$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: 1pWOdlFl9uCJGSXlP0H7tB+rlJWIbyAswguEm2CZ/i4= Subject key identifier: 32:6E:FD:B1:73:52:2B:76:12:2E:7E:CE:2D:6E:90:6D:D1:98:7E:D7 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 6A6965D20D2A7098E8BF60FA90A2E8E3682D1FEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 01E5 Signing time: Sun 11 May 2025 10:00:02 +0000 Manifest this update: Sun 11 May 2025 09:55:02 +0000 Manifest next update: Wed 14 May 2025 15:10:02 +0000 Files and hashes: 1: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 2: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 3: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 4: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 5: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 6: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: 3iGv9fd8YJKB2s7N4ASudHu61HwAtsn2lUbPigG7u4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 15:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:69:65:d2:0d:2a:70:98:e8:bf:60:fa:90:a2:e8:e3:68:2d:1f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: May 11 09:55:02 2025 GMT Not After : May 14 15:10:02 2025 GMT Subject: CN=326EFDB173522B76122E7ECE2D6E906DD1987ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:cb:cc:d9:5e:0d:49:6b:2f:d7:04:f2:dc: ec:da:a8:8b:94:c0:ff:00:62:a9:88:b0:3b:b3:b8: ec:c7:75:35:4e:34:be:fb:3f:9a:f8:05:2f:a3:16: 21:fd:de:be:80:f3:ee:4c:5b:11:ef:38:8a:e2:5b: 4e:56:9e:67:de:0b:af:fa:06:62:ba:a4:dd:5c:12: 3d:51:97:94:4e:4b:ef:5a:8a:71:80:b1:be:67:62: 12:4e:bd:04:83:f4:6b:dd:45:94:f4:dd:94:6d:7c: bd:68:98:4c:69:00:7e:2d:e9:0c:4c:de:16:72:58: 98:2f:96:7a:8b:6d:67:e5:01:2a:a6:12:c4:70:ab: d3:50:4a:d8:ef:c4:d6:aa:64:5d:82:45:f8:9b:b1: 59:91:09:62:16:7a:ae:d3:0a:df:ed:61:3c:2f:ca: 9e:31:b4:e5:39:bb:31:e8:a7:33:01:96:32:20:c2: 3e:3c:82:09:37:ec:0b:b4:74:84:2a:8b:c0:63:1b: f7:f8:22:0f:e7:d1:4b:d4:c4:a0:c2:9e:c7:26:37: 62:b8:e1:d3:7d:aa:c1:76:1c:e0:01:da:99:9a:ca: e7:e6:7a:b1:77:e1:7b:f8:2e:53:da:ef:89:2d:8d: a9:7e:b2:bf:19:5a:4b:bb:ad:e0:5f:b4:d7:39:d1: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:FD:B1:73:52:2B:76:12:2E:7E:CE:2D:6E:90:6D:D1:98:7E:D7 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:59:1f:c8:d5:5f:ed:6a:69:65:f7:3a:9c:e9:dc:e2:ec:e9: 73:21:2c:70:c9:e1:72:d7:15:68:7d:46:74:4f:1d:85:ab:c7: d4:4c:5f:f3:d5:ae:ac:2f:be:30:eb:2f:eb:13:a8:f5:b9:3e: 9c:99:0c:83:00:c7:e3:61:80:c7:99:67:ac:ba:c9:63:ae:a5: 9f:87:4c:f1:d6:1d:39:2a:fe:1f:de:d5:37:0b:fd:58:e9:82: eb:50:1a:ea:b7:6f:73:eb:a5:96:0e:7b:98:7f:b0:03:99:91: a4:f6:66:45:8d:32:cf:36:55:85:6d:01:55:52:8c:80:39:a4: aa:c0:1e:78:a1:0a:c0:fa:f9:7d:94:53:d7:d3:15:b4:1d:b0: 0d:01:65:aa:55:4f:c0:09:c2:08:26:33:39:e0:fe:f0:c5:e2: 9a:ec:5d:f6:3f:eb:8c:10:7c:cc:36:c0:14:96:e6:6b:82:13: af:98:ed:40:b5:70:49:95:c5:d6:57:ec:79:16:af:c2:02:86: f8:b1:a5:08:b8:10:5b:ca:2c:4a:e3:9f:29:d0:98:45:bb:d2: e1:23:8c:05:fd:c0:88:d2:51:31:1b:87:79:3c:bf:e3:ff:71: 69:44:a0:b2:38:cd:c1:2d:f7:ab:18:8d:0a:b0:17:04:9e:2b: 40:a8:70:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamll0g0qcJjov2D6kKLo42gtH+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA1MTEwOTU1MDJaFw0yNTA1MTQxNTEwMDJaMDMxMTAvBgNV BAMTKDMyNkVGREIxNzM1MjJCNzYxMjJFN0VDRTJENkU5MDZERDE5ODdFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPB8vM2V4NSWsv1wTy3OzaqIuU wP8AYqmIsDuzuOzHdTVONL77P5r4BS+jFiH93r6A8+5MWxHvOIriW05WnmfeC6/6 BmK6pN1cEj1Rl5ROS+9ainGAsb5nYhJOvQSD9GvdRZT03ZRtfL1omExpAH4t6QxM 3hZyWJgvlnqLbWflASqmEsRwq9NQStjvxNaqZF2CRfibsVmRCWIWeq7TCt/tYTwv yp4xtOU5uzHopzMBljIgwj48ggk37Au0dIQqi8BjG/f4Ig/n0UvUxKDCnscmN2K4 4dN9qsF2HOAB2pmayufmerF34Xv4LlPa74ktjal+sr8ZWku7reBftNc50VQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMm79sXNSK3YSLn7OLW6QbdGYftcwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpZH8jVX+1qaWX3Opzp3OLs6XMhLHDJ4XLX FWh9RnRPHYWrx9RMX/PVrqwvvjDrL+sTqPW5PpyZDIMAx+NhgMeZZ6y6yWOupZ+H TPHWHTkq/h/e1TcL/VjpgutQGuq3b3PrpZYOe5h/sAOZkaT2ZkWNMs82VYVtAVVS jIA5pKrAHnihCsD6+X2UU9fTFbQdsA0BZapVT8AJwggmMzng/vDF4prsXfY/64wQ fMw2wBSW5muCE6+Y7UC1cEmVxdZX7HkWr8IChvixpQi4EFvKLErjnynQmEW70uEj jAX9wIjSUTEbh3k8v+P/cWlEoLI4zcEt96sYjQqwFwSeK0CocC4= -----END CERTIFICATE-----Generated at Sun May 11 15:03:40 2025 by rpki-client