$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: QleEEZKvuLqu4vT+hP+KhYkkTOqPW27OtgNux6cmzP0= Subject key identifier: 66:20:36:63:31:77:D0:B4:2F:D6:E7:6A:3B:E7:68:0E:85:3C:0B:FA Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 6CEED8C331BE571618569113B15555608669DAD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 017C Signing time: Sun 11 May 2025 03:11:28 +0000 Manifest this update: Sun 11 May 2025 03:06:28 +0000 Manifest next update: Wed 14 May 2025 14:27:28 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: +TFfV1TrX03eW/eoaZ3NSYAP4kuS/pU2wLaBC8icDUg=) 3: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 14:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ee:d8:c3:31:be:57:16:18:56:91:13:b1:55:55:60:86:69:da:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: May 11 03:06:28 2025 GMT Not After : May 14 14:27:28 2025 GMT Subject: CN=662036633177D0B42FD6E76A3BE7680E853C0BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:a0:18:ee:ee:ae:b5:98:b4:23:a6:3f:b5: 82:f9:2c:a7:8b:45:92:ee:bd:c2:62:6e:77:ce:d0: 46:eb:38:06:09:af:a9:e3:16:68:20:27:90:53:47: f3:50:48:b9:03:08:28:3e:cf:71:2b:35:fe:33:1f: cd:62:9f:5a:e0:00:8c:ae:2d:cf:f6:7d:bb:7f:f0: 6b:29:94:c1:91:4e:61:3c:25:2e:76:80:3b:a7:91: 15:b1:bc:84:66:5f:03:a5:4a:ae:bb:e1:58:d8:72: 36:e4:03:b8:af:4b:f7:af:c1:89:a4:9a:88:58:26: 68:59:7e:92:ba:0d:21:ff:b1:e8:f0:b7:0a:90:fd: 8b:8c:46:f1:58:d3:d8:c6:57:d5:51:50:6f:a5:8c: aa:5f:22:40:2e:93:a7:03:8f:d4:57:ab:98:df:e1: 97:62:bf:5d:8a:4b:ed:e1:96:ea:d8:7b:e7:ce:29: 26:8f:4f:90:66:13:ea:63:da:d7:36:d3:bf:40:ec: 03:3a:16:4a:09:92:a0:ad:72:f6:6a:ba:25:1f:26: 96:e5:a2:37:18:a9:4f:78:ae:47:f8:8f:07:60:60: 1c:81:73:f4:7c:40:a9:00:ef:95:c2:6c:7c:70:45: 4d:81:63:ce:8f:0e:97:ce:1d:79:8d:2f:ca:a7:47: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:36:63:31:77:D0:B4:2F:D6:E7:6A:3B:E7:68:0E:85:3C:0B:FA X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:02:22:3c:75:e6:96:f7:ea:99:63:77:d0:bd:6b:3d:df:5a: 9b:0b:bc:32:45:e6:2d:30:d2:d1:f8:16:4d:b2:e6:8d:a9:dc: e2:95:03:52:80:78:b3:d9:75:a7:c9:88:0e:48:b8:b3:5d:e1: 0c:fd:08:57:c1:21:4d:f2:a6:2f:cf:71:15:e2:5e:cf:29:73: 25:37:ba:0a:5c:99:92:31:c8:50:97:d1:ac:76:33:1b:62:9a: aa:0a:be:24:32:4e:98:47:e8:ba:bd:12:dc:e3:cc:f3:76:2b: 36:7c:11:dc:f3:1b:17:93:10:f4:11:0e:01:9d:bc:23:1f:d0: e9:3b:12:a4:24:8f:ee:3d:c5:d4:57:e9:47:57:e7:5c:18:de: 8d:77:2e:fe:b8:95:f4:43:b5:64:60:d9:10:2f:fb:83:97:ca: 4a:44:5b:24:71:3a:6f:ea:98:e4:62:b5:0f:6c:8a:34:bf:0f: 62:59:e6:fa:c7:3d:87:e3:ab:1e:12:50:4b:77:34:29:f3:2b: dd:0d:94:b8:15:fa:e7:fa:5f:8b:f9:99:80:c1:a1:35:08:5b: a6:25:c1:bf:83:ba:72:86:17:e3:af:b4:a5:f4:e2:d7:b7:e9: b1:c2:1e:e4:6f:48:8a:a4:ca:42:1b:13:db:d8:80:46:2d:0c: 92:80:f6:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbO7YwzG+VxYYVpETsVVVYIZp2tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTA1MTEwMzA2MjhaFw0yNTA1MTQxNDI3MjhaMDMxMTAvBgNV BAMTKDY2MjAzNjYzMzE3N0QwQjQyRkQ2RTc2QTNCRTc2ODBFODUzQzBCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJ6AY7u6utZi0I6Y/tYL5LKeL RZLuvcJibnfO0EbrOAYJr6njFmggJ5BTR/NQSLkDCCg+z3ErNf4zH81in1rgAIyu Lc/2fbt/8GsplMGRTmE8JS52gDunkRWxvIRmXwOlSq674VjYcjbkA7ivS/evwYmk mohYJmhZfpK6DSH/sejwtwqQ/YuMRvFY09jGV9VRUG+ljKpfIkAuk6cDj9RXq5jf 4Zdiv12KS+3hlurYe+fOKSaPT5BmE+pj2tc2079A7AM6FkoJkqCtcvZquiUfJpbl ojcYqU94rkf4jwdgYByBc/R8QKkA75XCbHxwRU2BY86PDpfOHXmNL8qnR8BPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZiA2YzF30LQv1udqO+doDoU8C/owHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoCIjx15pb36pljd9C9az3fWpsLvDJF5i0w 0tH4Fk2y5o2p3OKVA1KAeLPZdafJiA5IuLNd4Qz9CFfBIU3ypi/PcRXiXs8pcyU3 ugpcmZIxyFCX0ax2MxtimqoKviQyTphH6Lq9EtzjzPN2KzZ8EdzzGxeTEPQRDgGd vCMf0Ok7EqQkj+49xdRX6UdX51wY3o13Lv64lfRDtWRg2RAv+4OXykpEWyRxOm/q mORitQ9sijS/D2JZ5vrHPYfjqx4SUEt3NCnzK90NlLgV+uf6X4v5mYDBoTUIW6Yl wb+DunKGF+OvtKX04te36bHCHuRvSIqkykIbE9vYgEYtDJKA9i8= -----END CERTIFICATE-----Generated at Sun May 11 16:57:51 2025 by rpki-client