$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: uQ5Xqq8Dw9q5yMiqAaX3peOxXsDwWXXMEzsJKavxb9E= Subject key identifier: DA:FA:41:B3:24:B2:35:9B:3F:9A:57:23:14:FE:57:7E:64:8D:56:F7 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 4652BDA3A4BDCC4994240A6D27EC3754F323DE5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03BC Signing time: Sun 04 May 2025 01:01:24 +0000 Manifest this update: Sun 04 May 2025 00:56:24 +0000 Manifest next update: Wed 07 May 2025 10:26:24 +0000 Files and hashes: 1: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 2: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: x5hTeEOvLFOBqbVUlwe0w1rSl/ywnzu7BfrWIVUS2g4=) 3: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: m3X6KjY7o/EGlM5wBCHPOtAX7FxTWxfzKzuxqB2OOHU=) 4: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 5: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 10:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:52:bd:a3:a4:bd:cc:49:94:24:0a:6d:27:ec:37:54:f3:23:de:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: May 4 00:56:24 2025 GMT Not After : May 7 10:26:24 2025 GMT Subject: CN=DAFA41B324B2359B3F9A572314FE577E648D56F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:83:18:22:44:25:0a:f7:2a:50:18:85:bf: 37:12:81:78:e1:96:e9:95:cf:ac:9a:8f:98:57:5d: 1b:fc:0e:6e:52:6b:12:01:c9:9a:89:37:df:30:9e: c1:a4:fe:1d:c2:37:94:b6:1b:cd:0d:91:bf:e7:8a: 20:f7:c3:5e:5c:81:5e:cd:90:c9:f2:b2:fa:e0:cc: b9:c8:a8:eb:5a:7a:ae:e9:64:d9:68:91:2a:ee:91: 9f:f0:ce:b4:11:4b:4f:68:79:50:05:45:54:98:36: 1b:0c:d4:7a:45:3f:91:4c:ee:56:c8:69:93:c6:ee: 05:3f:56:d5:f2:ba:c2:2b:fb:49:95:15:67:35:f5: 62:28:5b:5f:ba:5e:88:6a:07:cd:1e:e5:92:ea:32: 10:f7:4a:dd:57:94:3b:4b:33:11:75:8f:42:9f:cd: 46:a9:95:03:8f:51:95:64:5a:d6:b1:29:66:65:1d: e7:b9:d3:cd:d6:c6:9c:0e:34:e4:43:ff:7c:58:32: 11:89:ec:24:28:a2:b3:36:e6:20:59:55:10:6e:e3: b8:32:11:d8:5b:7a:97:6f:9d:9d:17:45:43:83:c2: e3:26:7a:da:b6:21:39:02:26:23:98:b4:2b:f6:b4: ae:4f:07:da:55:b1:ad:41:45:e0:04:d5:b2:78:ce: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FA:41:B3:24:B2:35:9B:3F:9A:57:23:14:FE:57:7E:64:8D:56:F7 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a0:61:43:98:22:0f:2e:fe:f4:b5:f8:2f:a5:1e:d5:1f:7e: dc:8c:b7:68:e0:fc:f2:52:37:54:b6:49:07:5f:b1:b1:ce:fe: d5:a7:96:8a:a1:63:b2:52:c3:b3:dd:f5:34:55:7a:23:4a:1d: bf:fa:72:4f:82:49:72:2f:01:b2:ab:5e:68:21:36:d5:3c:a0: f1:a2:2e:c8:88:46:cc:0d:7f:0d:76:54:79:6b:e2:be:d8:52: 42:f0:ec:c4:90:a1:60:6a:80:2e:66:61:ce:bb:bf:e7:ac:a2: a3:8c:81:aa:f4:18:23:f3:9f:a1:59:87:29:0a:24:fb:7d:fc: 71:e3:46:ae:88:53:1b:ba:58:6d:9c:c9:7e:ae:35:7d:8a:91: e0:d2:1c:fa:73:49:10:76:63:fd:77:7a:af:ac:a1:44:9a:8f: ec:08:69:f5:23:5d:4f:d1:63:f0:c6:22:74:f5:3d:bc:92:55: 02:e9:df:af:8c:19:da:94:16:f2:ed:cb:84:af:91:ea:07:1c: e6:70:ee:40:04:50:c7:db:32:79:a8:c1:43:33:b7:51:9f:08: b0:84:79:6f:9c:28:20:f6:4d:90:b4:cb:d1:2c:3a:35:74:53: a7:9e:0b:79:d1:b8:09:79:62:0b:1c:fc:d3:47:90:74:f6:a5: b9:14:b9:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlK9o6S9zEmUJAptJ+w3VPMj3lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA1MDQwMDU2MjRaFw0yNTA1MDcxMDI2MjRaMDMxMTAvBgNV BAMTKERBRkE0MUIzMjRCMjM1OUIzRjlBNTcyMzE0RkU1NzdFNjQ4RDU2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPYMYIkQlCvcqUBiFvzcSgXjh lumVz6yaj5hXXRv8Dm5SaxIByZqJN98wnsGk/h3CN5S2G80Nkb/niiD3w15cgV7N kMnysvrgzLnIqOtaeq7pZNlokSrukZ/wzrQRS09oeVAFRVSYNhsM1HpFP5FM7lbI aZPG7gU/VtXyusIr+0mVFWc19WIoW1+6XohqB80e5ZLqMhD3St1XlDtLMxF1j0Kf zUaplQOPUZVkWtaxKWZlHee5083WxpwONORD/3xYMhGJ7CQoorM25iBZVRBu47gy EdhbepdvnZ0XRUODwuMmetq2ITkCJiOYtCv2tK5PB9pVsa1BReAE1bJ4zg2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2vpBsySyNZs/mlcjFP5XfmSNVvcwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCgYUOYIg8u/vS1+C+lHtUfftyMt2jg/PJS N1S2SQdfsbHO/tWnloqhY7JSw7Pd9TRVeiNKHb/6ck+CSXIvAbKrXmghNtU8oPGi LsiIRswNfw12VHlr4r7YUkLw7MSQoWBqgC5mYc67v+esoqOMgar0GCPzn6FZhykK JPt9/HHjRq6IUxu6WG2cyX6uNX2KkeDSHPpzSRB2Y/13eq+soUSaj+wIafUjXU/R Y/DGInT1PbySVQLp36+MGdqUFvLty4SvkeoHHOZw7kAEUMfbMnmowUMzt1GfCLCE eW+cKCD2TZC0y9EsOjV0U6eeC3nRuAl5Ygsc/NNHkHT2pbkUuVg= -----END CERTIFICATE-----Generated at Wed May 7 05:17:57 2025 by rpki-client