$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json) Hash identifier: QibQd1pdDSnokgZmYvWxJ/fOtRJYxLZesqRIDXYpXEY= Subject key identifier: B6:1C:3F:5C:27:64:C5:92:0A:28:40:EE:E4:07:85:74:8B:92:C4:45 Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Certificate serial: 01DCCC13298304AE4AF5003D91E9A58A914A35FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft Manifest number: CC Signing time: Tue 01 Jul 2025 04:31:25 +0000 Manifest this update: Tue 01 Jul 2025 04:26:25 +0000 Manifest next update: Fri 04 Jul 2025 11:21:25 +0000 Files and hashes: 1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: j/egSdswNdGbkpXSSPV/VNX3kaJmpiVu1s3fT8azyks=) 2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: bm0cLaD/jg5NiXGndb/98PNppE3HSK9OAR2k8wtE41Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dc:cc:13:29:83:04:ae:4a:f5:00:3d:91:e9:a5:8a:91:4a:35:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Validity Not Before: Jul 1 04:26:25 2025 GMT Not After : Jul 4 11:21:25 2025 GMT Subject: CN=B61C3F5C2764C5920A2840EEE40785748B92C445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:c2:9d:67:5d:95:29:d3:63:d0:cb:01:17: 96:b5:e2:3d:37:ee:3e:4c:bf:59:57:08:57:e4:4d: 00:46:15:66:83:66:5f:c8:f8:24:cc:cd:47:d1:57: 30:56:21:35:fc:21:a9:cb:8b:3f:d1:0c:ef:62:6e: c4:df:28:a1:6d:58:fc:3c:3a:43:05:18:9a:63:d4: 68:55:62:9e:46:f1:ca:ed:a6:22:b5:bf:6c:9b:99: c9:db:20:22:b7:c3:48:5d:75:5c:7e:2e:db:da:a4: 66:aa:1c:f9:b3:0a:c4:5d:a8:04:d4:33:fc:6f:31: 7f:2b:c5:09:b6:2d:f6:d6:d5:6c:e8:68:24:f5:14: 36:c4:c9:d1:ab:d8:3a:ab:06:91:5f:67:76:96:4d: 0b:56:fe:a5:94:41:72:48:a7:c2:db:ee:64:1d:57: f9:f5:5c:ce:5b:01:c7:b4:37:24:72:2e:8e:f6:e2: 68:6d:c9:83:60:94:3a:6b:91:a0:58:06:be:3e:99: 08:84:a5:89:76:0b:dd:5d:7d:f2:f1:83:47:56:32: 9f:4d:47:18:8a:ad:33:c9:12:71:d0:26:0a:d0:54: 6d:32:49:fd:b7:a4:52:5b:4a:13:8e:58:32:68:16: 73:9b:f8:02:da:3e:cf:40:f0:c6:80:da:ee:38:62: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1C:3F:5C:27:64:C5:92:0A:28:40:EE:E4:07:85:74:8B:92:C4:45 X509v3 Authority Key Identifier: keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f0:ae:48:f8:f5:47:d8:9a:a6:8a:dc:b6:8e:81:33:ae:4e: 16:19:47:45:68:db:49:94:38:7b:9a:59:87:63:eb:70:6e:77: fa:ac:98:6e:5c:a4:06:d1:f3:2e:50:5d:2c:16:c1:0c:87:ac: c6:e6:15:92:ff:07:c1:9b:d8:8b:22:56:8a:8b:ba:33:d2:ea: 2f:8d:95:19:1c:49:7a:f0:40:da:6b:51:bf:9b:41:b8:bc:3d: c1:9c:73:e5:ab:3a:52:be:eb:c0:e9:7c:17:14:97:55:62:b4: 32:6a:43:f6:0e:13:41:aa:2c:b5:24:30:53:8b:1b:06:e1:c9: 6c:3b:91:96:71:9f:97:d5:57:0e:0d:4d:20:99:29:0d:f9:ed: df:ba:59:d6:c9:6f:af:30:4f:b1:b1:ca:9f:56:f9:bc:97:e2: 44:08:a1:57:c9:14:3c:47:00:46:a8:64:48:ad:e8:6e:a4:56: e7:51:b1:e3:4f:f0:bd:a0:f4:44:7e:18:04:b5:11:bc:ce:99: d2:ae:ba:95:ee:18:ed:90:be:f8:1e:a7:a7:c5:fe:3e:eb:6d: 1a:cd:70:28:3e:04:a2:42:97:3b:48:ef:0a:28:40:fa:1a:7b: 6b:14:b1:0b:cc:44:a5:01:b3:d4:7a:80:d9:6b:48:61:ea:e9: 74:89:71:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdzMEymDBK5K9QA9kemlipFKNfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3 RTY5RTMxMzAeFw0yNTA3MDEwNDI2MjVaFw0yNTA3MDQxMTIxMjVaMDMxMTAvBgNV BAMTKEI2MUMzRjVDMjc2NEM1OTIwQTI4NDBFRUU0MDc4NTc0OEI5MkM0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUMKdZ12VKdNj0MsBF5a14j03 7j5Mv1lXCFfkTQBGFWaDZl/I+CTMzUfRVzBWITX8IanLiz/RDO9ibsTfKKFtWPw8 OkMFGJpj1GhVYp5G8crtpiK1v2ybmcnbICK3w0hddVx+LtvapGaqHPmzCsRdqATU M/xvMX8rxQm2LfbW1WzoaCT1FDbEydGr2DqrBpFfZ3aWTQtW/qWUQXJIp8Lb7mQd V/n1XM5bAce0NyRyLo724mhtyYNglDprkaBYBr4+mQiEpYl2C91dffLxg0dWMp9N RxiKrTPJEnHQJgrQVG0ySf23pFJbShOOWDJoFnOb+ALaPs9A8MaA2u44YjorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUthw/XCdkxZIKKEDu5AeFdIuSxEUwHwYDVR0j BBgwFoAUTtFrkjGQWhx6NT33Sb+ZSH5p4xMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC80RUQxNkI5MjMx OTA1QTFDN0EzNTNERjc0OUJGOTk0ODdFNjlFMzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3RTY5 RTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5 NDg3RTY5RTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/wrkj49UfYmqaK3LaOgTOuThYZR0Vo20mU OHuaWYdj63Bud/qsmG5cpAbR8y5QXSwWwQyHrMbmFZL/B8Gb2IsiVoqLujPS6i+N lRkcSXrwQNprUb+bQbi8PcGcc+WrOlK+68DpfBcUl1VitDJqQ/YOE0GqLLUkMFOL GwbhyWw7kZZxn5fVVw4NTSCZKQ357d+6WdbJb68wT7Gxyp9W+byX4kQIoVfJFDxH AEaoZEit6G6kVudRseNP8L2g9ER+GAS1EbzOmdKuupXuGO2Qvvgep6fF/j7rbRrN cCg+BKJClztI7wooQPoae2sUsQvMRKUBs9R6gNlrSGHq6XSJcQw= -----END CERTIFICATE-----Generated at Tue Jul 1 11:13:15 2025 by rpki-client