$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: LfFg7nubqfXioEEr/ZfPEJYV/EL1XYUwMDSzDNzE5mM= Subject key identifier: 09:0F:93:0F:2A:71:4F:36:89:42:B2:2B:9E:F2:FC:39:C1:06:A7:3A Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 0F2ADEFDEB40748ADAEFEE35F926898B620E4B65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 022F Signing time: Thu 08 May 2025 05:31:09 +0000 Manifest this update: Thu 08 May 2025 05:26:09 +0000 Manifest next update: Sun 11 May 2025 06:05:09 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: lOzsBAzFryNZCB+/jSigc4I1GSMJcpM/tHVhQtqL83s=) 2: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ=) 3: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: 1EKcbItddW41BhX1bdeN14aT7M814hrEV2hMYafyA2Y=) 4: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: V8A5qvlja2NYXpcRnbKxugWJ4eOJeRmdBpf3sJh4ueQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 06:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:de:fd:eb:40:74:8a:da:ef:ee:35:f9:26:89:8b:62:0e:4b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: May 8 05:26:09 2025 GMT Not After : May 11 06:05:09 2025 GMT Subject: CN=090F930F2A714F368942B22B9EF2FC39C106A73A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:8e:46:73:2f:e6:61:bc:57:99:58:61:9b: 46:3d:ab:2d:e3:f6:37:83:44:4d:f6:55:50:b4:f2: 0a:f7:fd:04:fb:73:c5:9e:6e:2b:e9:ac:d1:92:43: 21:61:75:55:46:c9:94:68:ee:a7:48:26:16:55:f8: be:14:0a:03:a0:9e:b6:cb:2f:04:9d:c5:a3:e2:b8: 82:34:6b:5a:6f:3b:20:d2:ec:9a:47:3a:04:1f:48: 28:25:a4:b1:c8:f8:74:fb:43:6a:0b:9c:fc:6e:f8: fb:49:6f:49:e3:df:5f:97:ae:4d:07:d6:49:e2:78: e6:ce:f8:e4:33:e5:dd:54:bf:b7:ee:e1:13:14:e4: a0:57:f4:37:90:05:98:1d:03:db:7f:d6:e0:fe:ad: 44:8d:11:a9:eb:33:99:eb:79:c2:b3:15:ea:a2:e8: 0f:2f:67:35:94:58:44:e3:a5:9e:e5:5f:8a:dc:c2: e5:9f:ea:5a:6f:a5:1c:16:90:16:ae:e7:ac:ae:07: f2:d4:f2:33:93:b2:bc:ff:b1:42:2c:b1:17:8e:4c: 62:51:37:34:73:85:3d:48:40:76:a7:2d:80:a8:cc: e6:e0:99:57:83:38:0e:00:3c:ed:20:0a:a5:34:d4: 85:99:10:b2:bc:11:f7:75:4c:97:05:4b:6b:9c:e9: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:93:0F:2A:71:4F:36:89:42:B2:2B:9E:F2:FC:39:C1:06:A7:3A X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3c:4e:78:a6:79:24:0f:ad:98:31:02:bd:20:a9:fc:d8:86: 9a:90:7b:cf:fe:4b:12:e7:ef:be:11:b2:12:d8:76:53:4a:7b: dd:bc:61:df:b7:4f:0c:4d:98:e7:20:b5:84:50:dd:f5:7c:db: 3a:83:a2:c5:87:20:29:02:fc:7f:92:49:71:c7:47:e4:de:fe: a3:bc:ba:e9:3a:fd:f3:ce:8b:6e:db:42:1d:6a:07:cd:85:b2: 0a:2f:a5:8e:d1:aa:76:80:d0:30:dd:c4:b2:4f:bb:79:d2:c8: 77:ef:e4:6d:22:87:9e:cf:6c:19:1f:ad:d8:b8:30:83:dc:73: 75:fe:72:c4:91:54:22:99:91:4a:d9:34:00:15:62:2e:5e:69: 8c:d3:b6:32:8e:73:91:a9:83:f2:c0:2a:d6:6c:42:2f:ca:e2: 91:4f:2d:5e:56:72:7f:62:ac:e5:08:b1:10:b9:0a:b5:a7:27: 69:ad:80:82:23:f2:7c:0e:e3:01:9c:b0:6b:b1:27:cc:47:ff: 74:36:7a:7c:04:39:65:58:92:4d:df:00:11:3c:1a:25:0f:79: 9b:b9:28:c5:bd:61:98:80:54:1b:d1:d8:8d:71:e9:4c:f4:24: bc:56:0c:78:3b:ed:e5:13:09:6a:06:f9:b7:f2:2f:1c:c1:43: 33:38:f5:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyre/etAdIra7+41+SaJi2IOS2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNTA1MDgwNTI2MDlaFw0yNTA1MTEwNjA1MDlaMDMxMTAvBgNV BAMTKDA5MEY5MzBGMkE3MTRGMzY4OTQyQjIyQjlFRjJGQzM5QzEwNkE3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkY5Gcy/mYbxXmVhhm0Y9qy3j 9jeDRE32VVC08gr3/QT7c8WebivprNGSQyFhdVVGyZRo7qdIJhZV+L4UCgOgnrbL LwSdxaPiuII0a1pvOyDS7JpHOgQfSCglpLHI+HT7Q2oLnPxu+PtJb0nj31+Xrk0H 1knieObO+OQz5d1Uv7fu4RMU5KBX9DeQBZgdA9t/1uD+rUSNEanrM5nrecKzFeqi 6A8vZzWUWETjpZ7lX4rcwuWf6lpvpRwWkBau56yuB/LU8jOTsrz/sUIssReOTGJR NzRzhT1IQHanLYCozObgmVeDOA4APO0gCqU01IWZELK8Efd1TJcFS2uc6cU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQ+TDypxTzaJQrIrnvL8OcEGpzowHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs8TnimeSQPrZgxAr0gqfzYhpqQe8/+SxLn 774RshLYdlNKe928Yd+3TwxNmOcgtYRQ3fV82zqDosWHICkC/H+SSXHHR+Te/qO8 uuk6/fPOi27bQh1qB82FsgovpY7RqnaA0DDdxLJPu3nSyHfv5G0ih57PbBkfrdi4 MIPcc3X+csSRVCKZkUrZNAAVYi5eaYzTtjKOc5Gpg/LAKtZsQi/K4pFPLV5Wcn9i rOUIsRC5CrWnJ2mtgIIj8nwO4wGcsGuxJ8xH/3Q2enwEOWVYkk3fABE8GiUPeZu5 KMW9YZiAVBvR2I1x6Uz0JLxWDHg77eUTCWoG+bfyLxzBQzM49Xs= -----END CERTIFICATE-----Generated at Thu May 8 18:56:27 2025 by rpki-client