$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: YP+gJk85MIFtKpyF10iyYXSeVyFl9sGx2tWKhfqbRGk= Subject key identifier: 04:7A:27:44:C8:0B:6D:45:53:A8:79:F0:D3:D6:CB:E3:7C:25:A2:0E Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 127677469EE715D34AC3AD45E1B526A3E4D8B98D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 016E Signing time: Sat 10 May 2025 10:01:29 +0000 Manifest this update: Sat 10 May 2025 09:56:29 +0000 Manifest next update: Tue 13 May 2025 15:16:29 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: OhJPHypd9TL/8Xm0GOeTWeU5QIdBm02bJi19yt9Amkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:76:77:46:9e:e7:15:d3:4a:c3:ad:45:e1:b5:26:a3:e4:d8:b9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: May 10 09:56:29 2025 GMT Not After : May 13 15:16:29 2025 GMT Subject: CN=047A2744C80B6D4553A879F0D3D6CBE37C25A20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:c3:be:98:34:18:25:d2:d2:54:74:54:5b: d0:02:1d:61:fd:b1:df:40:06:92:c4:b4:06:67:81: ca:7c:1b:30:71:53:60:ee:22:7d:e4:65:ff:89:1e: 93:97:64:34:0a:b9:48:0c:03:c0:ce:80:d0:26:25: 5a:6b:a2:aa:c6:62:11:96:55:08:9f:45:61:53:ce: 4a:bf:1e:cc:45:64:2a:9b:9c:3c:ff:4c:c6:b0:ee: 2a:bc:52:c3:11:dd:80:68:80:44:0f:e9:2e:0f:8e: 59:78:d7:1b:f9:a8:91:b9:c5:c0:4f:4f:32:56:ce: c1:e5:ff:5e:5e:fa:e6:7e:70:c2:5d:44:11:d7:47: 10:4e:c8:0b:98:86:f2:9b:3b:ba:08:8e:e4:91:e0: 0f:6b:95:45:05:da:c2:1d:79:7e:e0:7a:82:be:80: 40:af:53:e3:03:45:fa:46:bf:47:7e:14:f5:58:97: 9c:8f:6d:31:a3:af:31:df:6e:c9:72:ea:86:55:51: b5:af:a7:fc:b7:5b:f9:fd:21:a9:63:f6:09:bc:91: 66:8b:ae:5d:dc:b7:96:28:30:52:d0:04:35:58:01: e4:ce:89:ca:9e:b3:4f:8e:09:fa:53:ac:16:8c:f0: d5:f6:a9:34:0d:54:f3:de:ec:5a:89:c2:c4:58:b7: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:27:44:C8:0B:6D:45:53:A8:79:F0:D3:D6:CB:E3:7C:25:A2:0E X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:14:73:72:e0:13:cd:8c:2b:8c:b2:e6:fd:ba:02:a5:19:f9: e0:a2:3d:30:46:e4:cf:90:0a:c9:02:46:c1:72:d9:66:78:68: 4f:e8:b8:43:7e:f9:1f:25:0b:d8:c9:a4:bc:14:9a:68:7f:9b: 43:08:34:19:30:a6:de:b1:c7:26:49:7a:69:aa:3f:c0:29:d6: d5:cf:40:c8:bf:19:17:db:3a:97:bd:3c:0c:da:3e:6c:6f:8d: 77:6c:34:dd:4a:8f:51:78:49:6d:c5:57:3b:22:c9:c9:d3:f3: 73:6f:aa:59:86:ed:92:1d:94:a4:21:a6:8b:6c:29:3f:db:04: cd:9a:97:b4:b7:22:63:26:b3:ff:a8:be:8b:2c:5d:57:ea:51: 3c:aa:c1:9f:50:ba:48:f9:4e:1e:1e:c5:81:1c:48:93:b3:75: 64:42:52:c1:5e:30:04:16:1d:69:11:d1:54:ff:9f:a8:35:d5: 53:ef:be:1f:23:22:bc:33:c6:fa:34:b4:8d:58:6e:b6:23:a1: 88:5c:82:15:e7:f1:90:2c:f6:e6:b5:af:65:41:3e:18:00:8c: d7:a8:44:1a:78:24:e7:bf:6a:87:97:0e:0b:f1:b2:af:a7:32: 54:1d:80:96:d0:99:83:f2:2e:e5:14:39:21:91:6b:60:43:83: 81:17:31:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnZ3Rp7nFdNKw61F4bUmo+TYuY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTA1MTAwOTU2MjlaFw0yNTA1MTMxNTE2MjlaMDMxMTAvBgNV BAMTKDA0N0EyNzQ0QzgwQjZENDU1M0E4NzlGMEQzRDZDQkUzN0MyNUEyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6sO+mDQYJdLSVHRUW9ACHWH9 sd9ABpLEtAZngcp8GzBxU2DuIn3kZf+JHpOXZDQKuUgMA8DOgNAmJVproqrGYhGW VQifRWFTzkq/HsxFZCqbnDz/TMaw7iq8UsMR3YBogEQP6S4Pjll41xv5qJG5xcBP TzJWzsHl/15e+uZ+cMJdRBHXRxBOyAuYhvKbO7oIjuSR4A9rlUUF2sIdeX7geoK+ gECvU+MDRfpGv0d+FPVYl5yPbTGjrzHfbsly6oZVUbWvp/y3W/n9Ialj9gm8kWaL rl3ct5YoMFLQBDVYAeTOicqes0+OCfpTrBaM8NX2qTQNVPPe7FqJwsRYt7iXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHonRMgLbUVTqHnw09bL43wlog4wHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsUc3LgE82MK4yy5v26AqUZ+eCiPTBG5M+Q CskCRsFy2WZ4aE/ouEN++R8lC9jJpLwUmmh/m0MINBkwpt6xxyZJemmqP8Ap1tXP QMi/GRfbOpe9PAzaPmxvjXdsNN1Kj1F4SW3FVzsiycnT83NvqlmG7ZIdlKQhpots KT/bBM2al7S3ImMms/+ovossXVfqUTyqwZ9Qukj5Th4exYEcSJOzdWRCUsFeMAQW HWkR0VT/n6g11VPvvh8jIrwzxvo0tI1YbrYjoYhcghXn8ZAs9ua1r2VBPhgAjNeo RBp4JOe/aoeXDgvxsq+nMlQdgJbQmYPyLuUUOSGRa2BDg4EXMeo= -----END CERTIFICATE-----Generated at Sun May 11 06:52:15 2025 by rpki-client