$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: vHw3zE9HCGlG3Fv/O7/+jpDtkS0BS48Fb/QnFm4Hp+Q= Subject key identifier: 09:6E:6C:70:B0:E7:09:3F:B8:E5:AD:17:0C:75:47:D8:9C:EE:9F:AF Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 34774634337666761DF9B23AABBC0999F01FF05B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 8F Signing time: Fri 09 May 2025 05:50:35 +0000 Manifest this update: Fri 09 May 2025 05:45:35 +0000 Manifest next update: Mon 12 May 2025 07:35:35 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: HA6q5Iy2a40yw29bNfsEJf+GjSD46q2saqi3ChvW2bw=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:77:46:34:33:76:66:76:1d:f9:b2:3a:ab:bc:09:99:f0:1f:f0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: May 9 05:45:35 2025 GMT Not After : May 12 07:35:35 2025 GMT Subject: CN=096E6C70B0E7093FB8E5AD170C7547D89CEE9FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:df:39:96:f3:54:3e:95:d8:0a:5d:17:e4: 18:83:3c:a9:49:16:53:54:bd:95:87:c2:c7:05:45: 67:91:0f:1a:ba:fe:81:1c:d4:2c:6f:34:81:7f:f8: da:cf:a9:12:67:97:53:91:d4:29:e0:9a:f7:a1:cb: 17:20:76:69:bc:98:88:cd:d5:fc:6c:1d:73:7e:32: a3:79:45:77:a1:9d:2e:80:3a:e1:9a:3d:0d:13:45: 7c:b1:8d:a1:23:84:44:05:fb:2f:a8:94:53:6b:c2: 1f:bc:b9:d7:b8:4f:2a:b8:7e:41:1c:eb:e0:6d:9a: 0e:f5:70:ac:d2:4c:ca:0c:33:f1:64:d8:34:f3:a6: 51:ca:98:5b:6a:8a:ca:06:6a:bb:81:ee:76:00:97: 6b:be:1d:58:50:30:68:83:b2:c7:48:28:3f:86:05: c7:f6:e5:47:aa:6f:7f:07:2a:ad:8d:31:6a:a8:56: 46:fb:1d:c5:cc:cd:97:88:ac:54:ca:3c:3a:7d:3b: df:0a:a0:15:46:77:17:fe:cb:9e:24:bd:ce:84:97: 6d:68:52:e4:e5:be:7a:48:14:fe:96:9f:4d:f5:08: 9d:e3:0e:78:0b:f0:a1:c4:0d:84:44:a7:7b:41:19: c3:ad:c4:98:10:c8:e5:29:71:44:a5:65:7b:f1:ab: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:6C:70:B0:E7:09:3F:B8:E5:AD:17:0C:75:47:D8:9C:EE:9F:AF X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b8:9d:25:05:93:7e:cd:4b:f5:c7:6c:75:88:e4:52:1a:5d: 15:a0:25:7e:10:ae:65:35:46:3b:40:8e:3a:dc:c9:9e:17:8a: a9:46:4e:30:fe:43:4b:1f:fd:68:f2:ab:a0:b9:5c:32:81:70: 07:c8:ba:db:50:f8:54:94:0f:89:18:67:59:70:55:a1:81:d7: 1b:dd:8f:f8:b3:6a:1d:ca:11:e4:22:0f:91:9f:cb:44:f2:c9: fc:15:ae:d4:d8:3c:76:b1:2d:4e:83:77:0a:c9:95:4d:bb:68: c9:fd:0e:86:ba:3c:40:37:aa:aa:01:11:f2:47:08:a0:24:d3: 88:82:76:70:95:6e:f7:55:6c:db:89:1a:57:3c:4c:49:71:b8: 3b:10:6c:ed:da:0a:68:5d:2b:cb:42:72:e3:ac:c7:16:b4:47: 99:81:d7:0c:59:49:27:af:fc:2d:98:23:20:e0:e2:1f:c1:21: 94:d7:f1:cf:7e:d3:bf:db:67:e9:57:5e:68:0b:7b:fc:5e:74: a8:7a:19:13:30:24:26:3b:db:19:ac:35:1c:4f:6d:c7:88:cc: 8b:0b:eb:9f:d1:a8:3e:c3:15:f3:62:af:57:5c:b8:fd:cc:a0: b1:bf:ad:d8:6b:fe:1a:df:49:5c:f3:3d:e4:71:0f:6f:f0:b9: c3:ae:a7:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHdGNDN2ZnYd+bI6q7wJmfAf8FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA1MDkwNTQ1MzVaFw0yNTA1MTIwNzM1MzVaMDMxMTAvBgNV BAMTKDA5NkU2QzcwQjBFNzA5M0ZCOEU1QUQxNzBDNzU0N0Q4OUNFRTlGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0t85lvNUPpXYCl0X5BiDPKlJ FlNUvZWHwscFRWeRDxq6/oEc1CxvNIF/+NrPqRJnl1OR1Cngmvehyxcgdmm8mIjN 1fxsHXN+MqN5RXehnS6AOuGaPQ0TRXyxjaEjhEQF+y+olFNrwh+8ude4Tyq4fkEc 6+Btmg71cKzSTMoMM/Fk2DTzplHKmFtqisoGaruB7nYAl2u+HVhQMGiDssdIKD+G Bcf25Ueqb38HKq2NMWqoVkb7HcXMzZeIrFTKPDp9O98KoBVGdxf+y54kvc6El21o UuTlvnpIFP6Wn031CJ3jDngL8KHEDYREp3tBGcOtxJgQyOUpcUSlZXvxqy0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCW5scLDnCT+45a0XDHVH2Jzun68wHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMK4nSUFk37NS/XHbHWI5FIaXRWgJX4QrmU1 RjtAjjrcyZ4XiqlGTjD+Q0sf/Wjyq6C5XDKBcAfIuttQ+FSUD4kYZ1lwVaGB1xvd j/izah3KEeQiD5Gfy0TyyfwVrtTYPHaxLU6DdwrJlU27aMn9Doa6PEA3qqoBEfJH CKAk04iCdnCVbvdVbNuJGlc8TElxuDsQbO3aCmhdK8tCcuOsxxa0R5mB1wxZSSev /C2YIyDg4h/BIZTX8c9+07/bZ+lXXmgLe/xedKh6GRMwJCY72xmsNRxPbceIzIsL 65/RqD7DFfNir1dcuP3MoLG/rdhr/hrfSVzzPeRxD2/wucOupxE= -----END CERTIFICATE-----Generated at Fri May 9 23:41:08 2025 by rpki-client