$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: Op/BF0ClVa4+qEO0Ge4nEl57FlHK4lMycN94Lczlp08= Subject key identifier: 46:EB:F9:E2:A6:BE:79:70:29:85:9B:BD:A3:55:9C:0C:9A:BE:8F:EF Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 4C4ABACC61C2A10C5010885D565C2A6B68BAF7A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 04E8 Signing time: Sun 29 Jun 2025 23:01:06 +0000 Manifest this update: Sun 29 Jun 2025 22:56:06 +0000 Manifest next update: Thu 03 Jul 2025 05:24:06 +0000 Files and hashes: 1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: NDgwCBvyNDxjUJvzlz7v+a+snG9/OFBinhVAPjSL/gA=) 2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=) 3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) 4: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4a:ba:cc:61:c2:a1:0c:50:10:88:5d:56:5c:2a:6b:68:ba:f7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Jun 29 22:56:06 2025 GMT Not After : Jul 3 05:24:06 2025 GMT Subject: CN=46EBF9E2A6BE797029859BBDA3559C0C9ABE8FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:b3:c4:cb:11:75:42:f3:ac:31:27:f5:79: 22:64:44:86:81:31:ff:4b:65:49:58:f9:2c:90:2f: 38:54:24:fb:24:66:7d:19:a9:04:24:5e:44:ce:97: da:44:23:65:86:a1:74:08:b5:2a:34:24:50:32:a2: 71:bc:a0:6c:1b:79:73:cd:38:35:75:64:3b:15:5d: f6:12:84:4e:dc:47:38:1b:41:fe:e7:d7:3b:ee:a9: ce:18:c1:2a:b1:7a:7f:0e:fc:8b:32:f3:c3:e2:ed: e4:b7:76:16:99:20:69:c0:c4:f7:eb:89:5f:83:56: cf:0d:52:1c:9f:e0:28:fc:89:0e:59:7a:dc:68:00: f0:63:4c:07:25:e4:8e:66:e3:d1:9b:95:33:fd:d7: 4a:2f:be:49:94:a7:d8:0a:82:32:a8:45:49:d8:1a: a9:69:65:91:13:72:43:bf:c4:60:7e:6d:53:61:1d: 0a:40:bc:3d:cb:7e:c7:83:fb:00:b8:00:53:e2:26: 93:25:04:6a:0d:39:6e:3f:f5:b8:31:98:ce:eb:b2: d6:07:21:0f:37:ba:be:72:b7:38:f6:ea:61:3c:50: 0e:b5:7f:ba:57:1e:5d:32:fc:cb:fa:77:cc:4a:89: 20:d6:7f:2d:6a:79:d3:cc:2e:91:3a:f2:da:e1:cb: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EB:F9:E2:A6:BE:79:70:29:85:9B:BD:A3:55:9C:0C:9A:BE:8F:EF X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:14:45:65:e1:82:f3:1e:6f:67:48:4e:5c:a3:aa:0f:7c:66: 21:30:dd:c4:19:9e:07:9f:01:c4:24:20:e8:7d:90:bb:5b:7c: 13:df:bc:e4:28:b8:8c:66:63:a1:3c:40:e8:9f:42:fc:26:9e: 03:55:19:8e:ca:0c:57:bc:50:7f:52:c2:89:09:a6:d2:ac:5c: b5:0d:d7:33:7e:9b:d7:ce:11:19:c2:b7:dc:69:b4:be:2f:e3: 0e:ff:0f:be:df:e4:9c:fd:40:da:05:d6:d3:fe:64:4c:ed:77: 61:d2:29:75:91:02:d9:39:0e:a6:11:9b:0a:04:37:1b:be:6f: 73:d8:36:04:7e:87:90:19:37:3e:3a:47:5e:28:f8:f6:e9:1f: d3:dd:fa:01:48:ac:5e:17:c8:3d:37:02:06:97:51:5c:10:22: ea:e1:30:2c:e6:ad:87:0d:33:6c:02:79:3a:0e:51:1d:e3:85: 2a:2f:b2:eb:0d:9a:c4:f2:aa:3e:ca:8b:05:9c:0b:5e:9f:f7: 63:bd:28:91:67:b3:8d:c8:31:f9:5f:f7:8d:71:38:96:cb:b8: 91:39:b1:81:57:72:f7:b5:2f:9c:c1:f0:14:c7:86:b1:c7:87: c6:c5:53:69:11:3e:51:ed:63:2e:3b:65:13:c6:99:22:c7:e9: 84:b4:d6:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEq6zGHCoQxQEIhdVlwqa2i696YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA2MjkyMjU2MDZaFw0yNTA3MDMwNTI0MDZaMDMxMTAvBgNV BAMTKDQ2RUJGOUUyQTZCRTc5NzAyOTg1OUJCREEzNTU5QzBDOUFCRThGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscbPEyxF1QvOsMSf1eSJkRIaB Mf9LZUlY+SyQLzhUJPskZn0ZqQQkXkTOl9pEI2WGoXQItSo0JFAyonG8oGwbeXPN ODV1ZDsVXfYShE7cRzgbQf7n1zvuqc4YwSqxen8O/Isy88Pi7eS3dhaZIGnAxPfr iV+DVs8NUhyf4Cj8iQ5ZetxoAPBjTAcl5I5m49GblTP910ovvkmUp9gKgjKoRUnY GqlpZZETckO/xGB+bVNhHQpAvD3LfseD+wC4AFPiJpMlBGoNOW4/9bgxmM7rstYH IQ83ur5ytzj26mE8UA61f7pXHl0y/Mv6d8xKiSDWfy1qedPMLpE68trhy4D7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuv54qa+eXAphZu9o1WcDJq+j+8wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsURWXhgvMeb2dITlyjqg98ZiEw3cQZngef AcQkIOh9kLtbfBPfvOQouIxmY6E8QOifQvwmngNVGY7KDFe8UH9SwokJptKsXLUN 1zN+m9fOERnCt9xptL4v4w7/D77f5Jz9QNoF1tP+ZEztd2HSKXWRAtk5DqYRmwoE Nxu+b3PYNgR+h5AZNz46R14o+PbpH9Pd+gFIrF4XyD03AgaXUVwQIurhMCzmrYcN M2wCeToOUR3jhSovsusNmsTyqj7KiwWcC16f92O9KJFns43IMflf941xOJbLuJE5 sYFXcve1L5zB8BTHhrHHh8bFU2kRPlHtYy47ZRPGmSLH6YS01rc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:56 2025 by rpki-client