$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: CcUBHVpFarBZ4xI0dpkbvlgAcM0GagzfLxIeC5zIs0Q= Subject key identifier: 58:F2:4E:3E:8E:F0:18:5D:76:E3:48:FD:5E:61:5E:81:16:4E:C7:A8 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 7DE788D094B43AE43F7406837EA397D80482FFD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 02F1 Signing time: Thu 08 May 2025 22:12:11 +0000 Manifest this update: Thu 08 May 2025 22:07:11 +0000 Manifest next update: Mon 12 May 2025 09:04:11 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: fwyJa5mhG/p5zrm7WsD823rq8IWOTIX6aI5FYC++s0M=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=) 3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: RbG2CgIZnq4BBu050a7HkXF1WAl2rjyBtlD7T8tDWFA=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: /o6tmQkGvPsOq4Lw5BPVkwo19QVwkW2zkWmc/uGp+xM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:88:d0:94:b4:3a:e4:3f:74:06:83:7e:a3:97:d8:04:82:ff:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: May 8 22:07:11 2025 GMT Not After : May 12 09:04:11 2025 GMT Subject: CN=58F24E3E8EF0185D76E348FD5E615E81164EC7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:c2:d0:dd:8b:eb:db:f0:bd:ec:35:dc:c8: 0b:24:b2:e1:f8:da:5a:13:dd:6a:1e:66:b9:b3:f7: 7a:77:2d:38:9a:6a:5a:a8:f5:41:f3:e5:8d:bc:1a: c1:28:6b:3c:fc:03:fa:68:3d:72:03:29:06:b3:d6: 7d:da:ce:08:65:fb:d6:0e:cf:5a:35:d5:ce:89:28: f3:e0:d5:1c:7f:a5:22:bf:07:a8:00:c4:e8:ee:60: 0a:c2:17:22:b9:61:04:46:6a:7d:d7:2b:8f:5e:ea: 44:ec:d1:cc:1f:49:5a:1e:f5:ed:79:2b:b5:69:f4: 3e:03:2d:55:4d:36:8f:69:5b:59:70:07:08:2d:68: b3:31:86:32:ad:21:46:26:d2:ef:91:91:f4:4a:8c: e3:d8:80:39:45:34:23:64:42:21:41:fd:35:4f:2d: 33:6d:8a:cd:b5:23:45:33:e8:df:f7:e4:eb:48:9a: 0a:e5:c3:0e:8d:ef:3f:14:3b:c5:c4:08:f3:43:9d: 83:49:cf:42:92:1c:41:12:8e:00:f2:b6:ec:da:c6: 15:e9:6d:1b:e2:06:2b:8c:f8:4c:cf:f8:8c:34:54: 3e:c3:6b:7c:fe:bc:eb:30:b7:cb:a2:f6:ee:47:0c: 17:2a:d7:f1:50:24:41:ba:85:54:e9:af:51:01:5e: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F2:4E:3E:8E:F0:18:5D:76:E3:48:FD:5E:61:5E:81:16:4E:C7:A8 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:c9:98:f7:0f:a6:a7:dd:1a:52:44:d9:7d:74:68:32:2e: 1f:a6:f5:5a:12:29:9e:d0:03:07:a4:4e:f4:76:95:d7:2e:8d: f1:44:39:82:91:aa:17:b7:f2:6b:7c:69:9c:8a:f1:46:d8:a0: 46:0e:c5:66:0d:3d:7c:4f:db:35:21:65:e2:2b:f9:10:4f:b1: a6:9d:1a:2e:e8:95:c1:5c:19:db:ff:85:93:6c:c0:37:be:cb: 1c:89:2b:be:e8:a2:49:80:16:3c:59:d3:a1:a7:6b:0a:49:43: 38:17:50:2c:bc:3c:5c:fa:a1:65:09:22:3e:cb:a8:02:fb:58: 8c:ff:78:9a:92:e5:45:d9:2b:ae:12:de:02:4c:0d:ae:e9:d2: af:d3:33:c9:f3:07:3d:2c:a7:ab:cb:70:e0:11:72:c7:da:0e: 08:48:66:e2:83:d5:89:d7:7c:4f:4b:96:38:a9:52:17:20:a7: ed:30:2e:7e:ca:cf:25:5e:bb:eb:57:44:2e:12:80:d2:d0:72: 49:25:50:e8:58:71:2d:b8:ab:f1:6b:86:42:37:9a:1f:ff:8d: cb:19:24:4a:0f:e1:48:4b:f7:ce:5a:4d:d9:58:10:1b:f3:50: 61:dd:19:f3:9c:07:62:58:32:35:e0:ea:ac:9a:bf:58:63:69: 2f:30:e5:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeeI0JS0OuQ/dAaDfqOX2ASC/9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA1MDgyMjA3MTFaFw0yNTA1MTIwOTA0MTFaMDMxMTAvBgNV BAMTKDU4RjI0RTNFOEVGMDE4NUQ3NkUzNDhGRDVFNjE1RTgxMTY0RUM3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+cLQ3Yvr2/C97DXcyAsksuH4 2loT3WoeZrmz93p3LTiaalqo9UHz5Y28GsEoazz8A/poPXIDKQaz1n3azghl+9YO z1o11c6JKPPg1Rx/pSK/B6gAxOjuYArCFyK5YQRGan3XK49e6kTs0cwfSVoe9e15 K7Vp9D4DLVVNNo9pW1lwBwgtaLMxhjKtIUYm0u+RkfRKjOPYgDlFNCNkQiFB/TVP LTNtis21I0Uz6N/35OtImgrlww6N7z8UO8XECPNDnYNJz0KSHEESjgDytuzaxhXp bRviBiuM+EzP+Iw0VD7Da3z+vOswt8ui9u5HDBcq1/FQJEG6hVTpr1EBXpJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPJOPo7wGF1240j9XmFegRZOx6gwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExzyZj3D6an3RpSRNl9dGgyLh+m9VoSKZ7Q AwekTvR2ldcujfFEOYKRqhe38mt8aZyK8UbYoEYOxWYNPXxP2zUhZeIr+RBPsaad Gi7olcFcGdv/hZNswDe+yxyJK77ookmAFjxZ06GnawpJQzgXUCy8PFz6oWUJIj7L qAL7WIz/eJqS5UXZK64S3gJMDa7p0q/TM8nzBz0sp6vLcOARcsfaDghIZuKD1YnX fE9LljipUhcgp+0wLn7KzyVeu+tXRC4SgNLQckklUOhYcS24q/FrhkI3mh//jcsZ JEoP4UhL985aTdlYEBvzUGHdGfOcB2JYMjXg6qyav1hjaS8w5e4= -----END CERTIFICATE-----Generated at Fri May 9 17:35:31 2025 by rpki-client