$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: 4iGsstRdauMokqF1VnAK66+lckHOmW89rGNe7Rdy+7s= Subject key identifier: CF:03:ED:C5:05:82:C1:69:6B:EE:B4:D1:CC:C6:2E:23:1A:2C:E8:A6 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 7FB8732BF61EC5F40E06AB03C7D5EF3D78061136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 018E Signing time: Fri 09 May 2025 15:11:13 +0000 Manifest this update: Fri 09 May 2025 15:06:13 +0000 Manifest next update: Mon 12 May 2025 16:25:13 +0000 Files and hashes: 1: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: 4HPBv/SBer0hKUplBQU80FgPdMAvIHp8KqOjasB9qLs=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b8:73:2b:f6:1e:c5:f4:0e:06:ab:03:c7:d5:ef:3d:78:06:11:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: May 9 15:06:13 2025 GMT Not After : May 12 16:25:13 2025 GMT Subject: CN=CF03EDC50582C1696BEEB4D1CCC62E231A2CE8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:26:5f:ff:d3:d3:4a:df:e4:63:ca:a8:b9: 87:10:d6:e8:8d:9c:45:7b:aa:32:53:35:1d:35:70: 51:57:0a:b8:06:5c:64:c9:ad:57:dc:6c:ce:2c:5d: 8f:02:dd:ce:bc:ca:ae:23:a2:55:30:f5:0d:2e:29: 0a:30:8d:bd:c7:c5:cf:b3:20:ab:df:f5:37:8b:14: 14:e9:5e:2a:66:e0:97:dc:e9:d4:8e:4c:33:64:63: 79:f1:db:6b:ee:ea:88:c0:44:4a:4b:b0:7a:2a:fd: cf:88:e9:5c:63:5a:1c:b2:6f:d5:f7:df:f5:55:bb: ff:db:18:ed:e8:eb:7e:e0:19:0a:b7:3c:36:8d:57: c7:e9:a0:d8:19:88:2e:7f:34:c2:11:26:3e:1e:31: 41:dd:43:a5:90:c4:fa:57:3d:d2:54:62:45:86:7a: 90:fd:a4:bb:70:cc:d5:e5:ec:53:59:52:0e:2b:2a: 09:1b:a1:0b:a7:f4:c9:36:bf:11:ca:bd:22:65:eb: 33:72:81:8f:e5:fd:e8:64:02:cc:15:4c:a9:bc:dd: 93:47:f3:04:74:6e:cb:cc:85:0d:53:37:0e:14:56: ad:87:c9:ff:5a:53:fa:88:14:e6:a3:89:ed:bf:42: c3:7a:3e:45:40:f5:51:06:84:5f:c7:7f:34:63:ff: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:03:ED:C5:05:82:C1:69:6B:EE:B4:D1:CC:C6:2E:23:1A:2C:E8:A6 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:4a:41:9d:72:0c:84:f0:e6:01:32:d1:fa:9f:37:47:72:ff: 98:b0:01:12:e3:7d:7c:d6:11:45:6c:79:cb:35:df:d9:b8:98: 08:1a:c8:32:bf:13:0a:94:36:3c:93:b1:b6:79:70:b6:3b:3d: dc:ff:71:66:fb:e8:25:0d:26:8c:27:f9:2c:ee:3b:61:30:b8: 53:bc:56:ec:3f:2f:8d:1b:a8:00:96:fe:ca:7a:49:12:b5:e9: 47:fa:20:a3:dc:31:97:ac:81:4f:33:b3:c1:68:ff:8a:75:73: 5c:68:23:fb:f7:03:12:47:e0:5b:f4:9d:d9:33:bb:fc:81:24: 9e:ac:55:09:1c:9a:54:ae:dc:ce:a0:6c:27:31:76:71:c1:57: 96:fd:77:4e:18:b5:3b:84:a9:4d:bf:90:7d:70:af:59:6b:c6: 82:42:07:12:18:f6:3d:5e:69:cb:b4:11:0e:32:1a:1e:9e:7d: de:fb:fd:9c:e2:d2:61:e2:f6:aa:72:99:fc:4c:1a:4f:da:23: 22:79:96:fd:0b:e3:27:ea:7b:0c:ed:9e:4f:3c:14:70:d9:34: 53:53:2e:b4:eb:9b:a2:f3:9b:b1:c3:95:fa:01:42:1f:b7:da: 03:eb:06:11:fb:d9:56:96:13:3a:90:fc:b4:a4:9f:47:ad:d0: 71:87:eb:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7hzK/YexfQOBqsDx9XvPXgGETYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTA1MDkxNTA2MTNaFw0yNTA1MTIxNjI1MTNaMDMxMTAvBgNV BAMTKENGMDNFREM1MDU4MkMxNjk2QkVFQjREMUNDQzYyRTIzMUEyQ0U4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhJiZf/9PTSt/kY8qouYcQ1uiN nEV7qjJTNR01cFFXCrgGXGTJrVfcbM4sXY8C3c68yq4jolUw9Q0uKQowjb3Hxc+z IKvf9TeLFBTpXipm4Jfc6dSOTDNkY3nx22vu6ojAREpLsHoq/c+I6VxjWhyyb9X3 3/VVu//bGO3o637gGQq3PDaNV8fpoNgZiC5/NMIRJj4eMUHdQ6WQxPpXPdJUYkWG epD9pLtwzNXl7FNZUg4rKgkboQun9Mk2vxHKvSJl6zNygY/l/ehkAswVTKm83ZNH 8wR0bsvMhQ1TNw4UVq2Hyf9aU/qIFOajie2/QsN6PkVA9VEGhF/HfzRj/wRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwPtxQWCwWlr7rTRzMYuIxos6KYwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZKQZ1yDITw5gEy0fqfN0dy/5iwARLjfXzW EUVsecs139m4mAgayDK/EwqUNjyTsbZ5cLY7Pdz/cWb76CUNJown+SzuO2EwuFO8 Vuw/L40bqACW/sp6SRK16Uf6IKPcMZesgU8zs8Fo/4p1c1xoI/v3AxJH4Fv0ndkz u/yBJJ6sVQkcmlSu3M6gbCcxdnHBV5b9d04YtTuEqU2/kH1wr1lrxoJCBxIY9j1e acu0EQ4yGh6efd77/Zzi0mHi9qpymfxMGk/aIyJ5lv0L4yfqewztnk88FHDZNFNT LrTrm6Lzm7HDlfoBQh+32gPrBhH72VaWEzqQ/LSkn0et0HGH6+U= -----END CERTIFICATE-----Generated at Sat May 10 20:32:16 2025 by rpki-client