$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: umNSPatI0zRzXU2WZJNjBtbdHNIbvkevZ/otgMaGGzU= Subject key identifier: 2E:31:35:61:BB:86:C9:41:A2:A9:96:94:90:30:12:6E:4E:43:8F:51 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 658DB718DAE40DC12E6EF9E0D28CCA2CDF1D1300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 033E Signing time: Mon 12 May 2025 22:31:35 +0000 Manifest this update: Mon 12 May 2025 22:26:35 +0000 Manifest next update: Fri 16 May 2025 04:09:35 +0000 Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: roSFBZe3Csw8eMGlqxe6PHTunfpzJ9/ahjZbGsCfliE=) 2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:b7:18:da:e4:0d:c1:2e:6e:f9:e0:d2:8c:ca:2c:df:1d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: May 12 22:26:35 2025 GMT Not After : May 16 04:09:35 2025 GMT Subject: CN=2E313561BB86C941A2A996949030126E4E438F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:dc:d2:25:48:59:42:89:5a:eb:50:ed:8b: de:a5:e1:fb:1a:e0:a9:3d:f6:79:86:0f:4b:35:50: c3:86:fa:51:79:f3:23:d7:4b:30:a0:81:15:21:39: 44:e9:80:e6:45:5b:68:cf:04:d6:e5:ec:e4:a6:9f: 36:3f:45:7d:e8:fe:b3:c3:51:0c:66:bf:6d:91:2e: c0:7f:04:ce:95:25:be:7c:fa:f8:ab:d7:b0:a1:38: e6:c4:78:3c:f6:59:c5:6f:3a:c5:94:1e:9c:30:7b: d7:0d:db:0f:a2:c3:fa:ef:d9:8e:8a:b3:03:dd:c2: 70:60:56:72:87:ea:40:53:d8:0f:0d:3e:58:e6:a0: 49:eb:da:23:c5:6f:f3:9d:20:a9:2d:87:46:d8:aa: 91:7a:dc:c8:e1:86:20:57:b4:f4:6a:3a:63:24:ea: 15:f1:ae:eb:57:43:80:76:98:0e:5d:b5:be:3f:4d: 2b:e5:49:ca:81:46:a1:34:52:8b:05:e9:86:42:b0: fb:31:58:62:7a:0c:28:15:a8:c6:87:fc:43:ac:1d: a2:8c:ca:8f:c2:bb:9a:5b:31:f0:cb:08:b7:3f:cf: 7f:e2:13:a5:1a:13:8a:ec:c4:d1:5b:7c:2e:d7:dd: c6:4d:b7:d3:c3:f0:85:3c:21:43:84:0b:df:db:a5: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:35:61:BB:86:C9:41:A2:A9:96:94:90:30:12:6E:4E:43:8F:51 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6f:00:0a:1f:0d:dd:fa:fa:bb:f5:0a:a1:20:0b:5e:f9:65: 77:27:7b:ec:17:54:de:c3:62:50:4b:73:21:cd:83:09:93:c6: 91:38:00:45:d3:9e:1a:ea:e0:98:a6:12:e5:22:e4:a5:60:30: 80:1f:21:df:47:00:2c:7a:ff:a5:e8:8b:c8:5b:8d:74:5b:56: a6:a0:d2:6a:0f:a4:9b:b2:69:70:d7:a1:3f:df:58:fd:3e:db: c5:0c:df:5d:74:1f:83:14:d1:31:0f:e4:9c:a1:51:29:ad:d5: 36:39:47:22:c4:b7:43:e9:83:3c:72:69:5d:af:3e:46:04:61: fa:43:74:28:c9:03:c3:c5:01:b0:2c:f0:65:35:e7:ab:93:be: 59:d6:65:6e:4b:83:23:cb:e4:20:31:ce:0b:b9:78:1c:ef:6e: de:b9:84:04:6f:c4:b7:26:31:b1:fe:16:80:18:15:4b:76:01: 2b:64:fa:1e:3e:5f:43:ea:6b:0c:91:d1:56:90:bf:09:89:9b: cb:97:42:1f:b8:36:68:36:b2:5b:f1:2a:e7:70:69:24:53:11: 7c:d5:38:21:69:79:9c:f4:ce:5f:e1:aa:c9:ef:e3:19:85:59: 93:39:8a:14:62:73:f7:2f:06:12:66:54:a3:6f:3f:1f:49:af: 1d:71:a7:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY23GNrkDcEubvng0ozKLN8dEwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA1MTIyMjI2MzVaFw0yNTA1MTYwNDA5MzVaMDMxMTAvBgNV BAMTKDJFMzEzNTYxQkI4NkM5NDFBMkE5OTY5NDkwMzAxMjZFNEU0MzhGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJtzSJUhZQola61Dti96l4fsa 4Kk99nmGD0s1UMOG+lF58yPXSzCggRUhOUTpgOZFW2jPBNbl7OSmnzY/RX3o/rPD UQxmv22RLsB/BM6VJb58+vir17ChOObEeDz2WcVvOsWUHpwwe9cN2w+iw/rv2Y6K swPdwnBgVnKH6kBT2A8NPljmoEnr2iPFb/OdIKkth0bYqpF63MjhhiBXtPRqOmMk 6hXxrutXQ4B2mA5dtb4/TSvlScqBRqE0UosF6YZCsPsxWGJ6DCgVqMaH/EOsHaKM yo/Cu5pbMfDLCLc/z3/iE6UaE4rsxNFbfC7X3cZNt9PD8IU8IUOEC9/bpVxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjE1YbuGyUGiqZaUkDASbk5Dj1EwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFvAAofDd36+rv1CqEgC175ZXcne+wXVN7D YlBLcyHNgwmTxpE4AEXTnhrq4JimEuUi5KVgMIAfId9HACx6/6Xoi8hbjXRbVqag 0moPpJuyaXDXoT/fWP0+28UM3110H4MU0TEP5JyhUSmt1TY5RyLEt0PpgzxyaV2v PkYEYfpDdCjJA8PFAbAs8GU156uTvlnWZW5LgyPL5CAxzgu5eBzvbt65hARvxLcm MbH+FoAYFUt2AStk+h4+X0PqawyR0VaQvwmJm8uXQh+4Nmg2slvxKudwaSRTEXzV OCFpeZz0zl/hqsnv4xmFWZM5ihRic/cvBhJmVKNvPx9Jrx1xpww= -----END CERTIFICATE-----Generated at Wed May 14 04:36:00 2025 by rpki-client