$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: uLQt9YOaafRDLKOEx1xWTbNpFhTKZqTeHu/xrVOcwwE= Subject key identifier: 50:49:7A:5E:64:DC:55:BF:EF:55:8C:EA:BB:80:A5:80:54:39:A3:2F Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 0A8A74675CBB4D82C77DA383196B3277D7B52AC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0334 Signing time: Sat 10 May 2025 09:11:37 +0000 Manifest this update: Sat 10 May 2025 09:06:37 +0000 Manifest next update: Tue 13 May 2025 13:27:37 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: wgIMMI1IHsPnTEJ5BBXb74cas9TRvVVJIUEnjGn6quI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 13:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8a:74:67:5c:bb:4d:82:c7:7d:a3:83:19:6b:32:77:d7:b5:2a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: May 10 09:06:37 2025 GMT Not After : May 13 13:27:37 2025 GMT Subject: CN=50497A5E64DC55BFEF558CEABB80A5805439A32F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:0f:fa:24:dc:ed:49:8d:82:73:08:9e:c9: cd:26:de:aa:99:3a:aa:2f:bc:de:57:e6:33:8b:b6: d3:ef:9a:02:fe:58:90:c9:3a:70:3b:ef:3f:b0:7e: 79:f6:56:ed:87:7d:01:e7:d9:b1:95:c7:7f:63:6c: 05:a3:87:10:8c:ac:0e:69:92:84:53:a0:11:f3:bb: df:28:80:e4:f9:37:88:03:3e:36:c3:43:d2:6b:92: 3d:d6:72:40:52:8c:d3:df:45:c8:3b:00:d3:1d:e7: e6:11:36:0e:ac:e4:3e:41:13:3b:a8:e7:6b:78:9f: 65:50:48:81:1e:5b:80:11:8f:95:d1:6c:f5:03:9c: 7e:54:a4:87:76:0c:a3:49:ac:f9:90:aa:9d:68:98: bc:1a:ee:8d:0b:e7:39:bd:aa:1a:7d:48:04:56:c2: d3:5d:70:0d:c0:e3:6e:32:1b:f6:56:29:6a:f9:81: 42:03:a0:04:48:00:e8:95:bc:ef:3d:55:52:f8:bb: 8e:42:7c:5d:c0:78:bb:5a:73:ef:be:80:cb:d8:83: 5d:50:8b:60:ef:7e:26:49:41:20:2b:29:c2:c2:65: d6:5e:19:b4:3d:80:c5:21:3b:77:ac:23:8a:d3:39: 22:4b:35:fe:17:fd:d0:c7:63:0d:90:31:3c:7c:01: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:7A:5E:64:DC:55:BF:EF:55:8C:EA:BB:80:A5:80:54:39:A3:2F X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b1:3c:8b:5b:f2:c8:52:3d:4b:ca:d5:ed:f7:1d:f4:46:61: 70:a3:bf:42:5a:8f:18:cb:4d:93:1c:e4:8a:f1:ee:31:20:8d: 3a:06:ae:7f:5c:13:36:22:bb:eb:d3:e4:17:1d:34:56:98:9b: d7:c9:80:87:51:a7:ad:c2:97:2d:54:d6:c2:cc:b3:44:c9:5e: b0:99:0d:f8:88:8c:f0:f1:7a:da:a5:e4:7b:06:24:84:88:b4: 5e:ce:2b:f2:8e:97:9e:70:b0:08:a5:2e:0c:70:bc:c6:70:b9: 36:eb:9a:d3:5c:aa:02:0a:7b:b5:0d:c1:b9:a1:b8:17:48:54: d4:5a:a2:d1:08:30:6c:92:84:95:be:06:19:3f:4b:e4:dd:e3: 51:b1:7f:4a:f0:85:35:7f:39:10:3c:50:3a:93:2a:61:c5:d3: f3:4c:09:f3:7a:a9:1a:f3:0c:8d:d3:39:5d:63:3f:82:06:8c: 69:85:e5:83:30:3c:6d:e0:01:6d:15:e0:ab:b4:7a:9d:78:07: 14:fa:b1:c0:12:f2:16:ac:cc:ed:eb:b3:d4:c4:90:f7:e7:7f: c7:db:72:c0:43:5d:00:3b:e7:ba:58:17:cf:78:cd:99:d0:eb: 00:47:5b:eb:bc:be:cf:b4:9c:5a:7e:06:02:21:c1:d3:a5:62: 62:8b:fc:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCop0Z1y7TYLHfaODGWsyd9e1KsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA1MTAwOTA2MzdaFw0yNTA1MTMxMzI3MzdaMDMxMTAvBgNV BAMTKDUwNDk3QTVFNjREQzU1QkZFRjU1OENFQUJCODBBNTgwNTQzOUEzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkA/6JNztSY2Ccwieyc0m3qqZ OqovvN5X5jOLttPvmgL+WJDJOnA77z+wfnn2Vu2HfQHn2bGVx39jbAWjhxCMrA5p koRToBHzu98ogOT5N4gDPjbDQ9Jrkj3WckBSjNPfRcg7ANMd5+YRNg6s5D5BEzuo 52t4n2VQSIEeW4ARj5XRbPUDnH5UpId2DKNJrPmQqp1omLwa7o0L5zm9qhp9SARW wtNdcA3A424yG/ZWKWr5gUIDoARIAOiVvO89VVL4u45CfF3AeLtac+++gMvYg11Q i2DvfiZJQSArKcLCZdZeGbQ9gMUhO3esI4rTOSJLNf4X/dDHYw2QMTx8AeBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUEl6XmTcVb/vVYzqu4ClgFQ5oy8wHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACexPItb8shSPUvK1e33HfRGYXCjv0JajxjL TZMc5Irx7jEgjToGrn9cEzYiu+vT5BcdNFaYm9fJgIdRp63Cly1U1sLMs0TJXrCZ DfiIjPDxetql5HsGJISItF7OK/KOl55wsAilLgxwvMZwuTbrmtNcqgIKe7UNwbmh uBdIVNRaotEIMGyShJW+Bhk/S+Td41Gxf0rwhTV/ORA8UDqTKmHF0/NMCfN6qRrz DI3TOV1jP4IGjGmF5YMwPG3gAW0V4Ku0ep14BxT6scAS8haszO3rs9TEkPfnf8fb csBDXQA757pYF894zZnQ6wBHW+u8vs+0nFp+BgIhwdOlYmKL/I4= -----END CERTIFICATE-----Generated at Sun May 11 11:47:24 2025 by rpki-client