$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: yUyUy/axSnV3U+9jdLs+5oPtljVfO3tzRnm2WgM6X7w= Subject key identifier: 9B:4D:CB:95:B7:45:2F:E1:FD:B1:45:BF:A6:48:70:44:1E:BF:22:E3 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 2514286B09AC3727788FA5737EF49C65D75058BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: D5 Signing time: Tue 01 Jul 2025 06:31:08 +0000 Manifest this update: Tue 01 Jul 2025 06:26:08 +0000 Manifest next update: Fri 04 Jul 2025 16:46:08 +0000 Files and hashes: 1: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: h/jzOKm6yrsLyqRCukwZdsDrsV1/UfX6dbQ5Bz934zQ=) 2: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:14:28:6b:09:ac:37:27:78:8f:a5:73:7e:f4:9c:65:d7:50:58:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Jul 1 06:26:08 2025 GMT Not After : Jul 4 16:46:08 2025 GMT Subject: CN=9B4DCB95B7452FE1FDB145BFA64870441EBF22E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:9a:61:8c:d6:7a:78:7e:f1:9a:9b:8e:59: 18:15:af:40:a3:de:3b:0d:85:3f:10:f6:49:74:86: 46:e3:c9:08:69:70:ca:da:96:da:55:6e:93:6d:e7: 11:25:af:fe:78:55:b9:c7:e7:61:ee:e0:e1:cf:c9: fb:3b:49:20:df:67:42:2b:3f:da:81:1a:47:ee:da: 84:ca:26:9e:04:c3:f7:64:e0:06:8b:2f:3f:de:94: 4e:64:de:18:1e:9a:4d:1a:7d:85:94:48:6b:44:86: 6a:c4:24:83:27:3c:1c:61:cb:a4:cc:32:02:ee:b2: f7:ff:e9:14:91:63:da:81:87:42:c0:62:0c:e6:f6: c4:c0:05:b7:8c:a9:d4:d9:e9:3a:f2:c7:c1:fe:72: 73:31:0e:d6:84:61:ea:08:7f:1f:79:1a:9d:d4:b2: 97:30:e0:f1:2d:e0:8c:d0:ed:2c:6d:39:3e:3c:42: 78:df:fe:aa:04:ba:28:a3:0f:54:34:d5:db:f0:38: c8:5e:fe:f2:92:39:e8:f0:32:0b:91:0d:83:e5:32: d3:48:e7:94:17:69:53:0e:bc:d8:a4:1a:42:c9:2c: c2:6c:c4:45:c5:85:2b:dc:ae:c1:50:c2:5a:42:7d: 7b:98:84:fa:b0:0e:ef:d6:51:a7:f6:31:b2:25:56: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:CB:95:B7:45:2F:E1:FD:B1:45:BF:A6:48:70:44:1E:BF:22:E3 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:ef:a8:bb:f9:eb:89:23:5a:42:b4:46:ca:2b:c2:35:78: 64:b0:ff:ff:ba:00:4c:11:ed:08:fe:68:af:46:94:39:2f:3a: e2:cb:61:64:4f:db:f9:f5:50:c7:fe:23:10:25:8d:a7:31:5d: d8:40:d2:ed:5f:15:e7:8a:c3:54:0b:00:4f:e0:6e:61:df:ae: b3:52:ed:97:27:93:b1:c6:1f:bb:b6:c2:7b:8a:3f:6a:f2:4e: 20:f6:b9:f2:61:a7:f1:b7:1f:fb:72:c7:75:55:5f:0b:fa:1d: 19:04:76:6c:64:22:1b:ea:a0:40:ef:ae:2f:fd:c9:04:85:e2: 38:bb:bb:81:d6:ab:9d:d8:eb:67:91:de:9c:0c:af:97:b6:c7: 1a:f6:25:04:07:ec:aa:19:5c:31:a6:d9:66:df:f3:bf:3d:d0: 0b:de:22:d4:a4:58:38:c9:ae:a4:3f:35:00:84:07:9f:58:a5: 6e:72:d8:a4:22:76:1a:74:a8:76:d6:0b:04:18:81:74:84:72: 27:ed:29:94:eb:bc:d0:46:55:ef:af:c0:32:ce:5c:e6:79:0d: 5b:99:fa:d6:75:0b:40:b3:4e:24:2d:e2:e1:04:50:ce:4c:22: ea:dd:dd:d8:e8:6a:f9:7b:9f:43:ab:5a:48:63:06:d5:4d:de: 02:ff:d8:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRQoawmsNyd4j6VzfvScZddQWLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA3MDEwNjI2MDhaFw0yNTA3MDQxNjQ2MDhaMDMxMTAvBgNV BAMTKDlCNERDQjk1Qjc0NTJGRTFGREIxNDVCRkE2NDg3MDQ0MUVCRjIyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4pphjNZ6eH7xmpuOWRgVr0Cj 3jsNhT8Q9kl0hkbjyQhpcMraltpVbpNt5xElr/54VbnH52Hu4OHPyfs7SSDfZ0Ir P9qBGkfu2oTKJp4Ew/dk4AaLLz/elE5k3hgemk0afYWUSGtEhmrEJIMnPBxhy6TM MgLusvf/6RSRY9qBh0LAYgzm9sTABbeMqdTZ6Tryx8H+cnMxDtaEYeoIfx95Gp3U spcw4PEt4IzQ7SxtOT48Qnjf/qoEuiijD1Q01dvwOMhe/vKSOejwMguRDYPlMtNI 55QXaVMOvNikGkLJLMJsxEXFhSvcrsFQwlpCfXuYhPqwDu/WUaf2MbIlVmvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm03LlbdFL+H9sUW/pkhwRB6/IuMwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTZ76i7+euJI1pCtEbKK8I1eGSw//+6AEwR 7Qj+aK9GlDkvOuLLYWRP2/n1UMf+IxAljacxXdhA0u1fFeeKw1QLAE/gbmHfrrNS 7Zcnk7HGH7u2wnuKP2ryTiD2ufJhp/G3H/tyx3VVXwv6HRkEdmxkIhvqoEDvri/9 yQSF4ji7u4HWq53Y62eR3pwMr5e2xxr2JQQH7KoZXDGm2Wbf87890AveItSkWDjJ rqQ/NQCEB59YpW5y2KQidhp0qHbWCwQYgXSEciftKZTrvNBGVe+vwDLOXOZ5DVuZ +tZ1C0CzTiQt4uEEUM5MIurd3djoavl7n0OrWkhjBtVN3gL/2Bk= -----END CERTIFICATE-----Generated at Thu Jul 3 13:39:41 2025 by rpki-client