$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: md/D1/JZdvjeBa23aKndnlHSOYcTGemeJVmEZ2seHBk= Subject key identifier: DC:2B:AC:70:6F:65:11:9C:EE:DA:A8:EB:21:23:DD:00:17:60:D3:43 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 1725950E7121D8AD90F84C29AE64D434E9BDCBCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02A9 Signing time: Sat 10 May 2025 07:11:07 +0000 Manifest this update: Sat 10 May 2025 07:06:07 +0000 Manifest next update: Tue 13 May 2025 17:56:07 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: /UZn0jIiSkoYCHwOFCOg6G2HhsDGBbrhUkLzS8Vsafo=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:95:0e:71:21:d8:ad:90:f8:4c:29:ae:64:d4:34:e9:bd:cb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: May 10 07:06:07 2025 GMT Not After : May 13 17:56:07 2025 GMT Subject: CN=DC2BAC706F65119CEEDAA8EB2123DD001760D343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:6f:61:4e:a0:3c:0e:19:f5:64:17:ab:c5: eb:ec:1d:1f:57:97:d7:92:f6:f7:b5:ab:66:47:7e: fa:b0:be:82:28:0f:4a:fc:91:70:00:96:a1:8e:f5: f5:e0:19:f4:cb:7f:76:82:48:a0:b2:6b:c8:e3:ab: 3d:fc:c5:a4:e2:bc:48:36:ba:d6:da:a4:db:91:72: bb:e7:8f:1c:4d:44:ef:4e:b8:2d:ea:d8:ab:39:8a: 2a:d1:29:d6:70:89:5a:90:97:48:ee:eb:a0:db:24: 3c:a5:f8:43:49:e4:96:4d:43:c7:83:98:76:0f:39: 15:00:03:b0:98:e5:3f:fc:c5:dd:e8:40:36:d5:28: a0:09:c5:ed:fb:2f:30:83:9a:fd:95:7d:d8:47:b2: ef:86:1b:02:95:2c:04:dd:18:bb:23:2b:58:22:5c: e3:36:48:63:f7:8e:43:7a:1c:53:0c:9d:56:38:f3: cb:2a:12:b5:75:d5:9b:41:90:d5:e3:d7:76:64:c5: fd:dd:e7:0c:4c:a7:ab:61:fc:61:b7:83:98:2d:f0: a1:5c:dd:2b:89:ff:6f:3e:84:b1:b4:95:e3:61:76: 76:a2:70:ba:ab:ad:06:2e:8c:c2:b0:5a:19:65:ac: be:98:d5:eb:df:7e:2c:81:09:3f:05:8e:10:f0:e4: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:AC:70:6F:65:11:9C:EE:DA:A8:EB:21:23:DD:00:17:60:D3:43 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:4c:3a:8f:33:3d:4b:b3:65:88:00:b5:f4:e6:4e:9f:db: 35:b9:15:13:0b:d3:13:cf:6b:ab:fc:43:00:9a:ef:96:3a:a6: d5:7e:4b:67:4b:44:06:e8:be:97:43:f4:76:ff:9e:be:86:fc: 85:78:ba:72:73:0e:bd:e9:58:19:0b:01:26:e6:2a:ad:b3:ad: 0b:03:46:88:32:0e:40:60:e0:e5:90:ee:66:40:15:b0:80:66: 36:57:9c:cc:17:07:75:78:a6:12:b5:52:7b:97:8d:c3:89:c6: 44:db:83:be:62:13:57:7c:f3:c1:93:7f:ba:16:fc:82:dd:ef: 24:d8:6c:e3:9d:49:6f:2c:39:2e:47:55:db:3d:3d:a6:b4:dc: 66:43:22:b5:2f:14:94:21:96:92:ec:7a:9a:54:73:e3:2f:ae: 58:d9:83:9a:b1:45:b1:fe:be:5d:3a:40:69:c0:1c:98:ed:70: 48:3a:c3:15:b4:e8:57:23:a7:67:d0:43:8c:93:3d:33:b4:e9: 9c:06:5d:64:82:94:c3:f1:34:3e:f8:2f:cc:84:ea:24:1c:95: f8:7d:b1:3e:d2:06:0c:34:80:62:a8:c7:2f:41:fe:82:d2:f2: 24:da:1d:ba:0f:21:64:a9:97:e8:12:e8:17:46:85:c3:58:9f: 55:9f:18:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyWVDnEh2K2Q+EwprmTUNOm9y84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA1MTAwNzA2MDdaFw0yNTA1MTMxNzU2MDdaMDMxMTAvBgNV BAMTKERDMkJBQzcwNkY2NTExOUNFRURBQThFQjIxMjNERDAwMTc2MEQzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyC29hTqA8Dhn1ZBerxevsHR9X l9eS9ve1q2ZHfvqwvoIoD0r8kXAAlqGO9fXgGfTLf3aCSKCya8jjqz38xaTivEg2 utbapNuRcrvnjxxNRO9OuC3q2Ks5iirRKdZwiVqQl0ju66DbJDyl+ENJ5JZNQ8eD mHYPORUAA7CY5T/8xd3oQDbVKKAJxe37LzCDmv2VfdhHsu+GGwKVLATdGLsjK1gi XOM2SGP3jkN6HFMMnVY488sqErV11ZtBkNXj13Zkxf3d5wxMp6th/GG3g5gt8KFc 3SuJ/28+hLG0leNhdnaicLqrrQYujMKwWhllrL6Y1evffiyBCT8FjhDw5AAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3CuscG9lEZzu2qjrISPdABdg00MwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTzTDqPMz1Ls2WIALX05k6f2zW5FRML0xPP a6v8QwCa75Y6ptV+S2dLRAbovpdD9Hb/nr6G/IV4unJzDr3pWBkLASbmKq2zrQsD RogyDkBg4OWQ7mZAFbCAZjZXnMwXB3V4phK1UnuXjcOJxkTbg75iE1d888GTf7oW /ILd7yTYbOOdSW8sOS5HVds9Paa03GZDIrUvFJQhlpLseppUc+MvrljZg5qxRbH+ vl06QGnAHJjtcEg6wxW06Fcjp2fQQ4yTPTO06ZwGXWSClMPxND74L8yE6iQclfh9 sT7SBgw0gGKoxy9B/oLS8iTaHboPIWSpl+gS6BdGhcNYn1WfGMg= -----END CERTIFICATE-----Generated at Mon May 12 10:36:22 2025 by rpki-client