$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: p+PPBthEnWD+q6wflHyQsS9WXWBHY4rKUyzHCen/+Iw= Subject key identifier: 9B:6D:76:5E:C8:4D:37:62:91:94:A7:64:71:AC:B6:46:C4:0A:70:D5 Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 484025EBE86FFB34478FC8F70B40000B4EC1E1A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 01ED Signing time: Fri 04 Jul 2025 02:30:44 +0000 Manifest this update: Fri 04 Jul 2025 02:25:44 +0000 Manifest next update: Mon 07 Jul 2025 13:15:44 +0000 Files and hashes: 1: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: aaEjybLuZjTcdmISVNpSGVUwzREjbRbRN1hLTO5j0Wg=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: 38VctucVjPuOnSloXC5TfoiL9rHRKzx9uk3RVJIrnlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 13:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:40:25:eb:e8:6f:fb:34:47:8f:c8:f7:0b:40:00:0b:4e:c1:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Jul 4 02:25:44 2025 GMT Not After : Jul 7 13:15:44 2025 GMT Subject: CN=9B6D765EC84D37629194A76471ACB646C40A70D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:e4:77:99:07:83:56:f5:d0:a4:c9:75:5f: 33:c6:2a:db:60:0d:3a:bb:52:1f:74:1f:ad:7c:3c: 63:e8:74:9d:ac:4c:b9:da:71:c2:87:a5:84:ff:e6: 8a:f0:fa:f4:8b:32:04:eb:ad:36:a8:6b:7e:1f:96: c1:1d:51:fe:fa:e7:02:2a:f2:8f:16:a8:2d:6b:42: 5e:58:d6:84:3e:79:c6:1b:4d:66:0b:4a:e4:10:41: 5c:99:d7:90:03:48:01:2b:d8:10:ae:28:5e:94:47: 82:2c:6f:5e:5f:3e:b9:7d:30:41:08:d6:14:0e:06: 19:ed:22:ff:db:f9:b9:b0:8f:cd:45:d5:03:0b:23: bf:8b:a9:2d:ce:c7:90:3c:9f:9b:1b:8e:3b:64:69: 10:63:e7:4c:70:d8:d7:c9:2f:9e:99:a7:b1:d7:80: 2c:7d:7f:35:bc:db:7d:d2:f5:95:d3:26:4f:fe:f1: 51:4b:ae:ab:53:3f:f4:ac:3b:47:14:1e:8f:f7:49: a4:51:17:17:50:07:56:d9:c0:0b:27:70:69:fd:dc: 31:31:4b:86:7d:1b:62:9b:02:40:c9:cc:e6:d7:3f: bd:d7:67:67:ca:72:1c:5e:3f:1f:6b:5e:db:52:c6: 22:8c:7a:7d:f4:ac:fd:1e:1e:bc:76:fd:6c:ff:39: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6D:76:5E:C8:4D:37:62:91:94:A7:64:71:AC:B6:46:C4:0A:70:D5 X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0c:e8:7f:13:de:ad:85:57:75:57:bd:90:f7:a3:63:64:e8: ef:20:96:b6:23:eb:ec:48:97:6b:ad:bf:ea:2f:23:38:f3:7b: bf:45:6c:74:6a:32:16:31:3b:f0:61:d9:2f:79:77:b4:b6:d5: c7:30:60:93:27:81:d1:4f:ba:bf:77:1a:9a:dd:ed:09:30:de: 98:10:cb:4f:3c:bc:82:9a:b7:02:a8:e9:87:4f:0c:ff:36:2a: ab:df:9e:84:da:d9:87:e2:8a:48:ed:05:d6:bb:61:b6:d9:4a: c8:b7:3f:72:6f:d9:c9:dd:a4:0f:b1:e5:97:ea:3d:64:40:7f: ea:32:40:98:e8:a0:58:fa:41:b8:3d:b3:fa:57:38:b7:e6:b2: 7e:dc:bc:83:0e:95:f8:29:2d:e9:29:97:fb:ef:fa:d3:8e:c9: 42:d9:26:47:34:5c:64:2e:91:91:4b:52:98:1d:b5:fd:16:a2: 01:28:df:80:2f:d6:0e:af:b0:62:fe:23:ff:d7:d5:73:e1:36: e7:93:b1:33:67:7a:79:3e:30:dd:36:f8:16:78:a8:5c:e7:02: 9c:87:11:7b:9c:5c:1a:94:40:9c:db:b8:d3:73:99:eb:60:05: fa:1b:17:8a:32:1c:9f:57:dd:7d:b6:41:2b:ca:ff:39:34:30: 13:d3:16:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEAl6+hv+zRHj8j3C0AAC07B4aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTA3MDQwMjI1NDRaFw0yNTA3MDcxMzE1NDRaMDMxMTAvBgNV BAMTKDlCNkQ3NjVFQzg0RDM3NjI5MTk0QTc2NDcxQUNCNjQ2QzQwQTcwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SeR3mQeDVvXQpMl1XzPGKttg DTq7Uh90H618PGPodJ2sTLnaccKHpYT/5orw+vSLMgTrrTaoa34flsEdUf765wIq 8o8WqC1rQl5Y1oQ+ecYbTWYLSuQQQVyZ15ADSAEr2BCuKF6UR4Isb15fPrl9MEEI 1hQOBhntIv/b+bmwj81F1QMLI7+LqS3Ox5A8n5sbjjtkaRBj50xw2NfJL56Zp7HX gCx9fzW8233S9ZXTJk/+8VFLrqtTP/SsO0cUHo/3SaRRFxdQB1bZwAsncGn93DEx S4Z9G2KbAkDJzObXP73XZ2fKchxePx9rXttSxiKMen30rP0eHrx2/Wz/OaP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm212XshNN2KRlKdkcay2RsQKcNUwHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAM6H8T3q2FV3VXvZD3o2Nk6O8glrYj6+xI l2utv+ovIzjze79FbHRqMhYxO/Bh2S95d7S21ccwYJMngdFPur93Gprd7Qkw3pgQ y088vIKatwKo6YdPDP82KqvfnoTa2YfiikjtBda7YbbZSsi3P3Jv2cndpA+x5Zfq PWRAf+oyQJjooFj6Qbg9s/pXOLfmsn7cvIMOlfgpLekpl/vv+tOOyULZJkc0XGQu kZFLUpgdtf0WogEo34Av1g6vsGL+I//X1XPhNueTsTNnenk+MN02+BZ4qFznApyH EXucXBqUQJzbuNNzmetgBfobF4oyHJ9X3X22QSvK/zk0MBPTFi8= -----END CERTIFICATE-----Generated at Sat Jul 5 20:47:05 2025 by rpki-client