$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: Ckr5i9UpIsrr91jj4J02mqQMPDX62TCdxpiNymOWSUI= Subject key identifier: 22:60:83:04:3F:D3:BF:EC:B9:83:21:D7:2E:E9:E8:2B:17:AF:06:03 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 788FD9F6977E97636C6E9621515C16706D259B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04D0 Signing time: Fri 09 May 2025 04:32:11 +0000 Manifest this update: Fri 09 May 2025 04:27:11 +0000 Manifest next update: Mon 12 May 2025 10:49:11 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: slhG6aE/lNA4aRVSDQs/dfGcG5yIePIerNTIUaHIm2A=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: uk4zatVVmhCOsdYqVVAENhm5ln0sCRP7AG5mJ+uZgUg=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:d9:f6:97:7e:97:63:6c:6e:96:21:51:5c:16:70:6d:25:9b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: May 9 04:27:11 2025 GMT Not After : May 12 10:49:11 2025 GMT Subject: CN=226083043FD3BFECB98321D72EE9E82B17AF0603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:83:0b:6b:ed:25:12:0c:7b:48:27:ba:1b: f7:8f:7c:5a:27:0d:63:dc:8f:f3:60:a2:36:be:2c: 21:61:b9:b7:48:18:ec:e3:c9:a7:aa:4d:6f:46:70: 0a:a0:cb:c7:43:8a:bc:0b:dd:20:a1:a7:a6:82:10: 78:0e:f2:90:62:ec:88:7a:74:47:64:3f:2e:74:c9: 4c:db:e7:f3:43:24:36:3d:50:fe:25:ae:f6:d8:0e: 09:42:23:54:15:ec:c2:4c:fe:58:e2:b0:81:8a:1e: 2d:b2:5f:40:68:92:21:db:df:d5:9d:55:a7:15:88: d4:b2:12:a4:82:5e:be:09:44:b6:6f:74:b9:58:d5: 16:13:cf:99:4f:8d:a0:7b:72:98:7f:21:8c:d2:63: fd:cb:c0:5b:0d:07:e7:89:5d:be:a2:e2:a3:a8:51: b8:49:44:03:34:f9:3e:d6:ba:62:ae:6d:94:6f:0d: 99:b0:2f:ab:a0:56:a8:81:15:35:50:74:7f:2d:78: 57:59:26:b3:5b:76:93:9c:4e:10:4c:bd:dd:48:ca: 5e:2e:d1:c1:48:8f:15:d6:8d:55:9a:82:6f:c7:bb: 25:60:e0:a2:c8:3d:47:b5:16:78:c7:19:09:1c:fe: f6:96:6e:b7:c8:c1:71:58:02:97:d3:03:2f:71:aa: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:83:04:3F:D3:BF:EC:B9:83:21:D7:2E:E9:E8:2B:17:AF:06:03 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1d:c5:2d:4b:a0:67:06:9b:6f:10:99:44:05:09:be:13:89: a5:6f:35:60:c7:f7:1d:fd:94:eb:d6:ab:fd:0b:90:28:4d:a3: 34:02:f7:42:f3:52:77:e0:2c:6b:fe:18:24:8d:fa:e9:7d:1b: 2a:fe:42:b4:59:8b:ee:7c:c0:14:38:a6:ce:95:04:79:65:7f: 0a:35:31:84:33:86:27:fe:ad:f8:73:c3:b1:1d:29:50:74:21: bb:8a:5e:9b:c8:6c:8e:ee:df:cf:36:1f:f6:9a:a8:d1:9d:11: 2b:1c:99:41:71:2b:0a:03:cd:42:60:91:aa:1e:a9:53:8f:d4: 05:d6:c4:52:d4:ed:42:29:3f:4e:8f:f8:2e:10:d7:ac:3d:de: cb:e0:12:bf:83:8c:ec:c4:20:2f:03:89:7c:27:8e:35:cf:01: d5:a7:ce:5d:2a:ec:96:d1:bc:b0:b2:76:62:0f:02:3b:e8:4a: 86:21:19:5b:47:3e:d8:e9:0c:5d:8b:9b:83:03:87:05:20:2a: 02:38:a6:43:9b:e5:67:3d:21:14:b3:f5:40:6a:6f:6b:33:6d: ec:0d:b4:53:8e:61:43:e2:42:85:97:55:fc:62:fe:f0:85:36: 56:2b:24:47:ad:78:b4:cf:7f:92:d5:be:77:b5:53:5b:6c:db: 6f:84:4b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeI/Z9pd+l2NsbpYhUVwWcG0lmywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA1MDkwNDI3MTFaFw0yNTA1MTIxMDQ5MTFaMDMxMTAvBgNV BAMTKDIyNjA4MzA0M0ZEM0JGRUNCOTgzMjFENzJFRTlFODJCMTdBRjA2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFIMLa+0lEgx7SCe6G/ePfFon DWPcj/Ngoja+LCFhubdIGOzjyaeqTW9GcAqgy8dDirwL3SChp6aCEHgO8pBi7Ih6 dEdkPy50yUzb5/NDJDY9UP4lrvbYDglCI1QV7MJM/ljisIGKHi2yX0BokiHb39Wd VacViNSyEqSCXr4JRLZvdLlY1RYTz5lPjaB7cph/IYzSY/3LwFsNB+eJXb6i4qOo UbhJRAM0+T7WumKubZRvDZmwL6ugVqiBFTVQdH8teFdZJrNbdpOcThBMvd1Iyl4u 0cFIjxXWjVWagm/HuyVg4KLIPUe1FnjHGQkc/vaWbrfIwXFYApfTAy9xqkRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImCDBD/Tv+y5gyHXLunoKxevBgMwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIdxS1LoGcGm28QmUQFCb4TiaVvNWDH9x39 lOvWq/0LkChNozQC90LzUnfgLGv+GCSN+ul9Gyr+QrRZi+58wBQ4ps6VBHllfwo1 MYQzhif+rfhzw7EdKVB0IbuKXpvIbI7u3882H/aaqNGdESscmUFxKwoDzUJgkaoe qVOP1AXWxFLU7UIpP06P+C4Q16w93svgEr+DjOzEIC8DiXwnjjXPAdWnzl0q7JbR vLCydmIPAjvoSoYhGVtHPtjpDF2Lm4MDhwUgKgI4pkOb5Wc9IRSz9UBqb2szbewN tFOOYUPiQoWXVfxi/vCFNlYrJEeteLTPf5LVvne1U1ts22+ESy4= -----END CERTIFICATE-----Generated at Sat May 10 23:02:28 2025 by rpki-client