$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: /KFkaKNrEg9ZdaKQezazeEkN4HduEjs8JPt3+yRbtQk= Subject key identifier: 27:C3:29:B2:98:8A:5B:F8:DE:E7:A8:4F:78:C1:B0:60:2D:5C:92:01 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 50292DC72E915CAD1BCC530D1A4DC78F551DD767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 0190 Signing time: Sun 11 May 2025 13:41:35 +0000 Manifest this update: Sun 11 May 2025 13:36:35 +0000 Manifest next update: Wed 14 May 2025 13:55:35 +0000 Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: h87GIrTJMQyGb0m1sPwlgli09SuNOJCczFxB7rjFa/w=) 2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: HNl2Dz19YyGY53FNcQsonxnWa2o1G4L1DoviLgd6hjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 13:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:29:2d:c7:2e:91:5c:ad:1b:cc:53:0d:1a:4d:c7:8f:55:1d:d7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: May 11 13:36:35 2025 GMT Not After : May 14 13:55:35 2025 GMT Subject: CN=27C329B2988A5BF8DEE7A84F78C1B0602D5C9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:c4:1b:40:ab:23:e6:3a:95:0b:3b:d5:1f: fb:03:c8:07:00:03:8e:a1:6e:c2:79:ba:5a:83:d2: 46:42:d9:a7:a0:a2:1d:16:3f:12:a4:51:9a:ac:fe: 26:0f:8d:67:c5:e4:08:c5:c3:ff:e6:41:ea:57:40: 9a:c1:41:3a:6f:be:f7:4b:a2:95:cb:28:e4:8e:a8: 95:d1:1b:02:d6:b2:d2:ac:c3:b6:3d:66:c6:10:72: fe:c0:76:ee:f4:8d:28:5e:30:08:5d:bf:4e:9b:2f: 9f:33:30:69:13:87:d5:1c:17:95:05:cf:1e:db:73: 9c:a0:01:0c:82:05:04:62:c1:4b:94:3b:0a:df:15: 44:b6:e1:59:e7:5c:d7:cb:b9:52:3c:1d:f4:4c:6b: 79:74:fe:92:33:0e:df:b0:7c:1d:9d:ff:56:0f:6b: 21:74:5b:b7:96:03:d6:3b:35:37:1f:c5:2e:be:04: 88:76:c1:82:c0:fa:05:ad:74:40:44:ac:7d:a4:22: 72:23:3d:b8:2e:2a:39:47:24:ed:1b:4c:6b:3d:f0: 07:7f:68:3f:be:e0:a3:ba:ce:64:22:e0:53:72:a6: 49:87:20:28:d3:bf:63:a2:a2:dd:e9:75:80:a4:90: 57:5f:da:1e:0d:18:4d:74:26:2f:c3:97:51:b3:e9: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C3:29:B2:98:8A:5B:F8:DE:E7:A8:4F:78:C1:B0:60:2D:5C:92:01 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2e:2e:78:6e:0e:ce:c1:75:88:c5:2d:75:d7:b9:bc:72:73: e8:3f:b7:91:ee:14:3b:d1:ae:50:9f:e4:c2:7b:f8:7b:46:67: 0e:82:11:45:bf:40:e2:bc:31:e4:85:67:68:e6:3c:1a:bc:3c: 3f:16:00:ec:ea:ec:fa:1f:b5:c4:ca:f3:f4:a3:53:b7:9a:2a: 40:44:88:9b:46:b3:d3:ed:14:50:d9:3a:72:8c:56:eb:bb:e7: 26:2f:91:11:d2:94:ac:34:93:ae:c4:95:9e:fe:c4:5d:cf:c4: 97:f8:41:78:91:51:39:44:b1:dd:0d:8c:ab:9c:ae:bc:bd:5a: 3c:e6:c7:0d:89:57:ed:b5:19:8f:1f:62:7d:c4:f7:b7:05:34: 24:d5:a8:6f:f6:80:87:8e:dd:e7:25:07:87:a9:c0:7d:91:a0: ac:bc:8a:1a:9c:a8:03:3a:d0:27:b3:13:ae:58:54:f5:39:df: e8:3a:3f:7a:e0:dc:73:3c:de:de:3c:52:6d:ac:ed:56:e9:0e: 65:1b:c7:0a:0e:fe:26:81:c0:16:58:0d:9d:96:b4:3a:a9:2e: eb:f8:62:06:60:08:64:d2:65:c0:9a:ba:6f:cb:64:52:05:66: 63:20:59:1c:7a:2f:19:cf:69:55:3c:be:a4:f4:6b:9e:99:1d: ba:9f:14:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCktxy6RXK0bzFMNGk3Hj1Ud12cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTA1MTExMzM2MzVaFw0yNTA1MTQxMzU1MzVaMDMxMTAvBgNV BAMTKDI3QzMyOUIyOTg4QTVCRjhERUU3QTg0Rjc4QzFCMDYwMkQ1QzkyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/MQbQKsj5jqVCzvVH/sDyAcA A46hbsJ5ulqD0kZC2aegoh0WPxKkUZqs/iYPjWfF5AjFw//mQepXQJrBQTpvvvdL opXLKOSOqJXRGwLWstKsw7Y9ZsYQcv7Adu70jSheMAhdv06bL58zMGkTh9UcF5UF zx7bc5ygAQyCBQRiwUuUOwrfFUS24VnnXNfLuVI8HfRMa3l0/pIzDt+wfB2d/1YP ayF0W7eWA9Y7NTcfxS6+BIh2wYLA+gWtdEBErH2kInIjPbguKjlHJO0bTGs98Ad/ aD++4KO6zmQi4FNypkmHICjTv2Oiot3pdYCkkFdf2h4NGE10Ji/Dl1Gz6U9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8MpspiKW/je56hPeMGwYC1ckgEwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQuLnhuDs7BdYjFLXXXubxyc+g/t5HuFDvR rlCf5MJ7+HtGZw6CEUW/QOK8MeSFZ2jmPBq8PD8WAOzq7PoftcTK8/SjU7eaKkBE iJtGs9PtFFDZOnKMVuu75yYvkRHSlKw0k67ElZ7+xF3PxJf4QXiRUTlEsd0NjKuc rry9Wjzmxw2JV+21GY8fYn3E97cFNCTVqG/2gIeO3eclB4epwH2RoKy8ihqcqAM6 0CezE65YVPU53+g6P3rg3HM83t48Um2s7VbpDmUbxwoO/iaBwBZYDZ2WtDqpLuv4 YgZgCGTSZcCaum/LZFIFZmMgWRx6LxnPaVU8vqT0a56ZHbqfFMU= -----END CERTIFICATE-----Generated at Sun May 11 15:12:10 2025 by rpki-client