$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: e0hNunn7C5eKavhrZDgPD/gBouZjKsncqr0mrcwjJ+Q= Subject key identifier: E1:35:08:B3:C9:3A:C4:ED:74:21:05:56:66:18:E8:CD:04:C8:59:41 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 037FDB22DC4662C5A92220247069FF45160C1ED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04CD Signing time: Wed 07 May 2025 07:50:01 +0000 Manifest this update: Wed 07 May 2025 07:45:01 +0000 Manifest next update: Sat 10 May 2025 16:30:01 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 5Gu2z13wsV8/WfeUY7V0KVxrIwfV0qSkIlTIHlKZ5/A=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: Mr8oWLa5iNuYkCxaTRFTJQaDnGsPKvUvZ+vxESeyc6E=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: xgQd/rPuf45cpwMdqKxEdoY8KAZbjEHoNo5iZUmNsDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7f:db:22:dc:46:62:c5:a9:22:20:24:70:69:ff:45:16:0c:1e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: May 7 07:45:01 2025 GMT Not After : May 10 16:30:01 2025 GMT Subject: CN=E13508B3C93AC4ED742105566618E8CD04C85941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:68:95:a1:58:7a:04:e3:80:31:73:ef:28: b7:14:43:40:e4:34:12:da:b1:2d:21:a0:09:b8:9e: 23:d2:55:07:db:d4:95:23:da:2d:f1:4e:95:77:9f: 8f:a1:09:c8:be:f8:7f:19:f8:07:6e:73:c3:98:9b: 82:cd:ac:80:3f:3c:ab:f6:26:e2:5e:4f:41:e3:e3: a0:67:c5:35:2f:52:4e:e6:eb:67:d9:16:46:1f:17: 89:cd:e9:76:a7:54:e9:7d:eb:4d:9c:50:13:28:ae: 5e:7d:bf:41:f6:95:cf:f3:b7:4b:b5:4e:74:b8:e5: 6e:b7:04:2f:27:80:71:06:ca:11:2e:a8:ee:ce:28: 6b:2b:3b:69:07:8b:ce:43:0e:f6:75:85:b1:34:42: 5e:81:82:fc:09:2e:6b:89:f4:df:2c:20:25:d4:21: 05:99:98:11:28:be:ab:20:1a:9d:09:f6:87:bd:fc: 26:c4:c9:56:2d:f9:af:36:cf:6e:c4:13:6f:0f:f8: ea:19:13:14:e4:72:68:e4:06:86:7f:f5:fc:4f:d9: a9:1a:35:f8:98:5c:a1:e7:54:84:53:7d:fa:50:e5: 1a:31:c1:3e:74:63:d2:72:b3:af:be:31:42:98:21: 51:10:55:ac:10:f5:46:26:46:e5:06:42:2a:1e:d6: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:35:08:B3:C9:3A:C4:ED:74:21:05:56:66:18:E8:CD:04:C8:59:41 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1e:dd:05:85:5b:4d:bf:b2:a3:0b:1d:8d:33:f8:a7:1d:06: ac:bd:0f:31:ae:3a:3b:a5:87:51:69:88:51:07:f0:65:c9:f1: db:9d:03:fb:7c:1f:80:34:16:f5:2b:58:ce:65:39:f5:0c:db: 3a:e6:0b:2f:59:56:63:f6:48:1a:69:69:cd:61:7a:78:48:51: 9c:0b:f2:07:43:23:20:87:32:32:6c:5d:14:35:ec:7f:1c:e2: 3f:fd:be:c0:7b:04:c8:58:e1:f3:2d:fe:db:f6:d9:57:ec:44: 77:1c:d8:70:4f:3e:f4:06:80:d3:38:f4:c7:4c:2d:8a:70:f0: da:80:36:0b:5a:95:2c:d7:a3:00:ab:ed:8f:80:23:f3:c4:94: 23:32:01:28:e1:cc:26:3f:1a:02:f1:00:6a:ec:e8:9c:ea:c3: 21:16:c7:a4:0d:23:6f:94:48:a5:42:2d:78:86:98:32:dc:22: 98:ea:66:91:0e:ab:dc:85:03:64:75:8f:76:68:8b:4a:68:19: 31:ee:98:e5:10:f9:e8:82:72:7d:85:92:d8:c3:fa:25:9f:7a: d8:3b:bf:99:84:b9:4a:04:af:18:00:90:e9:92:75:b9:4d:41: ff:71:1d:4c:63:47:f5:09:c8:dd:e0:bf:47:18:e3:0a:9c:6a: 79:20:b3:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3/bItxGYsWpIiAkcGn/RRYMHtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA1MDcwNzQ1MDFaFw0yNTA1MTAxNjMwMDFaMDMxMTAvBgNV BAMTKEUxMzUwOEIzQzkzQUM0RUQ3NDIxMDU1NjY2MThFOENEMDRDODU5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkdGiVoVh6BOOAMXPvKLcUQ0Dk NBLasS0hoAm4niPSVQfb1JUj2i3xTpV3n4+hCci++H8Z+Aduc8OYm4LNrIA/PKv2 JuJeT0Hj46BnxTUvUk7m62fZFkYfF4nN6XanVOl9602cUBMorl59v0H2lc/zt0u1 TnS45W63BC8ngHEGyhEuqO7OKGsrO2kHi85DDvZ1hbE0Ql6BgvwJLmuJ9N8sICXU IQWZmBEovqsgGp0J9oe9/CbEyVYt+a82z27EE28P+OoZExTkcmjkBoZ/9fxP2aka NfiYXKHnVIRTffpQ5RoxwT50Y9Jys6++MUKYIVEQVawQ9UYmRuUGQioe1rAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TUIs8k6xO10IQVWZhjozQTIWUEwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUe3QWFW02/sqMLHY0z+KcdBqy9DzGuOjul h1FpiFEH8GXJ8dudA/t8H4A0FvUrWM5lOfUM2zrmCy9ZVmP2SBppac1henhIUZwL 8gdDIyCHMjJsXRQ17H8c4j/9vsB7BMhY4fMt/tv22VfsRHcc2HBPPvQGgNM49MdM LYpw8NqANgtalSzXowCr7Y+AI/PElCMyASjhzCY/GgLxAGrs6JzqwyEWx6QNI2+U SKVCLXiGmDLcIpjqZpEOq9yFA2R1j3Zoi0poGTHumOUQ+eiCcn2FktjD+iWfetg7 v5mEuUoErxgAkOmSdblNQf9xHUxjR/UJyN3gv0cY4wqcankgs2I= -----END CERTIFICATE-----Generated at Thu May 8 20:45:35 2025 by rpki-client