$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: KkgPe9glDwNvlOcNfR1X9oilogKOHDzRypyOSAVTLUA= Subject key identifier: D1:96:C8:EB:74:1B:CB:8D:A5:68:54:4C:52:7E:06:EE:D4:85:F7:BA Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 3B5CD099C19A8A17C07DE11BCB5B538FDEE23046 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: CE Signing time: Wed 07 May 2025 07:00:35 +0000 Manifest this update: Wed 07 May 2025 06:55:35 +0000 Manifest next update: Sat 10 May 2025 15:01:35 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: DttFyVqbHoNxmK17dKpyOoHcM8TK76CnwejOY0XdKnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5c:d0:99:c1:9a:8a:17:c0:7d:e1:1b:cb:5b:53:8f:de:e2:30:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: May 7 06:55:35 2025 GMT Not After : May 10 15:01:35 2025 GMT Subject: CN=D196C8EB741BCB8DA568544C527E06EED485F7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:96:6c:aa:d9:16:5e:9b:8f:aa:08:08:43: b6:57:ec:7f:3a:89:f6:54:d6:76:17:9a:68:dc:70: dc:66:4e:3a:78:8a:cd:f7:2a:72:aa:0c:60:7f:b2: 59:fa:bc:c3:80:bb:7c:b8:e5:73:de:41:ba:a7:6f: 21:d2:ba:8e:3a:a2:48:31:15:5e:52:eb:fc:c0:f1: 69:98:d3:a2:dc:1b:13:6c:1e:df:cc:62:a1:37:78: 00:56:27:b1:36:d9:1a:b2:8a:93:60:2a:76:f4:4d: c2:81:90:29:4e:c2:c7:98:fc:06:e0:6e:dd:11:42: 5d:4c:8d:3f:08:7c:13:9f:cb:63:26:98:85:37:69: 44:d6:a1:26:83:17:ea:eb:05:57:ad:75:10:92:0a: a5:0d:fc:e4:2d:68:4a:bd:37:be:fb:07:0f:70:fd: 04:5b:cc:4a:17:02:04:55:9d:57:f6:de:55:b4:21: dc:11:d2:bd:88:2b:73:ae:70:2d:ef:7c:f7:3a:7b: 09:20:7c:d6:57:bf:ec:f6:82:60:f5:b6:6a:c1:5d: 71:d0:c5:92:92:26:07:ce:56:23:b8:3f:ad:62:c2: f0:97:59:cd:8d:69:16:e3:93:60:b8:a5:43:8d:8b: 2c:0f:c6:60:62:f8:50:5a:b5:8d:49:c5:9a:f2:7a: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:96:C8:EB:74:1B:CB:8D:A5:68:54:4C:52:7E:06:EE:D4:85:F7:BA X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:41:26:df:b5:18:c7:90:90:8c:9b:b3:3c:a3:1d:11:5c:7f: 66:85:45:78:ec:1a:b6:84:71:36:0e:e3:2c:8e:5c:dd:b8:f9: 2f:73:9e:d6:72:35:f1:81:6c:79:9c:39:b7:fc:e6:d4:ae:41: cd:be:59:13:f5:a0:08:04:80:e0:fb:8d:db:d2:24:f5:38:09: 21:f7:18:8f:92:7f:e1:8a:ed:3b:96:a4:a4:c5:39:fb:6b:d7: c0:5e:8e:9c:ae:f8:5d:62:ac:e3:bf:f4:21:33:8e:e0:42:a6: 14:19:2c:90:f4:b1:a6:ed:81:2d:05:fa:82:4c:12:5e:46:11: d5:9c:5b:27:cc:9f:b9:b7:9b:73:e6:78:77:f6:f4:94:8e:ba: 6c:13:d4:bb:22:9f:af:ec:fc:f1:d1:71:ca:84:df:fa:b8:bf: 6f:01:fe:52:57:14:c5:18:c2:5d:cd:73:9a:1c:0a:94:74:bf: 2b:be:96:ce:26:8b:a3:be:da:dc:b4:04:f1:38:ff:12:74:35: ba:62:04:86:bd:80:53:2f:4d:47:88:b8:54:29:a0:4a:d9:c3: 0b:66:42:81:3d:4c:56:20:c6:60:de:21:6a:17:ad:b3:a7:58: 8d:a9:53:26:ad:18:5c:72:24:5d:9e:74:a5:40:ce:14:ad:7f: c9:2c:3e:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1zQmcGaihfAfeEby1tTj97iMEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA1MDcwNjU1MzVaFw0yNTA1MTAxNTAxMzVaMDMxMTAvBgNV BAMTKEQxOTZDOEVCNzQxQkNCOERBNTY4NTQ0QzUyN0UwNkVFRDQ4NUY3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCepZsqtkWXpuPqggIQ7ZX7H86 ifZU1nYXmmjccNxmTjp4is33KnKqDGB/sln6vMOAu3y45XPeQbqnbyHSuo46okgx FV5S6/zA8WmY06LcGxNsHt/MYqE3eABWJ7E22RqyipNgKnb0TcKBkClOwseY/Abg bt0RQl1MjT8IfBOfy2MmmIU3aUTWoSaDF+rrBVetdRCSCqUN/OQtaEq9N777Bw9w /QRbzEoXAgRVnVf23lW0IdwR0r2IK3OucC3vfPc6ewkgfNZXv+z2gmD1tmrBXXHQ xZKSJgfOViO4P61iwvCXWc2NaRbjk2C4pUONiywPxmBi+FBatY1JxZryep1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZbI63Qby42laFRMUn4G7tSF97owHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlBJt+1GMeQkIybszyjHRFcf2aFRXjsGraE cTYO4yyOXN24+S9zntZyNfGBbHmcObf85tSuQc2+WRP1oAgEgOD7jdvSJPU4CSH3 GI+Sf+GK7TuWpKTFOftr18Bejpyu+F1irOO/9CEzjuBCphQZLJD0sabtgS0F+oJM El5GEdWcWyfMn7m3m3PmeHf29JSOumwT1Lsin6/s/PHRccqE3/q4v28B/lJXFMUY wl3Nc5ocCpR0vyu+ls4mi6O+2ty0BPE4/xJ0NbpiBIa9gFMvTUeIuFQpoErZwwtm QoE9TFYgxmDeIWoXrbOnWI2pUyatGFxyJF2edKVAzhStf8ksPj8= -----END CERTIFICATE-----Generated at Thu May 8 05:34:03 2025 by rpki-client