$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: IMW/fGX1ytm7sfj+pe3YbeO5vxPvPhlOw4CBJyDgP48= Subject key identifier: AF:E6:E7:4B:AC:AF:9B:F6:59:B3:F3:81:3E:CA:66:72:F8:39:1A:D7 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 5BFA2FF63D359FA35D6AF9959ADFF9EE43D25252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: FB Signing time: Fri 09 May 2025 18:22:19 +0000 Manifest this update: Fri 09 May 2025 18:17:19 +0000 Manifest next update: Tue 13 May 2025 02:43:19 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: 2tH/0Mx/d3X6+sRKqjAczk/LeAGlodEjqGX+VtuKV18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 17:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fa:2f:f6:3d:35:9f:a3:5d:6a:f9:95:9a:df:f9:ee:43:d2:52:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: May 9 18:17:19 2025 GMT Not After : May 13 02:43:19 2025 GMT Subject: CN=AFE6E74BACAF9BF659B3F3813ECA6672F8391AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:c3:76:05:8d:a0:4f:93:48:cd:c4:5b:53: 90:d4:c6:82:27:00:50:01:b4:be:62:a2:34:97:5f: 26:33:28:d6:ca:37:3a:f3:b3:f8:c0:e2:6c:b9:cb: 62:0d:72:aa:9a:d0:8b:13:aa:d2:57:2e:13:a3:ce: 06:c0:5f:04:fc:f3:8a:c8:02:83:7f:00:75:8f:45: d3:b6:73:19:47:d7:93:9b:d7:4e:e9:58:b0:a9:0c: 79:a5:d7:6b:84:cc:05:20:6e:ab:72:48:fc:1d:d8: 8e:4f:84:af:5e:cf:9e:8e:61:81:82:34:13:f8:6c: 56:e5:4d:a6:02:38:f6:8d:db:ad:01:2d:bb:18:f2: 27:3d:4b:2b:94:c9:f1:ca:15:2b:a9:f6:f9:70:d9: 07:50:8a:e9:d5:62:c5:bd:58:dd:6e:fd:cc:3c:08: 57:8b:dd:f0:be:b5:9d:69:15:a3:85:63:fb:51:86: d2:a7:90:d6:48:28:1b:e3:59:b7:2f:09:1d:1e:8f: 22:c5:8e:7b:41:12:34:87:85:0a:06:05:3d:22:49: 1a:91:a7:98:f2:2d:9a:b3:87:d4:e2:f7:81:3d:93: b8:74:b9:c0:34:89:6b:41:4c:45:b9:53:29:89:f2: fe:69:ed:cb:8f:21:d6:99:73:4f:4d:88:34:2d:9b: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:E7:4B:AC:AF:9B:F6:59:B3:F3:81:3E:CA:66:72:F8:39:1A:D7 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:4f:aa:b1:6a:58:97:7a:77:7c:f8:48:09:13:47:e9:ea: 11:04:af:04:d6:fe:b6:9b:1a:d7:61:20:50:5f:20:1b:f1:5d: a8:f2:d4:04:8d:11:f0:92:bd:89:2d:ac:8f:b9:50:06:8b:68: ba:ec:4e:e8:ed:3c:b4:06:13:5e:57:91:c2:41:3c:0a:dc:39: 6c:56:57:66:00:70:0f:f2:fe:8f:65:da:e9:99:09:c6:eb:9e: af:f8:57:48:f9:2b:2c:af:8c:40:cb:ff:6b:af:25:06:db:2e: 55:95:2a:5d:a6:1d:0a:dc:79:c8:16:63:98:30:f1:68:c3:91: 8a:56:ad:ac:56:aa:4d:67:62:22:4f:33:38:dd:48:5c:8a:27: 17:a0:8a:5c:9e:8f:f7:73:2c:b1:5b:86:3b:1c:7e:90:61:29: cb:25:05:c1:f9:5c:56:89:de:f6:ab:ab:8e:79:1d:d2:76:83: b4:40:7c:df:d2:fa:32:6b:f4:67:85:fd:6c:63:c4:bd:62:d1: b0:5f:73:71:4f:95:95:6f:3d:2d:98:a9:f0:53:5f:31:1c:10: ea:b7:89:a6:55:25:e8:d5:be:e5:06:b1:63:10:3e:65:ec:78: 6a:c9:09:0a:cf:ed:af:6f:f9:2f:e3:fd:ba:a2:2b:b9:13:29: 31:eb:f9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/ov9j01n6NdavmVmt/57kPSUlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA1MDkxODE3MTlaFw0yNTA1MTMwMjQzMTlaMDMxMTAvBgNV BAMTKEFGRTZFNzRCQUNBRjlCRjY1OUIzRjM4MTNFQ0E2NjcyRjgzOTFBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC98N2BY2gT5NIzcRbU5DUxoIn AFABtL5iojSXXyYzKNbKNzrzs/jA4my5y2INcqqa0IsTqtJXLhOjzgbAXwT884rI AoN/AHWPRdO2cxlH15Ob107pWLCpDHml12uEzAUgbqtySPwd2I5PhK9ez56OYYGC NBP4bFblTaYCOPaN260BLbsY8ic9SyuUyfHKFSup9vlw2QdQiunVYsW9WN1u/cw8 CFeL3fC+tZ1pFaOFY/tRhtKnkNZIKBvjWbcvCR0ejyLFjntBEjSHhQoGBT0iSRqR p5jyLZqzh9Ti94E9k7h0ucA0iWtBTEW5UymJ8v5p7cuPIdaZc09NiDQtmy+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+bnS6yvm/ZZs/OBPspmcvg5GtcwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYST6qxaliXend8+EgJE0fp6hEErwTW/rab GtdhIFBfIBvxXajy1ASNEfCSvYktrI+5UAaLaLrsTujtPLQGE15XkcJBPArcOWxW V2YAcA/y/o9l2umZCcbrnq/4V0j5KyyvjEDL/2uvJQbbLlWVKl2mHQrcecgWY5gw 8WjDkYpWraxWqk1nYiJPMzjdSFyKJxegilyej/dzLLFbhjscfpBhKcslBcH5XFaJ 3varq455HdJ2g7RAfN/S+jJr9GeF/WxjxL1i0bBfc3FPlZVvPS2YqfBTXzEcEOq3 iaZVJejVvuUGsWMQPmXseGrJCQrP7a9v+S/j/bqiK7kTKTHr+ak= -----END CERTIFICATE-----Generated at Fri May 9 20:00:26 2025 by rpki-client