$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: mATgEre9ZyzcnopksvOMHtqex0AcB0HG16Ujo8ZWcmk= Subject key identifier: BC:30:BE:22:A0:B7:F0:80:35:3E:2E:18:1F:44:C8:EF:94:BF:19:80 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 1B150B438AF646E491C149C60EDD453014B6B683 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01DD Signing time: Wed 07 May 2025 19:52:21 +0000 Manifest this update: Wed 07 May 2025 19:47:20 +0000 Manifest next update: Sun 11 May 2025 04:03:20 +0000 Files and hashes: 1: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: hed48NMWMwGKf5ZC0YoPSkzHDzgQszYjHTeUYtmC6k4=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 04:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:0b:43:8a:f6:46:e4:91:c1:49:c6:0e:dd:45:30:14:b6:b6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: May 7 19:47:20 2025 GMT Not After : May 11 04:03:20 2025 GMT Subject: CN=BC30BE22A0B7F080353E2E181F44C8EF94BF1980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:18:84:8c:07:0a:d8:37:f7:bd:cd:66:50: 37:cf:e6:1a:2c:b4:16:d6:26:ba:e1:4d:b9:e8:c0: eb:46:c4:32:de:46:bb:d6:b3:94:55:13:c0:6d:dc: 48:fb:6a:5c:5d:94:1b:65:d8:10:12:68:e9:ea:d7: ed:8a:75:fb:49:61:f5:79:e1:8d:ad:90:82:bb:9e: d6:57:a9:19:dd:31:7b:c9:ac:77:3a:34:95:54:27: b6:a4:b7:dc:ed:8e:c9:bc:eb:73:12:af:fd:df:b3: e5:9c:32:fb:1e:e7:e7:78:67:e6:f4:7f:55:41:52: 79:7c:34:69:ee:1f:5c:39:d9:e3:2d:2e:f2:97:40: 2d:6b:73:8e:a3:94:c1:66:73:b1:ff:f4:09:6d:91: 9a:cb:23:fe:a9:2c:d9:18:2f:23:9e:37:6c:fe:cb: 7d:79:35:4d:9c:2d:62:69:b2:f5:3b:14:6f:94:55: 5f:c7:df:ed:03:61:51:9e:ab:39:f0:ea:9e:17:39: 96:e6:01:fc:ea:e1:26:fe:fc:17:ed:32:6e:36:65: e0:14:b3:81:b8:a8:17:8a:66:da:95:8d:f5:5e:a6: 77:25:50:00:de:39:da:8c:5d:c3:d0:aa:2f:f2:95: ee:48:9f:48:73:29:59:2a:ce:2a:2c:c8:fe:00:5b: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:BE:22:A0:B7:F0:80:35:3E:2E:18:1F:44:C8:EF:94:BF:19:80 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:70:a0:70:9d:30:e8:cd:9e:d0:31:d9:90:e2:39:32:df:42: a9:7c:27:68:11:0c:91:48:c6:b4:ea:36:32:c2:4c:03:50:a9: d8:f0:24:89:a8:59:07:bb:c5:63:49:58:78:5a:7f:2c:59:17: af:5a:35:bb:bf:00:a1:91:b2:0f:b8:1a:45:b6:a8:cb:f8:aa: e2:52:d7:ce:8f:f4:b8:0d:81:07:75:33:20:da:e3:37:d1:d8: 99:08:35:91:3e:a5:91:67:47:7b:b4:49:ff:58:e0:11:28:78: 5b:2c:8a:d9:84:1e:13:fb:25:51:68:af:bd:3a:e1:e6:2a:8a: 5b:ad:b9:a3:dd:9d:61:79:c4:c6:42:bd:b2:98:54:69:2d:a7: d2:86:8a:90:5e:28:bd:a4:d7:60:ae:2f:9e:f0:58:df:b1:31: b8:3c:8f:c2:f4:d9:f0:8c:e6:93:30:d4:4f:f0:8e:d3:a3:ba: 65:2f:a8:c8:c3:c9:53:ed:f4:45:7b:4e:47:ee:4c:b6:c5:01: a4:9b:e2:eb:eb:fc:fb:41:46:e2:f4:02:c8:49:71:94:a9:1a: 16:68:6f:bc:57:6e:2b:3d:22:cc:e7:6a:a8:e5:53:23:9e:ed: 79:3b:6b:32:c2:ad:8b:6b:29:b8:9f:be:59:f4:f8:ab:07:90: 44:30:e1:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxULQ4r2RuSRwUnGDt1FMBS2toMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA1MDcxOTQ3MjBaFw0yNTA1MTEwNDAzMjBaMDMxMTAvBgNV BAMTKEJDMzBCRTIyQTBCN0YwODAzNTNFMkUxODFGNDRDOEVGOTRCRjE5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZhiEjAcK2Df3vc1mUDfP5hos tBbWJrrhTbnowOtGxDLeRrvWs5RVE8Bt3Ej7alxdlBtl2BASaOnq1+2KdftJYfV5 4Y2tkIK7ntZXqRndMXvJrHc6NJVUJ7akt9ztjsm863MSr/3fs+WcMvse5+d4Z+b0 f1VBUnl8NGnuH1w52eMtLvKXQC1rc46jlMFmc7H/9AltkZrLI/6pLNkYLyOeN2z+ y315NU2cLWJpsvU7FG+UVV/H3+0DYVGeqznw6p4XOZbmAfzq4Sb+/BftMm42ZeAU s4G4qBeKZtqVjfVepnclUADeOdqMXcPQqi/yle5In0hzKVkqziosyP4AW8GJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDC+IqC38IA1Pi4YH0TI75S/GYAwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJwoHCdMOjNntAx2ZDiOTLfQql8J2gRDJFI xrTqNjLCTANQqdjwJImoWQe7xWNJWHhafyxZF69aNbu/AKGRsg+4GkW2qMv4quJS 186P9LgNgQd1MyDa4zfR2JkINZE+pZFnR3u0Sf9Y4BEoeFssitmEHhP7JVFor706 4eYqilutuaPdnWF5xMZCvbKYVGktp9KGipBeKL2k12CuL57wWN+xMbg8j8L02fCM 5pMw1E/wjtOjumUvqMjDyVPt9EV7TkfuTLbFAaSb4uvr/PtBRuL0AshJcZSpGhZo b7xXbis9IsznaqjlUyOe7Xk7azLCrYtrKbifvln0+KsHkEQw4YQ= -----END CERTIFICATE-----Generated at Thu May 8 18:08:12 2025 by rpki-client