$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: 1/TUlyh4QjZpgM11YnZVkb4WOIaj857vGBJjhmV15JQ= Subject key identifier: 2D:CA:02:0C:3D:C0:E7:E7:71:CA:7E:F9:44:C7:3E:4C:A1:24:50:33 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 24AFA636764295275D622A431889C648F3E52029 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: 95 Signing time: Mon 12 May 2025 04:03:49 +0000 Manifest this update: Mon 12 May 2025 03:58:49 +0000 Manifest next update: Thu 15 May 2025 04:19:49 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: LtUgOrs24A/Tti6RIUQ3ZRcgydJupUUhY+6Yu9mePMY=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: UQvjbahM5wEVbxKknlNWx8E15RhJ5vKpHF1nJfhJShU=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: IO/iDpjxGtO9u/3pWEFUATuibuSL20cGvyzQOUML/eA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 04:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:af:a6:36:76:42:95:27:5d:62:2a:43:18:89:c6:48:f3:e5:20:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: May 12 03:58:49 2025 GMT Not After : May 15 04:19:49 2025 GMT Subject: CN=2DCA020C3DC0E7E771CA7EF944C73E4CA1245033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:88:b4:04:6e:7b:b5:7b:35:45:e5:84:94: ac:08:8f:6e:71:6a:b0:75:52:b5:58:ac:24:a9:ee: 07:aa:ca:ca:86:15:ec:16:a6:89:77:9d:5a:34:2c: 0d:9c:0a:66:21:cb:8b:85:ed:d4:69:26:33:16:07: 61:e7:5c:ed:9e:7b:79:2f:3f:4e:26:cc:07:5f:0e: b0:7f:0e:e4:63:e9:4d:b5:62:19:e0:15:bf:07:9f: 7e:2f:c1:f1:a4:93:2a:67:98:4e:5c:0e:f4:cd:27: f3:c7:15:5c:70:1c:bc:11:27:32:5e:f0:b9:63:46: c3:fc:83:58:0c:40:b5:52:b7:8f:bf:05:79:52:b8: 19:f3:62:91:2b:f1:e3:07:01:3d:91:81:50:fa:86: af:74:24:fe:ad:7a:d0:d8:23:af:de:90:5b:6b:3e: b1:64:5f:2c:09:98:91:00:ad:e4:2c:1d:66:85:6a: 62:dc:3e:4f:f6:11:0e:9c:10:c3:52:5e:d7:96:a6: 5b:bb:9a:57:7d:a7:1f:6b:55:6b:cb:08:56:a5:d1: bc:d0:92:39:40:cb:e9:cd:00:db:15:60:76:a1:a3: df:71:e2:1d:9c:ab:9b:de:85:9c:ca:d6:60:1d:cc: f7:c2:57:0c:a1:81:d3:be:46:33:9b:58:20:b8:d5: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:02:0C:3D:C0:E7:E7:71:CA:7E:F9:44:C7:3E:4C:A1:24:50:33 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4d:5b:43:02:f0:ec:ea:f6:18:80:21:4b:a1:5d:d5:81:ed: 35:80:dc:8c:9e:80:dc:cc:9b:80:df:58:88:1d:c6:34:5a:37: ce:56:d4:da:51:5d:05:d5:d4:c8:79:3b:fd:4d:cd:45:0f:cd: 43:f6:3a:0b:82:1e:0c:dd:a1:ce:86:6e:a4:b1:9e:63:fe:e2: c5:91:0e:e7:9c:68:d7:5a:71:09:ad:53:f2:3b:64:81:b9:b3: 94:4c:b2:b3:43:de:0d:c9:99:77:fc:ec:d5:f1:96:ac:05:cf: 58:4e:26:87:f9:a2:4b:83:1d:70:a5:1b:c7:ef:90:24:f2:a2: 0b:7e:6e:91:a0:0e:aa:fa:1a:45:08:11:18:7d:b4:95:5b:62: 9a:af:3d:c9:99:87:10:21:f8:e3:d3:6e:8a:97:0a:e7:7a:ca: 42:71:07:3b:66:a2:e4:24:d4:8c:21:20:cf:40:89:0b:d5:8a: 69:d9:f3:11:53:57:d1:89:43:4c:d6:3f:c4:65:de:4e:3a:32: 9d:dc:56:17:c8:d4:88:64:d0:4c:0f:35:98:9b:c5:f8:5b:8b: 20:c8:63:46:4e:35:2d:53:17:31:70:39:1a:6a:74:6c:e5:52: a3:8e:f7:1e:c1:0b:77:c7:0f:c9:5f:af:be:f8:93:fa:1f:95: 10:92:e4:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJK+mNnZClSddYipDGInGSPPlICkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA1MTIwMzU4NDlaFw0yNTA1MTUwNDE5NDlaMDMxMTAvBgNV BAMTKDJEQ0EwMjBDM0RDMEU3RTc3MUNBN0VGOTQ0QzczRTRDQTEyNDUwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHoi0BG57tXs1ReWElKwIj25x arB1UrVYrCSp7geqysqGFewWpol3nVo0LA2cCmYhy4uF7dRpJjMWB2HnXO2ee3kv P04mzAdfDrB/DuRj6U21YhngFb8Hn34vwfGkkypnmE5cDvTNJ/PHFVxwHLwRJzJe 8LljRsP8g1gMQLVSt4+/BXlSuBnzYpEr8eMHAT2RgVD6hq90JP6tetDYI6/ekFtr PrFkXywJmJEAreQsHWaFamLcPk/2EQ6cEMNSXteWplu7mld9px9rVWvLCFal0bzQ kjlAy+nNANsVYHaho99x4h2cq5vehZzK1mAdzPfCVwyhgdO+RjObWCC41QQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULcoCDD3A5+dxyn75RMc+TKEkUDMwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZNW0MC8Ozq9hiAIUuhXdWB7TWA3IyegNzM m4DfWIgdxjRaN85W1NpRXQXV1Mh5O/1NzUUPzUP2OguCHgzdoc6GbqSxnmP+4sWR DuecaNdacQmtU/I7ZIG5s5RMsrND3g3JmXf87NXxlqwFz1hOJof5okuDHXClG8fv kCTyogt+bpGgDqr6GkUIERh9tJVbYpqvPcmZhxAh+OPTboqXCud6ykJxBztmouQk 1IwhIM9AiQvVimnZ8xFTV9GJQ0zWP8Rl3k46Mp3cVhfI1Ihk0EwPNZibxfhbiyDI Y0ZONS1TFzFwORpqdGzlUqOO9x7BC3fHD8lfr774k/oflRCS5D0= -----END CERTIFICATE-----Generated at Wed May 14 04:30:18 2025 by rpki-client