$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: RYYZoS/zM61u7UEN6NmS13Z6MVq47tnnXPnZIoD3r7o= Subject key identifier: E6:6E:AC:FD:6C:19:3D:07:62:15:21:52:C0:E2:67:4A:73:FB:91:8E Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 4EEFB62AB0502A98E497E205462CCF1BE34B4C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 042C Signing time: Sun 15 Jun 2025 09:30:41 +0000 Manifest this update: Sun 15 Jun 2025 09:25:41 +0000 Manifest next update: Wed 18 Jun 2025 12:05:41 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) 2: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: aZEdFHnkuppXzamStefcsSYlqVHUvAdawK3GTmB4YdM=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 12:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ef:b6:2a:b0:50:2a:98:e4:97:e2:05:46:2c:cf:1b:e3:4b:4c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Jun 15 09:25:41 2025 GMT Not After : Jun 18 12:05:41 2025 GMT Subject: CN=E66EACFD6C193D0762152152C0E2674A73FB918E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:c1:f2:c7:8d:a3:0a:40:72:d3:77:80:bd: 19:96:11:24:10:01:5b:0c:a0:bb:67:be:6c:96:d9: 1e:ab:a8:97:8e:04:db:fa:88:49:69:33:f9:f2:e1: ed:74:b8:56:e1:11:6a:e3:3a:a6:21:eb:ab:57:d7: 14:0b:9a:26:34:42:24:71:be:44:2e:99:a2:f1:2e: 4b:cf:4b:45:0c:4f:10:9d:b3:b4:0e:64:f4:1d:e1: 82:99:37:27:49:d6:9c:c9:5b:0d:c6:5a:a9:0e:9c: ef:01:32:97:ad:4f:6a:72:2d:52:9d:38:a7:72:52: 03:a6:85:85:f1:20:8f:fc:b2:9d:8d:00:95:5d:f1: 52:db:6c:26:1f:4f:a8:fa:9a:e4:5e:be:3d:69:24: cb:3f:f2:66:1b:27:40:43:fb:44:83:19:90:b2:fe: d0:5b:7f:62:c5:18:61:86:cd:92:03:6e:15:70:d2: f3:81:81:72:18:24:80:00:ee:23:f0:55:47:e5:a5: 6c:a5:b4:23:b2:04:7e:1e:f7:eb:c2:27:37:21:ea: de:a0:7b:82:e6:a2:6e:2a:a8:6e:aa:7b:99:74:8a: 83:40:40:d1:c4:b5:db:21:55:dd:f4:bd:f7:d9:81: 10:66:51:f9:f6:1c:f0:10:b0:4c:b5:c5:dd:1c:0d: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6E:AC:FD:6C:19:3D:07:62:15:21:52:C0:E2:67:4A:73:FB:91:8E X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:54:5f:7e:a9:e3:0e:9d:21:f8:8a:77:2c:7f:27:46:10:34: 85:09:00:1a:fa:21:65:db:0f:20:3e:d5:e8:aa:a7:4d:e9:cc: a1:9e:54:ae:3f:b5:f2:51:a9:e0:85:cc:1b:5c:d3:82:8c:8f: 8e:ea:45:ab:5f:e2:e1:b6:62:43:4d:b7:5f:7b:5c:22:13:74: 28:1b:35:36:9a:1a:e9:7c:0d:b6:81:df:fb:98:d1:f2:3f:79: d5:59:7a:8d:8a:da:bb:ed:32:8d:1a:72:b5:86:6c:8c:49:c6: 57:35:50:d0:aa:eb:7d:f9:b7:fc:ce:e1:4e:19:e4:9f:9b:75: e7:0d:65:e6:aa:dd:db:d3:e7:81:0f:e3:21:1a:85:8c:96:bc: 01:22:4a:48:53:52:b5:67:17:55:41:e8:4b:4a:76:27:06:5c: 28:30:ea:50:bb:20:8d:c9:cc:c6:0a:84:92:47:35:ae:fc:65: 8b:4e:a0:e1:7e:52:2e:95:49:59:7d:ed:ea:8a:e5:f0:fd:68: df:d1:e7:d1:df:07:1b:ad:37:5d:5b:51:c1:cc:59:83:6d:6b: fa:91:0f:27:20:8a:f6:c0:2d:93:17:87:8f:3e:a1:ae:36:76: c5:32:fd:6e:16:e4:b4:48:3a:58:58:d4:4e:1b:38:33:9c:b3: d8:85:b7:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTu+2KrBQKpjkl+IFRizPG+NLTCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA2MTUwOTI1NDFaFw0yNTA2MTgxMjA1NDFaMDMxMTAvBgNV BAMTKEU2NkVBQ0ZENkMxOTNEMDc2MjE1MjE1MkMwRTI2NzRBNzNGQjkxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+sHyx42jCkBy03eAvRmWESQQ AVsMoLtnvmyW2R6rqJeOBNv6iElpM/ny4e10uFbhEWrjOqYh66tX1xQLmiY0QiRx vkQumaLxLkvPS0UMTxCds7QOZPQd4YKZNydJ1pzJWw3GWqkOnO8BMpetT2pyLVKd OKdyUgOmhYXxII/8sp2NAJVd8VLbbCYfT6j6muRevj1pJMs/8mYbJ0BD+0SDGZCy /tBbf2LFGGGGzZIDbhVw0vOBgXIYJIAA7iPwVUflpWyltCOyBH4e9+vCJzch6t6g e4Lmom4qqG6qe5l0ioNAQNHEtdshVd30vffZgRBmUfn2HPAQsEy1xd0cDfTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5m6s/WwZPQdiFSFSwOJnSnP7kY4wHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVUX36p4w6dIfiKdyx/J0YQNIUJABr6IWXb DyA+1eiqp03pzKGeVK4/tfJRqeCFzBtc04KMj47qRatf4uG2YkNNt197XCITdCgb NTaaGul8DbaB3/uY0fI/edVZeo2K2rvtMo0acrWGbIxJxlc1UNCq6335t/zO4U4Z 5J+bdecNZeaq3dvT54EP4yEahYyWvAEiSkhTUrVnF1VB6EtKdicGXCgw6lC7II3J zMYKhJJHNa78ZYtOoOF+Ui6VSVl97eqK5fD9aN/R59HfBxutN11bUcHMWYNta/qR DycgivbALZMXh48+oa42dsUy/W4W5LRIOlhY1E4bODOcs9iFt8Y= -----END CERTIFICATE-----Generated at Mon Jun 16 02:08:13 2025 by rpki-client