$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: AM5PXub1Lqd/V/LoEZxvTOFg4dJJ3/xvRiznSkg3ZWY= Subject key identifier: 8F:A4:82:8D:D8:17:1B:68:33:99:16:80:33:AD:AC:2A:34:78:74:25 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 1A81F68698724BE29D09AC6BB7E72D0A88775F0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0498 Signing time: Wed 07 May 2025 13:30:48 +0000 Manifest this update: Wed 07 May 2025 13:25:48 +0000 Manifest next update: Sat 10 May 2025 20:53:48 +0000 Files and hashes: 1: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: ZJMOdKrf0UNpFK958HkMzm1f+6CItCXguz5Sr9VZ+7A=) 2: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: oMeLoSJYkTTS27i9zqAo4l29kftt3eMvJ5Fk3r50iQ0=) 3: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: mE4j7gpBCxYCzmtebP+W7JvzIm1JCi0eQIsNW6AvGWY=) 4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: muMEUhzqqugv6Zj6iFpUQ9PcnrfD7MobXuiftjt5U7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:f6:86:98:72:4b:e2:9d:09:ac:6b:b7:e7:2d:0a:88:77:5f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: May 7 13:25:48 2025 GMT Not After : May 10 20:53:48 2025 GMT Subject: CN=8FA4828DD8171B683399168033ADAC2A34787425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:99:77:c1:d9:18:8a:0f:1c:36:0d:d4:fd: 17:d5:96:1a:ec:c1:84:a4:6c:50:09:d9:31:6d:1a: 97:45:81:4d:a7:ed:c3:11:88:66:f0:bb:78:6e:92: 5c:8d:16:f1:3d:44:6f:31:f4:4b:fe:e5:e1:f8:6c: 6e:e2:03:98:44:80:a8:47:01:5b:cb:1d:86:11:3b: 90:70:6f:b7:22:5b:e0:de:f8:34:df:ef:76:d9:eb: b0:ea:b5:ba:17:f4:03:dd:da:36:b4:a1:34:a2:dd: 72:f7:65:e8:d6:92:50:77:50:f9:d7:41:ee:13:28: 11:43:50:d0:ef:3e:24:c8:49:bb:87:47:5a:be:14: fd:f4:09:08:0a:a4:6c:5f:fa:2e:f1:27:91:b6:a9: 29:12:b4:7e:b0:79:14:f1:60:71:5c:65:f1:05:e6: e5:d0:62:19:cd:13:c8:4c:8e:75:b5:3d:54:b3:a7: 16:45:96:ae:ee:83:3c:7f:14:5e:16:a0:d0:0f:6a: 27:64:1d:f1:09:98:ee:98:56:c8:8a:a6:07:ac:c9: 87:e0:2d:b2:72:f2:4c:ce:2c:4f:56:93:49:b5:1a: a3:19:a9:26:7e:48:bf:45:f6:e9:1e:93:52:2c:b2: f6:9d:c7:c3:27:30:8b:ad:2c:09:d5:c1:0f:ef:c6: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:82:8D:D8:17:1B:68:33:99:16:80:33:AD:AC:2A:34:78:74:25 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0a:03:88:bd:51:44:6b:ab:0b:b7:4b:22:f1:00:8e:4c:a0: 54:c3:ab:41:fd:3e:d6:aa:22:4b:90:03:cb:e2:68:f3:d4:87: db:67:44:a5:58:b8:f2:4c:bc:ec:ab:d5:3e:64:9e:fa:d0:48: c9:0b:3f:e0:98:d0:5f:9e:22:a8:a5:e1:a0:c7:3d:55:f2:67: 67:1a:49:f5:da:25:e4:d3:5a:72:59:3d:04:50:ae:fb:44:41: 17:6f:8b:22:eb:82:28:b2:13:88:87:57:b3:5f:05:10:6e:0d: 2e:df:e4:a0:9c:51:7b:6c:c5:f6:8a:d4:41:d6:2a:ef:44:5d: 52:ab:31:cb:b8:e8:f7:00:c2:95:ab:c0:43:1f:d6:7f:82:69: 8e:70:fd:d4:ff:5b:20:ee:2f:a0:c7:2e:82:5d:0f:71:42:f9: 44:c0:ee:49:d1:0c:82:30:db:31:8d:0f:cd:a7:a5:1e:42:34: a9:41:58:d8:a4:98:bc:a0:d4:9f:8f:1f:d0:5b:de:b6:7d:4a: f4:a6:3f:95:57:69:03:92:8f:c3:25:88:1d:ca:15:4b:e0:f7: d8:e8:7f:71:69:59:12:86:05:62:5c:ce:d2:7c:f8:25:f3:6f: dc:6f:b4:c2:a4:8c:5d:9f:e3:a6:79:3b:ae:e7:c0:7f:41:4a: ea:aa:35:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoH2hphyS+KdCaxrt+ctCoh3XwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTA1MDcxMzI1NDhaFw0yNTA1MTAyMDUzNDhaMDMxMTAvBgNV BAMTKDhGQTQ4MjhERDgxNzFCNjgzMzk5MTY4MDMzQURBQzJBMzQ3ODc0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXpl3wdkYig8cNg3U/RfVlhrs wYSkbFAJ2TFtGpdFgU2n7cMRiGbwu3huklyNFvE9RG8x9Ev+5eH4bG7iA5hEgKhH AVvLHYYRO5Bwb7ciW+De+DTf73bZ67DqtboX9APd2ja0oTSi3XL3ZejWklB3UPnX Qe4TKBFDUNDvPiTISbuHR1q+FP30CQgKpGxf+i7xJ5G2qSkStH6weRTxYHFcZfEF 5uXQYhnNE8hMjnW1PVSzpxZFlq7ugzx/FF4WoNAPaidkHfEJmO6YVsiKpgesyYfg LbJy8kzOLE9Wk0m1GqMZqSZ+SL9F9ukek1Issvadx8MnMIutLAnVwQ/vxmdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj6SCjdgXG2gzmRaAM62sKjR4dCUwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEKA4i9UURrqwu3SyLxAI5MoFTDq0H9Ptaq IkuQA8viaPPUh9tnRKVYuPJMvOyr1T5knvrQSMkLP+CY0F+eIqil4aDHPVXyZ2ca SfXaJeTTWnJZPQRQrvtEQRdviyLrgiiyE4iHV7NfBRBuDS7f5KCcUXtsxfaK1EHW Ku9EXVKrMcu46PcAwpWrwEMf1n+CaY5w/dT/WyDuL6DHLoJdD3FC+UTA7knRDIIw 2zGND82npR5CNKlBWNikmLyg1J+PH9Bb3rZ9SvSmP5VXaQOSj8MliB3KFUvg99jo f3FpWRKGBWJcztJ8+CXzb9xvtMKkjF2f46Z5O67nwH9BSuqqNfY= -----END CERTIFICATE-----Generated at Thu May 8 15:56:12 2025 by rpki-client