$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: OzFa+RGDKGulzj5U1LVhCUzZ5cSAwR8WaoI77bwTyzU= Subject key identifier: 99:2A:7C:AD:2B:7F:4B:D6:E4:35:E0:9F:39:3A:6C:FC:92:F0:41:56 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 0309B29B2B327DD7FDE9F67E31FF86A4D2376A70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: FE Signing time: Sat 10 May 2025 11:20:38 +0000 Manifest this update: Sat 10 May 2025 11:15:38 +0000 Manifest next update: Tue 13 May 2025 20:32:38 +0000 Files and hashes: 1: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 2: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: /sE45uCrO4CJd06jedrHsbrbrDGlu+4F1gs56lJyqog=) 3: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:09:b2:9b:2b:32:7d:d7:fd:e9:f6:7e:31:ff:86:a4:d2:37:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: May 10 11:15:38 2025 GMT Not After : May 13 20:32:38 2025 GMT Subject: CN=992A7CAD2B7F4BD6E435E09F393A6CFC92F04156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:7a:8f:92:00:b3:b1:9f:ed:df:2d:a8:36: ff:08:f6:66:09:83:17:12:dc:d6:73:d7:81:c8:18: ef:15:e3:a9:77:cf:0c:91:ce:36:cb:c9:71:c3:b6: 03:bd:8b:24:6c:18:e1:4e:f0:b7:e9:b7:8c:1f:02: aa:a3:76:25:48:3e:0c:ff:59:9f:de:21:d4:2d:18: 36:e0:8e:43:01:ca:66:a2:fa:26:ff:6c:61:29:54: d9:73:91:2d:8a:27:79:4b:7c:b9:81:37:f9:bc:01: 71:11:d9:2a:b7:30:6f:15:e5:d1:e5:78:12:7a:0e: 85:ce:45:ee:71:df:7a:95:33:9b:e9:f8:79:cb:fe: 18:d5:16:12:b6:13:bc:c1:87:ab:8c:b1:2c:01:b6: 7f:ac:41:cb:bc:d4:6d:10:a4:b2:ac:ec:00:23:77: 53:5b:a6:84:ec:11:9d:77:3d:e5:4d:0c:85:1a:17: 6f:54:de:ab:c9:e1:d9:24:71:9a:78:4d:b7:d4:35: c4:75:64:cc:6d:26:a6:19:f3:d6:e9:8f:4f:a4:a5: d7:42:c4:5b:6e:c6:5d:4c:11:5d:42:ee:be:dd:77: cf:dc:10:32:89:a4:a3:f8:c9:35:2c:02:7d:80:73: 20:97:d9:78:5a:70:c3:e5:8f:fb:9f:b9:9c:ca:20: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:7C:AD:2B:7F:4B:D6:E4:35:E0:9F:39:3A:6C:FC:92:F0:41:56 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ba:ec:ca:88:28:62:7d:12:39:86:dc:66:f2:02:23:fb:4e: 81:d7:f9:5b:0f:3b:8c:4e:18:2c:0e:31:0e:df:92:91:91:52: 41:d8:cc:fd:2c:ee:af:86:27:53:70:0e:54:05:6c:6a:58:92: 3e:fb:44:3f:3b:b3:40:2a:b6:a5:13:d4:af:c2:a8:34:94:ff: b7:7d:27:c0:ba:87:7b:42:82:5f:d7:cf:8e:de:99:be:46:b4: 6d:2e:fe:16:bc:ca:7e:00:f9:52:87:ae:d3:c1:96:78:0f:6c: f7:0c:a5:0d:44:86:f5:9f:36:d8:6d:e3:11:a9:c5:f6:c3:5d: b3:f3:99:6f:37:29:69:f5:1c:e2:15:71:b6:22:c0:2b:e6:68: c0:b2:27:2b:66:ae:f3:dc:67:87:82:8d:eb:6f:17:39:83:4c: f9:ca:60:c1:6a:2b:d6:d1:be:43:f6:70:76:56:c4:80:09:a3: 60:df:6a:ab:1e:02:3c:ee:10:ab:15:d2:14:f5:b4:75:15:28: f9:d8:22:2b:be:38:17:ca:a3:17:30:a6:35:91:e6:67:0a:6a: cf:df:0c:b5:20:99:2b:aa:ea:6d:5f:83:58:f3:08:d0:7d:df: 3e:4b:2b:5f:6b:98:84:e9:38:ad:45:7c:19:7f:bb:5d:cc:1a: 7b:96:58:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwmymysyfdf96fZ+Mf+GpNI3anAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA1MTAxMTE1MzhaFw0yNTA1MTMyMDMyMzhaMDMxMTAvBgNV BAMTKDk5MkE3Q0FEMkI3RjRCRDZFNDM1RTA5RjM5M0E2Q0ZDOTJGMDQxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcHqPkgCzsZ/t3y2oNv8I9mYJ gxcS3NZz14HIGO8V46l3zwyRzjbLyXHDtgO9iyRsGOFO8Lfpt4wfAqqjdiVIPgz/ WZ/eIdQtGDbgjkMBymai+ib/bGEpVNlzkS2KJ3lLfLmBN/m8AXER2Sq3MG8V5dHl eBJ6DoXORe5x33qVM5vp+HnL/hjVFhK2E7zBh6uMsSwBtn+sQcu81G0QpLKs7AAj d1NbpoTsEZ13PeVNDIUaF29U3qvJ4dkkcZp4TbfUNcR1ZMxtJqYZ89bpj0+kpddC xFtuxl1MEV1C7r7dd8/cEDKJpKP4yTUsAn2AcyCX2XhacMPlj/ufuZzKINFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSp8rSt/S9bkNeCfOTps/JLwQVYwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG667MqIKGJ9EjmG3GbyAiP7ToHX+VsPO4xO GCwOMQ7fkpGRUkHYzP0s7q+GJ1NwDlQFbGpYkj77RD87s0AqtqUT1K/CqDSU/7d9 J8C6h3tCgl/Xz47emb5GtG0u/ha8yn4A+VKHrtPBlngPbPcMpQ1EhvWfNtht4xGp xfbDXbPzmW83KWn1HOIVcbYiwCvmaMCyJytmrvPcZ4eCjetvFzmDTPnKYMFqK9bR vkP2cHZWxIAJo2DfaqseAjzuEKsV0hT1tHUVKPnYIiu+OBfKoxcwpjWR5mcKas/f DLUgmSuq6m1fg1jzCNB93z5LK19rmITpOK1FfBl/u13MGnuWWAM= -----END CERTIFICATE-----Generated at Sun May 11 15:38:33 2025 by rpki-client