$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: UOxqH5X7I41p5G3X0bAdzp/GtXlgpFDR879vD7gHzh4= Subject key identifier: CC:9A:46:9B:B7:E1:90:09:03:1F:C8:E5:16:33:86:5E:E1:0A:EC:2E Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 5CC788E131590A6B19259DFE8F2DF9D04FC628F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 04CE Signing time: Wed 07 May 2025 05:41:12 +0000 Manifest this update: Wed 07 May 2025 05:36:12 +0000 Manifest next update: Sat 10 May 2025 11:23:12 +0000 Files and hashes: 1: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: OYU7ZkcN3C3+DAiJQaAnt/A43gCXXQ/u9mZU7QAOaPs=) 2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: EXu9NdkahR7wHeyrZX5hyK8z7OlXRnuNpluHlhH9hpY=) 3: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: G0lEZqKVNZPwr4VV+3cV0EUtxN4m32uir7G3WCSjJpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c7:88:e1:31:59:0a:6b:19:25:9d:fe:8f:2d:f9:d0:4f:c6:28:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: May 7 05:36:12 2025 GMT Not After : May 10 11:23:12 2025 GMT Subject: CN=CC9A469BB7E19009031FC8E51633865EE10AEC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:88:72:03:9b:06:ea:d6:7e:c8:b7:d0:6c: 11:a5:7e:24:47:d1:1e:f7:eb:b3:10:22:03:28:92: 77:8a:da:3e:0d:15:dc:30:a7:e9:99:33:07:3d:66: 21:72:77:89:43:25:27:bf:b7:cc:1e:1e:e7:d4:57: 05:54:ee:0a:b8:aa:ba:fa:16:a2:d9:20:ba:1e:8c: d2:2a:97:40:4f:4b:36:7c:c5:fb:ac:ed:39:01:9c: 22:94:5f:d3:3f:48:fb:0d:82:73:e9:7d:3f:40:ac: a2:49:49:0b:1d:17:08:a7:f3:7c:a6:f0:fe:70:d8: 53:dc:1d:a7:7b:84:15:bf:28:31:52:75:a0:43:78: 07:25:e7:c5:08:a4:de:68:c5:15:ac:ad:53:6a:31: 67:5a:81:28:c4:9e:68:47:b0:ae:a6:45:a5:b1:18: 7c:f7:23:25:04:71:20:7f:65:9c:b0:c9:0b:22:cb: d8:97:e9:b5:fa:2f:0e:42:8d:c1:ad:89:77:8c:15: 0e:84:2b:a9:59:80:37:33:7e:19:b2:09:6e:eb:9d: ad:0d:de:ba:19:4c:e1:95:13:04:ec:62:61:17:13: de:07:70:ad:55:8f:06:e7:92:be:c3:9a:da:22:f2: 6f:82:9a:5f:fb:d4:d5:ed:65:7a:0d:16:52:30:d0: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9A:46:9B:B7:E1:90:09:03:1F:C8:E5:16:33:86:5E:E1:0A:EC:2E X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f2:74:7e:f3:55:02:0b:38:58:7e:f1:2f:a5:22:f8:86:6f: e0:33:00:1a:4a:b1:0c:f8:24:59:4e:9b:d2:c1:98:72:97:f7: 2c:e1:81:74:eb:a8:b4:40:88:13:43:b3:5f:27:75:af:17:a3: 40:24:54:aa:ce:d1:86:19:25:4c:bf:b9:98:a6:59:7d:82:11: f5:5c:1b:3f:87:89:4e:ec:7e:22:5e:ee:15:be:6e:8f:f4:e0: 18:a9:6f:f0:a1:46:fd:32:f7:d5:bd:34:d7:0d:38:4c:80:94: a0:db:97:42:5e:be:dd:9e:d2:b0:a9:4c:0b:e6:8b:cc:c1:8e: f7:5b:5b:61:b4:09:ed:32:9c:48:c8:ba:cc:ca:91:da:27:0c: f9:d0:e0:32:b7:09:49:07:63:3d:8f:4c:e3:07:72:0e:b8:79: 44:d9:10:e5:88:82:67:71:7f:15:a1:58:98:80:fa:2f:55:0a: b7:45:fc:bb:dd:70:36:d5:56:b3:cc:e3:09:cf:32:fb:64:34: 7b:6b:38:e4:87:e8:af:ce:43:58:58:8c:76:7a:24:b5:4b:12: 9d:cd:5e:56:b0:dd:23:96:07:f0:be:19:6a:3d:8c:b9:f6:06: 3d:1d:cd:bf:e6:35:54:bb:0f:d1:91:c4:04:f7:e0:d8:87:e3: 81:2e:99:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMeI4TFZCmsZJZ3+jy350E/GKPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA1MDcwNTM2MTJaFw0yNTA1MTAxMTIzMTJaMDMxMTAvBgNV BAMTKENDOUE0NjlCQjdFMTkwMDkwMzFGQzhFNTE2MzM4NjVFRTEwQUVDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k4hyA5sG6tZ+yLfQbBGlfiRH 0R7367MQIgMokneK2j4NFdwwp+mZMwc9ZiFyd4lDJSe/t8weHufUVwVU7gq4qrr6 FqLZILoejNIql0BPSzZ8xfus7TkBnCKUX9M/SPsNgnPpfT9ArKJJSQsdFwin83ym 8P5w2FPcHad7hBW/KDFSdaBDeAcl58UIpN5oxRWsrVNqMWdagSjEnmhHsK6mRaWx GHz3IyUEcSB/ZZywyQsiy9iX6bX6Lw5CjcGtiXeMFQ6EK6lZgDczfhmyCW7rna0N 3roZTOGVEwTsYmEXE94HcK1Vjwbnkr7Dmtoi8m+Cml/71NXtZXoNFlIw0OhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJpGm7fhkAkDH8jlFjOGXuEK7C4wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvydH7zVQILOFh+8S+lIviGb+AzABpKsQz4 JFlOm9LBmHKX9yzhgXTrqLRAiBNDs18nda8Xo0AkVKrO0YYZJUy/uZimWX2CEfVc Gz+HiU7sfiJe7hW+bo/04Bipb/ChRv0y99W9NNcNOEyAlKDbl0Jevt2e0rCpTAvm i8zBjvdbW2G0Ce0ynEjIuszKkdonDPnQ4DK3CUkHYz2PTOMHcg64eUTZEOWIgmdx fxWhWJiA+i9VCrdF/LvdcDbVVrPM4wnPMvtkNHtrOOSH6K/OQ1hYjHZ6JLVLEp3N Xlaw3SOWB/C+GWo9jLn2Bj0dzb/mNVS7D9GRxAT34NiH44EumeM= -----END CERTIFICATE-----Generated at Thu May 8 20:48:03 2025 by rpki-client