$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: Z74bO8ytT9h0MzT7QlE3rfvAPxBoveZPZZc6/7BEMcA= Subject key identifier: 0B:E7:12:7F:9E:D5:C7:06:58:8F:40:46:F0:86:69:23:E5:59:43:FC Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 4ED1F555DC7E2808E0DD7BCA7AE8E495F254786A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01B6 Signing time: Wed 07 May 2025 15:01:45 +0000 Manifest this update: Wed 07 May 2025 14:56:45 +0000 Manifest next update: Sat 10 May 2025 21:34:45 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: aNud/zgYu6l6Ku39y947pFd/DqMubZxxf7aQN3bZuZ0=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d1:f5:55:dc:7e:28:08:e0:dd:7b:ca:7a:e8:e4:95:f2:54:78:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: May 7 14:56:45 2025 GMT Not After : May 10 21:34:45 2025 GMT Subject: CN=0BE7127F9ED5C706588F4046F0866923E55943FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:a6:ba:66:42:98:ac:8d:71:39:55:a6:45: 22:29:82:d3:92:95:4a:c3:aa:f8:85:29:fb:8a:28: 1f:14:90:08:68:25:98:f4:e4:7d:b2:c0:14:d4:b8: ba:a9:44:ef:53:34:63:12:46:bf:c1:6b:9c:26:01: 7f:10:fa:1f:bf:1e:5c:b6:9b:91:98:ff:1b:7f:98: 60:ed:5a:03:38:7d:e7:d5:d3:f6:65:ea:21:02:5c: 77:c7:48:4c:46:5c:c2:e4:fb:ba:a6:67:7a:c0:9a: 41:15:d9:8b:11:01:0d:08:27:11:66:46:2e:55:8a: d3:77:22:49:45:f6:15:ff:46:0a:9a:d9:a7:0a:56: a4:ab:95:7f:63:e1:19:ea:ee:fd:da:49:d8:7b:d8: 14:d7:7e:f4:7b:97:3d:91:5d:2b:bb:5b:13:00:6b: 9a:82:0b:ce:5c:79:43:5c:a6:e2:5f:be:39:42:03: 4f:d0:a6:e7:47:ae:8e:89:f8:6a:7e:43:5d:23:c1: c3:1d:92:39:e2:0d:a6:94:5a:87:2a:07:a5:75:79: ba:e3:a2:18:e1:0e:0a:0a:b4:f1:04:0a:19:c9:68: 64:59:fa:23:e4:3e:fc:73:81:a8:f7:42:cb:a7:ea: f3:fa:d7:99:0a:dc:35:6f:1a:3a:5e:d4:5a:bb:fe: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:12:7F:9E:D5:C7:06:58:8F:40:46:F0:86:69:23:E5:59:43:FC X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e1:16:91:ab:69:a2:9c:85:c3:b5:5c:77:be:7a:36:8e:fc: ab:1d:13:92:67:0a:b6:c8:03:7b:0d:30:28:89:7f:3a:df:00: a8:56:ad:71:ed:e7:5c:0d:2b:c8:5e:53:15:16:ec:99:98:19: 30:79:b8:65:3d:0d:19:d4:29:41:21:4c:09:08:d0:98:3f:ce: 52:52:cd:51:49:66:c1:40:76:3e:8e:d1:98:a6:37:cd:5d:db: 37:af:44:2b:43:77:f2:3e:e6:8c:7b:c9:3f:0d:10:d9:a6:ec: 04:3d:de:0a:f7:88:ed:b4:2e:a2:32:f7:ad:6f:18:c7:69:d5: fc:b1:0c:31:9e:e1:2e:0c:bf:ae:b5:77:0f:c7:6d:4f:ff:05: c8:ef:4a:c3:68:2a:b1:27:40:f1:d9:1a:f8:24:8b:64:a3:77: 0c:ff:90:15:43:9b:23:ff:17:3a:8b:c9:da:07:a4:98:90:79: ab:bb:1f:d3:66:ae:57:32:c0:90:ca:d2:33:95:ba:fe:86:a7: be:5a:36:95:6f:48:6e:4d:9d:bf:88:ad:e0:5f:dc:ac:88:5e: 22:92:5b:48:2f:e3:1f:e8:00:80:fb:e5:b2:60:3c:59:88:bd: ca:2f:5e:d9:28:61:24:57:a9:86:53:41:27:77:a9:f6:63:4f: dc:cf:ca:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtH1Vdx+KAjg3XvKeujklfJUeGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA1MDcxNDU2NDVaFw0yNTA1MTAyMTM0NDVaMDMxMTAvBgNV BAMTKDBCRTcxMjdGOUVENUM3MDY1ODhGNDA0NkYwODY2OTIzRTU1OTQzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcaqa6ZkKYrI1xOVWmRSIpgtOS lUrDqviFKfuKKB8UkAhoJZj05H2ywBTUuLqpRO9TNGMSRr/Ba5wmAX8Q+h+/Hly2 m5GY/xt/mGDtWgM4fefV0/Zl6iECXHfHSExGXMLk+7qmZ3rAmkEV2YsRAQ0IJxFm Ri5VitN3IklF9hX/Rgqa2acKVqSrlX9j4Rnq7v3aSdh72BTXfvR7lz2RXSu7WxMA a5qCC85ceUNcpuJfvjlCA0/QpudHro6J+Gp+Q10jwcMdkjniDaaUWocqB6V1ebrj ohjhDgoKtPEEChnJaGRZ+iPkPvxzgaj3Qsun6vP615kK3DVvGjpe1Fq7/uibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+cSf57VxwZYj0BG8IZpI+VZQ/wwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnhFpGraaKchcO1XHe+ejaO/KsdE5JnCrbI A3sNMCiJfzrfAKhWrXHt51wNK8heUxUW7JmYGTB5uGU9DRnUKUEhTAkI0Jg/zlJS zVFJZsFAdj6O0ZimN81d2zevRCtDd/I+5ox7yT8NENmm7AQ93gr3iO20LqIy961v GMdp1fyxDDGe4S4Mv661dw/HbU//BcjvSsNoKrEnQPHZGvgki2Sjdwz/kBVDmyP/ FzqLydoHpJiQeau7H9NmrlcywJDK0jOVuv6Gp75aNpVvSG5Nnb+IreBf3KyIXiKS W0gv4x/oAID75bJgPFmIvcovXtkoYSRXqYZTQSd3qfZjT9zPynk= -----END CERTIFICATE-----Generated at Thu May 8 10:26:38 2025 by rpki-client