$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: LRMydHuyF9z8Cbz3hKIifMASXedAwocADRsEnMtkEAw= Subject key identifier: B0:C7:C4:ED:43:78:1E:19:E4:5A:B6:18:07:E9:C7:F7:7F:83:94:1D Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 5D909045F80855AD8F84CF94688F4B691E50EE8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 0165 Signing time: Mon 05 May 2025 21:41:30 +0000 Manifest this update: Mon 05 May 2025 21:36:30 +0000 Manifest next update: Fri 09 May 2025 09:35:30 +0000 Files and hashes: 1: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) 2: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: 3470AnfbUDmqupPv6N4v1LezHBSb8mYnln2qo5vrZRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 09:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:90:45:f8:08:55:ad:8f:84:cf:94:68:8f:4b:69:1e:50:ee:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: May 5 21:36:30 2025 GMT Not After : May 9 09:35:30 2025 GMT Subject: CN=B0C7C4ED43781E19E45AB61807E9C7F77F83941D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:29:bc:d0:06:dd:b3:b1:11:5f:17:eb:37: 89:8b:54:d2:6b:78:86:fe:a3:8b:e5:94:b4:76:48: 74:5b:d8:54:3c:53:06:4a:fe:39:40:e3:9b:83:23: 19:e4:f4:94:6f:98:3c:b6:2f:39:2f:fd:57:fc:af: 2a:93:a4:d9:ec:c8:2c:66:24:f2:5a:42:a6:f0:69: 0d:79:bb:8b:9a:7f:ff:cc:c8:77:8d:75:bb:9d:2f: a6:b6:54:37:e0:76:74:5b:a8:7c:82:19:88:27:5b: e1:d1:45:57:66:2a:10:04:a7:7d:eb:b4:96:0b:86: 77:3f:6b:3c:69:7f:4d:63:df:a2:bb:e3:89:48:9b: 28:2c:32:97:9e:db:7a:0f:bd:3c:8f:cb:7b:33:b0: 45:c6:51:64:4c:66:1e:3a:5a:e7:96:29:ac:8b:06: 86:63:5b:a2:c9:21:c3:6c:7e:d8:d5:e8:40:cc:1e: e4:69:44:9d:33:da:e0:4e:18:ce:56:47:23:e8:f4: 60:e5:70:ce:86:66:4c:e9:97:16:07:8f:c6:31:63: 98:5d:8c:74:45:0a:05:9b:6f:6d:bb:fd:bd:b3:e1: 28:8d:1e:24:8c:3c:fd:9d:36:fa:c2:84:53:39:8f: 03:69:c6:3b:e0:aa:57:89:80:c8:b6:87:bb:3a:04: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C7:C4:ED:43:78:1E:19:E4:5A:B6:18:07:E9:C7:F7:7F:83:94:1D X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e2:64:e5:94:c3:95:8a:dc:78:53:39:59:fa:1d:8f:66:f2: 47:be:d5:7b:04:c5:88:b5:ed:19:cc:80:68:44:d6:2e:68:c3: ac:39:7f:51:00:92:a8:5d:b7:93:3d:72:7d:60:64:6d:90:4a: aa:62:53:22:a5:4a:c6:b3:35:36:c8:71:48:0f:b3:b2:23:a1: e7:40:fa:17:1b:93:ed:16:e6:05:64:32:98:3c:a8:ca:a7:da: a5:c1:ee:27:69:df:f7:e3:7f:a7:59:db:b5:f2:a6:5f:28:22: 6f:d5:d8:20:62:ea:47:a0:da:53:7e:5e:be:5a:43:75:79:27: 23:82:2e:a1:8c:64:ea:9e:12:77:00:02:e2:4b:33:17:aa:07: 84:71:57:03:c9:45:d0:e7:48:00:a2:88:b2:72:d7:52:07:9d: 24:1a:cd:5a:7d:f4:de:b7:de:12:c3:4a:1c:56:ab:4c:62:51: 34:1d:06:e7:37:0e:ab:cf:50:9d:6f:a0:83:40:da:01:bf:39: c7:2f:a1:92:69:e5:2f:2b:7f:bc:ae:83:6e:3a:d6:a2:e4:9c: 68:49:c1:93:f0:b1:ed:cc:dc:10:8f:37:5a:5d:3e:66:31:b0: 70:15:39:41:30:9e:b1:54:0d:7b:67:9f:17:97:48:93:c0:d0: 81:28:0f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZCQRfgIVa2PhM+UaI9LaR5Q7o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTA1MDUyMTM2MzBaFw0yNTA1MDkwOTM1MzBaMDMxMTAvBgNV BAMTKEIwQzdDNEVENDM3ODFFMTlFNDVBQjYxODA3RTlDN0Y3N0Y4Mzk0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlym80Abds7ERXxfrN4mLVNJr eIb+o4vllLR2SHRb2FQ8UwZK/jlA45uDIxnk9JRvmDy2Lzkv/Vf8ryqTpNnsyCxm JPJaQqbwaQ15u4uaf//MyHeNdbudL6a2VDfgdnRbqHyCGYgnW+HRRVdmKhAEp33r tJYLhnc/azxpf01j36K744lImygsMpee23oPvTyPy3szsEXGUWRMZh46WueWKayL BoZjW6LJIcNsftjV6EDMHuRpRJ0z2uBOGM5WRyPo9GDlcM6GZkzplxYHj8YxY5hd jHRFCgWbb227/b2z4SiNHiSMPP2dNvrChFM5jwNpxjvgqleJgMi2h7s6BNFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMfE7UN4HhnkWrYYB+nH93+DlB0wHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHiZOWUw5WK3HhTOVn6HY9m8ke+1XsExYi1 7RnMgGhE1i5ow6w5f1EAkqhdt5M9cn1gZG2QSqpiUyKlSsazNTbIcUgPs7IjoedA +hcbk+0W5gVkMpg8qMqn2qXB7idp3/fjf6dZ27Xypl8oIm/V2CBi6keg2lN+Xr5a Q3V5JyOCLqGMZOqeEncAAuJLMxeqB4RxVwPJRdDnSACiiLJy11IHnSQazVp99N63 3hLDShxWq0xiUTQdBuc3DqvPUJ1voINA2gG/OccvoZJp5S8rf7yug2461qLknGhJ wZPwse3M3BCPN1pdPmYxsHAVOUEwnrFUDXtnnxeXSJPA0IEoD90= -----END CERTIFICATE-----Generated at Wed May 7 21:24:50 2025 by rpki-client