$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json) Hash identifier: Ecwr6Apbl2Nc9FXoFK62ovjR9a11hm9HTsUeqH3HuLY= Subject key identifier: F4:D6:11:F9:4F:77:6D:06:61:A9:0C:BE:17:90:F3:BD:DE:11:CB:B8 Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Certificate serial: 03D2C5CDFED55AA316E3A5B6117763603877331F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft Manifest number: 0420 Signing time: Sat 10 May 2025 01:31:02 +0000 Manifest this update: Sat 10 May 2025 01:26:02 +0000 Manifest next update: Tue 13 May 2025 05:16:02 +0000 Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: 4Z5eDrrHZmqs6QxVIkyuY07V0t6QahOws6as1cnmdoY=) 2: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: tQjQJ7taibtUmI3jR8G93/OQ5go27ELojFkQZo6q4Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d2:c5:cd:fe:d5:5a:a3:16:e3:a5:b6:11:77:63:60:38:77:33:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402 Validity Not Before: May 10 01:26:02 2025 GMT Not After : May 13 05:16:02 2025 GMT Subject: CN=F4D611F94F776D0661A90CBE1790F3BDDE11CBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:54:11:94:b9:1a:b3:b8:98:a4:f6:7f:d9: 92:32:94:ab:6d:3c:5e:5e:40:c1:25:6c:e2:84:0e: 09:89:27:90:ee:43:91:fa:88:8e:a8:f0:f4:77:96: 7d:53:d7:ed:c5:29:e5:0d:4c:1d:a7:9d:35:1c:a1: 3f:78:4b:de:95:fc:98:e2:d7:48:19:de:20:0c:8a: f4:a9:ba:96:60:05:89:41:0b:01:fc:1a:b1:b9:f7: 95:f4:79:1e:30:02:20:d5:02:69:82:29:bc:49:85: ea:a4:60:70:72:8a:4e:62:80:05:70:86:1d:bc:71: f6:b2:06:34:50:01:c3:f4:e0:de:7b:92:b3:5e:14: 8f:21:19:e6:75:d6:92:07:7d:c0:57:33:bf:f2:6c: 8f:28:19:e6:75:ee:00:c0:18:2c:c4:0b:b2:28:76: 3d:f4:d1:79:a8:23:df:3c:a1:a0:e6:43:88:44:47: bf:2a:70:48:47:d0:74:34:1e:f8:0d:a4:53:bd:3e: b2:10:b3:36:75:39:23:86:a5:47:de:cb:70:3a:1e: 05:5f:ac:5a:62:b6:d8:b3:07:a2:b4:38:65:b3:6e: 9c:56:e1:8f:6f:76:af:f6:7b:7f:f7:d8:3e:7f:12: fd:5b:2e:d8:3f:5b:db:06:36:ce:d4:4e:de:08:b9: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D6:11:F9:4F:77:6D:06:61:A9:0C:BE:17:90:F3:BD:DE:11:CB:B8 X509v3 Authority Key Identifier: keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:59:9d:78:dd:b0:79:be:18:ca:8d:8f:7f:99:89:c2:3a:e4: f6:60:23:57:36:02:85:96:75:6f:98:3a:7d:d3:a0:be:2a:e2: 2c:00:28:3b:40:17:bb:4b:67:00:ec:1e:24:8a:71:c9:45:de: 35:ff:df:67:2e:43:7b:4b:50:41:08:8e:64:b1:79:16:3a:c0: c1:7c:1f:d5:28:0c:ae:09:0d:8d:72:d7:56:40:d3:c1:f8:64: 4a:2e:56:71:9d:3d:31:09:a3:a2:4d:ad:98:b2:a3:5b:e5:84: 3e:7e:9f:fe:01:d0:6c:df:be:67:2d:f6:7c:86:c8:79:7c:14: 18:f2:7f:b9:9a:d0:e3:28:13:d0:d8:db:a2:ce:08:98:c7:c9: 66:01:77:ec:ab:6e:6d:d0:1e:d3:1e:d7:6a:0d:09:b1:35:38: e3:da:a8:db:6f:af:66:a6:cc:67:53:20:42:e3:c2:d9:2a:dd: 61:28:d6:29:f1:a3:10:00:d2:37:b1:88:03:1b:4f:64:03:af: ec:a7:70:11:ea:19:29:d3:7c:cb:73:51:23:56:06:ee:a4:26: 66:08:e6:20:6f:06:51:50:49:ce:b6:44:55:ed:11:a7:95:67: 4e:d3:89:1e:83:a5:fb:c5:68:38:ad:ff:bf:d4:65:21:85:58: b3:63:7c:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9LFzf7VWqMW46W2EXdjYDh3Mx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMy QjI1RDQwMjAeFw0yNTA1MTAwMTI2MDJaFw0yNTA1MTMwNTE2MDJaMDMxMTAvBgNV BAMTKEY0RDYxMUY5NEY3NzZEMDY2MUE5MENCRTE3OTBGM0JEREUxMUNCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReVQRlLkas7iYpPZ/2ZIylKtt PF5eQMElbOKEDgmJJ5DuQ5H6iI6o8PR3ln1T1+3FKeUNTB2nnTUcoT94S96V/Jji 10gZ3iAMivSpupZgBYlBCwH8GrG595X0eR4wAiDVAmmCKbxJheqkYHByik5igAVw hh28cfayBjRQAcP04N57krNeFI8hGeZ11pIHfcBXM7/ybI8oGeZ17gDAGCzEC7Io dj300XmoI988oaDmQ4hER78qcEhH0HQ0HvgNpFO9PrIQszZ1OSOGpUfey3A6HgVf rFpittizB6K0OGWzbpxW4Y9vdq/2e3/32D5/Ev1bLtg/W9sGNs7UTt4IufU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NYR+U93bQZhqQy+F5Dzvd4Ry7gwHwYDVR0j BBgwFoAURm+JNPP+2TVcntCeOCbL4ysl1AIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzM5NzhmOC1hZWFiLTQyN2EtYmQ3NS0yY2RmMWQ5ZWI1MTcvMC80NjZGODkzNEYz RkVEOTM1NUM5RUQwOUUzODI2Q0JFMzJCMjVENDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNCRTMyQjI1 RDQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvNDY2Rjg5MzRGM0ZFRDkzNTVDOUVEMDlFMzgyNkNC RTMyQjI1RDQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhZnXjdsHm+GMqNj3+ZicI65PZgI1c2AoWW dW+YOn3ToL4q4iwAKDtAF7tLZwDsHiSKcclF3jX/32cuQ3tLUEEIjmSxeRY6wMF8 H9UoDK4JDY1y11ZA08H4ZEouVnGdPTEJo6JNrZiyo1vlhD5+n/4B0Gzfvmct9nyG yHl8FBjyf7ma0OMoE9DY26LOCJjHyWYBd+yrbm3QHtMe12oNCbE1OOPaqNtvr2am zGdTIELjwtkq3WEo1inxoxAA0jexiAMbT2QDr+yncBHqGSnTfMtzUSNWBu6kJmYI 5iBvBlFQSc62RFXtEaeVZ07TiR6DpfvFaDit/7/UZSGFWLNjfDM= -----END CERTIFICATE-----Generated at Sat May 10 12:32:39 2025 by rpki-client