$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: wYI0P+f/zyvkam7yzi/s3SZ37mwl7gIkUKnEwDqQsMY= Subject key identifier: 84:13:D0:8C:B9:FC:D4:69:0D:A0:7C:94:52:83:46:5C:4F:B9:54:14 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 3E4BD2518F1F47DC93D385932B541C7703993F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0308 Signing time: Sun 29 Jun 2025 05:52:07 +0000 Manifest this update: Sun 29 Jun 2025 05:47:07 +0000 Manifest next update: Wed 02 Jul 2025 06:50:07 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: fwyJa5mhG/p5zrm7WsD823rq8IWOTIX6aI5FYC++s0M=) 3: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=) 4: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: Ar8c8Y1K2myFn6FhQTTI+stzGuS+FxrW7OqZUM50cSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4b:d2:51:8f:1f:47:dc:93:d3:85:93:2b:54:1c:77:03:99:3f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jun 29 05:47:07 2025 GMT Not After : Jul 2 06:50:07 2025 GMT Subject: CN=8413D08CB9FCD4690DA07C945283465C4FB95414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:41:b3:74:1f:50:c5:b5:73:90:9f:c6:59: 9e:cf:78:60:f9:33:7e:cf:6c:95:54:f7:a8:98:8a: 36:dd:1c:4b:16:94:c7:11:26:31:cd:e5:dc:73:c1: ec:8f:95:fa:c4:f7:59:76:10:17:2c:21:d8:4f:af: 68:49:03:a9:6c:c0:35:1c:f4:5e:5d:66:00:10:5c: 6f:48:d6:30:d6:85:c8:b0:1b:6b:53:b5:48:76:88: c9:1f:c3:c5:f2:58:53:b8:da:3e:77:d2:b6:b4:b8: 26:e9:6c:e8:d1:22:c3:e8:31:6e:4c:87:92:43:af: a6:ee:7d:51:b7:e7:b6:82:b3:a3:c1:ce:86:53:d7: 85:21:26:e4:1b:4b:8a:6c:91:1e:19:9c:2a:b8:2b: f1:92:df:5a:6a:70:65:a3:a1:74:8e:10:e0:7e:49: 8b:89:c5:d9:ad:1f:83:13:7c:e4:b4:a3:a2:65:c9: 4a:a1:64:ea:95:9a:43:0e:35:27:61:1b:29:30:ef: 1c:ea:62:52:d0:50:17:0c:3e:76:39:b1:42:d2:43: 0c:cb:02:38:fd:a5:05:c5:82:4d:40:85:7c:92:7b: 1c:27:30:52:b4:8a:e6:7a:2e:54:b8:ea:32:fe:a3: d2:9c:e0:21:de:ab:ae:bb:c8:bf:d4:c4:da:13:86: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:13:D0:8C:B9:FC:D4:69:0D:A0:7C:94:52:83:46:5C:4F:B9:54:14 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:66:d1:69:4c:1b:32:62:77:04:bf:72:e4:9a:07:a1:85:00: 61:b0:4c:2e:82:ae:db:62:05:c3:e9:6f:65:ec:04:71:40:6d: 83:55:28:ff:51:ba:4f:13:7a:6e:be:a0:1c:96:ad:d3:19:18: b0:1b:dd:19:aa:65:18:de:1a:e5:28:a7:05:78:ae:f0:bf:82: f2:d2:98:bc:fb:2a:54:eb:76:28:07:e4:ba:40:20:a4:23:e6: ec:3f:c8:58:95:51:09:0f:0a:c1:e3:83:1d:7f:eb:d7:eb:8b: 40:a5:a0:1f:4b:2b:2f:23:17:eb:72:ed:ea:19:2c:a5:07:59: 3b:bc:b6:df:34:ef:76:93:a1:b2:a5:5d:00:29:9a:70:fa:f4: 70:41:2f:33:c5:17:78:24:66:1a:97:7b:21:40:9f:e9:d3:78: ea:f3:c2:58:fc:af:04:6e:16:2e:1f:05:b9:25:d2:82:e7:cb: cc:d7:9b:af:c8:98:2f:cc:4b:12:a5:32:1f:54:99:ea:86:7e: 42:c0:25:f1:1c:b7:17:78:e1:69:96:dc:ca:10:7a:cd:b7:4a: e3:e3:96:b3:10:ea:df:d0:ed:e0:3a:ba:38:f0:ba:9b:b8:7c: c1:d0:2d:1f:e8:87:1d:fd:1b:c5:bf:d0:8a:05:80:c2:e5:51: 91:1e:cf:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkvSUY8fR9yT04WTK1QcdwOZPzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA2MjkwNTQ3MDdaFw0yNTA3MDIwNjUwMDdaMDMxMTAvBgNV BAMTKDg0MTNEMDhDQjlGQ0Q0NjkwREEwN0M5NDUyODM0NjVDNEZCOTU0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWpEGzdB9QxbVzkJ/GWZ7PeGD5 M37PbJVU96iYijbdHEsWlMcRJjHN5dxzweyPlfrE91l2EBcsIdhPr2hJA6lswDUc 9F5dZgAQXG9I1jDWhciwG2tTtUh2iMkfw8XyWFO42j530ra0uCbpbOjRIsPoMW5M h5JDr6bufVG357aCs6PBzoZT14UhJuQbS4pskR4ZnCq4K/GS31pqcGWjoXSOEOB+ SYuJxdmtH4MTfOS0o6JlyUqhZOqVmkMONSdhGykw7xzqYlLQUBcMPnY5sULSQwzL Ajj9pQXFgk1AhXySexwnMFK0iuZ6LlS46jL+o9Kc4CHeq667yL/UxNoThqcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBPQjLn81GkNoHyUUoNGXE+5VBQwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtm0WlMGzJidwS/cuSaB6GFAGGwTC6Crtti BcPpb2XsBHFAbYNVKP9Ruk8Tem6+oByWrdMZGLAb3RmqZRjeGuUopwV4rvC/gvLS mLz7KlTrdigH5LpAIKQj5uw/yFiVUQkPCsHjgx1/69fri0CloB9LKy8jF+ty7eoZ LKUHWTu8tt8073aTobKlXQApmnD69HBBLzPFF3gkZhqXeyFAn+nTeOrzwlj8rwRu Fi4fBbkl0oLny8zXm6/ImC/MSxKlMh9UmeqGfkLAJfEctxd44WmW3MoQes23SuPj lrMQ6t/Q7eA6ujjwupu4fMHQLR/ohx39G8W/0IoFgMLlUZEez3c= -----END CERTIFICATE-----Generated at Sun Jun 29 19:56:24 2025 by rpki-client