$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: mfHshPjGjki8Pfn4Ia/wA9qGjTugsI6hmeZaYKHCF+A= Subject key identifier: 58:3A:E4:B3:4B:4B:11:5D:D9:E0:C3:0F:82:D6:67:AA:41:04:23:EB Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 0ACA49524814FD1E88C43BF5C9EFE738DC8EF578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 18:31:07 +0000 Manifest this update: Fri 09 May 2025 18:26:07 +0000 Manifest next update: Tue 13 May 2025 06:11:07 +0000 Files and hashes: 1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: ZsumLsE/Fio2mZpOEO0SVM+UJbZjrgfgnBG8kH68cgk=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=) 3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: TKlrYYxdW4d0W7hA0lV/DSzBaApabiKYJpgjro7Ns1Y=) 4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ca:49:52:48:14:fd:1e:88:c4:3b:f5:c9:ef:e7:38:dc:8e:f5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: May 9 18:26:07 2025 GMT Not After : May 13 06:11:07 2025 GMT Subject: CN=583AE4B34B4B115DD9E0C30F82D667AA410423EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:84:26:5e:b6:b1:2d:1a:ba:e0:95:2a:44: 51:8e:2f:86:a9:fb:a2:10:de:b7:9a:ea:0f:ba:4a: 61:96:12:c1:8e:e3:7f:96:85:b5:19:25:b0:4a:c9: bb:7a:c8:06:18:12:9e:58:91:08:f4:aa:2e:0c:cd: 2f:7a:3c:32:f4:d7:8a:18:12:d6:1c:b4:b4:a8:ef: 58:ab:4c:c6:31:28:df:6e:e8:51:66:6c:f5:5e:a4: dd:7b:a1:95:a1:6c:7c:2c:d8:2e:48:9d:e1:b8:04: a3:d0:8e:05:5a:5a:94:3a:4a:0c:3d:ea:41:a0:16: c5:22:b5:1d:3f:60:b2:90:da:59:ab:76:5a:25:c3: de:46:04:f6:5e:21:f3:1e:12:ff:9d:1c:80:9a:f7: 0e:8c:e0:ea:c3:4d:01:ce:ee:3f:2a:d7:06:21:a5: c3:e8:59:fd:2d:d9:62:38:93:04:7b:32:12:a8:f7: 31:43:45:b2:3e:f7:84:0f:57:dc:2d:b1:84:ca:36: b0:3a:99:dc:db:4a:a2:12:84:03:9a:89:cb:0f:e5: e6:99:af:8d:87:a7:b3:d4:12:02:46:b2:7b:77:1d: 51:9a:1f:ce:c0:7e:8f:8d:b3:3a:c1:c5:5f:b8:ea: 23:cd:ce:ed:d5:16:f5:ba:12:d8:ce:04:ee:a9:28: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:E4:B3:4B:4B:11:5D:D9:E0:C3:0F:82:D6:67:AA:41:04:23:EB X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:58:f6:c4:23:18:1f:13:d4:5d:20:12:fb:ad:06:8b:ab:87: 2e:81:be:43:55:8d:5a:4c:f5:08:19:be:00:ac:40:f7:e8:cd: 4b:2a:0b:34:90:19:a6:7e:f3:c2:87:7b:df:9b:6b:f8:4c:fc: 71:9e:d4:d1:51:0d:c0:c2:c8:96:87:86:e9:95:93:a6:22:26: 5b:47:39:e9:5b:f6:0a:ed:a0:6d:cb:76:42:bb:c0:b6:5f:90: cc:71:3d:30:16:fc:91:ae:ce:61:3f:80:d7:6b:13:7d:e5:fe: 73:a0:c8:66:1d:6c:f3:48:13:ac:b8:ba:a2:03:20:78:10:44: 60:4f:55:19:17:ce:99:33:62:26:9d:ed:cd:ae:14:03:43:c8: 34:9a:eb:ae:97:85:a3:f0:64:70:7d:ac:53:ce:cb:f1:a7:e3: d6:ed:bf:3a:18:c6:0a:2b:7d:a2:c7:27:13:0a:28:67:93:1f: bd:f4:6b:a2:21:3e:a0:17:dd:55:75:90:d9:8d:86:47:62:86: 20:e4:e3:25:6c:2f:d0:98:19:e1:8a:e5:80:54:3b:8e:c5:6b: f1:e0:0f:ac:46:35:0b:ab:e8:07:30:28:67:bc:fd:dd:5d:a3: d8:85:72:be:f8:50:d2:72:4f:bf:b6:18:ea:59:b8:48:e4:9b: fe:80:28:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCspJUkgU/R6IxDv1ye/nONyO9XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA1MDkxODI2MDdaFw0yNTA1MTMwNjExMDdaMDMxMTAvBgNV BAMTKDU4M0FFNEIzNEI0QjExNUREOUUwQzMwRjgyRDY2N0FBNDEwNDIzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShoQmXraxLRq64JUqRFGOL4ap +6IQ3rea6g+6SmGWEsGO43+WhbUZJbBKybt6yAYYEp5YkQj0qi4MzS96PDL014oY EtYctLSo71irTMYxKN9u6FFmbPVepN17oZWhbHws2C5IneG4BKPQjgVaWpQ6Sgw9 6kGgFsUitR0/YLKQ2lmrdlolw95GBPZeIfMeEv+dHICa9w6M4OrDTQHO7j8q1wYh pcPoWf0t2WI4kwR7MhKo9zFDRbI+94QPV9wtsYTKNrA6mdzbSqIShAOaicsP5eaZ r42Hp7PUEgJGsnt3HVGaH87Afo+NszrBxV+46iPNzu3VFvW6EtjOBO6pKCVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDrks0tLEV3Z4MMPgtZnqkEEI+swHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVY9sQjGB8T1F0gEvutBourhy6BvkNVjVpM 9QgZvgCsQPfozUsqCzSQGaZ+88KHe9+ba/hM/HGe1NFRDcDCyJaHhumVk6YiJltH Oelb9grtoG3LdkK7wLZfkMxxPTAW/JGuzmE/gNdrE33l/nOgyGYdbPNIE6y4uqID IHgQRGBPVRkXzpkzYiad7c2uFANDyDSa666XhaPwZHB9rFPOy/Gn49btvzoYxgor faLHJxMKKGeTH730a6IhPqAX3VV1kNmNhkdihiDk4yVsL9CYGeGK5YBUO47Fa/Hg D6xGNQur6AcwKGe8/d1do9iFcr74UNJyT7+2GOpZuEjkm/6AKIU= -----END CERTIFICATE-----Generated at Sat May 10 04:54:55 2025 by rpki-client