$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: 2hIRMGfDVk0JyFaMChwvwusmG5DCPYRW6H4HnSxayME= Subject key identifier: 91:AA:AF:05:1D:61:2C:87:65:36:2C:A4:8D:7E:DE:BC:58:79:F7:46 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 262C30FF4EA26622F8C2C808EB461C43E477E4E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01C0 Signing time: Tue 06 May 2025 16:30:47 +0000 Manifest this update: Tue 06 May 2025 16:25:47 +0000 Manifest next update: Fri 09 May 2025 21:11:47 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: O7IJNOf2o8PKEZJNzLPXptbxO46uHXV3C7LdUTtQTuQ=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2c:30:ff:4e:a2:66:22:f8:c2:c8:08:eb:46:1c:43:e4:77:e4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: May 6 16:25:47 2025 GMT Not After : May 9 21:11:47 2025 GMT Subject: CN=91AAAF051D612C8765362CA48D7EDEBC5879F746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:eb:40:3f:fa:68:0c:fe:df:ab:dd:e3:84: 3a:a0:ad:0e:64:05:bc:2e:c3:03:50:23:5f:23:61: f3:c7:e5:97:88:82:9e:c8:7f:7c:77:63:d1:06:78: 04:5f:51:87:88:28:2c:9c:21:01:19:77:03:f2:0a: f9:b8:e6:f9:45:79:61:c7:36:b6:ac:10:26:3a:3f: 5d:0a:70:22:83:57:de:3c:e7:ef:d7:4b:78:42:43: 8e:dc:5b:1f:53:ad:90:83:5f:78:4c:09:14:2b:3b: f6:f0:46:c9:19:6c:ac:e2:3d:5b:ae:7d:60:3b:9f: 89:87:bc:c7:bb:da:df:37:ea:ee:19:9b:07:83:97: 2e:28:d5:74:80:51:2e:08:52:e3:67:1c:31:39:26: a3:4b:55:72:e7:7f:05:54:55:62:1f:51:25:6a:cb: 2e:71:e8:28:cb:f2:c4:51:20:e9:f7:3f:c5:60:dc: dc:a6:51:6b:71:b7:b7:7f:a9:b1:bc:58:a9:ea:00: 6c:fd:4b:c2:ee:0a:1c:58:78:b2:1e:ba:c9:71:34: c0:2e:95:2f:c0:a5:a0:dc:02:78:39:53:e1:43:8c: 84:05:6d:6f:6d:42:82:28:c7:63:89:cf:40:87:75: e0:7c:91:d7:9d:00:7a:8d:c1:8c:c7:3b:b0:22:ba: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:AF:05:1D:61:2C:87:65:36:2C:A4:8D:7E:DE:BC:58:79:F7:46 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:36:5a:db:af:4b:82:50:51:ed:1d:99:fe:7a:d5:d8:86:b4: 82:6c:cc:13:1b:70:35:07:db:c7:5b:47:73:31:11:f7:76:f2: 6d:8c:96:9e:8c:21:07:4e:a8:16:d7:87:5c:e4:dd:e4:4f:82: b5:f0:42:a2:10:07:20:a9:cc:12:9a:cf:29:dd:f7:d2:7c:43: c5:73:4d:e4:a9:bf:8e:1a:d1:63:3c:c3:f9:82:f5:c9:39:a3: 12:22:a1:67:ec:ba:8f:49:bc:36:99:f5:da:e5:cd:bc:8e:de: 3a:87:0f:e9:1d:fb:16:d8:5b:8e:a3:d6:a9:52:7b:21:84:ec: 22:6a:da:c1:a6:74:64:ba:6d:7e:d1:90:cf:ba:2d:a0:25:62: 52:fb:f9:f0:2e:37:f7:42:f8:d2:f2:f4:ce:2a:e1:9a:10:e5: 03:1d:8b:80:c9:0a:b9:a1:0b:b5:c2:32:4a:25:c9:e5:ec:83: c2:b3:df:40:a0:f4:28:1f:a6:2c:28:b6:ea:80:c2:5c:6a:5b: 59:22:9d:e7:42:e2:1a:89:04:c1:db:eb:6f:1d:21:a7:f2:6a: 74:39:33:eb:8f:80:30:2d:d9:77:d4:d8:5c:78:dd:23:5d:e1: 5d:29:d4:5e:07:10:a0:8e:0a:85:1f:62:04:a6:d5:30:14:99: ce:cf:e6:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiww/06iZiL4wsgI60YcQ+R35OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA1MDYxNjI1NDdaFw0yNTA1MDkyMTExNDdaMDMxMTAvBgNV BAMTKDkxQUFBRjA1MUQ2MTJDODc2NTM2MkNBNDhEN0VERUJDNTg3OUY3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DetAP/poDP7fq93jhDqgrQ5k BbwuwwNQI18jYfPH5ZeIgp7If3x3Y9EGeARfUYeIKCycIQEZdwPyCvm45vlFeWHH NrasECY6P10KcCKDV9485+/XS3hCQ47cWx9TrZCDX3hMCRQrO/bwRskZbKziPVuu fWA7n4mHvMe72t836u4ZmweDly4o1XSAUS4IUuNnHDE5JqNLVXLnfwVUVWIfUSVq yy5x6CjL8sRRIOn3P8Vg3NymUWtxt7d/qbG8WKnqAGz9S8LuChxYeLIeuslxNMAu lS/ApaDcAng5U+FDjIQFbW9tQoIox2OJz0CHdeB8kdedAHqNwYzHO7AiummZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaqvBR1hLIdlNiykjX7evFh590YwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM2WtuvS4JQUe0dmf561diGtIJszBMbcDUH 28dbR3MxEfd28m2Mlp6MIQdOqBbXh1zk3eRPgrXwQqIQByCpzBKazynd99J8Q8Vz TeSpv44a0WM8w/mC9ck5oxIioWfsuo9JvDaZ9drlzbyO3jqHD+kd+xbYW46j1qlS eyGE7CJq2sGmdGS6bX7RkM+6LaAlYlL7+fAuN/dC+NLy9M4q4ZoQ5QMdi4DJCrmh C7XCMkolyeXsg8Kz30Cg9CgfpiwotuqAwlxqW1kinedC4hqJBMHb628dIafyanQ5 M+uPgDAt2XfU2Fx43SNd4V0p1F4HEKCOCoUfYgSm1TAUmc7P5gY= -----END CERTIFICATE-----Generated at Thu May 8 06:32:03 2025 by rpki-client