$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: Z3zO2UVbUEBQGSZYsnLkqclN3o0MLr+JqCj0CyjxVic= Subject key identifier: 61:C5:D4:3D:09:4C:7F:AD:CA:8D:20:85:B4:65:D8:F8:B5:18:B9:82 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 48CF903D21A442A0A7E030D4F5C526DEE2676BAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 5D Signing time: Sat 10 May 2025 20:40:05 +0000 Manifest this update: Sat 10 May 2025 20:35:05 +0000 Manifest next update: Wed 14 May 2025 07:06:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 3: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 4: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: ssbqnfDwdhPnf7Zenj/mRDiMuBp8uu8n4flZm0QD8kQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cf:90:3d:21:a4:42:a0:a7:e0:30:d4:f5:c5:26:de:e2:67:6b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: May 10 20:35:05 2025 GMT Not After : May 14 07:06:05 2025 GMT Subject: CN=61C5D43D094C7FADCA8D2085B465D8F8B518B982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:2e:1d:c4:d1:f3:9a:10:ae:54:6e:65:b6: 87:10:5a:52:7d:f9:5f:50:99:87:25:ac:27:4a:1c: 5c:0e:54:5f:c8:1c:63:4f:7a:56:32:b5:7b:8d:1d: 0a:d0:95:a8:b3:e8:13:51:3f:3c:a9:2a:24:9b:8a: 4f:d4:7e:ed:63:8d:90:b1:8f:88:b5:bb:a6:05:4c: a7:92:02:20:30:6c:f7:dd:13:67:9d:fe:d6:8b:88: 72:13:47:6e:db:ca:11:f1:23:a1:8d:6d:45:ae:ab: 3f:69:75:c9:b4:d7:47:77:67:92:18:f0:8d:48:fc: 5e:59:08:61:35:2f:eb:19:1a:92:07:ab:f9:e2:a3: c9:5d:05:33:d5:88:68:48:bc:0a:88:f6:56:e2:51: 92:0b:ab:90:aa:f9:bc:d6:1c:53:ef:a3:5c:9a:21: f2:12:3f:7e:01:1c:d0:a9:67:39:c7:61:2a:ef:b8: 83:ed:fb:93:10:be:a8:62:c1:75:e9:d6:46:5a:dc: 85:54:43:99:00:56:0c:c5:9b:b5:95:11:60:35:95: 8e:64:d1:c0:d4:05:b5:10:3d:aa:fa:0b:30:50:ed: dd:3a:00:23:b7:e5:9d:bb:7c:63:74:ed:d1:f5:3f: 23:bc:32:02:c1:e0:42:f7:74:0e:eb:2e:c5:fb:29: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:D4:3D:09:4C:7F:AD:CA:8D:20:85:B4:65:D8:F8:B5:18:B9:82 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:08:d8:55:e8:66:2d:c0:e3:38:fe:ec:bd:9f:92:74:d4:e1: f7:4a:1d:1e:14:f3:87:3c:04:f3:d3:72:75:91:82:cf:10:eb: 19:83:8b:e7:45:ff:55:06:33:0b:69:61:93:89:0a:a7:a6:bc: 38:40:fd:56:3f:e7:8d:59:0b:a7:1a:35:fc:c1:74:e4:f0:8f: 3b:ec:ac:51:b3:fd:0e:23:7f:a2:29:c1:cf:79:b4:12:04:b1: 10:30:2a:eb:d7:0a:b0:f4:ad:ac:28:00:e9:bd:4e:26:32:ca: 4c:e1:fe:19:0f:9b:a5:64:dc:d4:95:63:cd:60:ab:ab:c9:c6: 84:78:90:6d:83:70:56:d6:bb:80:cb:ee:6f:b5:eb:ae:be:a5: 49:28:91:2f:90:46:c6:21:80:01:75:93:55:ea:13:be:d5:dd: 26:db:45:c9:85:bf:af:b8:2c:25:13:88:04:5f:16:05:cd:83: f0:8c:b0:40:37:16:42:42:5d:7e:0d:5d:74:05:58:53:8a:95: f4:50:6a:f0:a7:73:e1:18:57:41:85:c6:72:e5:17:fe:1a:e2: ae:37:1e:07:e4:5e:b6:b1:8d:55:cf:ba:9f:0e:f3:fe:45:15: 20:b2:53:0f:ef:7f:a9:86:5d:11:84:9a:1a:e3:2b:c6:37:e5: 4f:e8:69:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSM+QPSGkQqCn4DDU9cUm3uJna64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA1MTAyMDM1MDVaFw0yNTA1MTQwNzA2MDVaMDMxMTAvBgNV BAMTKDYxQzVENDNEMDk0QzdGQURDQThEMjA4NUI0NjVEOEY4QjUxOEI5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpC4dxNHzmhCuVG5ltocQWlJ9 +V9QmYclrCdKHFwOVF/IHGNPelYytXuNHQrQlaiz6BNRPzypKiSbik/Ufu1jjZCx j4i1u6YFTKeSAiAwbPfdE2ed/taLiHITR27byhHxI6GNbUWuqz9pdcm010d3Z5IY 8I1I/F5ZCGE1L+sZGpIHq/nio8ldBTPViGhIvAqI9lbiUZILq5Cq+bzWHFPvo1ya IfISP34BHNCpZznHYSrvuIPt+5MQvqhiwXXp1kZa3IVUQ5kAVgzFm7WVEWA1lY5k 0cDUBbUQPar6CzBQ7d06ACO35Z27fGN07dH1PyO8MgLB4EL3dA7rLsX7KbJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcXUPQlMf63KjSCFtGXY+LUYuYIwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4I2FXoZi3A4zj+7L2fknTU4fdKHR4U84c8 BPPTcnWRgs8Q6xmDi+dF/1UGMwtpYZOJCqemvDhA/VY/541ZC6caNfzBdOTwjzvs rFGz/Q4jf6Ipwc95tBIEsRAwKuvXCrD0rawoAOm9TiYyykzh/hkPm6Vk3NSVY81g q6vJxoR4kG2DcFbWu4DL7m+1666+pUkokS+QRsYhgAF1k1XqE77V3SbbRcmFv6+4 LCUTiARfFgXNg/CMsEA3FkJCXX4NXXQFWFOKlfRQavCnc+EYV0GFxnLlF/4a4q43 HgfkXraxjVXPup8O8/5FFSCyUw/vf6mGXRGEmhrjK8Y35U/oaZs= -----END CERTIFICATE-----Generated at Sun May 11 01:06:50 2025 by rpki-client