$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: HkrqOqgAOlCiQRrjoT6akOsUQBtdDPabDMzuT+8XnTQ= Subject key identifier: 2E:9B:E4:1A:84:FE:A4:86:3B:61:1F:5A:1D:B0:86:10:58:46:C2:61 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 64B9558DB8DD51A874BB0701472C450C48D98260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0177 Signing time: Sat 14 Jun 2025 17:10:58 +0000 Manifest this update: Sat 14 Jun 2025 17:05:58 +0000 Manifest next update: Tue 17 Jun 2025 19:36:58 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: O9YBx6sZYcqBC/Hcp60hnL6cE7U+howHaANnCYIp9pk=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b9:55:8d:b8:dd:51:a8:74:bb:07:01:47:2c:45:0c:48:d9:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Jun 14 17:05:58 2025 GMT Not After : Jun 17 19:36:58 2025 GMT Subject: CN=2E9BE41A84FEA4863B611F5A1DB086105846C261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:9a:7b:ea:46:5a:94:0a:c7:30:a7:3c:15: e1:7d:b9:c0:06:bd:b5:3d:dd:59:0f:b5:53:03:63: 2e:a2:90:95:a0:11:cc:c9:ab:31:74:9b:78:36:18: 0d:10:74:66:2c:1a:83:a1:93:61:e3:54:b6:68:4d: fe:4e:24:f9:01:ba:09:e5:2b:a2:84:63:b7:96:63: d5:b9:2f:0f:ae:b1:ef:ee:88:6f:fa:da:2e:bc:dd: 34:3c:e9:e7:1c:1c:e4:a1:75:70:de:98:5b:7f:41: e0:c8:bd:d5:00:9b:f5:20:d9:eb:58:66:e7:2d:f7: 9e:3b:76:18:d2:77:bc:02:bb:11:9d:63:e1:0e:75: e5:9d:2c:78:e7:60:f1:91:64:16:bd:52:73:62:77: 36:c9:0c:be:27:0b:52:8a:94:15:51:72:28:03:5b: df:02:7a:6f:15:37:10:ce:b1:21:04:0c:d0:fb:d3: bb:13:e8:05:d1:a6:ce:f7:18:d4:41:1a:16:37:e4: 39:f4:1a:20:b3:2c:12:b6:97:1e:d3:64:64:e8:3e: eb:cc:8f:17:25:b7:06:cc:d6:25:cd:da:11:7e:d3: 5d:a7:58:95:3e:1a:04:cb:20:64:62:a0:c3:4f:13: 02:0a:ba:dc:b4:4d:2a:8e:ed:74:a1:8e:cf:6f:92: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9B:E4:1A:84:FE:A4:86:3B:61:1F:5A:1D:B0:86:10:58:46:C2:61 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ef:3a:a1:fa:ae:dd:a3:c6:26:5a:97:5f:21:a3:5c:62:d8: 60:e6:57:ee:36:d1:18:67:91:83:ac:9d:ca:6f:14:da:4a:a5: d2:b0:38:2e:9c:bb:99:2c:2d:bd:47:4b:02:1a:f3:e6:a4:cb: dc:fa:63:bc:d4:65:a9:65:b2:63:69:1c:3e:e4:9b:bd:46:5e: cc:53:b4:26:cf:a3:0b:e5:21:c3:11:8b:28:6f:e0:ac:83:32: 05:53:25:00:ca:c1:7f:cf:8f:15:6b:54:e3:b2:3f:88:6a:79: 4e:02:47:db:42:56:65:13:2a:7a:25:7e:19:82:6a:03:be:11: 1d:a0:06:63:02:34:9f:2d:d3:74:f7:87:62:a4:b8:c1:88:4e: f7:34:1c:be:46:c2:cf:ea:05:d3:6b:43:2e:35:c7:a7:48:62: f4:d4:f4:6e:d9:61:8f:00:98:1a:ee:0f:fc:ed:35:d1:e6:81: c4:e7:22:64:04:99:b6:9a:e1:e7:75:ed:de:07:22:48:02:d9: 54:76:04:6a:de:11:0c:6d:5b:b4:ba:05:9f:cc:14:9f:d1:98: a0:10:a8:b6:17:79:e8:c4:d7:58:6d:b6:20:ca:69:ba:fc:fe: 4a:75:aa:19:6d:2a:02:2f:ee:63:2d:ad:af:dc:20:08:d3:d5: 11:79:46:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLlVjbjdUah0uwcBRyxFDEjZgmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA2MTQxNzA1NThaFw0yNTA2MTcxOTM2NThaMDMxMTAvBgNV BAMTKDJFOUJFNDFBODRGRUE0ODYzQjYxMUY1QTFEQjA4NjEwNTg0NkMyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+q5p76kZalArHMKc8FeF9ucAG vbU93VkPtVMDYy6ikJWgEczJqzF0m3g2GA0QdGYsGoOhk2HjVLZoTf5OJPkBugnl K6KEY7eWY9W5Lw+use/uiG/62i683TQ86eccHOShdXDemFt/QeDIvdUAm/Ug2etY Zuct9547dhjSd7wCuxGdY+EOdeWdLHjnYPGRZBa9UnNidzbJDL4nC1KKlBVRcigD W98Cem8VNxDOsSEEDND707sT6AXRps73GNRBGhY35Dn0GiCzLBK2lx7TZGToPuvM jxcltwbM1iXN2hF+012nWJU+GgTLIGRioMNPEwIKuty0TSqO7XShjs9vktr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULpvkGoT+pIY7YR9aHbCGEFhGwmEwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3vOqH6rt2jxiZal18ho1xi2GDmV+420Rhn kYOsncpvFNpKpdKwOC6cu5ksLb1HSwIa8+aky9z6Y7zUZallsmNpHD7km71GXsxT tCbPowvlIcMRiyhv4KyDMgVTJQDKwX/PjxVrVOOyP4hqeU4CR9tCVmUTKnolfhmC agO+ER2gBmMCNJ8t03T3h2KkuMGITvc0HL5Gws/qBdNrQy41x6dIYvTU9G7ZYY8A mBruD/ztNdHmgcTnImQEmbaa4ed17d4HIkgC2VR2BGreEQxtW7S6BZ/MFJ/RmKAQ qLYXeejE11httiDKabr8/kp1qhltKgIv7mMtra/cIAjT1RF5Rqo= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:53 2025 by rpki-client