$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: PaHEYbyUfgx0+uM3P4OF+7E8bk9ZkSXe4dXafejP+0w= Subject key identifier: 92:09:DF:78:B1:91:56:C5:D6:9B:48:F3:4D:C1:B9:93:C5:92:FB:84 Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 782F83D15028C6E5131D8D1F409586AE05A364A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 0197 Signing time: Fri 09 May 2025 05:01:53 +0000 Manifest this update: Fri 09 May 2025 04:56:53 +0000 Manifest next update: Mon 12 May 2025 09:07:53 +0000 Files and hashes: 1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: xdGke/3wp+KF9vjtaK7wDy/z4RoQQK6puTTAhErBTfg=) 2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) 3: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) 4: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2f:83:d1:50:28:c6:e5:13:1d:8d:1f:40:95:86:ae:05:a3:64:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: May 9 04:56:53 2025 GMT Not After : May 12 09:07:53 2025 GMT Subject: CN=9209DF78B19156C5D69B48F34DC1B993C592FB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:58:3d:8a:45:fb:42:a5:64:00:6a:13:50: 33:4b:cc:90:59:d8:eb:a9:87:cf:4f:a0:65:2a:db: 4c:e5:7c:d7:96:92:01:c1:50:9d:8c:d8:74:08:32: d0:bc:fe:a2:4b:e6:62:39:61:cb:a9:b7:4a:57:1e: dc:45:c9:6d:49:64:f4:8e:cc:32:26:40:ec:78:e6: 39:ac:a3:fa:5c:b0:f1:66:8e:89:8b:c6:db:f3:45: e1:7e:db:39:4a:0c:c5:54:1f:c0:de:42:32:cf:1f: 5b:d6:7d:54:5c:26:65:bc:56:b6:2f:63:06:72:51: 5d:60:97:4f:ca:d7:59:86:fb:93:eb:14:12:38:7e: 1a:40:c9:0b:26:22:fe:d3:ef:5c:da:95:6f:4b:39: 2d:62:ea:ce:5c:5e:57:94:ef:d8:22:a3:37:ac:ed: 85:80:bb:80:aa:85:2d:57:e8:1c:d2:30:75:94:28: f7:c2:53:d2:ec:fe:1a:30:cf:08:db:c0:fb:62:5f: 11:80:91:e1:a3:5b:45:89:a4:17:5c:b9:e8:b8:13: eb:f0:b2:bc:f0:26:5a:ac:f0:07:35:a4:1a:b0:92: d6:22:b9:55:f5:ee:69:ca:e2:03:22:cd:c3:b2:5f: b1:ba:d1:bf:90:a7:43:8a:f3:c9:33:d0:b4:cf:fb: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:DF:78:B1:91:56:C5:D6:9B:48:F3:4D:C1:B9:93:C5:92:FB:84 X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e9:d9:60:ee:25:ee:9a:16:42:65:73:75:27:d1:bf:fc:f9: 35:29:6a:cc:06:8a:ad:a7:2c:cc:ce:c1:b9:65:29:1a:9d:fa: bd:0c:ca:31:02:70:75:8c:eb:db:9c:6d:6b:df:73:7b:45:b9: b8:2f:7d:01:46:97:69:33:c9:36:63:e8:53:0d:1c:fa:54:ed: 74:15:b0:31:8f:09:b0:e8:81:6b:52:54:ba:59:50:7d:cf:fa: fb:56:10:70:3d:84:84:50:f2:a2:cd:de:41:c5:40:2d:bd:78: f1:0c:8d:ab:72:9b:35:c6:40:5f:af:cb:ca:84:43:48:2e:47: 51:c9:af:68:89:7c:c3:59:1a:e3:d6:08:bb:bd:29:be:12:f8: 7c:fb:04:bc:b6:75:54:bc:db:b1:31:4b:dd:24:2c:1c:91:69: fe:7c:de:95:5f:35:74:7d:75:9e:a3:c7:ae:ba:b7:5c:34:72: 46:78:ae:04:c8:33:d1:76:f2:f5:e4:20:48:07:5b:90:be:37: f7:71:2e:43:f3:08:c1:6b:70:5e:cf:e9:36:bf:c5:51:3e:d8: 91:b9:b1:65:e8:48:d4:08:11:4a:fe:9e:f4:fd:42:3e:c6:b4: a5:8a:0a:fc:15:22:dc:5d:c4:44:51:95:7b:28:76:d5:7a:d9: f6:a9:7c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeC+D0VAoxuUTHY0fQJWGrgWjZKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA1MDkwNDU2NTNaFw0yNTA1MTIwOTA3NTNaMDMxMTAvBgNV BAMTKDkyMDlERjc4QjE5MTU2QzVENjlCNDhGMzREQzFCOTkzQzU5MkZCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBI1g9ikX7QqVkAGoTUDNLzJBZ 2Ouph89PoGUq20zlfNeWkgHBUJ2M2HQIMtC8/qJL5mI5Ycupt0pXHtxFyW1JZPSO zDImQOx45jmso/pcsPFmjomLxtvzReF+2zlKDMVUH8DeQjLPH1vWfVRcJmW8VrYv YwZyUV1gl0/K11mG+5PrFBI4fhpAyQsmIv7T71zalW9LOS1i6s5cXleU79giozes 7YWAu4CqhS1X6BzSMHWUKPfCU9Ls/howzwjbwPtiXxGAkeGjW0WJpBdcuei4E+vw srzwJlqs8Ac1pBqwktYiuVX17mnK4gMizcOyX7G60b+Qp0OK88kz0LTP+253AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgnfeLGRVsXWm0jzTcG5k8WS+4QwHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPp2WDuJe6aFkJlc3Un0b/8+TUpaswGiq2n LMzOwbllKRqd+r0MyjECcHWM69ucbWvfc3tFubgvfQFGl2kzyTZj6FMNHPpU7XQV sDGPCbDogWtSVLpZUH3P+vtWEHA9hIRQ8qLN3kHFQC29ePEMjatymzXGQF+vy8qE Q0guR1HJr2iJfMNZGuPWCLu9Kb4S+Hz7BLy2dVS827ExS90kLByRaf583pVfNXR9 dZ6jx666t1w0ckZ4rgTIM9F28vXkIEgHW5C+N/dxLkPzCMFrcF7P6Ta/xVE+2JG5 sWXoSNQIEUr+nvT9Qj7GtKWKCvwVItxdxERRlXsodtV62fapfOU= -----END CERTIFICATE-----Generated at Sat May 10 19:22:32 2025 by rpki-client