$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: +SOJFiNwDWg3pCxjshSP/7/T7Dv/iVZHMMXEV0QjRIo= Subject key identifier: 1A:02:0D:7F:89:BB:5D:1E:DA:F0:B3:F4:9D:BB:E5:28:6D:DA:29:31 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 033E647B3411FB0F13828568390B4FC21BCACAA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 16:32:10 +0000 Manifest this update: Sun 29 Jun 2025 16:27:10 +0000 Manifest next update: Thu 03 Jul 2025 02:28:10 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: ug5YJT/ziwdKqIn+lgsRqTxZ5gekhEc70wVi8Tyxw/A=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3e:64:7b:34:11:fb:0f:13:82:85:68:39:0b:4f:c2:1b:ca:ca:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Jun 29 16:27:10 2025 GMT Not After : Jul 3 02:28:10 2025 GMT Subject: CN=1A020D7F89BB5D1EDAF0B3F49DBBE5286DDA2931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:66:2c:a9:32:d1:ab:1e:28:10:ac:95:f8: 36:f8:f9:f8:8f:45:5f:d4:e9:c3:c9:d0:51:07:fa: 0f:75:96:ae:4c:b9:77:1a:9f:23:da:12:5a:98:bd: 51:2e:51:f5:33:65:2f:89:6b:a6:9f:c5:2f:8e:c3: e9:7e:38:73:27:85:91:15:90:5c:54:74:27:19:19: d7:19:27:d8:4a:c5:53:fa:3c:af:53:99:5a:a4:19: c0:00:db:10:9f:98:e8:57:ad:09:e0:68:b1:87:f6: 95:8a:aa:be:33:98:7c:79:17:dc:18:fe:3a:7c:25: e5:81:e7:ec:9e:7a:31:a8:d4:d2:85:85:e2:04:3e: aa:95:6c:f6:9a:77:10:36:a4:8f:40:96:6d:f9:79: d9:01:a4:75:24:d3:bc:d0:b1:53:94:8d:c3:03:f5: 67:38:56:1b:5d:59:30:ef:0c:7c:c4:19:4d:f0:2e: 7c:d1:5b:9a:f0:05:76:ec:55:cb:0e:fc:0a:9f:87: 22:05:0c:ce:51:2b:63:b7:89:be:4f:4d:6b:3f:36: ac:e1:27:7e:43:e6:4d:c8:83:91:08:34:7a:12:e1: 01:a5:0a:64:59:be:95:d9:6c:46:a9:42:24:24:08: ac:24:11:23:07:4e:d0:9d:4a:5b:ac:e5:99:71:31: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:02:0D:7F:89:BB:5D:1E:DA:F0:B3:F4:9D:BB:E5:28:6D:DA:29:31 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ea:a6:7d:a7:bd:32:f5:6b:08:b2:b3:d2:97:1d:46:4a:31: 8a:4e:4d:16:ca:5d:92:59:30:9c:f1:8d:dc:c5:42:84:b5:88: 82:b7:8d:79:5c:2c:20:a8:2b:17:3d:33:d9:11:74:65:7d:b2: a4:ba:57:a4:0d:72:14:3c:e5:f2:ba:ec:37:8a:e2:8a:5a:34: d4:5b:4a:6d:43:93:71:f8:e8:e7:f7:5b:96:2b:d9:47:1f:88: 69:e7:cb:50:f0:ee:22:0e:6c:52:95:b3:5b:7d:d8:12:95:e1: e7:d6:44:ac:5c:1f:62:02:f1:c6:3b:e4:15:fe:4f:c3:55:20: cb:70:63:c9:67:6a:c9:46:01:5e:83:1b:48:a1:42:19:8a:26: 66:51:0c:3d:c2:ea:09:e6:f8:17:a6:3f:65:f1:00:2f:8f:57: 00:d4:1a:d8:61:c2:26:63:42:67:aa:3b:18:a0:4c:1b:b2:f3: b1:66:23:0f:6d:f3:fb:2d:da:dd:39:0e:44:de:0b:3c:1d:97: e9:59:a6:e0:72:11:cc:4f:0c:e8:12:cd:11:4a:0c:4b:17:27: a5:4c:06:b5:e2:66:1a:cc:0e:a5:2c:8b:4d:1d:8b:8c:57:4e: 33:f4:98:de:83:b1:54:e6:f1:2b:2b:8d:cc:2f:3b:54:52:aa: fd:de:5b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAz5kezQR+w8TgoVoOQtPwhvKyqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA2MjkxNjI3MTBaFw0yNTA3MDMwMjI4MTBaMDMxMTAvBgNV BAMTKDFBMDIwRDdGODlCQjVEMUVEQUYwQjNGNDlEQkJFNTI4NkREQTI5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuw2YsqTLRqx4oEKyV+Db4+fiP RV/U6cPJ0FEH+g91lq5MuXcanyPaElqYvVEuUfUzZS+Ja6afxS+Ow+l+OHMnhZEV kFxUdCcZGdcZJ9hKxVP6PK9TmVqkGcAA2xCfmOhXrQngaLGH9pWKqr4zmHx5F9wY /jp8JeWB5+yeejGo1NKFheIEPqqVbPaadxA2pI9Alm35edkBpHUk07zQsVOUjcMD 9Wc4VhtdWTDvDHzEGU3wLnzRW5rwBXbsVcsO/AqfhyIFDM5RK2O3ib5PTWs/Nqzh J35D5k3Ig5EINHoS4QGlCmRZvpXZbEapQiQkCKwkESMHTtCdSlus5ZlxMXRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgINf4m7XR7a8LP0nbvlKG3aKTEwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnqpn2nvTL1awiys9KXHUZKMYpOTRbKXZJZ MJzxjdzFQoS1iIK3jXlcLCCoKxc9M9kRdGV9sqS6V6QNchQ85fK67DeK4opaNNRb Sm1Dk3H46Of3W5Yr2UcfiGnny1Dw7iIObFKVs1t92BKV4efWRKxcH2IC8cY75BX+ T8NVIMtwY8lnaslGAV6DG0ihQhmKJmZRDD3C6gnm+BemP2XxAC+PVwDUGthhwiZj QmeqOxigTBuy87FmIw9t8/st2t05DkTeCzwdl+lZpuByEcxPDOgSzRFKDEsXJ6VM BrXiZhrMDqUsi00di4xXTjP0mN6DsVTm8SsrjcwvO1RSqv3eW/A= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:52 2025 by rpki-client