$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: OmxARyzcoyvSd2Spbcuftgq19QFtYzm9fXOvCO7OiCY= Subject key identifier: B3:A7:EE:56:F5:EA:42:16:89:F1:2A:1A:89:13:4E:DA:73:CA:4F:B1 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 6928B44A84E71D875A3063CEE3AD78B292929DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04B1 Signing time: Wed 02 Jul 2025 10:30:47 +0000 Manifest this update: Wed 02 Jul 2025 10:25:47 +0000 Manifest next update: Sat 05 Jul 2025 16:37:47 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: mE4j7gpBCxYCzmtebP+W7JvzIm1JCi0eQIsNW6AvGWY=) 2: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: muMEUhzqqugv6Zj6iFpUQ9PcnrfD7MobXuiftjt5U7I=) 3: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: DdZpuOwsx53WNTCLRbgD6Fydqc9gEzVYtRDiDjHWAXM=) 4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: oMeLoSJYkTTS27i9zqAo4l29kftt3eMvJ5Fk3r50iQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:28:b4:4a:84:e7:1d:87:5a:30:63:ce:e3:ad:78:b2:92:92:9d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Jul 2 10:25:47 2025 GMT Not After : Jul 5 16:37:47 2025 GMT Subject: CN=B3A7EE56F5EA421689F12A1A89134EDA73CA4FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:17:d7:c4:ad:f4:17:6d:66:a2:0f:17:88: d0:1f:95:ca:9b:12:1a:0c:06:ef:fb:a1:f1:e5:22: f7:a4:a0:7e:b9:f0:67:89:96:af:8a:7d:c0:2b:75: 92:31:ba:38:02:91:28:65:f4:b4:ea:c5:f2:f2:78: fa:2c:9b:90:e7:2f:a2:3f:5f:ea:bc:a6:31:ab:fb: 46:04:e0:60:ef:51:1a:9c:d4:cf:b4:47:c7:59:28: a3:2d:2a:5a:ae:df:09:49:97:6b:94:5e:55:14:cc: 11:98:1e:5c:5f:1e:ed:d9:0f:c1:bc:be:68:ae:2c: e9:47:12:31:9b:2d:23:27:3a:c7:38:61:db:ac:e7: af:8b:a7:f9:84:38:63:5c:4f:3c:35:f0:2d:61:c2: 37:6c:b1:c8:97:e0:7a:46:10:a4:f1:0e:6c:10:7c: 54:b0:3f:d5:75:52:85:fa:00:c5:bf:75:2c:bb:19: 42:a8:f4:68:df:d6:e6:b5:aa:dd:d9:76:91:a5:91: ed:7e:8d:66:10:1a:d4:89:1c:94:2b:d1:17:da:a7: 35:5b:aa:95:fb:8e:2d:21:1e:18:40:8e:61:a3:5c: 0d:56:76:f6:38:73:ee:e0:38:9a:c7:1e:b1:78:20: 25:f4:b2:c9:70:8d:d7:a2:32:21:fa:ec:72:8f:58: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:EE:56:F5:EA:42:16:89:F1:2A:1A:89:13:4E:DA:73:CA:4F:B1 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d3:cb:01:28:be:d3:15:94:5c:a2:e9:30:59:24:4f:8e:c6: d2:c1:20:a8:8f:bc:64:dd:b5:b4:a3:ca:4f:d5:f9:2b:d2:4c: 6d:6c:4d:f8:c1:a1:95:e4:d9:ff:ba:5d:d3:83:7a:6b:c4:6f: 38:77:77:b0:20:9f:77:96:2a:c3:3c:f9:83:61:dc:da:4b:ff: e8:11:47:43:cf:e8:06:04:f4:be:2b:f2:fe:5b:d5:70:8a:c3: d6:cd:9b:79:69:24:87:70:23:bd:9e:59:b8:82:10:f3:8f:b1: 5b:9a:86:ae:df:2e:70:78:d6:b7:42:a2:8b:36:b5:46:36:83: b1:6c:c0:b2:fc:11:d7:b0:13:87:86:76:a7:15:e9:13:c0:bd: 40:53:4c:ba:21:78:e1:1a:1e:41:50:04:e2:48:63:c2:3a:c7: c5:8d:dd:61:91:8d:e0:c5:7c:ba:69:d5:a2:0e:79:bf:a3:23: 84:8c:83:34:6a:79:2b:29:a8:ae:0e:66:89:c6:cc:77:ba:e9: f0:b6:55:4c:cb:f1:79:f7:23:f0:49:44:7e:30:e7:85:11:b3: 11:c4:82:aa:ac:11:22:bf:fb:96:34:00:22:ed:6d:f5:ea:84: ec:86:34:36:e2:55:ed:04:a6:b9:e4:7d:d8:71:1e:4c:ff:08: 42:0c:c6:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSi0SoTnHYdaMGPO4614spKSnccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTA3MDIxMDI1NDdaFw0yNTA3MDUxNjM3NDdaMDMxMTAvBgNV BAMTKEIzQTdFRTU2RjVFQTQyMTY4OUYxMkExQTg5MTM0RURBNzNDQTRGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7hfXxK30F21mog8XiNAflcqb EhoMBu/7ofHlIvekoH658GeJlq+KfcArdZIxujgCkShl9LTqxfLyePosm5DnL6I/ X+q8pjGr+0YE4GDvURqc1M+0R8dZKKMtKlqu3wlJl2uUXlUUzBGYHlxfHu3ZD8G8 vmiuLOlHEjGbLSMnOsc4Ydus56+Lp/mEOGNcTzw18C1hwjdssciX4HpGEKTxDmwQ fFSwP9V1UoX6AMW/dSy7GUKo9Gjf1ua1qt3ZdpGlke1+jWYQGtSJHJQr0RfapzVb qpX7ji0hHhhAjmGjXA1WdvY4c+7gOJrHHrF4ICX0sslwjdeiMiH67HKPWC+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6fuVvXqQhaJ8SoaiRNO2nPKT7EwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7TywEovtMVlFyi6TBZJE+OxtLBIKiPvGTd tbSjyk/V+SvSTG1sTfjBoZXk2f+6XdODemvEbzh3d7Agn3eWKsM8+YNh3NpL/+gR R0PP6AYE9L4r8v5b1XCKw9bNm3lpJIdwI72eWbiCEPOPsVuahq7fLnB41rdCoos2 tUY2g7FswLL8EdewE4eGdqcV6RPAvUBTTLoheOEaHkFQBOJIY8I6x8WN3WGRjeDF fLpp1aIOeb+jI4SMgzRqeSspqK4OZonGzHe66fC2VUzL8Xn3I/BJRH4w54URsxHE gqqsESK/+5Y0ACLtbfXqhOyGNDbiVe0EprnkfdhxHkz/CEIMxrI= -----END CERTIFICATE-----Generated at Thu Jul 3 06:48:28 2025 by rpki-client