$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: t80q8NDy8B/4u5L5dCbl5ALTZHKZzbdeQfZcvMZVdCk= Subject key identifier: 42:D1:EC:FF:6D:FF:D9:08:E3:AE:31:E5:B5:6B:1E:1B:69:DB:0B:16 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 30F194EA39D9F72801EEBF396E9D4D3955ED9A1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 04D1 Signing time: Tue 06 May 2025 00:22:00 +0000 Manifest this update: Tue 06 May 2025 00:17:00 +0000 Manifest next update: Fri 09 May 2025 05:05:00 +0000 Files and hashes: 1: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: Xg4L6BidKFA7B16Vjfs6dhJKB9DcJ0qWa35VKVYltxo=) 2: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: Yd01J5hPcZQ8iNNroa+Nv/YFeQyu4ZExz0qlMlvbB+U=) 3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=) 4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 05:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f1:94:ea:39:d9:f7:28:01:ee:bf:39:6e:9d:4d:39:55:ed:9a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: May 6 00:17:00 2025 GMT Not After : May 9 05:05:00 2025 GMT Subject: CN=42D1ECFF6DFFD908E3AE31E5B56B1E1B69DB0B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:62:fb:0e:22:df:00:01:c1:98:83:29:8b: 35:6d:42:11:7e:0d:19:8e:dc:b7:fb:b5:32:40:bb: 7a:ae:d1:51:18:2c:88:e8:3b:2f:05:73:15:63:b7: 81:c3:37:d9:61:48:df:a3:f2:c9:b0:9c:ad:6f:e9: 54:a3:5f:f8:92:97:c2:07:41:3d:a5:b1:89:b8:c0: e8:6d:bd:57:e3:e3:ce:27:c7:59:c9:7e:f0:fd:8b: fc:32:c1:4a:60:98:38:02:df:66:5b:59:36:3b:e5: 54:5c:00:26:47:24:9b:01:00:b5:99:85:12:1d:6a: c4:d8:b2:06:e5:f7:31:2a:a8:38:04:43:fd:26:3d: e2:47:cd:bb:22:e8:ca:af:08:28:70:ed:9c:a8:76: 22:db:6c:36:3b:b5:c9:c2:18:d1:87:4f:31:bf:a1: f5:0b:5d:ad:6b:cd:69:00:01:ad:6a:6e:f7:ab:df: 8a:b8:2f:c8:3d:5d:98:44:20:99:44:45:84:34:25: 82:94:18:f8:0c:5b:85:89:62:22:94:7b:e4:10:37: e9:80:9c:99:b9:d5:ce:32:0d:8d:22:c5:15:5e:a4: 11:6e:de:61:a2:25:23:aa:21:ae:71:03:9d:be:03: 2b:ad:76:2d:23:b9:96:f7:5d:e0:5a:a5:17:f9:ae: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:EC:FF:6D:FF:D9:08:E3:AE:31:E5:B5:6B:1E:1B:69:DB:0B:16 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:08:f1:aa:28:96:94:6c:05:aa:50:77:2c:77:b7:81:d4:01: 41:37:c0:f9:ee:76:e7:a7:8e:95:da:27:fd:47:61:87:fa:8b: d9:af:0f:bc:a8:fc:88:a5:a0:2f:9d:6b:67:e0:d0:fb:77:04: 4d:74:67:90:09:22:38:3c:0f:ba:04:ab:40:ee:9d:0d:ad:75: 9e:e1:f3:19:d4:5d:e9:e5:ce:6b:8f:89:34:4a:4b:5b:86:2e: f9:f7:1c:eb:ea:b8:e9:89:21:75:38:99:c4:d6:d4:be:46:7b: 99:79:9c:ba:fb:c7:3e:90:85:7d:45:26:52:fe:c9:d3:75:a5: 3c:08:b6:a2:6e:b7:c3:9d:6f:ac:29:b2:97:ae:3a:35:4d:54: 0e:80:24:7d:ef:4b:4e:1a:b8:f3:2d:61:c0:23:9f:c1:4c:2a: 85:e8:a5:59:63:80:40:5c:f9:b7:92:c6:20:22:ba:44:02:93: ab:6a:43:98:a9:69:5d:e9:b9:5f:52:8c:c7:92:f4:92:42:fe: 1f:29:d9:8e:49:b7:e2:a1:7f:4e:df:3e:4f:be:c4:87:6b:ba: 1c:fb:01:d6:a1:0d:fe:d5:66:47:c8:b1:7a:22:c2:48:a8:f9: 34:46:f9:6c:23:92:e9:b1:9c:dd:7a:79:7c:53:99:07:96:e0: 74:51:39:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPGU6jnZ9ygB7r85bp1NOVXtmh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA1MDYwMDE3MDBaFw0yNTA1MDkwNTA1MDBaMDMxMTAvBgNV BAMTKDQyRDFFQ0ZGNkRGRkQ5MDhFM0FFMzFFNUI1NkIxRTFCNjlEQjBCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O2L7DiLfAAHBmIMpizVtQhF+ DRmO3Lf7tTJAu3qu0VEYLIjoOy8FcxVjt4HDN9lhSN+j8smwnK1v6VSjX/iSl8IH QT2lsYm4wOhtvVfj484nx1nJfvD9i/wywUpgmDgC32ZbWTY75VRcACZHJJsBALWZ hRIdasTYsgbl9zEqqDgEQ/0mPeJHzbsi6MqvCChw7ZyodiLbbDY7tcnCGNGHTzG/ ofULXa1rzWkAAa1qbver34q4L8g9XZhEIJlERYQ0JYKUGPgMW4WJYiKUe+QQN+mA nJm51c4yDY0ixRVepBFu3mGiJSOqIa5xA52+Ayutdi0juZb3XeBapRf5ruMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtHs/23/2QjjrjHltWseG2nbCxYwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkI8aoolpRsBapQdyx3t4HUAUE3wPnuduen jpXaJ/1HYYf6i9mvD7yo/IiloC+da2fg0Pt3BE10Z5AJIjg8D7oEq0DunQ2tdZ7h 8xnUXenlzmuPiTRKS1uGLvn3HOvquOmJIXU4mcTW1L5Ge5l5nLr7xz6QhX1FJlL+ ydN1pTwItqJut8Odb6wpspeuOjVNVA6AJH3vS04auPMtYcAjn8FMKoXopVljgEBc +beSxiAiukQCk6tqQ5ipaV3puV9SjMeS9JJC/h8p2Y5Jt+Khf07fPk++xIdruhz7 AdahDf7VZkfIsXoiwkio+TRG+WwjkumxnN16eXxTmQeW4HRROVc= -----END CERTIFICATE-----Generated at Wed May 7 20:02:25 2025 by rpki-client