$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: SQi4praucXIML7P5Z4j34GLCfCiMchqCCEfLQUSZswc= Subject key identifier: A7:C8:B6:DB:E2:86:01:5C:D5:16:F3:36:D7:3C:E3:96:53:6A:65:84 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 477D989BA71AE7B05AA1D4F2E47E6C38544B70D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 044B Signing time: Sun 11 May 2025 17:12:19 +0000 Manifest this update: Sun 11 May 2025 17:07:19 +0000 Manifest next update: Thu 15 May 2025 01:43:19 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: xEDcdJ1dxk4MTzrB70ajocntyvsdzb0JKQ4MIHfFv9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 01:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7d:98:9b:a7:1a:e7:b0:5a:a1:d4:f2:e4:7e:6c:38:54:4b:70:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: May 11 17:07:19 2025 GMT Not After : May 15 01:43:19 2025 GMT Subject: CN=A7C8B6DBE286015CD516F336D73CE396536A6584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:20:39:65:e0:9d:4a:a8:a6:da:cf:65:ff: 4b:6b:0d:7c:3b:35:70:18:0f:5e:c7:de:63:43:95: 98:4f:cd:ae:26:7a:5d:62:36:a9:57:55:f9:e8:54: 52:88:06:0a:6f:bc:5f:07:89:3e:bb:ad:62:07:1a: d2:15:11:12:1f:ce:a9:14:91:62:76:83:af:0a:9d: f8:ce:e5:44:a2:02:07:37:11:74:c0:ac:68:73:15: 99:ae:5e:ce:f0:bd:40:e6:76:fa:d9:2e:27:df:fd: 06:e6:41:8a:b2:02:12:91:4a:54:c9:c5:54:3c:99: b8:73:6b:c4:aa:a6:82:21:c6:a5:b1:4b:fd:c7:01: d1:b8:72:c9:65:71:53:5b:c0:39:a1:be:30:fb:3e: 3d:b3:ab:20:8c:c5:e7:8d:57:a5:f9:3e:4d:2a:bc: 3f:50:cf:87:43:d8:e0:f7:0f:20:78:4b:da:0e:f6: c9:4c:73:0e:3e:d6:a1:0f:33:1b:6f:96:b9:a6:fe: 0e:6d:27:39:5b:56:ac:7e:26:31:d1:78:e1:2f:12: 58:09:ef:22:76:53:f0:65:09:00:8b:93:d4:1e:89: ed:1a:41:e4:d4:b4:73:64:26:e4:c3:e7:e7:c6:08: 06:08:a5:44:26:e6:4c:dc:d0:a3:4c:6b:f6:bc:2e: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:B6:DB:E2:86:01:5C:D5:16:F3:36:D7:3C:E3:96:53:6A:65:84 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8e:fe:41:af:5f:a8:34:5f:b5:b9:74:10:84:4c:a8:ee:d1: 96:00:f8:ee:52:5f:d6:9b:18:5a:7b:8a:c9:af:67:17:a9:0e: a0:17:fd:ae:84:f1:70:d5:69:27:13:ef:5a:13:23:5c:d8:8a: db:62:ac:33:cf:51:76:60:9f:90:aa:d3:ff:38:a4:af:cf:69: ac:8a:09:d4:a1:63:9b:53:ef:71:5f:5a:3e:73:e7:20:46:ba: 3c:1e:22:f8:94:2f:39:09:d0:3b:74:b4:8e:c8:f0:3c:8b:e1: a4:cb:53:32:14:3a:a0:c6:b6:45:04:99:d5:55:29:c6:ed:78: 1d:e0:8b:19:9f:2a:12:17:00:2e:8e:0f:d5:50:75:b0:5c:d5: 7b:a1:e9:68:99:11:37:1c:ef:12:34:90:5d:51:4e:15:88:c3: 92:69:9c:fc:e7:2e:87:fb:34:91:57:2a:dc:aa:a3:b5:67:f0: e2:b8:ac:42:74:98:35:07:3f:83:1b:b5:ad:53:6b:48:bf:18: 65:9d:22:4a:e8:1f:f3:fb:50:c7:d5:59:76:d2:b3:44:11:1e: 9a:18:62:ae:5e:36:d5:38:9e:0d:49:d9:b1:57:84:a0:c1:1c: 6c:d3:f0:36:f7:73:e1:6b:22:fc:3f:8b:19:53:29:95:13:89: e8:21:b5:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR32Ym6ca57BaodTy5H5sOFRLcNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA1MTExNzA3MTlaFw0yNTA1MTUwMTQzMTlaMDMxMTAvBgNV BAMTKEE3QzhCNkRCRTI4NjAxNUNENTE2RjMzNkQ3M0NFMzk2NTM2QTY1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeCA5ZeCdSqim2s9l/0trDXw7 NXAYD17H3mNDlZhPza4mel1iNqlXVfnoVFKIBgpvvF8HiT67rWIHGtIVERIfzqkU kWJ2g68KnfjO5USiAgc3EXTArGhzFZmuXs7wvUDmdvrZLiff/QbmQYqyAhKRSlTJ xVQ8mbhza8SqpoIhxqWxS/3HAdG4csllcVNbwDmhvjD7Pj2zqyCMxeeNV6X5Pk0q vD9Qz4dD2OD3DyB4S9oO9slMcw4+1qEPMxtvlrmm/g5tJzlbVqx+JjHReOEvElgJ 7yJ2U/BlCQCLk9Qeie0aQeTUtHNkJuTD5+fGCAYIpUQm5kzc0KNMa/a8LhO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp8i22+KGAVzVFvM21zzjllNqZYQwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOO/kGvX6g0X7W5dBCETKju0ZYA+O5SX9ab GFp7ismvZxepDqAX/a6E8XDVaScT71oTI1zYittirDPPUXZgn5Cq0/84pK/PaayK CdShY5tT73FfWj5z5yBGujweIviULzkJ0Dt0tI7I8DyL4aTLUzIUOqDGtkUEmdVV KcbteB3gixmfKhIXAC6OD9VQdbBc1Xuh6WiZETcc7xI0kF1RThWIw5JpnPznLof7 NJFXKtyqo7Vn8OK4rEJ0mDUHP4Mbta1Ta0i/GGWdIkroH/P7UMfVWXbSs0QRHpoY Yq5eNtU4ng1J2bFXhKDBHGzT8Db3c+FrIvw/ixlTKZUTieghtSo= -----END CERTIFICATE-----Generated at Tue May 13 04:08:21 2025 by rpki-client