$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: rfdM1f00LuBk0/2j1+T8L2aga3WEO6SQX7+tP20243w= Subject key identifier: 03:52:4C:50:7A:E8:09:3F:99:81:32:D3:BC:A1:DA:66:F8:8E:47:77 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 2AA706D1E64D1AFA764F7315012497F14B4286ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 041B Signing time: Thu 08 May 2025 12:30:43 +0000 Manifest this update: Thu 08 May 2025 12:25:43 +0000 Manifest next update: Sun 11 May 2025 17:49:43 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: DyUYKGUl1SrlKFMuo8zGPka2zdr2OgQeY90eV/qtwA8=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a7:06:d1:e6:4d:1a:fa:76:4f:73:15:01:24:97:f1:4b:42:86:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: May 8 12:25:43 2025 GMT Not After : May 11 17:49:43 2025 GMT Subject: CN=03524C507AE8093F998132D3BCA1DA66F88E4777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:a6:07:8a:a6:59:15:a7:ba:97:d4:a1:8c: 1e:05:3d:2a:b2:bf:ac:85:a5:32:f8:cb:9b:a1:4b: 4c:d2:a8:91:99:b5:a1:ee:77:f0:a9:92:c5:f9:2b: 1d:3b:dc:43:e7:cf:88:48:2f:19:2c:0a:d8:6b:0d: 14:af:b7:5c:44:34:06:5d:a0:ea:9b:fe:2a:13:1a: f3:14:be:ac:a0:fa:45:60:3d:76:ff:f1:fb:14:17: ce:67:07:cc:ca:03:5c:0d:49:4b:6a:80:72:8a:6d: f4:5c:00:3c:39:93:45:90:ea:50:19:8a:30:ec:8d: e8:77:3f:4b:78:77:82:9f:96:fc:c0:63:cd:99:97: 67:a3:d1:ef:4e:9b:35:63:90:98:38:46:73:7e:22: 8d:cc:cd:20:b0:14:a2:dd:03:6e:03:a2:02:6f:04: fc:ae:8b:6a:1b:66:7f:da:f4:70:a7:65:8b:4e:8f: 75:3e:39:67:1b:0c:60:45:6b:5b:c1:38:95:db:c3: 62:f3:97:33:34:d6:7e:e9:96:2d:e3:91:d6:7d:9c: ea:9b:ca:bb:48:f8:7c:3f:1e:3a:5e:62:82:65:5d: f7:14:3c:10:be:60:67:48:55:98:12:d6:e9:57:82: 05:01:57:ba:3a:be:14:f9:24:16:44:ab:10:8c:ab: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:52:4C:50:7A:E8:09:3F:99:81:32:D3:BC:A1:DA:66:F8:8E:47:77 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:94:2a:0e:af:79:8d:4f:96:ec:d4:d4:68:ad:45:e8:2a:7a: 33:c2:85:f8:39:47:bd:43:01:29:eb:61:58:1e:35:c0:d7:44: 28:0d:a4:4f:c4:f8:e5:80:ef:bd:84:dd:f8:4d:7f:c9:92:67: 06:19:e4:2e:81:a9:36:3d:ca:95:74:80:dc:13:21:ef:7b:0c: 28:5e:2d:12:cb:1a:22:86:ea:b6:52:99:c8:0b:8a:73:f2:45: 9d:a3:ee:5c:8a:cd:88:4b:9c:b4:d1:fe:31:d5:b5:e8:35:f2: 5a:24:4b:41:9b:85:b5:b2:f6:41:3d:96:d9:7f:d0:97:18:d2: 68:cb:1a:21:57:e7:30:70:e3:4b:39:d1:ed:da:b0:b7:2f:bb: da:83:45:b2:44:0f:f9:1b:1a:0c:de:41:4f:31:74:16:09:59: d8:65:c5:bb:67:31:b5:a9:49:60:ab:88:0a:46:2e:4f:5f:f0: ba:dd:d2:b7:4f:c5:ca:71:2d:1c:45:78:95:d6:14:93:ba:f6: e5:3e:57:d7:8f:3a:b9:57:ef:c6:5e:4a:58:cc:a6:bd:78:64: b7:f0:17:c6:99:d6:77:0e:4b:9c:e6:64:1c:fd:a8:0c:0b:98: 5e:f2:e3:bb:22:ae:7c:f1:f8:6d:49:48:af:10:75:ab:82:53: 60:e0:91:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqcG0eZNGvp2T3MVASSX8UtChu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA1MDgxMjI1NDNaFw0yNTA1MTExNzQ5NDNaMDMxMTAvBgNV BAMTKDAzNTI0QzUwN0FFODA5M0Y5OTgxMzJEM0JDQTFEQTY2Rjg4RTQ3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYaYHiqZZFae6l9ShjB4FPSqy v6yFpTL4y5uhS0zSqJGZtaHud/CpksX5Kx073EPnz4hILxksCthrDRSvt1xENAZd oOqb/ioTGvMUvqyg+kVgPXb/8fsUF85nB8zKA1wNSUtqgHKKbfRcADw5k0WQ6lAZ ijDsjeh3P0t4d4KflvzAY82Zl2ej0e9OmzVjkJg4RnN+Io3MzSCwFKLdA24DogJv BPyui2obZn/a9HCnZYtOj3U+OWcbDGBFa1vBOJXbw2LzlzM01n7pli3jkdZ9nOqb yrtI+Hw/HjpeYoJlXfcUPBC+YGdIVZgS1ulXggUBV7o6vhT5JBZEqxCMq+wPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1JMUHroCT+ZgTLTvKHaZviOR3cwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiUKg6veY1PluzU1GitRegqejPChfg5R71D ASnrYVgeNcDXRCgNpE/E+OWA772E3fhNf8mSZwYZ5C6BqTY9ypV0gNwTIe97DChe LRLLGiKG6rZSmcgLinPyRZ2j7lyKzYhLnLTR/jHVteg18lokS0GbhbWy9kE9ltl/ 0JcY0mjLGiFX5zBw40s50e3asLcvu9qDRbJED/kbGgzeQU8xdBYJWdhlxbtnMbWp SWCriApGLk9f8Lrd0rdPxcpxLRxFeJXWFJO69uU+V9ePOrlX78ZeSljMpr14ZLfw F8aZ1ncOS5zmZBz9qAwLmF7y47sirnzx+G1JSK8QdauCU2DgkU4= -----END CERTIFICATE-----Generated at Fri May 9 01:41:02 2025 by rpki-client