$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: upF/7RiSsa+aBRYNj8GKqd+oL1PDOiOr48ZBC9e5awA= Subject key identifier: 47:08:27:C2:19:1B:C2:16:5D:C3:EA:61:D2:94:BC:D7:C9:76:FF:1C Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 6E98932DB1F0C02DE9EB65C289868216FEC428EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 02CC Signing time: Sun 04 May 2025 04:21:34 +0000 Manifest this update: Sun 04 May 2025 04:16:34 +0000 Manifest next update: Wed 07 May 2025 13:05:34 +0000 Files and hashes: 1: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: A9dvabDHURc2F4RwJB7pEwC794GXhUFEO/hU7JjLQ6o=) 2: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: dJop0ZIoEq7yz2OjoW0Jh2aRDWFcjn5m64yyuUs600w=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: +AXG/pm7n+ixEywmMFKOvD7RtSSIc+foMLklPJEgEEE=) 4: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: 8MZDJE1WC1E7vkSQyVEg4cMhq4rJ0podGfyeb/dye+k=) 5: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jXXWxkm8pnllb3VSFA8uhDiro1y3hrU3S7FOIya7wEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:98:93:2d:b1:f0:c0:2d:e9:eb:65:c2:89:86:82:16:fe:c4:28:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: May 4 04:16:34 2025 GMT Not After : May 7 13:05:34 2025 GMT Subject: CN=470827C2191BC2165DC3EA61D294BCD7C976FF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:06:fe:a1:61:48:f8:21:db:7c:79:5a:7f: 3a:2c:0f:f4:62:a3:00:42:ca:bc:db:48:61:5b:d6: aa:f0:1f:82:ac:3b:a2:e2:ec:d7:cf:69:4c:58:d8: d5:40:c3:9f:74:c2:d8:6c:17:8c:a8:ca:43:71:c4: 90:bd:53:ef:f8:9c:0c:6a:a2:c1:f9:99:db:51:1c: f7:ea:ac:2c:69:c0:2b:66:a3:6a:c3:fd:15:4c:4b: 3c:57:9b:be:63:73:6e:eb:5c:2c:88:70:69:af:53: 27:9f:d9:9c:e8:bb:e2:90:6d:fc:ca:6d:1a:f1:33: c7:06:1a:1d:4f:30:ba:db:29:2d:5f:6c:30:30:ea: 8b:dc:0d:d8:fa:65:50:aa:68:c4:6b:c3:3c:68:c4: 3d:50:fe:78:bd:5c:6d:0c:eb:9f:04:4a:da:51:2a: ce:3d:d7:94:68:38:11:e0:33:f9:35:0d:2e:e3:e8: c4:ee:0c:51:86:b5:9a:37:95:d5:76:95:ff:62:bb: 2f:54:7f:a3:1c:a0:ba:c4:d4:71:e6:b2:98:7c:cd: f2:c0:1c:c9:74:15:d0:8c:ea:a0:10:b5:da:b1:e2: 26:35:d3:d8:02:5f:4b:8d:f8:d3:44:18:6e:cb:eb: c5:ec:60:54:0c:4c:7a:5b:2c:ae:ad:9a:4b:48:2d: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:08:27:C2:19:1B:C2:16:5D:C3:EA:61:D2:94:BC:D7:C9:76:FF:1C X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:be:8b:51:46:69:48:36:a4:76:94:09:89:d9:24:8d:d7:ac: 30:d1:8e:10:31:bd:d4:72:16:2f:fe:e3:ba:d5:e7:63:b5:55: 2e:be:7e:37:6b:6a:e6:85:c8:41:28:65:fa:92:0e:a1:a7:91: 61:22:fd:bc:68:8b:bb:78:c7:38:f7:aa:ee:1b:23:94:25:a9: bf:60:fd:49:2e:7b:3e:55:96:a9:60:29:c3:dc:ac:e7:f1:2a: 14:97:29:ea:4a:e0:dd:eb:e9:c1:aa:9a:3f:a7:f5:d0:f0:00: 59:a3:2d:7f:8f:29:8b:19:c4:27:d1:c1:3b:88:26:86:4f:58: 8e:ab:2e:73:6c:af:1b:b1:9f:d5:dc:fa:a7:51:d9:26:be:04: 42:f1:5f:f8:01:4a:de:f8:58:a8:80:f4:ee:3d:4a:13:e2:2a: 67:d2:35:08:c3:d0:19:64:ab:f7:30:76:81:6a:67:db:f3:2c: 0c:ff:fd:6c:f4:10:b4:64:1e:09:0f:b4:97:66:82:a8:63:60: 9a:d4:04:86:cb:ee:5a:2e:85:59:ff:9b:39:0d:9e:fd:3b:ec: 37:8b:8b:c6:57:a4:15:54:ea:36:dc:7b:31:8c:d4:db:2d:98: 9c:f3:d8:ad:35:34:ca:b9:ae:27:5e:f7:e0:5f:a7:f1:73:dd: 34:88:04:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpiTLbHwwC3p62XCiYaCFv7EKO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTA1MDQwNDE2MzRaFw0yNTA1MDcxMzA1MzRaMDMxMTAvBgNV BAMTKDQ3MDgyN0MyMTkxQkMyMTY1REMzRUE2MUQyOTRCQ0Q3Qzk3NkZGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ggb+oWFI+CHbfHlafzosD/Ri owBCyrzbSGFb1qrwH4KsO6Li7NfPaUxY2NVAw590wthsF4yoykNxxJC9U+/4nAxq osH5mdtRHPfqrCxpwCtmo2rD/RVMSzxXm75jc27rXCyIcGmvUyef2Zzou+KQbfzK bRrxM8cGGh1PMLrbKS1fbDAw6ovcDdj6ZVCqaMRrwzxoxD1Q/ni9XG0M658EStpR Ks4915RoOBHgM/k1DS7j6MTuDFGGtZo3ldV2lf9iuy9Uf6McoLrE1HHmsph8zfLA HMl0FdCM6qAQtdqx4iY109gCX0uN+NNEGG7L68XsYFQMTHpbLK6tmktILTSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwgnwhkbwhZdw+ph0pS818l2/xwwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW+i1FGaUg2pHaUCYnZJI3XrDDRjhAxvdRy Fi/+47rV52O1VS6+fjdrauaFyEEoZfqSDqGnkWEi/bxoi7t4xzj3qu4bI5Qlqb9g /Ukuez5VlqlgKcPcrOfxKhSXKepK4N3r6cGqmj+n9dDwAFmjLX+PKYsZxCfRwTuI JoZPWI6rLnNsrxuxn9Xc+qdR2Sa+BELxX/gBSt74WKiA9O49ShPiKmfSNQjD0Blk q/cwdoFqZ9vzLAz//Wz0ELRkHgkPtJdmgqhjYJrUBIbL7louhVn/mzkNnv077DeL i8ZXpBVU6jbcezGM1NstmJzz2K01NMq5ride9+Bfp/Fz3TSIBNU= -----END CERTIFICATE-----Generated at Wed May 7 06:58:36 2025 by rpki-client