$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: k1HX5yGqnqyoVMToiVDYYHvQAw3V8+0uSATS+4aQOPY= Subject key identifier: 1A:C1:E7:CD:B3:A6:C8:CA:98:E7:4B:80:B2:26:28:07:F9:7E:DD:C2 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 42F643B675E9F179DB6BBA64A4D01DA2144ED8BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 0479 Signing time: Sat 28 Jun 2025 22:00:52 +0000 Manifest this update: Sat 28 Jun 2025 21:55:52 +0000 Manifest next update: Wed 02 Jul 2025 04:11:52 +0000 Files and hashes: 1: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 2: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) 3: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: ZyX7FKGsAeBMH/Hs2UAjHvmdZW6rM0diR16I2JQtUe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f6:43:b6:75:e9:f1:79:db:6b:ba:64:a4:d0:1d:a2:14:4e:d8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Jun 28 21:55:52 2025 GMT Not After : Jul 2 04:11:52 2025 GMT Subject: CN=1AC1E7CDB3A6C8CA98E74B80B2262807F97EDDC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:57:43:42:c6:bf:27:37:9c:64:f1:73:81: be:72:27:20:c5:80:a9:9a:9e:b3:ed:12:1c:84:b4: 77:7d:9e:1e:a4:ff:d8:cb:71:8b:57:75:9d:b5:fd: 0e:14:28:cc:d7:66:71:3b:02:2d:c6:f3:7b:48:d9: 06:09:6c:ba:a4:bd:70:b7:e3:ea:89:74:9e:53:10: 19:a9:e2:49:8b:22:d0:c2:a0:3e:a8:25:fe:a5:bc: a0:27:80:c1:71:e0:bf:19:3c:61:8c:66:d2:35:91: 8d:fa:9a:98:07:e3:a2:41:3b:7e:94:b4:21:a6:cf: 4b:39:ba:74:fc:87:48:43:b5:53:c7:05:97:fa:e2: 23:77:03:f3:16:bf:99:1d:26:18:bd:e5:b4:c1:ca: b1:37:03:a0:92:a4:a8:60:fe:7a:45:90:20:d1:18: 19:73:53:d4:fa:82:0b:06:7d:9b:c9:e0:9a:7e:e1: fe:49:a4:ee:3d:05:c5:33:a9:58:2a:cd:96:2b:f8: a1:56:a4:58:2c:8a:e8:a5:69:9a:10:7d:e0:03:88: fb:3b:ba:2a:41:fa:3b:09:d8:f4:41:7c:ef:3c:9e: 8c:a8:b7:59:c8:8f:33:00:a1:5b:9c:e1:f1:5e:2e: 37:64:58:ae:e9:58:0f:9a:5a:63:d4:2b:77:d3:eb: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C1:E7:CD:B3:A6:C8:CA:98:E7:4B:80:B2:26:28:07:F9:7E:DD:C2 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:55:82:26:87:92:88:74:c7:d2:9f:a6:1c:54:69:dd:a6:44: a3:4a:e2:84:88:e1:a6:52:25:c7:9c:9e:e5:6e:07:18:8c:bf: a8:42:7b:3e:bd:7a:a3:fb:88:8b:62:73:a1:c7:43:81:55:86: e0:a4:9e:a3:18:62:8a:d2:cb:bf:c3:69:07:c5:36:4d:91:44: 76:09:79:a3:3b:32:16:77:74:c7:8b:21:e5:58:cc:78:c0:b2: 73:7a:9b:84:68:ab:57:5e:b6:db:48:81:24:10:72:99:fc:5f: 0f:32:3a:67:15:09:01:46:eb:10:ac:e6:43:8d:a3:bf:4c:f6: b1:2b:3a:bd:4c:33:c6:0f:5a:75:75:ed:1b:dd:b0:8b:08:7d: 68:25:79:3a:3a:39:13:6b:03:44:34:90:bd:6f:5e:9c:4c:d0: e7:b5:71:22:e4:20:94:50:8e:aa:67:68:21:d3:d6:e5:7d:1c: a0:b4:98:03:49:cf:26:16:0d:b7:b2:ac:96:d3:fa:7c:59:6f: 9a:43:ff:52:f7:18:c6:b4:10:d9:ed:1b:7b:91:52:4a:95:e7: 7e:26:4b:04:32:ff:68:47:49:4f:30:53:fb:e5:5d:36:b8:2b: cd:c8:cb:97:80:b1:a6:f1:56:b4:0e:4d:19:85:ce:4b:66:a6: 3d:0c:21:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvZDtnXp8Xnba7pkpNAdohRO2LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTA2MjgyMTU1NTJaFw0yNTA3MDIwNDExNTJaMDMxMTAvBgNV BAMTKDFBQzFFN0NEQjNBNkM4Q0E5OEU3NEI4MEIyMjYyODA3Rjk3RUREQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqVdDQsa/JzecZPFzgb5yJyDF gKmanrPtEhyEtHd9nh6k/9jLcYtXdZ21/Q4UKMzXZnE7Ai3G83tI2QYJbLqkvXC3 4+qJdJ5TEBmp4kmLItDCoD6oJf6lvKAngMFx4L8ZPGGMZtI1kY36mpgH46JBO36U tCGmz0s5unT8h0hDtVPHBZf64iN3A/MWv5kdJhi95bTByrE3A6CSpKhg/npFkCDR GBlzU9T6ggsGfZvJ4Jp+4f5JpO49BcUzqVgqzZYr+KFWpFgsiuilaZoQfeADiPs7 uipB+jsJ2PRBfO88noyot1nIjzMAoVuc4fFeLjdkWK7pWA+aWmPUK3fT6+TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsHnzbOmyMqY50uAsiYoB/l+3cIwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANJVgiaHkoh0x9KfphxUad2mRKNK4oSI4aZS JcecnuVuBxiMv6hCez69eqP7iItic6HHQ4FVhuCknqMYYorSy7/DaQfFNk2RRHYJ eaM7MhZ3dMeLIeVYzHjAsnN6m4Roq1detttIgSQQcpn8Xw8yOmcVCQFG6xCs5kON o79M9rErOr1MM8YPWnV17RvdsIsIfWgleTo6ORNrA0Q0kL1vXpxM0Oe1cSLkIJRQ jqpnaCHT1uV9HKC0mANJzyYWDbeyrJbT+nxZb5pD/1L3GMa0ENntG3uRUkqV534m SwQy/2hHSU8wU/vlXTa4K83Iy5eAsabxVrQOTRmFzktmpj0MIco= -----END CERTIFICATE-----Generated at Sun Jun 29 19:10:48 2025 by rpki-client