$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: ePZCceQqLSluwo+VRSUvcnWIicZX1mwwcPPOw3tsups= Subject key identifier: E8:29:64:27:4D:F4:2F:D9:88:1E:18:7A:23:81:66:5A:37:9B:32:88 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 786AEE420D3C74CA85877DE8E7EF6E7CB0FD3954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01D8 Signing time: Sat 28 Jun 2025 23:50:48 +0000 Manifest this update: Sat 28 Jun 2025 23:45:48 +0000 Manifest next update: Wed 02 Jul 2025 00:30:48 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: segzKTX0224fFxXvWVY4nmKUJu6Dl22r9MJIdGDgzZk=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6a:ee:42:0d:3c:74:ca:85:87:7d:e8:e7:ef:6e:7c:b0:fd:39:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Jun 28 23:45:48 2025 GMT Not After : Jul 2 00:30:48 2025 GMT Subject: CN=E82964274DF42FD9881E187A2381665A379B3288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:e4:d8:46:38:6f:4b:b6:78:42:a2:04:28: b5:ff:f9:28:60:dc:84:96:af:4d:70:8e:33:0e:a1: 6f:66:a3:11:55:10:5c:dc:d7:5b:3c:7d:9a:c2:c8: f9:4f:ae:b1:96:d7:42:99:8c:67:03:51:3e:e7:05: 0f:c7:28:b1:a3:7d:11:52:3c:a0:e9:6e:d9:72:87: 17:41:97:9a:9f:00:07:ba:11:66:3c:ae:a2:a3:e3: 9f:1b:b0:a5:2f:ef:44:5b:d2:7e:5c:9a:fc:a2:57: 68:7b:39:c1:00:ae:f5:10:e0:dd:a5:5f:c0:ec:b4: f0:4c:b4:f4:46:41:a4:49:e1:69:1d:c7:bc:9c:bc: ef:f7:bb:51:0d:d3:3b:80:70:5a:4d:1e:d7:58:16: 54:01:07:e7:83:4d:c9:b2:ca:30:6c:66:19:18:f1: 38:67:65:45:f9:bc:c7:95:b8:ea:76:fa:dc:ad:f3: 14:8a:50:f7:19:4a:82:80:6c:08:78:69:a0:44:22: ea:1d:3c:30:3f:81:bb:4a:b9:e1:d0:aa:79:8d:38: 0b:28:8c:38:5b:65:6b:e7:05:28:6a:61:7e:c1:25: 5e:31:b6:0d:30:e6:ce:8c:55:11:c4:68:ef:6d:ea: fb:d8:7a:12:74:5e:0b:ad:9a:7c:df:7a:44:08:f8: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:64:27:4D:F4:2F:D9:88:1E:18:7A:23:81:66:5A:37:9B:32:88 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a4:c4:36:0d:db:db:e9:86:d0:40:e8:33:92:4c:0d:a6:dd: 9b:b0:93:9c:8e:a4:ca:d4:07:43:9c:58:d2:fb:e2:e2:90:9e: 58:c0:54:e0:37:77:df:21:b8:56:26:f9:df:62:25:c3:65:84: fe:4a:65:a8:d7:dd:ce:d1:30:9c:61:66:79:55:3c:f5:bb:c3: 39:16:2e:54:79:57:36:94:1c:60:b2:c9:a8:06:7c:a2:b9:e4: b4:4d:4b:4c:ae:f8:22:58:ff:fc:bc:95:e1:bc:d3:47:31:43: 35:71:2f:ee:c3:eb:2a:49:d4:79:01:5c:f7:a0:1e:23:b7:59: ac:99:2f:69:22:7a:58:16:c4:ea:05:03:df:eb:c8:20:cf:55: 5e:e6:02:1e:42:aa:af:ff:d3:8c:09:1b:be:55:82:27:31:3b: 11:f5:1d:ea:f4:84:4f:a4:f6:10:fe:d6:68:8c:d8:af:64:b6: 8c:ca:fc:6a:b6:6b:a0:cc:7f:0a:a7:ad:77:07:6d:d2:5e:1a: 03:f5:d5:ea:77:92:ea:9e:25:29:ff:04:3f:8b:a7:2d:81:14: d7:c0:54:a7:af:32:09:c8:83:f3:90:85:5b:ad:9b:dc:d2:2e: 6f:d9:64:aa:45:65:88:91:c0:30:bd:eb:e0:18:8c:31:d6:28: cc:6c:0e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGruQg08dMqFh33o5+9ufLD9OVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA2MjgyMzQ1NDhaFw0yNTA3MDIwMDMwNDhaMDMxMTAvBgNV BAMTKEU4Mjk2NDI3NERGNDJGRDk4ODFFMTg3QTIzODE2NjVBMzc5QjMyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vOTYRjhvS7Z4QqIEKLX/+Shg 3ISWr01wjjMOoW9moxFVEFzc11s8fZrCyPlPrrGW10KZjGcDUT7nBQ/HKLGjfRFS PKDpbtlyhxdBl5qfAAe6EWY8rqKj458bsKUv70Rb0n5cmvyiV2h7OcEArvUQ4N2l X8DstPBMtPRGQaRJ4Wkdx7ycvO/3u1EN0zuAcFpNHtdYFlQBB+eDTcmyyjBsZhkY 8ThnZUX5vMeVuOp2+tyt8xSKUPcZSoKAbAh4aaBEIuodPDA/gbtKueHQqnmNOAso jDhbZWvnBShqYX7BJV4xtg0w5s6MVRHEaO9t6vvYehJ0XgutmnzfekQI+BobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ClkJ030L9mIHhh6I4FmWjebMogwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2kxDYN29vphtBA6DOSTA2m3Zuwk5yOpMrU B0OcWNL74uKQnljAVOA3d98huFYm+d9iJcNlhP5KZajX3c7RMJxhZnlVPPW7wzkW LlR5VzaUHGCyyagGfKK55LRNS0yu+CJY//y8leG800cxQzVxL+7D6ypJ1HkBXPeg HiO3WayZL2kielgWxOoFA9/ryCDPVV7mAh5Cqq//04wJG75VgicxOxH1Her0hE+k 9hD+1miM2K9ktozK/Gq2a6DMfwqnrXcHbdJeGgP11ep3kuqeJSn/BD+Lpy2BFNfA VKevMgnIg/OQhVutm9zSLm/ZZKpFZYiRwDC96+AYjDHWKMxsDoY= -----END CERTIFICATE-----Generated at Sun Jun 29 22:48:37 2025 by rpki-client