$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: 9wMd5gWdYIvdAfSUuSz+dit8OyG1gvu6lzmUmuFPsoo= Subject key identifier: 11:64:4A:FD:44:B1:BF:24:BF:70:2C:BF:2E:63:91:CB:03:FB:64:35 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 52250F99DE00E502F79B1BA49983E63CD2B25354 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 027F Signing time: Wed 07 May 2025 12:31:33 +0000 Manifest this update: Wed 07 May 2025 12:26:33 +0000 Manifest next update: Sat 10 May 2025 20:55:33 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 2: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 3: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) 4: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 5: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: bU3bmDG6EviS5AAxok1BPYMYClcnnB99g1fkzfTSIX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:25:0f:99:de:00:e5:02:f7:9b:1b:a4:99:83:e6:3c:d2:b2:53:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: May 7 12:26:33 2025 GMT Not After : May 10 20:55:33 2025 GMT Subject: CN=11644AFD44B1BF24BF702CBF2E6391CB03FB6435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:d8:bf:06:94:79:9c:45:02:9a:fd:71:0f: e0:fa:43:c9:f0:c2:e0:cb:20:c0:13:be:0b:bb:8a: 66:63:de:8a:4d:56:99:49:18:cb:47:ac:6f:78:e7: 73:f2:8b:5a:1a:4c:f3:19:d8:81:ed:05:ff:9f:e6: 28:b8:6c:6f:9f:e3:95:61:5b:1d:56:8d:c7:45:36: ba:ee:52:08:28:7c:7a:0e:b7:20:aa:0e:17:d9:45: a4:b4:4b:7d:63:b4:c9:fb:da:e7:61:13:3e:e1:7f: 60:78:1f:3f:fc:55:48:82:55:09:63:6b:a9:83:9e: 2a:2f:21:e5:15:1f:b6:98:d3:fe:34:33:61:d5:52: f7:78:5e:3e:c6:4a:d6:0d:e8:16:eb:e4:32:31:d7: 70:f6:07:a3:86:83:86:ca:4a:a3:c2:e6:6e:63:fa: f5:18:97:fb:e6:34:dc:7f:dc:06:d1:24:50:db:c2: f5:88:d8:c2:ba:1d:b7:1c:ef:9d:d9:e1:8c:c2:08: 27:b1:11:90:cf:67:90:9c:ad:6a:4d:ef:a0:0e:93: 0d:cf:6d:ac:ca:13:77:7e:32:21:18:71:35:4f:4d: f0:85:ac:1c:3d:b7:29:9e:db:3b:91:0d:7a:5e:a1: 1b:98:ee:6e:cf:94:00:5f:82:79:d9:15:6d:f8:f8: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:4A:FD:44:B1:BF:24:BF:70:2C:BF:2E:63:91:CB:03:FB:64:35 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:08:d7:ef:98:e7:fe:7a:96:e8:4e:08:cf:d7:4e:90:73: da:d7:0d:b8:0a:66:26:f8:17:e6:1f:31:0b:eb:b0:37:8b:dd: 62:29:22:52:cc:04:26:97:d5:3c:93:86:f1:29:e4:1b:ec:2a: 30:03:a9:e0:58:22:19:93:11:d0:1a:c5:ae:07:d0:88:1b:fc: ad:6a:00:29:95:2a:ce:ce:1d:c5:ff:29:fc:91:e3:9f:da:db: 97:e8:13:e1:73:6b:51:8c:92:38:0e:2d:be:6c:bd:e3:34:17: fe:47:e1:81:ed:4e:58:1f:c3:df:f5:21:db:53:2f:55:e9:3e: 2e:e7:dd:1a:9a:44:f4:f7:41:c2:a4:80:9c:bb:fd:b1:68:3e: ca:25:da:2a:75:e1:83:fe:36:a8:8f:84:10:d2:fc:65:c5:fe: f1:0b:1d:d9:82:f9:60:94:83:7f:78:3c:50:27:25:fe:ca:1e: 30:a8:a3:15:c4:61:e6:1b:95:39:10:c3:b4:e5:b1:27:46:63: 02:58:fc:b1:8c:67:c6:e4:e3:06:c7:18:e3:3f:d2:bc:d5:65: d9:45:28:66:99:c7:cf:80:4c:5b:d7:5b:37:00:95:f9:e7:93: 5f:3d:bf:e7:7a:93:2d:0f:8b:3c:9e:a1:5c:62:20:1d:e4:ac: 2a:92:28:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiUPmd4A5QL3mxukmYPmPNKyU1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTA1MDcxMjI2MzNaFw0yNTA1MTAyMDU1MzNaMDMxMTAvBgNV BAMTKDExNjQ0QUZENDRCMUJGMjRCRjcwMkNCRjJFNjM5MUNCMDNGQjY0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6Ni/BpR5nEUCmv1xD+D6Q8nw wuDLIMATvgu7imZj3opNVplJGMtHrG9453Pyi1oaTPMZ2IHtBf+f5ii4bG+f45Vh Wx1WjcdFNrruUggofHoOtyCqDhfZRaS0S31jtMn72udhEz7hf2B4Hz/8VUiCVQlj a6mDniovIeUVH7aY0/40M2HVUvd4Xj7GStYN6Bbr5DIx13D2B6OGg4bKSqPC5m5j +vUYl/vmNNx/3AbRJFDbwvWI2MK6Hbcc753Z4YzCCCexEZDPZ5CcrWpN76AOkw3P bazKE3d+MiEYcTVPTfCFrBw9tyme2zuRDXpeoRuY7m7PlABfgnnZFW34+KkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWRK/USxvyS/cCy/LmORywP7ZDUwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzuCNfvmOf+epboTgjP106Qc9rXDbgKZib4 F+YfMQvrsDeL3WIpIlLMBCaX1TyThvEp5BvsKjADqeBYIhmTEdAaxa4H0Igb/K1q ACmVKs7OHcX/KfyR45/a25foE+Fza1GMkjgOLb5sveM0F/5H4YHtTlgfw9/1IdtT L1XpPi7n3RqaRPT3QcKkgJy7/bFoPsol2ip14YP+NqiPhBDS/GXF/vELHdmC+WCU g394PFAnJf7KHjCooxXEYeYblTkQw7TlsSdGYwJY/LGMZ8bk4wbHGOM/0rzVZdlF KGaZx8+ATFvXWzcAlfnnk189v+d6ky0PizyeoVxiIB3krCqSKBo= -----END CERTIFICATE-----Generated at Thu May 8 11:03:51 2025 by rpki-client