$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: QO+cmvdVGz7qoeSZENJQ3sjh2GagRxlnFVX7XbhZI0k= Subject key identifier: 7D:89:16:E7:A9:6E:B1:48:D0:B1:97:A0:20:17:D8:5C:CA:D8:38:6C Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 2A6E8EDD09F28088B59EDCA97CE445D1C5338724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: C5 Signing time: Tue 17 Jun 2025 01:01:36 +0000 Manifest this update: Tue 17 Jun 2025 00:56:36 +0000 Manifest next update: Fri 20 Jun 2025 11:07:36 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: dT005a+9t9VpsXqdcwSl2vzQXDaEdeSLa0VuXGa8IVI=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6e:8e:dd:09:f2:80:88:b5:9e:dc:a9:7c:e4:45:d1:c5:33:87:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Jun 17 00:56:36 2025 GMT Not After : Jun 20 11:07:36 2025 GMT Subject: CN=7D8916E7A96EB148D0B197A02017D85CCAD8386C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:7d:02:f9:0c:98:f1:b5:2b:d1:79:08:a1: f4:e2:b6:11:e6:f9:0c:98:dd:13:a2:6e:e5:3d:4a: 0d:05:ec:41:fd:1e:1c:8a:2c:df:dc:f9:a1:ae:21: 49:65:5a:ff:13:15:54:7d:fb:7b:4d:30:50:a5:9e: 02:04:6b:e9:6b:da:6c:64:c3:96:01:f5:d6:b2:4f: 8e:81:b9:6c:c4:ca:ab:ca:7d:60:08:29:b4:89:55: a2:d7:52:bd:7c:64:9b:7a:2d:05:2d:17:d9:c6:ec: 37:79:45:4a:b3:a9:61:33:a9:f3:b0:67:91:4f:8b: 11:36:99:73:a7:4f:c4:63:ca:b5:b2:81:54:49:a9: 30:11:c0:30:94:cd:38:5b:c0:64:53:85:1f:58:9f: 6b:0b:66:7a:3d:2a:aa:a6:12:9c:9f:62:d0:6d:31: ef:cb:ef:29:24:58:76:20:bd:e9:78:36:b8:00:fd: 61:5d:5a:d5:a1:89:64:96:d1:13:cc:58:ee:49:f8: c3:a2:37:bc:43:cd:f8:49:5d:66:7d:cd:f3:a8:f6: bc:74:de:9d:84:e4:6e:5b:03:24:cb:36:97:72:00: 18:4b:18:5f:ce:5c:c2:b3:d4:5b:f6:36:50:23:19: 6a:59:c8:61:7a:a6:39:56:9a:f7:2c:75:c7:be:2a: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:16:E7:A9:6E:B1:48:D0:B1:97:A0:20:17:D8:5C:CA:D8:38:6C X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1c:99:d1:16:f7:09:e4:65:a4:e9:4e:57:4a:3e:63:e1:fa: 66:a9:27:11:0a:d3:e6:01:d5:e3:eb:01:d0:af:bf:d1:ea:61: ab:91:0e:5f:87:ba:02:a9:44:fa:c3:cc:d8:11:29:0f:6e:8c: b2:33:99:fe:6e:e4:30:94:2f:40:39:bb:9e:fd:00:de:1e:b4: 1a:8c:d2:79:d8:42:78:3c:a0:f2:cb:26:44:25:8a:8e:1e:84: 2d:4a:4f:ef:43:38:f5:7b:f5:02:bb:e1:52:09:32:44:eb:e8: 8b:72:f9:05:5a:d0:94:09:a4:be:9a:bb:76:d7:e1:0e:20:58: e7:74:e3:04:8d:f4:aa:0f:e2:cb:60:0d:d6:41:c5:f6:ca:67: 80:75:d7:29:f1:57:4c:f0:47:79:dc:b1:6d:78:7e:11:1f:33: 2f:25:7f:d6:1a:87:8b:d5:5c:96:bd:e5:50:c8:95:cc:4d:a1: 44:8f:ca:86:2c:cd:f6:8f:b3:52:46:54:e7:a7:f1:f2:91:ce: bc:d6:d3:a4:7a:5a:a1:d3:a0:08:f2:c7:1d:fe:b6:f9:23:8b: ab:06:fb:af:39:a4:74:12:01:5c:22:d1:b8:16:20:13:e7:61: 43:91:89:cc:59:3e:ca:aa:19:bf:9b:0b:52:85:9d:36:47:0f: ea:f8:56:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKm6O3QnygIi1ntypfORF0cUzhyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA2MTcwMDU2MzZaFw0yNTA2MjAxMTA3MzZaMDMxMTAvBgNV BAMTKDdEODkxNkU3QTk2RUIxNDhEMEIxOTdBMDIwMTdEODVDQ0FEODM4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFs30C+QyY8bUr0XkIofTithHm +QyY3ROibuU9Sg0F7EH9HhyKLN/c+aGuIUllWv8TFVR9+3tNMFClngIEa+lr2mxk w5YB9dayT46BuWzEyqvKfWAIKbSJVaLXUr18ZJt6LQUtF9nG7Dd5RUqzqWEzqfOw Z5FPixE2mXOnT8RjyrWygVRJqTARwDCUzThbwGRThR9Yn2sLZno9KqqmEpyfYtBt Me/L7ykkWHYgvel4NrgA/WFdWtWhiWSW0RPMWO5J+MOiN7xDzfhJXWZ9zfOo9rx0 3p2E5G5bAyTLNpdyABhLGF/OXMKz1Fv2NlAjGWpZyGF6pjlWmvcsdce+Kr1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYkW56lusUjQsZegIBfYXMrYOGwwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4cmdEW9wnkZaTpTldKPmPh+mapJxEK0+YB 1ePrAdCvv9HqYauRDl+HugKpRPrDzNgRKQ9ujLIzmf5u5DCUL0A5u579AN4etBqM 0nnYQng8oPLLJkQlio4ehC1KT+9DOPV79QK74VIJMkTr6Ity+QVa0JQJpL6au3bX 4Q4gWOd04wSN9KoP4stgDdZBxfbKZ4B11ynxV0zwR3ncsW14fhEfMy8lf9Yah4vV XJa95VDIlcxNoUSPyoYszfaPs1JGVOen8fKRzrzW06R6WqHToAjyxx3+tvkji6sG +685pHQSAVwi0bgWIBPnYUORicxZPsqqGb+bC1KFnTZHD+r4Voo= -----END CERTIFICATE-----Generated at Wed Jun 18 13:18:49 2025 by rpki-client