$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: +uiN2vrn9EQpPCTQn/84gFNIM1EZocc+KzjhIxZ6Fpo= Subject key identifier: EA:E4:2D:D2:2A:E2:38:45:07:9B:43:4D:B7:34:3C:6B:90:E8:CE:7F Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 73F1EB7ECDFD13F87B541EE40AACF9052EC4C02D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0166 Signing time: Tue 06 May 2025 11:20:58 +0000 Manifest this update: Tue 06 May 2025 11:15:58 +0000 Manifest next update: Fri 09 May 2025 21:48:58 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 3: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: 4hSeK9zIYeeDWUbLGO07ou4xjzSl8wcEgGsuCHhQs54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f1:eb:7e:cd:fd:13:f8:7b:54:1e:e4:0a:ac:f9:05:2e:c4:c0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: May 6 11:15:58 2025 GMT Not After : May 9 21:48:58 2025 GMT Subject: CN=EAE42DD22AE23845079B434DB7343C6B90E8CE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:a1:d9:01:93:b1:37:ff:e7:44:1b:ff:50: 62:8b:a1:13:5f:1d:68:d1:f8:2f:07:44:57:7b:df: 75:e3:9c:b2:11:90:ce:59:0b:2f:91:90:f7:c8:09: 93:df:77:c9:0d:93:b4:07:67:37:d5:bb:c1:fa:c6: 2a:15:f6:94:16:98:d6:7c:64:1c:2a:49:e6:cc:e6: 71:39:2d:c7:c3:87:ab:1b:7a:75:37:d5:ed:c2:67: 11:26:30:f4:8d:2c:a6:91:9b:16:c4:c9:1b:7c:50: 18:1e:72:af:74:19:3d:20:38:60:1a:8a:0d:a2:e9: c1:7e:f4:4d:e0:fc:84:db:cf:9c:99:8a:83:1c:4c: 85:01:0e:4d:09:d5:f9:9a:2f:99:3d:fb:4b:59:c1: fb:57:56:de:12:e6:55:1e:1e:14:69:b8:56:a8:aa: 8d:aa:04:43:ad:18:a7:f1:a2:c5:c3:45:65:14:97: 63:00:58:25:ee:9c:9c:48:6f:f1:c5:60:52:be:c2: 5c:4e:a1:52:20:8a:a4:38:62:74:68:10:cb:89:13: 97:dc:ec:3e:53:31:2c:dc:f5:1d:59:c9:e0:06:f1: e1:2b:b5:8b:bf:6f:01:90:7f:60:57:54:73:4a:07: 96:44:7f:20:0b:3f:b1:95:68:7f:7f:c9:a8:4f:59: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E4:2D:D2:2A:E2:38:45:07:9B:43:4D:B7:34:3C:6B:90:E8:CE:7F X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4b:a4:4f:97:ff:7a:51:29:66:5b:a9:13:e0:89:f2:04:7b: 9b:19:4b:a4:51:3a:96:4d:e5:73:da:52:af:ec:9e:06:70:94: 3f:73:72:3c:b0:22:37:cf:10:91:25:f0:2c:24:1a:a3:7c:c9: 1d:c1:49:49:2a:65:e9:da:e3:12:f8:47:7d:38:ae:e7:58:06: df:35:a9:43:17:04:9e:d3:86:3e:11:9a:9c:4c:21:2a:a6:78: 79:9a:ab:bd:ef:ec:81:6e:17:24:a8:22:78:c5:bc:a8:b4:b4: b0:f6:16:40:24:5d:c1:f5:1a:ab:1a:ac:d9:42:8a:87:7c:b6: 45:c3:d6:5e:0a:81:b4:7d:48:c1:5f:f4:27:d0:fd:01:27:5a: 92:3c:e3:20:ae:f1:40:3e:19:7b:1b:6f:3a:5f:a9:9d:a0:a0: 00:3e:b1:22:00:62:68:e9:14:ef:b0:b9:b5:89:e2:1b:0a:0d: 3e:78:8e:1d:6f:0e:50:31:dd:6e:cf:9a:29:02:19:11:4b:1a: 21:63:83:91:1f:7d:dc:c4:7a:70:b2:e5:e1:ff:01:18:f0:5a: 9c:78:00:b0:d8:f3:eb:f7:83:52:38:82:8c:7e:22:da:90:d4: a6:09:1e:83:24:fc:0e:01:46:9b:48:10:ea:45:dc:00:d6:d0: 98:46:ce:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/Hrfs39E/h7VB7kCqz5BS7EwC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA1MDYxMTE1NThaFw0yNTA1MDkyMTQ4NThaMDMxMTAvBgNV BAMTKEVBRTQyREQyMkFFMjM4NDUwNzlCNDM0REI3MzQzQzZCOTBFOENFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECqHZAZOxN//nRBv/UGKLoRNf HWjR+C8HRFd733XjnLIRkM5ZCy+RkPfICZPfd8kNk7QHZzfVu8H6xioV9pQWmNZ8 ZBwqSebM5nE5LcfDh6sbenU31e3CZxEmMPSNLKaRmxbEyRt8UBgecq90GT0gOGAa ig2i6cF+9E3g/ITbz5yZioMcTIUBDk0J1fmaL5k9+0tZwftXVt4S5lUeHhRpuFao qo2qBEOtGKfxosXDRWUUl2MAWCXunJxIb/HFYFK+wlxOoVIgiqQ4YnRoEMuJE5fc 7D5TMSzc9R1ZyeAG8eErtYu/bwGQf2BXVHNKB5ZEfyALP7GVaH9/yahPWcQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uQt0iriOEUHm0NNtzQ8a5Dozn8wHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBLpE+X/3pRKWZbqRPgifIEe5sZS6RROpZN 5XPaUq/sngZwlD9zcjywIjfPEJEl8CwkGqN8yR3BSUkqZena4xL4R304rudYBt81 qUMXBJ7Thj4RmpxMISqmeHmaq73v7IFuFySoInjFvKi0tLD2FkAkXcH1GqsarNlC iod8tkXD1l4KgbR9SMFf9CfQ/QEnWpI84yCu8UA+GXsbbzpfqZ2goAA+sSIAYmjp FO+wubWJ4hsKDT54jh1vDlAx3W7PmikCGRFLGiFjg5EffdzEenCy5eH/ARjwWpx4 ALDY8+v3g1I4gox+ItqQ1KYJHoMk/A4BRptIEOpF3ADW0JhGzm4= -----END CERTIFICATE-----Generated at Wed May 7 19:57:58 2025 by rpki-client