$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: PVzK7DpfexPC1X2o+kk3mjVm5GnTrKCaovHsX95RIjs= Subject key identifier: C6:A7:B8:0C:81:26:DF:27:FC:2B:A3:28:99:57:21:62:2D:F0:E9:82 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 1E8672767F775BC786F85ED3C2B79A306162BC8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0130 Signing time: Wed 07 May 2025 11:30:48 +0000 Manifest this update: Wed 07 May 2025 11:25:48 +0000 Manifest next update: Sat 10 May 2025 14:23:48 +0000 Files and hashes: 1: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: XFsIo6zuwz17xqiKOSEFnvK2Jc1wZXg/6Dw1KB4MNIs=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 5eQlD68HaKHERHfII59DwwAA8bgfmp1d8Ez+zw7QzCU=) 3: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: k5r0YBYZk7UwnOa/02/8CcrWC3VpmzIsib7AbdnrXHc=) 4: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7cXszIEC7Z7nD1ldnqKl+8siMGel8w55J7g/+p+W100=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 14:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:86:72:76:7f:77:5b:c7:86:f8:5e:d3:c2:b7:9a:30:61:62:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: May 7 11:25:48 2025 GMT Not After : May 10 14:23:48 2025 GMT Subject: CN=C6A7B80C8126DF27FC2BA328995721622DF0E982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:f6:3e:37:2d:8c:7c:35:69:8f:9a:79:b5: c7:2a:4c:7d:14:a6:87:6a:47:3b:a3:98:97:ea:61: 96:92:aa:6f:c1:42:2a:86:4c:18:22:58:95:3c:3e: 08:a4:24:3a:c4:a9:a1:63:2e:9b:9b:72:b9:8f:b2: 0c:51:4d:70:ce:81:18:5d:bc:65:a7:12:d8:a9:29: 37:fc:41:1e:c5:33:e7:7b:db:61:d1:77:f5:98:9a: b5:0b:6e:96:3b:1e:e4:b5:97:81:8d:15:08:ac:59: 20:14:93:4b:cf:f9:cd:9d:9b:da:0b:af:ed:a1:36: 37:1f:4f:d8:74:01:3f:9b:ef:94:9a:50:3c:16:6c: 56:34:c5:61:37:54:5c:b0:d2:cd:b8:b6:fb:1b:7e: d2:be:4b:5c:bd:91:89:43:6f:94:cc:47:90:ef:52: f3:5e:d7:ac:39:d8:b5:3e:76:e9:b6:85:e0:2e:e7: 80:83:e6:d3:74:18:27:f5:eb:f8:50:e6:74:f3:6c: 19:61:cd:aa:b5:ce:0d:3e:99:20:53:69:c7:a1:9c: 97:64:7e:ef:6d:22:3f:6a:59:c0:22:05:04:72:00: 81:4c:17:ce:55:5e:30:59:ab:42:4d:ed:46:f0:8f: b0:5f:3d:5b:5d:c1:a9:81:71:3a:f1:e0:59:fd:6c: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A7:B8:0C:81:26:DF:27:FC:2B:A3:28:99:57:21:62:2D:F0:E9:82 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:be:2f:1b:f4:96:22:80:da:6a:ad:b4:b7:96:b4:fd:61:98: e0:2a:c3:bb:4d:99:ae:08:76:28:73:7e:d0:ef:ad:b5:46:5d: 74:10:cb:8c:12:0c:fb:6a:b5:c7:d1:cb:ba:ec:8a:ae:e1:50: b2:01:ca:99:bb:3c:53:da:8c:44:32:ae:98:0b:4e:b7:c8:30: d5:6d:12:89:45:f2:ae:1f:5a:a8:4a:8f:32:c3:6a:f0:a3:5e: c4:25:11:3c:7b:7d:ae:13:a6:02:11:53:bb:7b:63:8d:a5:44: dd:26:24:80:1f:6a:e9:8e:40:64:6a:c6:8a:15:3f:5c:10:6c: d4:82:7d:03:47:fd:cf:8f:fc:82:ea:8a:df:7f:f1:65:eb:e0: 88:48:ea:d0:1f:3f:c1:1c:8a:5b:0f:fc:19:30:bb:5a:61:1a: eb:c8:cc:11:3b:12:78:f9:7e:4c:94:82:68:53:1c:c6:91:60: a3:c2:a9:38:25:ff:b4:04:24:75:d1:de:4c:68:05:61:8d:2a: 15:24:e8:93:48:7c:5a:31:b7:8f:ac:38:47:0b:c5:5a:b9:eb: ca:f4:0f:36:5e:eb:9d:30:41:60:fe:f4:5c:e2:63:2f:8c:91: 0b:c5:57:38:ea:e9:58:5f:27:a1:19:5d:bf:4f:52:79:74:3b: aa:eb:71:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoZydn93W8eG+F7TwreaMGFivIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA1MDcxMTI1NDhaFw0yNTA1MTAxNDIzNDhaMDMxMTAvBgNV BAMTKEM2QTdCODBDODEyNkRGMjdGQzJCQTMyODk5NTcyMTYyMkRGMEU5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ/Y+Ny2MfDVpj5p5tccqTH0U podqRzujmJfqYZaSqm/BQiqGTBgiWJU8PgikJDrEqaFjLpubcrmPsgxRTXDOgRhd vGWnEtipKTf8QR7FM+d722HRd/WYmrULbpY7HuS1l4GNFQisWSAUk0vP+c2dm9oL r+2hNjcfT9h0AT+b75SaUDwWbFY0xWE3VFyw0s24tvsbftK+S1y9kYlDb5TMR5Dv UvNe16w52LU+dum2heAu54CD5tN0GCf16/hQ5nTzbBlhzaq1zg0+mSBTacehnJdk fu9tIj9qWcAiBQRyAIFMF85VXjBZq0JN7Ubwj7BfPVtdwamBcTrx4Fn9bGktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqe4DIEm3yf8K6MomVchYi3w6YIwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2+Lxv0liKA2mqttLeWtP1hmOAqw7tNma4I dihzftDvrbVGXXQQy4wSDPtqtcfRy7rsiq7hULIBypm7PFPajEQyrpgLTrfIMNVt EolF8q4fWqhKjzLDavCjXsQlETx7fa4TpgIRU7t7Y42lRN0mJIAfaumOQGRqxooV P1wQbNSCfQNH/c+P/ILqit9/8WXr4IhI6tAfP8EcilsP/Bkwu1phGuvIzBE7Enj5 fkyUgmhTHMaRYKPCqTgl/7QEJHXR3kxoBWGNKhUk6JNIfFoxt4+sOEcLxVq568r0 DzZe650wQWD+9FziYy+MkQvFVzjq6VhfJ6EZXb9PUnl0O6rrcZk= -----END CERTIFICATE-----Generated at Fri May 9 06:15:44 2025 by rpki-client