$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: M3JFYK15E6ILt28/dpyBJXEE1QlKcplJTz6Pn5Bfx/U= Subject key identifier: CE:20:E1:19:0E:99:B9:C7:76:5A:5C:65:51:52:DD:39:87:D5:DC:89 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 1402F3DB1B26EAB73625B3513D63FAFE44ACDBE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 0492 Signing time: Sun 11 May 2025 09:51:50 +0000 Manifest this update: Sun 11 May 2025 09:46:50 +0000 Manifest next update: Wed 14 May 2025 19:35:50 +0000 Files and hashes: 1: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: 581FiQO2T55tdkh/RZqJFfUjQ5loGpW4L/cA2bYvhXg=) 2: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: uKza+NILBuHQRPIg5LCtzuv9seKbjSu4TPPeAiNkPk4=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: Sv5+dMPwNKNRJQdaNch52pi/y/gtlM6wPg9HidMGHmE=) 4: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: 5QbcPGy/M7njxIhRGnhFNOXKsrYeYIRjfqDpCIGPyAA=) 5: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: heHR6tDdyfcDcl0ayUlIY67JEF5cb4FokE1+/fGTE2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:f3:db:1b:26:ea:b7:36:25:b3:51:3d:63:fa:fe:44:ac:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: May 11 09:46:50 2025 GMT Not After : May 14 19:35:50 2025 GMT Subject: CN=CE20E1190E99B9C7765A5C655152DD3987D5DC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:f6:78:4c:58:2a:00:80:68:dd:01:4c:dd: 19:b5:71:30:ed:dd:7a:35:75:47:66:25:e2:ed:b7: 76:f7:09:66:dd:f1:30:91:cd:2a:63:9b:fb:1d:8e: cc:f3:b6:5b:dd:49:e7:cf:21:71:9e:13:17:f4:6d: d6:08:37:99:0f:08:5e:d8:18:3b:02:4e:45:ba:2a: 0b:16:47:e2:1f:de:7d:73:d9:de:9c:2d:3d:c7:e8: 55:25:83:c2:25:30:1c:4e:13:fe:0e:89:e7:69:7a: 46:61:91:8f:81:32:ac:4b:29:43:c5:89:1d:c2:22: b5:6c:c8:02:05:68:b6:69:ca:71:4f:cf:f1:75:5a: 80:39:c9:f5:b6:fc:0c:fd:e7:81:83:fa:77:8a:2c: 11:00:cf:ab:b3:80:eb:f8:35:4e:fe:3c:0a:e5:98: a5:bd:aa:f6:62:07:62:cc:11:d5:e9:2e:3d:3c:fb: c2:4f:bf:b5:be:0c:dc:77:82:4e:a7:67:6a:79:ac: 8c:a9:4b:08:4a:3a:c2:dd:3c:a3:2f:a3:f7:f7:e8: 0d:50:13:57:db:aa:be:86:42:6c:e2:c8:99:90:df: a1:e5:9f:8d:1c:d7:16:80:72:bc:82:99:04:a1:dd: 13:19:c0:3f:87:97:01:d2:c9:fc:00:5c:62:28:7a: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:E1:19:0E:99:B9:C7:76:5A:5C:65:51:52:DD:39:87:D5:DC:89 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:f2:67:40:dc:99:7e:53:fe:c7:f8:eb:bc:35:96:a5:b7: c1:a0:dd:64:ba:0e:d0:3a:44:97:6c:d4:8e:05:25:62:d2:ae: 56:9a:18:89:f5:96:63:89:ff:cb:a7:8a:89:b7:87:8d:e5:ea: a6:53:a7:32:c1:de:df:73:ba:03:3f:d6:e9:db:5c:4c:b6:2a: 1f:e0:45:bc:b0:f9:b8:0e:6e:24:b2:a0:37:f4:2b:49:cb:50: d3:a3:2a:44:29:ff:c4:c7:70:10:07:66:a0:42:9a:9d:2c:27: e6:53:e5:cd:c3:8b:19:a9:52:78:8e:41:24:33:12:e6:c6:56: 11:fb:c9:2e:2b:77:6c:0d:f5:f0:29:fe:e5:f6:01:50:f0:91: 98:88:5a:58:75:c5:63:f8:d3:69:4a:9f:5c:1f:11:e5:d7:af: 12:eb:44:02:cd:10:c3:63:ce:47:80:72:55:09:08:5f:30:d9: 4b:dd:dc:07:d8:ff:91:b3:9b:8e:ee:a7:df:18:42:78:0f:c2: 29:b7:63:40:21:58:89:76:32:15:c4:11:7f:cc:cc:45:4e:55: ae:1b:ca:bc:ff:6d:fd:09:ac:4c:1b:0b:72:39:d5:7c:a4:cf: 7c:7b:97:74:d5:e4:36:6d:95:44:9a:a4:99:50:0f:63:09:56: 74:ce:6c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFALz2xsm6rc2JbNRPWP6/kSs2+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTA1MTEwOTQ2NTBaFw0yNTA1MTQxOTM1NTBaMDMxMTAvBgNV BAMTKENFMjBFMTE5MEU5OUI5Qzc3NjVBNUM2NTUxNTJERDM5ODdENURDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxF/Z4TFgqAIBo3QFM3Rm1cTDt 3Xo1dUdmJeLtt3b3CWbd8TCRzSpjm/sdjszztlvdSefPIXGeExf0bdYIN5kPCF7Y GDsCTkW6KgsWR+If3n1z2d6cLT3H6FUlg8IlMBxOE/4OiedpekZhkY+BMqxLKUPF iR3CIrVsyAIFaLZpynFPz/F1WoA5yfW2/Az954GD+neKLBEAz6uzgOv4NU7+PArl mKW9qvZiB2LMEdXpLj08+8JPv7W+DNx3gk6nZ2p5rIypSwhKOsLdPKMvo/f36A1Q E1fbqr6GQmziyJmQ36Hln40c1xaAcryCmQSh3RMZwD+HlwHSyfwAXGIoeuiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziDhGQ6Zucd2WlxlUVLdOYfV3IkwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVm8mdA3Jl+U/7H+Ou8NZalt8Gg3WS6DtA6 RJds1I4FJWLSrlaaGIn1lmOJ/8uniom3h43l6qZTpzLB3t9zugM/1unbXEy2Kh/g Rbyw+bgObiSyoDf0K0nLUNOjKkQp/8THcBAHZqBCmp0sJ+ZT5c3DixmpUniOQSQz EubGVhH7yS4rd2wN9fAp/uX2AVDwkZiIWlh1xWP402lKn1wfEeXXrxLrRALNEMNj zkeAclUJCF8w2Uvd3AfY/5Gzm47up98YQngPwim3Y0AhWIl2MhXEEX/MzEVOVa4b yrz/bf0JrEwbC3I51Xykz3x7l3TV5DZtlUSapJlQD2MJVnTObBo= -----END CERTIFICATE-----Generated at Sun May 11 18:38:35 2025 by rpki-client