$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: d0L6jMBvBSrxcunwj7q65RKYwzkueCMY5PmTreEmlg4= Subject key identifier: 57:DD:9C:55:D7:61:FB:8E:52:7C:2D:2B:F9:2F:E7:12:39:56:7C:23 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 480AC6CBAD948A33FD056ABCCD938BC0A3CB625F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 0376 Signing time: Fri 09 May 2025 12:20:01 +0000 Manifest this update: Fri 09 May 2025 12:15:01 +0000 Manifest next update: Mon 12 May 2025 20:26:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: 1/iFdqFCnwvsRzkYzRf5D4hfYHN/Vhw10uEmHwR3xM4=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0a:c6:cb:ad:94:8a:33:fd:05:6a:bc:cd:93:8b:c0:a3:cb:62:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: May 9 12:15:01 2025 GMT Not After : May 12 20:26:01 2025 GMT Subject: CN=57DD9C55D761FB8E527C2D2BF92FE71239567C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:4f:75:d4:7f:c2:32:49:be:f9:8f:31:4f: e2:9e:4e:54:c3:a9:73:2a:a3:f0:17:2c:7f:27:b0: cf:15:b4:76:03:41:d2:4a:40:04:ed:71:54:47:37: 93:b3:59:27:a9:4a:00:74:b4:be:0e:af:09:6a:92: ab:68:a6:70:98:2e:d5:3e:02:b6:86:1a:a7:b5:63: 58:2c:dd:0f:ed:bb:56:ef:ac:e6:72:7c:86:ff:27: a7:c4:db:f7:60:50:f2:f8:e8:aa:33:b5:cc:c8:bb: 21:26:22:a1:a9:78:4e:44:15:33:d7:c8:03:1b:b3: 03:a2:4c:63:43:28:85:3b:19:be:5f:13:86:52:f1: 73:f9:f9:5e:7f:86:50:ad:54:91:16:a6:9e:ce:49: 4b:67:ef:48:36:96:cd:10:c6:c0:58:73:79:03:a8: fc:5c:83:82:f9:3d:3e:b3:eb:c9:36:8f:cf:25:0a: 20:0f:40:f1:55:84:22:e0:6a:5d:1c:20:89:34:11: 1f:52:f5:8e:e7:1e:98:05:1b:ea:c6:ff:2f:73:54: a0:b5:db:23:01:c8:58:5e:19:88:fa:95:7f:72:42: cd:ef:84:07:77:b8:2c:2b:a5:87:40:cf:be:2d:b1: ab:5b:bf:28:f7:08:7b:1d:34:a9:15:df:8d:23:20: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:9C:55:D7:61:FB:8E:52:7C:2D:2B:F9:2F:E7:12:39:56:7C:23 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:57:ce:ff:21:02:e0:24:7d:c6:fc:6d:29:2e:4b:85:cb:24: e0:2b:48:b5:5c:39:fa:6e:7d:84:0b:b4:c8:ae:b4:3d:0b:0c: 88:22:bf:38:77:53:dd:03:95:e7:7a:0f:f3:7d:6c:df:7b:0d: 7a:5f:da:f5:43:9e:52:cf:38:1e:d2:c7:b0:91:57:ba:6f:e6: d9:77:75:49:81:79:66:9e:2b:f7:85:47:c8:19:d8:32:f4:10: 21:05:d0:42:37:07:80:50:80:26:c2:d2:10:9c:45:a5:c7:e2: 72:19:5a:a6:14:26:e6:12:a3:2f:4a:b1:5c:8d:d9:58:30:6a: ff:fd:f8:44:fb:b6:d5:99:fd:26:d1:a8:f6:1e:e9:97:8b:87: 52:a8:15:95:da:74:39:b0:2b:9d:fa:72:48:cd:86:ae:af:59: 2e:0c:a8:79:d6:27:4e:0c:42:2b:fd:ac:82:8c:1f:5f:a1:ef: de:26:ce:98:67:46:45:ae:ae:d8:47:4e:50:28:c0:a5:78:12: 62:a2:3d:84:7b:00:9a:6d:ea:ea:a5:50:0b:29:8b:ef:55:fd: 56:d3:81:85:41:f6:32:bd:ce:65:68:4c:4a:bd:9c:bc:b4:ad: 4e:8b:9f:34:7f:32:2f:05:40:36:d1:0e:98:f9:4e:65:22:55: 40:22:9d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSArGy62UijP9BWq8zZOLwKPLYl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA1MDkxMjE1MDFaFw0yNTA1MTIyMDI2MDFaMDMxMTAvBgNV BAMTKDU3REQ5QzU1RDc2MUZCOEU1MjdDMkQyQkY5MkZFNzEyMzk1NjdDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLk911H/CMkm++Y8xT+KeTlTD qXMqo/AXLH8nsM8VtHYDQdJKQATtcVRHN5OzWSepSgB0tL4OrwlqkqtopnCYLtU+ AraGGqe1Y1gs3Q/tu1bvrOZyfIb/J6fE2/dgUPL46KoztczIuyEmIqGpeE5EFTPX yAMbswOiTGNDKIU7Gb5fE4ZS8XP5+V5/hlCtVJEWpp7OSUtn70g2ls0QxsBYc3kD qPxcg4L5PT6z68k2j88lCiAPQPFVhCLgal0cIIk0ER9S9Y7nHpgFG+rG/y9zVKC1 2yMByFheGYj6lX9yQs3vhAd3uCwrpYdAz74tsatbvyj3CHsdNKkV340jILbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV92cVddh+45SfC0r+S/nEjlWfCMwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdXzv8hAuAkfcb8bSkuS4XLJOArSLVcOfpu fYQLtMiutD0LDIgivzh3U90Dled6D/N9bN97DXpf2vVDnlLPOB7Sx7CRV7pv5tl3 dUmBeWaeK/eFR8gZ2DL0ECEF0EI3B4BQgCbC0hCcRaXH4nIZWqYUJuYSoy9KsVyN 2Vgwav/9+ET7ttWZ/SbRqPYe6ZeLh1KoFZXadDmwK536ckjNhq6vWS4MqHnWJ04M Qiv9rIKMH1+h794mzphnRkWurthHTlAowKV4EmKiPYR7AJpt6uqlUAspi+9V/VbT gYVB9jK9zmVoTEq9nLy0rU6LnzR/Mi8FQDbRDpj5TmUiVUAinYU= -----END CERTIFICATE-----Generated at Sat May 10 18:44:44 2025 by rpki-client