$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: sbSIkpmZLg4DUuvGPqn6a9dATgvWmhLD8YKd//g1J3w= Subject key identifier: 19:AC:0C:84:20:B3:88:1C:A1:F1:AD:E4:A4:74:06:13:E6:A6:48:FB Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 6A477D8296517A0FE4337336A8CA5E9CE8C1D5A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 02A1 Signing time: Mon 05 May 2025 01:01:10 +0000 Manifest this update: Mon 05 May 2025 00:56:10 +0000 Manifest next update: Thu 08 May 2025 06:35:10 +0000 Files and hashes: 1: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: 9eB362fgxwXj7bUMYRwswYtz9j22Cs8YnYtwEMkWHPA=) 2: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:47:7d:82:96:51:7a:0f:e4:33:73:36:a8:ca:5e:9c:e8:c1:d5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: May 5 00:56:10 2025 GMT Not After : May 8 06:35:10 2025 GMT Subject: CN=19AC0C8420B3881CA1F1ADE4A4740613E6A648FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:04:da:09:f4:5d:f5:85:44:f3:be:cf:b5: 2a:78:41:9f:7b:12:93:e7:fb:f8:d2:d9:d8:e9:23: 40:9c:3b:cc:ad:6b:2c:fc:3e:f8:12:e5:25:eb:22: fc:ae:c5:ea:61:36:93:71:71:05:34:ba:02:1c:64: 6f:c7:76:e6:46:01:4f:7a:8b:4d:77:24:d3:03:d6: f4:ee:9c:1b:6f:98:9e:72:9e:0e:67:41:08:a7:2d: 8f:cc:e9:de:17:71:96:08:ce:12:88:b5:b3:61:14: 5b:6f:c0:4f:f7:cd:79:55:0d:fa:bc:08:16:eb:b9: bd:2a:8b:ce:4c:05:e0:7a:33:cc:53:23:b8:b6:b3: 51:fb:e7:f6:43:f0:74:1d:87:9b:5b:68:1d:7a:37: c2:1f:26:0d:49:6e:95:56:bd:59:43:9b:49:e0:e6: 05:01:0d:54:31:90:c7:d1:07:e8:94:ff:4a:bd:fd: 27:ac:31:01:2b:81:9b:f2:cb:93:64:cc:06:e2:2f: e6:19:ea:77:f9:6e:68:32:33:e3:e1:3f:9b:22:f8: 54:00:9d:38:ca:a4:4d:06:48:de:2a:58:a0:4c:12: 13:4b:8d:f9:f6:b4:d3:ff:16:7a:c7:2c:67:c9:51: 01:64:cf:7e:95:29:1c:4c:99:ee:a0:10:a5:01:b8: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:0C:84:20:B3:88:1C:A1:F1:AD:E4:A4:74:06:13:E6:A6:48:FB X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:81:f1:5e:ff:da:a9:c5:71:d1:13:bc:09:4b:02:8b:75:19: 0a:8a:5d:32:b8:94:99:d5:13:c5:48:02:b9:9b:0e:f9:de:99: 43:43:81:98:56:a2:d1:0c:11:25:64:69:a8:af:4a:26:88:10: b7:54:b5:54:be:64:b6:fe:cf:b6:b6:b9:44:d4:ed:b2:4b:67: 0b:74:86:b6:4a:69:9b:25:32:ee:f0:b0:46:73:04:b7:1b:63: b4:42:df:d5:bd:65:f6:e5:f2:ce:1c:31:61:6e:2a:40:f6:c9: e2:8a:f7:9c:9d:ea:3f:34:0c:9f:92:d3:32:ac:2a:02:37:1a: 7c:13:29:f9:01:38:96:ea:b1:a2:65:d9:45:86:f5:79:8f:e8: 2e:4c:20:bc:99:6c:e2:68:59:33:3c:f0:c1:77:19:86:4c:dc: b8:be:bb:c4:59:fb:ea:ec:a4:81:6f:3a:ba:73:09:5e:12:a0: cb:d5:bd:52:89:86:a1:b7:9a:d8:b7:91:7d:18:3e:a9:db:7a: 62:c6:b9:c6:72:c5:2d:e1:79:74:f8:62:11:48:8d:a6:17:9b: 52:98:cd:30:f8:3d:b5:08:69:32:59:70:38:0b:7b:b1:e2:4e: bd:d1:e5:8e:6b:18:a6:0b:38:ee:83:bb:6a:f8:64:f0:9b:2e: ee:94:65:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakd9gpZReg/kM3M2qMpenOjB1aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNTA1MDUwMDU2MTBaFw0yNTA1MDgwNjM1MTBaMDMxMTAvBgNV BAMTKDE5QUMwQzg0MjBCMzg4MUNBMUYxQURFNEE0NzQwNjEzRTZBNjQ4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlATaCfRd9YVE877PtSp4QZ97 EpPn+/jS2djpI0CcO8ytayz8PvgS5SXrIvyuxephNpNxcQU0ugIcZG/HduZGAU96 i013JNMD1vTunBtvmJ5yng5nQQinLY/M6d4XcZYIzhKItbNhFFtvwE/3zXlVDfq8 CBbrub0qi85MBeB6M8xTI7i2s1H75/ZD8HQdh5tbaB16N8IfJg1JbpVWvVlDm0ng 5gUBDVQxkMfRB+iU/0q9/SesMQErgZvyy5NkzAbiL+YZ6nf5bmgyM+PhP5si+FQA nTjKpE0GSN4qWKBMEhNLjfn2tNP/FnrHLGfJUQFkz36VKRxMme6gEKUBuOHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGawMhCCziByh8a3kpHQGE+amSPswHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiB8V7/2qnFcdETvAlLAot1GQqKXTK4lJnV E8VIArmbDvnemUNDgZhWotEMESVkaaivSiaIELdUtVS+ZLb+z7a2uUTU7bJLZwt0 hrZKaZslMu7wsEZzBLcbY7RC39W9Zfbl8s4cMWFuKkD2yeKK95yd6j80DJ+S0zKs KgI3GnwTKfkBOJbqsaJl2UWG9XmP6C5MILyZbOJoWTM88MF3GYZM3Li+u8RZ++rs pIFvOrpzCV4SoMvVvVKJhqG3mti3kX0YPqnbemLGucZyxS3heXT4YhFIjaYXm1KY zTD4PbUIaTJZcDgLe7HiTr3R5Y5rGKYLOO6Du2r4ZPCbLu6UZSY= -----END CERTIFICATE-----Generated at Wed May 7 09:27:32 2025 by rpki-client