$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft File: 4C493E592E006837A093CD288BB55329BE38D2D2.mft (raw, json) Hash identifier: nK1oRc6n9lKvGV7qjVsFz7ZksGZspcn6xf7HRc+eVwY= Subject key identifier: 41:01:27:76:F3:38:62:FF:86:4A:7A:17:30:DB:C2:89:03:31:4D:4C Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 Certificate issuer: /CN=4C493E592E006837A093CD288BB55329BE38D2D2 Certificate serial: 30A152768C64368645C27F8DF69314DC198A2778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft Manifest number: 04CF Signing time: Fri 09 May 2025 10:10:05 +0000 Manifest this update: Fri 09 May 2025 10:05:05 +0000 Manifest next update: Mon 12 May 2025 18:34:05 +0000 Files and hashes: 1: 4C493E592E006837A093CD288BB55329BE38D2D2.crl (hash: VJBuhQdCCy83C8ddzoZSA44NEPizdLr1Uqt0L/6elCU=) 2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: RPH1Q5KSgvzuf4nqRbO9CPwqZ8A+VML/hmITbBy7T5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 18:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a1:52:76:8c:64:36:86:45:c2:7f:8d:f6:93:14:dc:19:8a:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2 Validity Not Before: May 9 10:05:05 2025 GMT Not After : May 12 18:34:05 2025 GMT Subject: CN=41012776F33862FF864A7A1730DBC28903314D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:9a:d4:4a:ab:81:5d:19:87:a0:df:d4:d9: 56:d4:9a:a1:09:ca:5f:c0:5d:e9:14:23:b3:13:16: f7:45:af:d5:c3:c1:7d:5d:77:5d:1f:38:4f:0a:54: 77:99:0d:22:2a:70:7b:27:07:ff:b9:88:ab:a3:3c: e3:52:35:fc:61:1a:d3:8c:13:cb:15:56:a9:a6:67: c2:78:93:10:96:2f:9d:5c:8d:a0:f7:08:46:a1:5e: 3e:09:98:6b:66:74:65:3d:af:f3:62:5c:1a:6b:74: 08:63:6f:ea:53:b4:88:b0:5d:b7:17:70:51:d8:81: 32:e3:64:24:f0:a5:a7:ab:f2:db:ab:54:78:41:aa: 02:99:23:a6:61:b6:74:5b:1e:52:d7:bd:35:44:3a: f2:52:e8:fb:9d:0b:98:2d:33:08:c2:be:98:c6:ae: fb:de:7d:bf:18:93:3f:8f:0a:56:9d:f1:4f:b7:79: fb:18:13:85:ad:d0:89:6c:7c:cb:14:b0:f0:f3:67: 58:68:83:f1:ba:7c:e3:3c:39:0d:ae:00:40:e2:2c: b8:7f:43:89:c8:63:15:22:b1:07:c6:6b:c8:04:d3: db:3d:f8:bb:95:70:df:1c:f5:cd:4f:81:1c:86:0d: a7:31:6c:35:27:e3:eb:2c:1e:d3:c0:fe:5c:3c:66: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:27:76:F3:38:62:FF:86:4A:7A:17:30:DB:C2:89:03:31:4D:4C X509v3 Authority Key Identifier: keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:65:0e:44:cc:fd:5e:0e:c9:61:5d:b9:00:b0:4c:b6:92: df:88:ac:60:8c:b6:a4:f8:07:ee:39:6b:06:37:b5:23:c4:76: 72:c6:20:d1:c3:08:14:2a:7f:35:0b:f1:0a:42:ae:44:4f:bd: d9:03:d2:ea:8d:1f:4d:9a:be:46:61:a4:60:01:18:85:99:e9: 47:3d:62:20:54:92:00:a6:85:7d:6c:a0:1c:71:9e:72:d3:8a: 28:64:d7:2a:c9:13:f2:0f:f9:07:54:19:17:2a:fb:ae:e0:c2: 11:6c:39:0e:dc:e1:ab:da:21:98:0c:45:ec:d7:9c:41:4d:ee: 6a:9a:a7:c8:40:12:a6:4f:4a:06:95:be:83:d5:bf:da:8f:31: fe:b0:49:50:05:6f:d8:f2:13:ec:e6:05:81:e0:67:ee:8e:ed: 02:93:c8:d4:9f:7e:20:85:de:34:a5:d9:19:8a:35:9a:58:e8: bb:ef:86:b5:9c:2c:00:4e:2a:04:4c:21:e9:18:a3:d7:5d:f1: 8c:01:b5:5c:e3:8c:54:b8:15:1a:e6:6b:f4:88:65:81:85:a8: bb:37:a8:24:a8:26:76:34:fa:4f:b5:66:60:e7:30:74:8c:d7: 04:fc:08:e3:f5:1d:d8:8a:c7:62:ad:b4:7a:41:3f:75:5a:10: 67:fb:2c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKFSdoxkNoZFwn+N9pMU3BmKJ3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlC RTM4RDJEMjAeFw0yNTA1MDkxMDA1MDVaFw0yNTA1MTIxODM0MDVaMDMxMTAvBgNV BAMTKDQxMDEyNzc2RjMzODYyRkY4NjRBN0ExNzMwREJDMjg5MDMzMTRENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd75rUSquBXRmHoN/U2VbUmqEJ yl/AXekUI7MTFvdFr9XDwX1dd10fOE8KVHeZDSIqcHsnB/+5iKujPONSNfxhGtOM E8sVVqmmZ8J4kxCWL51cjaD3CEahXj4JmGtmdGU9r/NiXBprdAhjb+pTtIiwXbcX cFHYgTLjZCTwpaer8turVHhBqgKZI6ZhtnRbHlLXvTVEOvJS6PudC5gtMwjCvpjG rvvefb8Ykz+PClad8U+3efsYE4Wt0IlsfMsUsPDzZ1hog/G6fOM8OQ2uAEDiLLh/ Q4nIYxUisQfGa8gE09s9+LuVcN8c9c1PgRyGDacxbDUn4+ssHtPA/lw8ZlNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQEndvM4Yv+GSnoXMNvCiQMxTUwwHwYDVR0j BBgwFoAUTEk+WS4AaDegk80oi7VTKb440tIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODAwMmYzZi1iZjE3LTRlNDgtOWU4NS04NDM2MDYzMzEzZDIvMC80QzQ5M0U1OTJF MDA2ODM3QTA5M0NEMjg4QkI1NTMyOUJFMzhEMkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlCRTM4 RDJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgwMDJmM2YtYmYxNy00ZTQ4LTll ODUtODQzNjA2MzMxM2QyLzAvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUz MjlCRTM4RDJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk/ZQ5EzP1eDslhXbkAsEy2kt+IrGCMtqT4 B+45awY3tSPEdnLGINHDCBQqfzUL8QpCrkRPvdkD0uqNH02avkZhpGABGIWZ6Uc9 YiBUkgCmhX1soBxxnnLTiihk1yrJE/IP+QdUGRcq+67gwhFsOQ7c4avaIZgMRezX nEFN7mqap8hAEqZPSgaVvoPVv9qPMf6wSVAFb9jyE+zmBYHgZ+6O7QKTyNSffiCF 3jSl2RmKNZpY6LvvhrWcLABOKgRMIekYo9dd8YwBtVzjjFS4FRrma/SIZYGFqLs3 qCSoJnY0+k+1ZmDnMHSM1wT8COP1HdiKx2KttHpBP3VaEGf7LNE= -----END CERTIFICATE-----Generated at Sat May 10 23:14:50 2025 by rpki-client