$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: h8w+Pz+HVetjtTbqjndUdagjrUJRA2RUYBh9MBElZzI= Subject key identifier: DD:FE:9D:65:85:83:15:0A:48:DC:AC:8E:8A:23:21:58:B2:67:84:9E Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 4BB95E3E58032FEF4CFB818D9604A8FCB2D9BE66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 03:01:37 +0000 Manifest this update: Sun 15 Jun 2025 02:56:37 +0000 Manifest next update: Wed 18 Jun 2025 12:28:37 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: Fb6gjjkD3F8OjLhBrAIWKySpK7KqsozojiL2EX51Cmk=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b9:5e:3e:58:03:2f:ef:4c:fb:81:8d:96:04:a8:fc:b2:d9:be:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Jun 15 02:56:37 2025 GMT Not After : Jun 18 12:28:37 2025 GMT Subject: CN=DDFE9D658583150A48DCAC8E8A232158B267849E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:22:f4:fc:8e:1d:6f:a8:9b:2f:36:23:5a:25: e4:0f:a7:8a:ff:e8:27:78:74:b8:81:01:00:3e:39: d7:f5:01:8f:39:8e:f9:d1:ff:70:fc:51:80:94:b8: 3c:18:73:49:ed:05:b7:cf:c6:42:23:0f:d2:9a:eb: 04:13:6e:13:2f:99:83:95:79:4c:13:aa:7c:a2:ab: 07:a0:28:a3:15:9d:84:26:70:1c:f8:a4:0d:10:7d: c6:f2:62:15:50:7b:84:9c:dc:0a:7c:06:0d:8e:e4: ce:29:fd:ab:6c:70:a3:19:0a:d7:37:04:e6:2e:ff: 97:74:c9:a2:64:ed:17:42:90:80:94:92:da:93:64: cd:57:54:88:85:b8:38:35:23:14:66:44:97:d0:f9: f6:e4:8d:3c:fd:da:98:df:33:ef:6b:8d:40:88:d2: 32:0b:4a:7d:70:81:7d:40:55:7b:65:82:bf:20:74: 1a:d1:c7:6b:02:fc:bb:83:04:06:d1:f5:8e:0b:cb: 10:9a:9a:23:41:bc:92:48:28:e3:e1:96:98:9d:37: ce:57:28:3f:d4:b3:02:2f:d3:81:b5:6d:2d:df:66: c3:1a:83:36:43:ef:71:eb:80:db:ba:19:35:4a:75: 63:bb:8a:1e:ef:fa:1c:25:aa:47:bc:f2:0c:a2:7e: 84:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FE:9D:65:85:83:15:0A:48:DC:AC:8E:8A:23:21:58:B2:67:84:9E X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:20:81:9a:cf:d7:41:63:58:53:9f:12:6d:6a:d5:e7:4a: 2a:de:f8:aa:c9:50:1e:31:eb:56:ee:ee:b4:cf:fa:58:21:7a: 67:db:90:71:9c:5a:a9:ee:9d:28:f0:6d:32:03:d7:ee:03:10: b4:a4:c1:ff:95:02:ad:4d:79:42:30:ab:f7:3a:b2:e4:87:c6: 6d:05:a9:1e:61:59:3d:29:46:61:4e:ce:7e:15:16:12:6b:c6: f7:3a:45:11:a8:db:a1:81:40:be:89:2d:75:d4:f2:79:dd:a1: 6a:c6:23:6a:db:9d:20:a7:61:e0:e2:64:9a:07:f8:63:31:f3: 66:3c:8f:d1:c5:b6:8c:30:58:78:01:c7:a4:4a:ac:82:ae:d9: db:c7:90:7c:f2:94:b6:f0:c3:56:f7:52:3f:2c:38:49:25:d0: af:dc:c0:7d:35:1b:6f:5f:70:78:7e:b7:a3:7a:4e:05:c9:c8: bf:72:0b:a6:69:b5:84:b3:e2:e3:be:dd:28:9d:dd:92:9f:40: 7c:ae:b6:c0:14:33:be:70:36:d2:77:1e:14:b4:2f:2a:f7:df: 8a:7f:0b:19:12:0a:32:6f:b0:5e:9c:ac:b8:cd:de:ba:24:47: 9e:88:6b:b8:c1:f7:24:98:8a:8f:b0:31:c6:86:b8:74:d2:59: 21:5c:3e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7lePlgDL+9M+4GNlgSo/LLZvmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTA2MTUwMjU2MzdaFw0yNTA2MTgxMjI4MzdaMDMxMTAvBgNV BAMTKERERkU5RDY1ODU4MzE1MEE0OERDQUM4RThBMjMyMTU4QjI2Nzg0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUIvT8jh1vqJsvNiNaJeQPp4r/ 6Cd4dLiBAQA+Odf1AY85jvnR/3D8UYCUuDwYc0ntBbfPxkIjD9Ka6wQTbhMvmYOV eUwTqnyiqwegKKMVnYQmcBz4pA0QfcbyYhVQe4Sc3Ap8Bg2O5M4p/atscKMZCtc3 BOYu/5d0yaJk7RdCkICUktqTZM1XVIiFuDg1IxRmRJfQ+fbkjTz92pjfM+9rjUCI 0jILSn1wgX1AVXtlgr8gdBrRx2sC/LuDBAbR9Y4LyxCamiNBvJJIKOPhlpidN85X KD/UswIv04G1bS3fZsMagzZD73HrgNu6GTVKdWO7ih7v+hwlqke88gyifoRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3f6dZYWDFQpI3KyOiiMhWLJnhJ4wHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn3IIGaz9dBY1hTnxJtatXnSire+KrJUB4x 61bu7rTP+lghemfbkHGcWqnunSjwbTID1+4DELSkwf+VAq1NeUIwq/c6suSHxm0F qR5hWT0pRmFOzn4VFhJrxvc6RRGo26GBQL6JLXXU8nndoWrGI2rbnSCnYeDiZJoH +GMx82Y8j9HFtowwWHgBx6RKrIKu2dvHkHzylLbww1b3Uj8sOEkl0K/cwH01G29f cHh+t6N6TgXJyL9yC6ZptYSz4uO+3Sid3ZKfQHyutsAUM75wNtJ3HhS0Lyr334p/ CxkSCjJvsF6crLjN3rokR56Ia7jB9ySYio+wMcaGuHTSWSFcPnk= -----END CERTIFICATE-----Generated at Mon Jun 16 01:30:00 2025 by rpki-client