$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: Bv5QTijfFE+rvsRQ8eqBxfL6lDX9n7OB2e7rl3FyZAY= Subject key identifier: 39:28:63:F2:9E:47:01:17:8D:3E:88:59:38:89:91:65:F8:19:4B:FC Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 714C1C1A6FFA7EEA63994E0352BEC8069C273801 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01AD Signing time: Mon 12 May 2025 14:11:17 +0000 Manifest this update: Mon 12 May 2025 14:06:17 +0000 Manifest next update: Thu 15 May 2025 16:19:17 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: fy9aDEHg5tjgfIu7YzaVX8zYAeCJUH/g4nysUdpezNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4c:1c:1a:6f:fa:7e:ea:63:99:4e:03:52:be:c8:06:9c:27:38:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: May 12 14:06:17 2025 GMT Not After : May 15 16:19:17 2025 GMT Subject: CN=392863F29E4701178D3E885938899165F8194BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:51:c2:7f:0f:2d:39:a1:02:ff:9e:1c:08: 56:c6:7a:69:2a:77:d3:45:e7:7a:06:fd:f9:83:95: 4d:d6:3d:18:0a:84:c8:13:f6:2a:7c:7d:9a:c4:54: 8b:52:c4:25:14:5d:c3:14:1a:c9:0e:18:6a:ec:25: e2:80:15:08:ea:a5:c4:2b:43:de:91:af:99:3f:c6: ff:f8:26:29:6b:0e:3b:3b:71:6b:1e:39:bb:3c:fc: b6:eb:53:93:19:d1:72:00:41:33:23:8d:67:58:7e: 6b:c6:49:88:da:68:a4:68:6a:f9:bd:8b:61:07:07: 2e:a6:13:3c:22:ab:4b:a1:8d:12:76:1d:60:46:05: 3e:2a:58:29:9b:b8:f7:1a:98:48:70:7c:25:d3:da: 47:b1:27:dd:a6:39:f4:17:21:7f:8c:ec:b0:ad:3f: bb:b3:d9:90:0d:84:4b:45:a9:29:e0:b3:cc:a3:9e: 64:a8:46:94:d5:5f:56:b9:d5:b0:90:8a:c7:37:5b: 32:04:c7:4a:91:0e:ff:c4:58:09:0f:2b:ce:fa:2f: 1f:d6:1b:1a:03:ac:ec:a0:3e:fd:7d:a1:e0:16:67: 23:00:56:01:d5:e4:1e:b1:cc:4f:23:71:dc:5f:66: d4:cb:66:cb:02:4e:a2:db:27:b1:26:b3:dc:b8:33: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:28:63:F2:9E:47:01:17:8D:3E:88:59:38:89:91:65:F8:19:4B:FC X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6b:ee:dd:4a:b4:d8:28:32:37:4b:d8:b3:e3:91:b0:3c:e2: e4:1d:22:bb:9f:8c:2d:fc:73:c1:b4:8f:8c:ca:89:e3:01:ab: f2:a5:0a:97:8a:a2:25:97:9f:98:36:86:a5:9b:85:01:84:94: 1b:61:76:c2:41:93:5a:de:06:8c:2a:db:53:1f:5d:db:1f:22: b2:5e:6d:c9:b8:39:9e:d3:10:ac:2a:23:cf:d4:98:6f:3b:14: 70:2d:8d:57:cd:52:82:01:26:e0:db:5e:06:4f:ee:88:be:1d: df:41:4f:3d:77:b5:ce:ee:c0:a1:ce:a9:85:bd:08:ed:3f:c9: b7:98:99:8e:2e:79:f6:ce:65:b4:69:01:c9:8a:21:90:71:fe: 2c:14:aa:e3:d8:da:03:5f:a0:96:af:00:a7:d6:d7:66:ec:ef: 34:80:d0:e6:c8:02:d8:94:82:82:1a:ed:13:08:8e:5e:42:ba: 55:49:35:e9:34:f1:83:55:36:8c:1a:a6:9c:a7:14:36:bb:8c: 1d:bc:81:5e:2a:2a:dd:d9:0f:91:2a:66:bb:33:d1:55:a2:b1: d9:f1:41:21:cc:b7:fc:59:08:f8:d6:73:35:20:18:a3:64:ff: 8c:d2:f4:cf:7e:86:be:0f:46:4e:86:e7:75:6a:2c:f3:cd:59: b9:d6:19:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUwcGm/6fupjmU4DUr7IBpwnOAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTA1MTIxNDA2MTdaFw0yNTA1MTUxNjE5MTdaMDMxMTAvBgNV BAMTKDM5Mjg2M0YyOUU0NzAxMTc4RDNFODg1OTM4ODk5MTY1RjgxOTRCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCks1HCfw8tOaEC/54cCFbGemkq d9NF53oG/fmDlU3WPRgKhMgT9ip8fZrEVItSxCUUXcMUGskOGGrsJeKAFQjqpcQr Q96Rr5k/xv/4JilrDjs7cWseObs8/LbrU5MZ0XIAQTMjjWdYfmvGSYjaaKRoavm9 i2EHBy6mEzwiq0uhjRJ2HWBGBT4qWCmbuPcamEhwfCXT2kexJ92mOfQXIX+M7LCt P7uz2ZANhEtFqSngs8yjnmSoRpTVX1a51bCQisc3WzIEx0qRDv/EWAkPK876Lx/W GxoDrOygPv19oeAWZyMAVgHV5B6xzE8jcdxfZtTLZssCTqLbJ7Ems9y4M2AzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOShj8p5HAReNPohZOImRZfgZS/wwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9r7t1KtNgoMjdL2LPjkbA84uQdIrufjC38 c8G0j4zKieMBq/KlCpeKoiWXn5g2hqWbhQGElBthdsJBk1reBowq21MfXdsfIrJe bcm4OZ7TEKwqI8/UmG87FHAtjVfNUoIBJuDbXgZP7oi+Hd9BTz13tc7uwKHOqYW9 CO0/ybeYmY4uefbOZbRpAcmKIZBx/iwUquPY2gNfoJavAKfW12bs7zSA0ObIAtiU goIa7RMIjl5CulVJNek08YNVNowappynFDa7jB28gV4qKt3ZD5EqZrsz0VWisdnx QSHMt/xZCPjWczUgGKNk/4zS9M9+hr4PRk6G53VqLPPNWbnWGak= -----END CERTIFICATE-----Generated at Tue May 13 13:30:17 2025 by rpki-client