$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: 06R/3OKAZi4AlqZhB3+lJDanNNoXrofURrkg8nYhh/8= Subject key identifier: 1A:A5:6B:49:6B:FF:B8:A3:F1:EF:55:A7:03:E8:C8:20:5B:78:B6:ED Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 453A36D8E4CE03809D65751DC92D7E5241361994 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: B5 Signing time: Tue 17 Jun 2025 22:51:55 +0000 Manifest this update: Tue 17 Jun 2025 22:46:55 +0000 Manifest next update: Sat 21 Jun 2025 03:21:55 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: NGzf3N8aYL8PN2n3Rh8NdpJAJBGy9Z9erGDs0nK6yJo=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3a:36:d8:e4:ce:03:80:9d:65:75:1d:c9:2d:7e:52:41:36:19:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Jun 17 22:46:55 2025 GMT Not After : Jun 21 03:21:55 2025 GMT Subject: CN=1AA56B496BFFB8A3F1EF55A703E8C8205B78B6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:e6:93:6b:5b:6d:e2:40:8f:9f:84:49:36: 13:d8:e5:fc:68:d2:7a:b4:3d:42:c9:af:ba:c9:d9: 22:5b:a4:33:31:af:3b:f4:91:7a:b6:34:7e:5d:01: c2:31:f8:ca:5a:9a:b4:2f:7b:8e:22:b9:b1:ba:24: 38:a7:e9:a3:ec:8e:5b:44:e3:02:45:be:a2:eb:d8: 06:c8:37:fb:97:e3:60:52:95:bc:95:c7:24:3a:08: a4:78:81:2d:bf:f8:37:49:b5:14:4a:2f:57:df:ba: f5:bc:c5:e5:d0:2f:1f:ea:fc:b4:dd:cf:39:87:d9: 5e:0e:73:be:17:87:fb:1e:3f:44:51:f7:39:31:2b: ee:e7:bc:6a:4a:87:6d:1f:46:00:ba:50:74:b3:1e: 9a:25:b2:07:05:81:a4:34:b1:ce:f2:5b:a0:08:c6: 3f:10:cf:c1:c4:85:6c:9d:e1:3a:03:45:62:4e:27: d1:d6:08:ac:54:d5:ad:79:e7:07:cc:d2:21:99:cb: f1:c8:cf:12:df:77:28:4d:b8:55:fc:7d:c7:fa:40: 4d:23:e8:a4:03:7c:74:16:fa:0f:cd:32:16:6a:79: d0:97:32:da:1a:15:e7:10:da:8b:44:28:86:65:0d: 94:0c:d1:26:23:d2:5b:e8:5c:33:ae:18:99:b8:d8: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:6B:49:6B:FF:B8:A3:F1:EF:55:A7:03:E8:C8:20:5B:78:B6:ED X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:af:fb:d9:cf:f9:84:07:d5:7b:64:01:7c:14:7d:7d:02:2f: 0e:8e:17:c1:22:76:97:73:04:f3:42:b7:40:89:37:3a:00:1c: b0:28:a2:77:ec:da:7b:6b:1d:07:f2:1c:0b:ab:52:f9:ba:f8: 05:11:61:f0:2a:46:c0:ec:ca:8a:fe:56:e1:84:73:75:5e:d1: 71:49:7e:a5:d9:24:9d:80:04:bb:00:f8:4c:5e:b3:92:b6:41: 7a:87:dc:04:cf:00:8f:8c:12:2d:88:4c:bd:cd:42:ae:38:d3: ba:a2:0a:33:f3:63:2a:ed:8b:6e:5f:e5:c9:19:a3:51:f3:fe: 0f:b5:04:5a:90:68:2b:cf:55:19:91:9f:81:fb:a9:41:8d:14: 67:ff:c0:ed:76:4f:2a:c2:b3:44:49:89:3b:78:09:34:02:5c: af:9f:ee:01:7b:18:5a:bf:e7:75:8d:00:4a:b4:8d:bb:2f:2f: 4d:59:93:10:bb:6b:b3:d6:44:93:e8:46:64:09:03:08:a6:4d: a7:0b:c5:29:da:c9:9e:7c:5d:ed:1f:d9:df:8c:0a:4c:69:45: cb:5c:b6:16:e3:7b:c2:8b:62:f4:60:2e:66:e9:d6:f4:0d:03: 93:c9:62:a9:20:b9:46:83:36:9f:a2:69:a2:ea:ae:3c:14:83: 53:06:25:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTo22OTOA4CdZXUdyS1+UkE2GZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA2MTcyMjQ2NTVaFw0yNTA2MjEwMzIxNTVaMDMxMTAvBgNV BAMTKDFBQTU2QjQ5NkJGRkI4QTNGMUVGNTVBNzAzRThDODIwNUI3OEI2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1+aTa1tt4kCPn4RJNhPY5fxo 0nq0PULJr7rJ2SJbpDMxrzv0kXq2NH5dAcIx+MpamrQve44iubG6JDin6aPsjltE 4wJFvqLr2AbIN/uX42BSlbyVxyQ6CKR4gS2/+DdJtRRKL1ffuvW8xeXQLx/q/LTd zzmH2V4Oc74Xh/seP0RR9zkxK+7nvGpKh20fRgC6UHSzHpolsgcFgaQ0sc7yW6AI xj8Qz8HEhWyd4ToDRWJOJ9HWCKxU1a155wfM0iGZy/HIzxLfdyhNuFX8fcf6QE0j 6KQDfHQW+g/NMhZqedCXMtoaFecQ2otEKIZlDZQM0SYj0lvoXDOuGJm42OvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqVrSWv/uKPx71WnA+jIIFt4tu0wHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGev+9nP+YQH1XtkAXwUfX0CLw6OF8Eidpdz BPNCt0CJNzoAHLAoonfs2ntrHQfyHAurUvm6+AURYfAqRsDsyor+VuGEc3Ve0XFJ fqXZJJ2ABLsA+Exes5K2QXqH3ATPAI+MEi2ITL3NQq4407qiCjPzYyrti25f5ckZ o1Hz/g+1BFqQaCvPVRmRn4H7qUGNFGf/wO12TyrCs0RJiTt4CTQCXK+f7gF7GFq/ 53WNAEq0jbsvL01ZkxC7a7PWRJPoRmQJAwimTacLxSnayZ58Xe0f2d+MCkxpRctc thbje8KLYvRgLmbp1vQNA5PJYqkguUaDNp+iaaLqrjwUg1MGJfU= -----END CERTIFICATE-----Generated at Thu Jun 19 04:38:01 2025 by rpki-client