$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: XfUKvZZGveBLGIGiR8FXytAOz+7llY77UfjGaZ9BniM= Subject key identifier: 29:F9:4E:DA:7C:B5:AB:FB:84:5E:66:64:E9:7F:C7:90:48:A4:A4:1F Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 2BBF33132B31F3FABF6C72DEE591E89DFE79F830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: 95 Signing time: Sat 14 Jun 2025 08:51:13 +0000 Manifest this update: Sat 14 Jun 2025 08:46:13 +0000 Manifest next update: Tue 17 Jun 2025 20:04:13 +0000 Files and hashes: 1: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: ou+man1Ngz4ilKZLMCpLTx9mmipWN+JXof3WQQ6lftE=) 2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: M/Ju5mYiYULdoDAFDktbRdkMaN2jwf5Cj2qaEO3as9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bf:33:13:2b:31:f3:fa:bf:6c:72:de:e5:91:e8:9d:fe:79:f8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Jun 14 08:46:13 2025 GMT Not After : Jun 17 20:04:13 2025 GMT Subject: CN=29F94EDA7CB5ABFB845E6664E97FC79048A4A41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:cc:d7:88:bd:4f:92:15:b0:a1:e8:72:a3: bd:d8:65:cc:f6:91:f9:6b:98:f8:19:b7:f9:d2:7f: fb:5e:9c:1d:f5:50:06:0b:6e:81:3b:bb:f0:36:4e: 64:f4:60:40:05:e0:4b:54:b1:6c:24:ca:a3:f9:37: a9:7f:6c:ba:6f:14:a8:b4:ac:b7:91:b2:bd:7a:47: 41:0e:14:fd:23:41:50:ae:16:20:a9:8f:8a:82:59: 30:9a:8b:8e:e4:56:d0:96:a2:40:27:e5:52:e7:4b: c2:88:80:79:62:26:fe:1d:63:b5:f3:88:66:85:20: d9:54:1a:6f:94:28:76:c4:ab:97:4a:b5:e3:8a:cd: 7b:9f:73:fc:e8:e0:fb:31:86:a7:e2:7b:66:ab:b9: 77:99:6a:94:69:5d:83:79:f4:93:86:2d:f9:b7:b6: 8d:b4:da:1d:ed:f9:7e:e7:7a:21:a1:32:7c:db:6f: e8:8f:3d:ac:ed:37:40:71:6e:1b:83:14:61:8f:57: 0d:5a:c6:42:34:ff:ae:97:c1:fb:43:f3:5f:56:1e: 1c:ee:30:d3:97:00:0f:6f:91:4a:3f:1e:3d:72:93: 28:55:33:94:36:fc:ed:f1:90:c7:9f:47:f9:72:9e: 26:c2:f5:c9:97:39:0a:9d:78:20:4b:dd:94:bb:bc: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:4E:DA:7C:B5:AB:FB:84:5E:66:64:E9:7F:C7:90:48:A4:A4:1F X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8e:34:93:9e:0e:7c:d8:a8:5d:2e:4f:88:2e:83:ca:c5:05: e0:c9:94:15:33:e2:f3:9e:3f:76:9e:30:75:78:db:1a:8a:1d: 2d:19:bf:76:24:73:4d:b3:c8:59:e2:b9:f4:44:6e:55:54:1f: 02:7b:a9:41:6e:01:47:77:45:1e:39:f1:ae:a1:63:03:da:3c: 71:f0:5b:53:56:7e:8c:7f:8d:59:d9:77:53:09:ee:16:69:b9: 36:5c:bd:4e:53:f8:ea:9b:6d:a3:ec:f2:c6:52:db:46:9f:cd: ec:a7:82:2d:dd:ac:95:6a:d3:b0:84:2d:c7:b7:30:2e:ae:f4: c0:6b:d7:e0:96:bc:9a:b1:3c:90:dd:b1:6e:e4:76:97:34:4d: 66:ae:8e:cf:cc:b7:9c:76:bc:59:76:5e:da:57:a5:51:08:84: 60:d6:86:d6:42:2f:2e:26:ef:23:00:5d:fa:83:82:f2:b3:24: a3:1c:c5:bb:c0:c9:8c:02:b8:44:a1:05:eb:f9:d4:4e:4e:aa: 36:87:c6:17:91:d0:f9:1a:a4:c4:76:01:28:ba:36:1a:a8:b1: b1:57:a0:cf:0e:1a:cc:77:97:43:90:93:88:fc:a8:19:ca:6b: c5:10:21:4a:92:d6:b5:1a:d4:87:db:5a:c4:89:00:b0:cd:33: 29:8d:6c:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK78zEysx8/q/bHLe5ZHonf55+DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTA2MTQwODQ2MTNaFw0yNTA2MTcyMDA0MTNaMDMxMTAvBgNV BAMTKDI5Rjk0RURBN0NCNUFCRkI4NDVFNjY2NEU5N0ZDNzkwNDhBNEE0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fMzXiL1PkhWwoehyo73YZcz2 kflrmPgZt/nSf/tenB31UAYLboE7u/A2TmT0YEAF4EtUsWwkyqP5N6l/bLpvFKi0 rLeRsr16R0EOFP0jQVCuFiCpj4qCWTCai47kVtCWokAn5VLnS8KIgHliJv4dY7Xz iGaFINlUGm+UKHbEq5dKteOKzXufc/zo4Psxhqfie2aruXeZapRpXYN59JOGLfm3 to202h3t+X7neiGhMnzbb+iPPaztN0BxbhuDFGGPVw1axkI0/66XwftD819WHhzu MNOXAA9vkUo/Hj1ykyhVM5Q2/O3xkMefR/lynibC9cmXOQqdeCBL3ZS7vOWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKflO2ny1q/uEXmZk6X/HkEikpB8wHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESONJOeDnzYqF0uT4gug8rFBeDJlBUz4vOe P3aeMHV42xqKHS0Zv3Ykc02zyFniufREblVUHwJ7qUFuAUd3RR458a6hYwPaPHHw W1NWfox/jVnZd1MJ7hZpuTZcvU5T+OqbbaPs8sZS20afzeyngi3drJVq07CELce3 MC6u9MBr1+CWvJqxPJDdsW7kdpc0TWaujs/Mt5x2vFl2XtpXpVEIhGDWhtZCLy4m 7yMAXfqDgvKzJKMcxbvAyYwCuEShBev51E5OqjaHxheR0PkapMR2ASi6NhqosbFX oM8OGsx3l0OQk4j8qBnKa8UQIUqS1rUa1IfbWsSJALDNMymNbJI= -----END CERTIFICATE-----Generated at Mon Jun 16 15:41:40 2025 by rpki-client