:d9:94:2b:ce:e4:5e:9a: 89:84:56:75:47:b1:7d:78:b0:6e:f8:5e:66:b5:a7:05:6b:4d: 23:cb:36:8e:2a:f7:9a:ba:e6:c0:ea:4f:11:0f:28:4c:68:e8: 34:15:5e:7e:0f:cb:fc:80:2f:63:71:77:e7:c7:2d:5c:ae:c7: 05:b3:ed:bb:2b:e0:e0:4b:9a:83:21:46:f0:3c:64:db:63:1b: 04:75:6a:ed:22:67:31:d6:e6:0a:91:08:83:71:1f:3d:89:45: 57:b5:eb:6d:11:db:f8:83:f0:99:46:02:f0:c9:0b:69:e2:72: 9d:3f:f3:6e:b5:ee:eb:be:5d:de:39:65:95:f4:81:d8:35:8c: cd:27:93:16:5f:04:7b:46:15:43:df:fc:15:34:c9:a2:ff:9f: d4:2c:fe:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqcOEhlJK0M4WOANxsWX+dBVR+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNTA1MDEwMTA2MDVaFw0yNTA1MDQxMTQyMDVaMDMxMTAvBgNV BAMTKDMxMUI4NzZCRDMwM0U3RjVDQTBCNTI3NTJFOEU0MEQ5QTA4OUI4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4vxpALeR8GEkABKiFdxsnpRX DUa7a9ZjJJ9wLlXKFjUpXZxpS5cOpfRrrkOcdzhxhtC883xSW1xXAjS4Ww20LOMd 99quLGVcBg4f0BQ5xujx1TpSPzb71PR6HzQIgG6Up0rO6yc8C02MRYL1nYPvcEiB uHYStAsPDC1X269C8hF/9EziP/kuvnIQy9txj4hkT3fE2sseHMRMFNO5DI3dFxdu LEADjZ13j27I/CG3sVrD4SLBggk/gldfDPmr3Pjwcw7qEhoENbmva7hFAq5/Soqi 275nCIeboCWzuPIn5bI0LZjkGs5ivPTNT6re/P6+zV5Z73KAR9e1d4sdyJ39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMRuHa9MD5/XKC1J1Lo5A2aCJuMAwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7PI+LqfATMN4ws0Z0VYuzXILe/kFwp4Z04 AvxyMQtRQHgWd/aFMZK7LHdMaLvwbd1KFOt70my4LVPxY2odsJR1EtBugLHipXs4 rTQn7A4mkTDsQOox5Dz35uIYhxJLK4VLaC6b2ZQrzuRemomEVnVHsX14sG74Xma1 pwVrTSPLNo4q95q65sDqTxEPKExo6DQVXn4Py/yAL2Nxd+fHLVyuxwWz7bsr4OBL moMhRvA8ZNtjGwR1au0iZzHW5gqRCINxHz2JRVe1620R2/iD8JlGAvDJC2nicp0/ 82617uu+Xd45ZZX0gdg1jM0nkxZfBHtGFUPf/BU0yaL/n9Qs/v4= -----END CERTIFICATE-----Generated at Fri May 2 21:03:23 2025 by rpki-client