$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: hqqolLutMpqp7P9RjsofNGtb13Yz4nBmoy67ah3KND4= Subject key identifier: DC:4E:41:9B:F9:45:F6:6C:FE:5F:20:12:2E:D2:88:61:C5:09:22:03 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 3055C227D5D5C9FC78C2C3A8E0A45172EDB26A71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0595 Signing time: Fri 09 May 2025 06:10:03 +0000 Manifest this update: Fri 09 May 2025 06:05:03 +0000 Manifest next update: Mon 12 May 2025 09:31:03 +0000 Files and hashes: 1: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) 2: AS24203.roa (hash: iUUx6/7Vijwx93IUbiSye/ssw8bJSAcdA6IGTt4AxyQ=) 3: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: Mp+FcXIlzUGCmwDf4FoQYN6FDnDJc+bqWkzqrFStqAk=) 4: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:55:c2:27:d5:d5:c9:fc:78:c2:c3:a8:e0:a4:51:72:ed:b2:6a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: May 9 06:05:03 2025 GMT Not After : May 12 09:31:03 2025 GMT Subject: CN=DC4E419BF945F66CFE5F20122ED28861C5092203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:bd:03:81:15:ab:44:17:bf:b0:e9:8e:6c: 35:f8:d2:95:90:9c:48:e4:b9:53:05:19:bd:31:07: d1:51:d3:3b:aa:56:1d:44:ae:56:e8:bf:9a:ba:9f: 6f:3d:f4:3b:61:e3:1a:9e:8d:60:83:18:04:a3:fd: 51:12:f6:7e:e9:2a:de:3c:ba:7d:ac:90:ce:02:ea: 75:39:63:c1:a7:41:c0:cf:4f:fd:9a:cd:c3:21:50: 71:b5:c5:3a:7b:b6:ab:5c:db:3c:43:2a:0f:fc:31: 35:5a:2b:a3:4d:dc:2e:f7:a3:54:d1:cc:f3:7c:29: 92:d3:5a:c4:d8:00:82:2b:45:4b:3c:02:9b:6a:e7: 5a:b9:a7:01:a7:b5:14:f6:cc:9a:08:e4:f8:37:5b: b2:10:4c:4f:b4:ab:4e:31:2b:e7:af:5d:d1:8d:1f: 2d:92:70:b8:3b:6d:6e:44:c6:0e:06:8b:14:46:41: a9:af:85:20:a6:91:20:66:ff:8b:5f:ee:b0:06:ba: 04:bb:50:02:53:c2:7b:d5:46:52:c1:39:5a:94:cc: 98:c3:99:73:d5:da:e5:7c:0c:af:bd:01:2a:f5:73: 7c:51:2f:02:5c:c9:72:99:2b:6c:ad:59:06:a4:ea: f8:4e:df:74:4c:74:13:43:7c:54:1d:4a:be:61:0f: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4E:41:9B:F9:45:F6:6C:FE:5F:20:12:2E:D2:88:61:C5:09:22:03 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:24:cc:69:33:30:47:20:8c:60:81:1d:b1:b8:58:7d:d9:21: 25:59:59:7f:33:d7:cc:e8:0b:18:7a:ba:d7:01:ef:d6:19:27: 2e:15:77:4e:7d:2e:81:16:71:b6:8d:ff:09:f8:98:ee:b8:0d: ab:62:66:97:15:d3:e3:1a:4a:1b:e0:b3:8c:d9:72:68:13:a1: fb:d5:da:af:94:70:84:fc:0a:04:ca:3d:6e:ff:3d:d3:a9:21: 77:24:a3:00:96:3f:e9:4b:11:93:e5:4f:12:2e:be:09:e6:9d: 03:a9:33:6e:91:e8:a1:91:0e:8b:ce:32:94:69:ae:60:20:83: 92:4c:53:06:85:a8:3b:e0:9b:f3:1c:df:4f:64:10:53:58:ce: 3d:bc:05:b4:ea:11:33:c2:5b:89:ca:d0:51:49:55:38:f7:fd: 10:97:02:fe:4c:39:ad:ab:e7:8c:66:b9:ae:54:95:e1:5d:ba: ca:97:e0:bd:38:ec:d2:50:cc:92:8a:b4:b2:64:f6:27:c5:bb: 65:cd:6f:1a:09:84:af:9a:2c:c8:dc:2d:60:f9:15:3a:62:4c: 57:85:fc:82:32:a2:cf:1d:c9:12:ec:d6:91:6a:7e:b2:78:e2: f2:b1:5d:7b:e0:7b:d5:a6:1e:b4:12:30:5e:2f:c9:df:53:37: c5:86:ff:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFXCJ9XVyfx4wsOo4KRRcu2yanEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA1MDkwNjA1MDNaFw0yNTA1MTIwOTMxMDNaMDMxMTAvBgNV BAMTKERDNEU0MTlCRjk0NUY2NkNGRTVGMjAxMjJFRDI4ODYxQzUwOTIyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzb0DgRWrRBe/sOmObDX40pWQ nEjkuVMFGb0xB9FR0zuqVh1Erlbov5q6n2899Dth4xqejWCDGASj/VES9n7pKt48 un2skM4C6nU5Y8GnQcDPT/2azcMhUHG1xTp7tqtc2zxDKg/8MTVaK6NN3C73o1TR zPN8KZLTWsTYAIIrRUs8Aptq51q5pwGntRT2zJoI5Pg3W7IQTE+0q04xK+evXdGN Hy2ScLg7bW5Exg4GixRGQamvhSCmkSBm/4tf7rAGugS7UAJTwnvVRlLBOVqUzJjD mXPV2uV8DK+9ASr1c3xRLwJcyXKZK2ytWQak6vhO33RMdBNDfFQdSr5hD+B7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3E5Bm/lF9mz+XyASLtKIYcUJIgMwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIkzGkzMEcgjGCBHbG4WH3ZISVZWX8z18zo Cxh6utcB79YZJy4Vd059LoEWcbaN/wn4mO64DatiZpcV0+MaShvgs4zZcmgTofvV 2q+UcIT8CgTKPW7/PdOpIXckowCWP+lLEZPlTxIuvgnmnQOpM26R6KGRDovOMpRp rmAgg5JMUwaFqDvgm/Mc309kEFNYzj28BbTqETPCW4nK0FFJVTj3/RCXAv5MOa2r 54xmua5UleFdusqX4L047NJQzJKKtLJk9ifFu2XNbxoJhK+aLMjcLWD5FTpiTFeF /IIyos8dyRLs1pFqfrJ44vKxXXvge9WmHrQSMF4vyd9TN8WG/wQ= -----END CERTIFICATE-----Generated at Sat May 10 03:49:55 2025 by rpki-client