$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: Xh5yf9I5GhCI0Bg06xUiwCHDOcnO46WG6e9m/PvJTc4= Subject key identifier: 6D:4C:2D:1F:65:CD:01:B9:28:65:22:2A:C8:DA:88:1A:EB:70:53:9A Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 415BBA70EDDFAA227CFB7F88E05BF049EAEF5336 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 04DE Signing time: Fri 09 May 2025 10:50:55 +0000 Manifest this update: Fri 09 May 2025 10:45:55 +0000 Manifest next update: Mon 12 May 2025 21:22:55 +0000 Files and hashes: 1: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: EiOpEEWve4ItYjwbIDlrPYKQ63msR1gGrgu6w5qOw4A=) 2: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: JizELHWBc29vv6ZjehlmiLNECzxh6hYttD2vQ3zzH1A=) 3: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=) 4: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) 5: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: lQOtdNJdvntWhCn4oNxG5S3GH9Dk0Cvh7IK+W2/tjTY=) 6: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 7: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: /cOSCLURwMnYRY1LEPKn/FGjfHtiEkHQU6Af0iOYRl4=) 8: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: WxWgRGgAM+ftAg8EQMmcnBlvtc8N+Cba7x40/kmtm2I=) 9: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 10: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: 9ox32o2qvbcsND5fYvTWnO2uJ4CVwur4EBGsHFdJw7Q=) 11: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: yG1FDE1B0du3sehfdeRPUO1j9aqsf5QqQEg+tLRRZKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5b:ba:70:ed:df:aa:22:7c:fb:7f:88:e0:5b:f0:49:ea:ef:53:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: May 9 10:45:55 2025 GMT Not After : May 12 21:22:55 2025 GMT Subject: CN=6D4C2D1F65CD01B92865222AC8DA881AEB70539A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:08:a3:fb:2e:b2:04:d6:86:d6:bd:46:be: f8:54:d5:6c:8c:83:ca:11:1d:f1:f5:cb:56:0b:98: 20:40:35:cd:53:aa:59:fe:13:15:a9:7e:86:48:7e: e4:44:d7:dd:cb:30:d9:58:92:da:15:b7:a0:36:df: 87:ed:f2:5e:4b:d8:12:00:a0:f9:a8:59:7a:49:64: c0:db:03:75:7f:92:f3:b4:69:cd:7a:ba:d6:47:21: ce:e1:46:bf:e5:52:c7:45:fb:75:59:34:79:7b:b2: 8d:3c:89:6b:de:18:a5:e0:1e:60:a5:cc:25:81:ef: bc:60:8d:57:a5:d0:09:0d:a6:c9:48:43:11:56:6e: 6e:d0:9a:cf:ab:a1:c4:2e:7d:55:6c:c2:37:a5:9b: 13:0c:ff:c7:a9:14:ba:06:2c:e6:b6:8a:7d:67:42: 53:38:bb:93:42:cc:58:54:a2:0f:fe:b6:40:0b:5d: 5f:f9:6a:d5:d4:c7:02:21:09:54:ed:06:89:25:21: 97:74:b0:75:c0:11:77:94:ad:e8:98:72:bd:e3:85: 7e:dd:d7:17:d5:bc:3e:76:66:db:d6:5a:c7:6c:ce: ef:58:3b:9b:db:6b:c1:ed:5b:9e:e3:39:1f:eb:14: de:29:a5:2d:18:d4:90:e7:85:32:bf:b9:85:28:1c: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:2D:1F:65:CD:01:B9:28:65:22:2A:C8:DA:88:1A:EB:70:53:9A X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e2:c9:bb:0d:72:be:55:68:de:54:61:13:b3:e6:e8:86:f8: 4c:22:23:ae:95:f2:95:1b:22:c1:76:95:70:48:cb:58:91:c8: 1e:65:08:31:5d:44:a9:03:4f:da:a4:c2:88:de:98:f6:74:df: e1:ca:54:34:d6:3e:75:65:66:24:9e:f6:51:f8:9f:d8:75:3d: 2e:6e:63:f5:cc:a0:ca:fb:8c:d5:34:d8:0a:85:d9:06:f3:07: c8:62:16:46:79:77:36:bf:1e:a1:b5:14:69:98:c0:12:7d:0d: 26:26:20:16:73:55:18:26:22:89:42:7e:a0:46:9c:39:6b:cf: dd:4c:e3:ad:bf:c9:bf:a8:7c:5c:ab:b2:7c:4d:fc:03:bc:7a: 7e:89:a7:c9:a8:8d:15:98:d8:61:38:8f:19:57:24:b4:30:51: 04:cc:42:a5:55:b3:f8:a2:51:96:90:3a:32:7f:91:ee:69:84: 39:58:cb:15:8d:44:fd:8c:48:15:b5:19:12:2e:22:a4:70:95: 9e:f4:b0:1b:1c:37:e5:6f:d6:fe:6d:18:3b:08:8d:1d:f2:08: 44:a1:cb:05:5f:31:34:0f:e2:f8:ed:5c:29:36:13:11:bb:1e: 1f:0d:62:9e:a3:64:e4:e3:49:e3:44:37:de:6d:17:e9:b5:44: 7e:ae:af:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVu6cO3fqiJ8+3+I4FvwServUzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTA1MDkxMDQ1NTVaFw0yNTA1MTIyMTIyNTVaMDMxMTAvBgNV BAMTKDZENEMyRDFGNjVDRDAxQjkyODY1MjIyQUM4REE4ODFBRUI3MDUzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4Qij+y6yBNaG1r1GvvhU1WyM g8oRHfH1y1YLmCBANc1Tqln+ExWpfoZIfuRE193LMNlYktoVt6A234ft8l5L2BIA oPmoWXpJZMDbA3V/kvO0ac16utZHIc7hRr/lUsdF+3VZNHl7so08iWveGKXgHmCl zCWB77xgjVel0AkNpslIQxFWbm7Qms+rocQufVVswjelmxMM/8epFLoGLOa2in1n QlM4u5NCzFhUog/+tkALXV/5atXUxwIhCVTtBoklIZd0sHXAEXeUreiYcr3jhX7d 1xfVvD52ZtvWWsdszu9YO5vba8HtW57jOR/rFN4ppS0Y1JDnhTK/uYUoHOt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUwtH2XNAbkoZSIqyNqIGutwU5owHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHiybsNcr5VaN5UYROz5uiG+EwiI66V8pUb IsF2lXBIy1iRyB5lCDFdRKkDT9qkwojemPZ03+HKVDTWPnVlZiSe9lH4n9h1PS5u Y/XMoMr7jNU02AqF2QbzB8hiFkZ5dza/HqG1FGmYwBJ9DSYmIBZzVRgmIolCfqBG nDlrz91M462/yb+ofFyrsnxN/AO8en6Jp8mojRWY2GE4jxlXJLQwUQTMQqVVs/ii UZaQOjJ/ke5phDlYyxWNRP2MSBW1GRIuIqRwlZ70sBscN+Vv1v5tGDsIjR3yCESh ywVfMTQP4vjtXCk2ExG7Hh8NYp6jZOTjSeNEN95tF+m1RH6ur0k= -----END CERTIFICATE-----Generated at Fri May 9 23:49:52 2025 by rpki-client