$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: vw9bn5sJwwnstal6geqJJivH1lsiHG9h5jGxTaFlYlU= Subject key identifier: EA:D8:17:79:85:22:53:D1:7B:76:CA:6B:E5:59:F8:35:18:03:ED:33 Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 21499BC669A140A1CB1BB39E713346A5FAAF780F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 01C7 Signing time: Mon 12 May 2025 14:31:07 +0000 Manifest this update: Mon 12 May 2025 14:26:07 +0000 Manifest next update: Thu 15 May 2025 20:09:07 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (hash: dc/JbMbDw67KzLs6jS8AcuMUyvOVm39Xbb1sGTpGz/c=) 2: 3130332e3139342e34362e302f32332d3233203d3e20313439393731.roa (hash: qGWFSgLLJyliy4tuTPo/36VY8oY9Xuwl0QaLpSpVJjk=) 3: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: wL4kGYO4xmPOLA/dPFFWqXM641/H5hJc44mOL0ke1go=) 4: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (hash: d3zROfULZz8QCuCni0sAhbO20KSsId2kpNYmr15j0jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:49:9b:c6:69:a1:40:a1:cb:1b:b3:9e:71:33:46:a5:fa:af:78:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: May 12 14:26:07 2025 GMT Not After : May 15 20:09:07 2025 GMT Subject: CN=EAD81779852253D17B76CA6BE559F8351803ED33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:03:01:0a:ce:73:13:1c:d2:1c:35:4f:c8: b4:2d:75:7f:f9:21:36:e0:2f:16:5c:46:a1:6e:9f: b2:d8:f3:3c:6a:b7:fc:29:af:97:29:73:79:ef:40: f6:cc:19:88:86:b1:6a:ae:77:e7:a3:79:cf:62:21: 06:50:6c:29:27:ac:e9:a6:05:9b:90:74:d7:31:ff: ff:8e:41:1a:da:06:ec:4d:ce:ee:8e:00:9d:76:c1: b2:38:33:8d:49:58:14:68:a1:5f:d9:39:fa:a5:81: 80:67:fe:7d:9d:c6:c8:32:76:32:00:32:31:7d:a4: 39:d4:f2:60:80:5d:b7:31:70:42:ff:ea:4d:50:b0: 07:6c:65:43:e4:48:0c:65:32:eb:50:81:74:42:f1: 76:d2:33:dd:1b:d8:9c:a1:db:68:5c:66:c4:78:a5: d1:8c:d7:b7:6a:f0:9b:16:81:63:1d:7f:d4:5e:55: e7:d4:c7:73:ea:de:c7:20:d1:94:4e:de:3e:1a:16: 21:fe:ea:e0:0b:45:4f:6b:a0:6c:39:6a:6b:b0:bc: dd:cd:34:99:b2:9a:58:cf:eb:72:58:4e:92:34:3a: bf:e1:4b:c1:f6:14:30:b1:8b:79:78:54:bf:26:18: 34:e5:12:69:84:f8:fe:f3:96:17:6e:9c:8b:33:6c: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D8:17:79:85:22:53:D1:7B:76:CA:6B:E5:59:F8:35:18:03:ED:33 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d0:9c:4f:42:fa:34:61:3f:62:32:4c:4b:8c:fa:5e:da:ba: de:7f:1b:2d:de:7e:23:90:d2:9f:fb:94:04:74:50:a9:70:e5: a6:64:4c:56:c8:d1:d4:c7:25:31:b2:2b:e0:f7:fe:3c:7e:12: 43:34:1e:59:4c:66:4c:28:76:45:db:2a:eb:e2:c1:f8:82:2c: 74:f2:bd:65:7f:e6:49:83:9d:4b:e6:18:2d:c6:fa:c5:a9:8d: e0:15:67:e0:5a:42:c0:e6:9d:ba:2b:58:71:2a:c6:e4:a6:2c: 63:f7:8f:09:b2:a3:27:89:65:08:64:73:7c:3b:23:d9:ae:c0: dc:37:43:18:59:e9:68:98:c6:7e:4e:d1:d3:72:fb:cf:04:13: 18:55:9f:74:8f:9d:06:1d:4d:88:6b:f1:d5:07:4d:bb:3a:da: 9b:24:3c:3e:d0:c8:43:d3:9a:e7:29:55:6a:59:de:f7:15:c8: 24:23:a0:1e:28:44:64:59:83:11:06:50:0c:ec:bd:9c:ab:88: 47:5b:19:de:f8:c9:9f:9f:67:b7:0d:49:3e:2c:22:ae:03:ca: b4:64:4f:b6:14:c7:3a:2b:3e:ac:08:b1:93:bb:f9:47:f6:1f: e4:d2:81:ef:12:82:95:4e:f2:2c:dd:70:92:3f:f9:21:b7:30: 0a:dc:45:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUmbxmmhQKHLG7OecTNGpfqveA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNTA1MTIxNDI2MDdaFw0yNTA1MTUyMDA5MDdaMDMxMTAvBgNV BAMTKEVBRDgxNzc5ODUyMjUzRDE3Qjc2Q0E2QkU1NTlGODM1MTgwM0VEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYcgMBCs5zExzSHDVPyLQtdX/5 ITbgLxZcRqFun7LY8zxqt/wpr5cpc3nvQPbMGYiGsWqud+ejec9iIQZQbCknrOmm BZuQdNcx//+OQRraBuxNzu6OAJ12wbI4M41JWBRooV/ZOfqlgYBn/n2dxsgydjIA MjF9pDnU8mCAXbcxcEL/6k1QsAdsZUPkSAxlMutQgXRC8XbSM90b2Jyh22hcZsR4 pdGM17dq8JsWgWMdf9ReVefUx3Pq3scg0ZRO3j4aFiH+6uALRU9roGw5amuwvN3N NJmymljP63JYTpI0Or/hS8H2FDCxi3l4VL8mGDTlEmmE+P7zlhdunIszbJ5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6tgXeYUiU9F7dspr5Vn4NRgD7TMwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTQnE9C+jRhP2IyTEuM+l7aut5/Gy3efiOQ 0p/7lAR0UKlw5aZkTFbI0dTHJTGyK+D3/jx+EkM0HllMZkwodkXbKuviwfiCLHTy vWV/5kmDnUvmGC3G+sWpjeAVZ+BaQsDmnborWHEqxuSmLGP3jwmyoyeJZQhkc3w7 I9muwNw3QxhZ6WiYxn5O0dNy+88EExhVn3SPnQYdTYhr8dUHTbs62pskPD7QyEPT mucpVWpZ3vcVyCQjoB4oRGRZgxEGUAzsvZyriEdbGd74yZ+fZ7cNST4sIq4DyrRk T7YUxzorPqwIsZO7+Uf2H+TSge8SgpVO8izdcJI/+SG3MArcRZE= -----END CERTIFICATE-----Generated at Mon May 12 23:03:54 2025 by rpki-client