$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft File: 4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json) Hash identifier: 6Zu1SX7hP9iF0ReO5kWBaCTPLQNvuafE3WBMovfHEHA= Subject key identifier: 91:47:35:4D:9E:75:6B:63:4E:D9:9B:62:09:C1:BD:B4:90:DE:6D:1E Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D Certificate serial: 2257B459C18074FB8FAEAC9D979709D8E194BDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft Manifest number: 0354 Signing time: Sat 14 Jun 2025 20:31:03 +0000 Manifest this update: Sat 14 Jun 2025 20:26:03 +0000 Manifest next update: Wed 18 Jun 2025 00:27:03 +0000 Files and hashes: 1: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: DLunSIHmwbotbC3BxDQ5E2+ne+X1CimJ6/ZoS0dHqdo=) 2: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:57:b4:59:c1:80:74:fb:8f:ae:ac:9d:97:97:09:d8:e1:94:bd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D Validity Not Before: Jun 14 20:26:03 2025 GMT Not After : Jun 18 00:27:03 2025 GMT Subject: CN=9147354D9E756B634ED99B6209C1BDB490DE6D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:5b:ce:a4:c6:01:c6:cc:e4:5b:11:4b:06: 26:5f:93:5f:8a:ba:1a:46:53:02:48:ef:00:e0:29: d2:e7:a8:31:ae:39:87:a4:f6:7f:43:11:6f:00:e7: 82:6b:dd:5e:91:fb:c8:14:28:67:2e:61:36:94:93: 20:e2:ec:4b:24:20:95:5b:aa:23:03:ba:9d:a3:46: bf:15:f1:10:1c:85:7e:4a:2e:17:92:1e:5a:dd:4f: 1a:6e:de:13:31:7f:f9:48:31:93:16:07:9f:13:70: 9d:3a:64:0c:ea:4b:e4:f8:a4:8a:da:14:01:69:33: 1c:94:c9:7b:8c:be:fe:72:4e:47:5d:94:27:e1:b2: 5c:4b:7f:ca:ba:b5:2c:98:8a:c5:73:c6:03:60:ae: 06:68:04:e8:87:ce:21:5c:f9:29:85:27:12:6b:6e: d7:83:d4:20:8b:62:ea:01:46:86:19:f3:70:52:ab: 6c:8d:b6:8d:d2:3c:72:64:11:5f:92:c6:ca:a0:77: 2a:ca:1c:0f:92:93:e7:f3:53:d0:5f:ae:42:62:3a: 4a:f8:c7:0d:7a:a0:6e:a2:fc:41:7d:fe:86:34:9b: 86:40:b6:d9:3c:60:f6:26:28:25:f9:eb:95:86:a7: 65:b2:47:8d:11:1a:f8:0f:c6:e6:f5:36:d7:8a:28: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:35:4D:9E:75:6B:63:4E:D9:9B:62:09:C1:BD:B4:90:DE:6D:1E X509v3 Authority Key Identifier: keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:74:8c:9b:8f:9d:41:81:18:94:cb:f4:cf:69:a7:0d:ef:ba: 0b:09:01:33:25:6d:ca:8a:84:bb:09:0d:f1:a0:6b:aa:45:15: c2:b2:ab:4f:3c:20:7e:2c:42:13:85:3b:74:eb:a3:0a:c1:61: 98:69:12:f0:db:c3:48:7f:dd:d2:09:ec:7a:16:c6:ce:67:c6: d2:b0:c3:19:29:a9:c0:ab:de:32:01:25:2c:26:71:60:84:cf: b1:5e:2f:1f:76:be:9d:8d:a9:1e:a5:34:3e:59:36:d9:e2:60: 91:88:72:c1:15:ab:2a:cf:2b:25:80:f5:12:7c:10:a5:16:b3: c2:ce:ae:3d:20:87:a1:0a:73:80:41:a1:a0:2d:50:bc:0d:1f: 53:0a:31:47:e9:1c:e0:25:35:83:d6:f8:43:36:dd:c5:58:fc: 37:ce:83:61:f6:50:1f:d0:ad:85:c9:c3:50:1c:39:64:b8:e1: 49:06:08:96:e7:83:fb:1f:92:52:6c:4c:cb:97:04:39:e2:45: e2:12:65:a1:8c:95:bb:ac:7e:3e:f7:34:64:94:10:bd:b0:7d: d8:f3:77:9e:bc:e9:20:40:86:fd:62:c4:82:87:c5:67:d3:7b: 89:b5:56:9e:da:ca:bc:66:1b:2b:f0:3a:5f:83:c1:e4:be:dd: c8:3c:ea:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIle0WcGAdPuPrqydl5cJ2OGUve0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx RTk5Rjc0RDAeFw0yNTA2MTQyMDI2MDNaFw0yNTA2MTgwMDI3MDNaMDMxMTAvBgNV BAMTKDkxNDczNTREOUU3NTZCNjM0RUQ5OUI2MjA5QzFCREI0OTBERTZEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi1vOpMYBxszkWxFLBiZfk1+K uhpGUwJI7wDgKdLnqDGuOYek9n9DEW8A54Jr3V6R+8gUKGcuYTaUkyDi7EskIJVb qiMDup2jRr8V8RAchX5KLheSHlrdTxpu3hMxf/lIMZMWB58TcJ06ZAzqS+T4pIra FAFpMxyUyXuMvv5yTkddlCfhslxLf8q6tSyYisVzxgNgrgZoBOiHziFc+SmFJxJr bteD1CCLYuoBRoYZ83BSq2yNto3SPHJkEV+SxsqgdyrKHA+Sk+fzU9BfrkJiOkr4 xw16oG6i/EF9/oY0m4ZAttk8YPYmKCX565WGp2WyR40RGvgPxub1NteKKNwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUc1TZ51a2NO2ZtiCcG9tJDebR4wHwYDVR0j BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5 QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5 Rjc0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhG RTgxRTk5Rjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl0jJuPnUGBGJTL9M9ppw3vugsJATMlbcqK hLsJDfGga6pFFcKyq088IH4sQhOFO3TrowrBYZhpEvDbw0h/3dIJ7HoWxs5nxtKw wxkpqcCr3jIBJSwmcWCEz7FeLx92vp2NqR6lND5ZNtniYJGIcsEVqyrPKyWA9RJ8 EKUWs8LOrj0gh6EKc4BBoaAtULwNH1MKMUfpHOAlNYPW+EM23cVY/DfOg2H2UB/Q rYXJw1AcOWS44UkGCJbng/sfklJsTMuXBDniReISZaGMlbusfj73NGSUEL2wfdjz d5686SBAhv1ixIKHxWfTe4m1Vp7ayrxmGyvwOl+DweS+3cg86ug= -----END CERTIFICATE-----Generated at Mon Jun 16 21:38:51 2025 by rpki-client