$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: UvTcOXIW4eDvfDYBB5PdLzNZ2BaVUAP5+hbQ4Bs+beQ= Subject key identifier: D3:43:97:F8:DB:D2:F9:60:45:C0:BF:E8:2E:22:23:49:E1:D8:16:54 Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 0BD28C9C405FF3AF83F283184605B92A692E6196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 04CE Signing time: Sun 11 May 2025 20:51:55 +0000 Manifest this update: Sun 11 May 2025 20:46:55 +0000 Manifest next update: Thu 15 May 2025 05:12:55 +0000 Files and hashes: 1: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: hLJJn2S5+JhUGblcfmNr2hxZF8gqjaXVnEFEQc7K6gU=) 2: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: yDIVt2Oe51IhyNjITRNsqJhRBffQBwktI1JnUAMjM6o=) 3: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: JEdv69giQXrwIxpkidOyX1K+09c6I2aBoRb5L9K68QY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d2:8c:9c:40:5f:f3:af:83:f2:83:18:46:05:b9:2a:69:2e:61:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: May 11 20:46:55 2025 GMT Not After : May 15 05:12:55 2025 GMT Subject: CN=D34397F8DBD2F96045C0BFE82E222349E1D81654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:15:fb:26:db:d2:7e:c5:7d:23:4a:91:17: 7a:e7:7d:70:ca:c6:67:cf:ef:a8:83:fa:ff:d9:16: 7e:4b:1d:20:90:7b:35:c3:37:88:ba:8a:13:2a:bb: 18:e9:84:a6:db:d6:ce:3f:54:69:cc:41:6a:75:30: 65:44:2b:89:c9:7c:41:48:ab:6d:d3:94:48:e1:5a: 67:6d:70:d8:5c:f7:da:82:71:42:ed:b7:ea:c2:23: 2f:4f:75:66:bf:24:41:38:a0:88:a2:5f:2c:ed:36: a3:48:7f:6f:d3:be:0d:87:2a:03:2e:af:26:a8:bd: d4:bf:6a:44:c5:c1:e3:7e:16:a5:4e:ef:b8:08:bf: 4b:d9:b7:41:36:da:79:ae:e6:d6:db:5f:46:5b:db: 43:5b:87:2a:08:ae:41:09:d1:1f:df:ad:d4:35:60: ab:c2:14:e8:68:6a:fe:34:da:d9:b3:13:71:85:1a: c2:72:47:3f:33:15:82:7e:02:cc:b0:c3:48:11:3f: 30:40:03:ee:de:fe:7c:54:ac:27:fc:e0:b7:60:37: 90:df:88:65:72:94:b4:06:e8:ed:1e:e0:cd:f9:a3: 06:8b:31:41:28:c1:db:bb:0d:14:f7:29:65:7e:01: 19:c9:3e:12:50:ed:98:9d:45:61:b1:ed:67:2f:63: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:43:97:F8:DB:D2:F9:60:45:C0:BF:E8:2E:22:23:49:E1:D8:16:54 X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:22:f1:1c:86:ca:56:d6:20:89:12:07:b3:24:95:8c:63:7e: ba:c0:d2:ae:29:8b:9f:a6:0f:4e:08:96:93:2a:a6:a0:f4:a2: 22:84:77:20:51:c1:48:8f:e5:9b:d5:9c:29:fb:08:a5:80:56: d1:94:07:9e:0d:7b:12:6f:91:42:b4:ac:7b:19:df:ce:a5:2d: 14:1f:03:71:75:7d:e8:ba:33:81:42:fb:d4:57:b5:e1:ab:7b: 82:cf:03:fc:d4:4a:88:cf:fa:9f:61:24:05:0d:7e:55:c7:9b: 62:98:f6:c8:85:b7:ea:27:48:8a:92:48:9e:6f:b6:df:7a:d7: b8:48:46:ec:d0:24:90:9e:6e:0c:1c:f0:35:0e:65:bc:9d:4d: b8:44:42:8f:28:73:cc:73:00:86:97:4e:b2:fc:05:68:09:79: 48:41:a6:ae:95:f0:fe:15:61:93:3b:33:5c:90:b3:29:c2:ee: 41:0f:38:43:6c:3f:57:99:c0:ff:2c:45:5d:9d:df:b8:9d:21: 8b:41:0d:1a:a0:88:32:13:f7:7a:5c:00:2e:36:18:05:4c:d0: f8:96:e1:ef:86:e0:b1:c0:0f:01:a6:22:86:e7:5d:cf:0d:e4: db:3a:40:be:b2:49:0f:d4:e6:6c:0a:75:51:b3:36:e6:ac:60: fd:57:52:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9KMnEBf86+D8oMYRgW5KmkuYZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNTA1MTEyMDQ2NTVaFw0yNTA1MTUwNTEyNTVaMDMxMTAvBgNV BAMTKEQzNDM5N0Y4REJEMkY5NjA0NUMwQkZFODJFMjIyMzQ5RTFEODE2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1RX7JtvSfsV9I0qRF3rnfXDK xmfP76iD+v/ZFn5LHSCQezXDN4i6ihMquxjphKbb1s4/VGnMQWp1MGVEK4nJfEFI q23TlEjhWmdtcNhc99qCcULtt+rCIy9PdWa/JEE4oIiiXyztNqNIf2/Tvg2HKgMu ryaovdS/akTFweN+FqVO77gIv0vZt0E22nmu5tbbX0Zb20NbhyoIrkEJ0R/frdQ1 YKvCFOhoav402tmzE3GFGsJyRz8zFYJ+Asyww0gRPzBAA+7e/nxUrCf84LdgN5Df iGVylLQG6O0e4M35owaLMUEowdu7DRT3KWV+ARnJPhJQ7ZidRWGx7WcvYwh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00OX+NvS+WBFwL/oLiIjSeHYFlQwHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgi8RyGylbWIIkSB7MklYxjfrrA0q4pi5+m D04IlpMqpqD0oiKEdyBRwUiP5ZvVnCn7CKWAVtGUB54NexJvkUK0rHsZ386lLRQf A3F1fei6M4FC+9RXteGre4LPA/zUSojP+p9hJAUNflXHm2KY9siFt+onSIqSSJ5v tt9617hIRuzQJJCebgwc8DUOZbydTbhEQo8oc8xzAIaXTrL8BWgJeUhBpq6V8P4V YZM7M1yQsynC7kEPOENsP1eZwP8sRV2d37idIYtBDRqgiDIT93pcAC42GAVM0PiW 4e+G4LHADwGmIobnXc8N5Ns6QL6ySQ/U5mwKdVGzNuasYP1XUgE= -----END CERTIFICATE-----Generated at Mon May 12 07:23:37 2025 by rpki-client