$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: 21BcAXOvCdqd38kBHGZ0ezR8iddgEeuNbvQ+8KTZJAA= Subject key identifier: F5:A1:9C:C5:D1:CF:EE:D8:BB:96:15:C3:37:86:04:1E:9D:54:67:1F Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 1AFFFDE9384AB390A3C91F8AB08491A3D8D68DCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 01E4 Signing time: Fri 13 Jun 2025 17:40:46 +0000 Manifest this update: Fri 13 Jun 2025 17:35:46 +0000 Manifest next update: Tue 17 Jun 2025 04:29:46 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: ZBhPw3GOCcaHLoguuXFNTUFQmevhZDaahGqVBxL7xuo=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 04:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ff:fd:e9:38:4a:b3:90:a3:c9:1f:8a:b0:84:91:a3:d8:d6:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Jun 13 17:35:46 2025 GMT Not After : Jun 17 04:29:46 2025 GMT Subject: CN=F5A19CC5D1CFEED8BB9615C33786041E9D54671F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:5a:1c:cc:c4:ee:3a:81:7f:8d:82:d7:43: c4:c0:f0:69:d4:05:25:93:ee:d4:1b:bf:65:9c:92: a5:ed:1a:6f:f0:73:03:27:77:fe:b2:3c:bd:93:7b: 54:53:e8:92:d4:d0:f3:5d:f4:6c:39:87:c8:81:06: cb:81:48:ed:0e:4c:25:49:38:4c:21:15:dc:dd:9f: 78:40:ac:cd:29:8d:78:66:64:d6:e1:e5:96:5a:57: b5:dc:97:95:71:a7:85:e4:0b:be:68:61:a8:42:bb: c6:8d:62:95:26:20:d1:0f:e1:29:49:80:73:87:fb: ce:53:2d:e4:44:65:46:0f:62:63:64:03:be:60:72: a8:0e:0d:50:8e:ae:fd:78:32:a9:98:3c:0b:aa:2d: 24:58:40:98:39:ca:ac:ac:df:ca:36:4a:0b:26:7e: f0:ff:56:73:fc:03:7e:23:8d:6e:b6:7d:5c:a8:a3: fa:a3:9c:3c:cf:42:b4:49:c6:b3:d6:c6:5f:a9:45: 28:f0:25:6c:62:a0:0f:10:d7:14:e9:9d:01:fa:cf: 03:70:08:e7:72:d1:da:8a:39:4d:d0:71:c8:c2:e0: 0e:64:d4:2b:8c:d9:ff:1a:dd:1c:e8:a6:8c:85:d1: 20:4f:4e:9f:99:63:6a:bd:bc:6b:e9:09:22:71:16: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A1:9C:C5:D1:CF:EE:D8:BB:96:15:C3:37:86:04:1E:9D:54:67:1F X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e1:33:ca:2b:05:53:57:4a:1a:0a:99:7d:e1:91:dd:b4:4e: 02:0c:31:c9:2f:ee:44:dc:88:43:a6:3e:4f:ea:c0:dd:1d:cc: 23:c0:7d:96:f6:fa:55:53:63:67:ca:c8:e4:41:03:43:84:af: 82:64:86:3c:e2:6f:89:c4:03:18:92:9d:28:28:80:fd:31:8c: 14:90:b8:36:f4:8c:5c:dd:ee:3a:ba:a3:8e:d0:2b:4f:b2:9d: 7d:f2:b4:ee:ea:92:ef:46:e7:08:f3:70:b1:e8:28:4e:8f:26: ae:e8:48:a6:b8:47:e2:25:dc:23:27:40:eb:eb:f7:a7:45:cb: e2:75:ce:27:61:46:d7:35:1d:92:35:ec:40:ec:5b:10:5e:d1: 39:c7:d9:a5:11:58:13:e0:05:c8:b8:99:84:69:d5:e9:fc:3e: 0f:dc:ea:d7:fb:36:47:ad:74:11:4a:04:b1:08:74:fd:ad:c0: 1d:e6:b1:c9:20:e4:69:0a:77:d2:85:a8:a6:7d:cb:43:4f:5d: 9c:8b:aa:f5:7f:58:a5:04:6f:41:f0:1a:70:cb:f0:9c:94:af: b9:60:70:67:c5:cf:70:69:b0:e2:e9:69:b4:29:9c:b7:f2:9c: 21:48:94:cf:cf:c9:f1:24:20:86:f4:f6:e6:cd:16:f2:8d:54: 19:22:1d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGv/96ThKs5CjyR+KsISRo9jWjc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTA2MTMxNzM1NDZaFw0yNTA2MTcwNDI5NDZaMDMxMTAvBgNV BAMTKEY1QTE5Q0M1RDFDRkVFRDhCQjk2MTVDMzM3ODYwNDFFOUQ1NDY3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+FoczMTuOoF/jYLXQ8TA8GnU BSWT7tQbv2WckqXtGm/wcwMnd/6yPL2Te1RT6JLU0PNd9Gw5h8iBBsuBSO0OTCVJ OEwhFdzdn3hArM0pjXhmZNbh5ZZaV7Xcl5Vxp4XkC75oYahCu8aNYpUmINEP4SlJ gHOH+85TLeREZUYPYmNkA75gcqgODVCOrv14MqmYPAuqLSRYQJg5yqys38o2Sgsm fvD/VnP8A34jjW62fVyoo/qjnDzPQrRJxrPWxl+pRSjwJWxioA8Q1xTpnQH6zwNw COdy0dqKOU3QccjC4A5k1CuM2f8a3RzopoyF0SBPTp+ZY2q9vGvpCSJxFqUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9aGcxdHP7ti7lhXDN4YEHp1UZx8wHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/hM8orBVNXShoKmX3hkd20TgIMMckv7kTc iEOmPk/qwN0dzCPAfZb2+lVTY2fKyORBA0OEr4Jkhjzib4nEAxiSnSgogP0xjBSQ uDb0jFzd7jq6o47QK0+ynX3ytO7qku9G5wjzcLHoKE6PJq7oSKa4R+Il3CMnQOvr 96dFy+J1zidhRtc1HZI17EDsWxBe0TnH2aURWBPgBci4mYRp1en8Pg/c6tf7Nket dBFKBLEIdP2twB3msckg5GkKd9KFqKZ9y0NPXZyLqvV/WKUEb0HwGnDL8JyUr7lg cGfFz3BpsOLpabQpnLfynCFIlM/PyfEkIIb09ubNFvKNVBkiHeQ= -----END CERTIFICATE-----Generated at Sun Jun 15 17:07:13 2025 by rpki-client