$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: uj8QnVG1G6R5B3c2GLgzRjeKaZicPYm5sqHOCAQysYc= Subject key identifier: 56:37:BF:0C:16:95:7B:C5:27:37:CF:55:0A:9D:A0:8B:48:54:C1:D9 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 1B0C466CC8E1AB3A6E50476470F38C5FED96FA02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 8F Signing time: Thu 08 May 2025 17:10:49 +0000 Manifest this update: Thu 08 May 2025 17:05:49 +0000 Manifest next update: Sun 11 May 2025 17:26:49 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: 1sHGMJeYdUu+9UwyVqFWZX/KMdYhWP8F/23aDldCPk8=) 2: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: 6pKdfP4FCcfk+Zl4TuF4NcQs5LY7mFdnT6EHcuCB03U=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:46:6c:c8:e1:ab:3a:6e:50:47:64:70:f3:8c:5f:ed:96:fa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: May 8 17:05:49 2025 GMT Not After : May 11 17:26:49 2025 GMT Subject: CN=5637BF0C16957BC52737CF550A9DA08B4854C1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:5f:a4:27:8a:d1:5a:d5:51:d7:43:2a:0a: 29:e4:18:6e:18:3f:f9:3c:2e:3d:9d:28:21:93:c5: da:85:89:0c:e6:da:c9:0e:2a:87:5b:eb:14:42:aa: 6b:46:d9:5a:06:57:a1:a8:3f:21:5e:4c:18:cd:38: f0:46:65:08:a3:c4:93:3b:b7:f3:be:3e:3c:6d:fd: af:59:19:df:f6:ee:66:0f:6a:d9:f5:50:4f:89:13: 51:12:12:09:ea:b8:dd:2e:26:9b:b5:04:fb:13:b7: 0f:f1:7c:fb:70:4a:cc:76:2b:cd:9d:77:a0:66:2e: ee:ee:06:16:87:9f:91:7a:34:38:26:a5:3e:0a:56: a4:10:41:d3:ba:ca:07:43:0d:d5:51:8b:7b:08:b8: 2f:1a:4b:3a:89:64:68:2c:0d:4a:c9:c4:b9:a3:7e: 2c:5e:4d:d4:28:f2:25:a3:7c:67:04:0c:bb:28:21: 20:17:69:52:6f:47:5f:0c:ad:74:43:6c:e2:a2:93: 11:ae:43:b7:1e:61:72:be:4d:5e:36:f9:e3:20:b5: ef:79:c6:ac:94:97:56:81:70:48:0e:53:31:4c:49: 8e:3b:0d:70:08:98:92:9c:e5:88:c4:41:cf:54:25: 05:cc:f1:a4:b9:bd:4a:a5:4e:74:84:12:17:f0:f1: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:37:BF:0C:16:95:7B:C5:27:37:CF:55:0A:9D:A0:8B:48:54:C1:D9 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:aa:56:4a:fa:a6:f8:47:5a:d1:de:c4:87:bf:37:00:66: f6:b9:6c:ec:cb:9c:d8:c4:34:49:36:48:28:8f:e1:8d:28:04: 5f:d0:da:3c:28:52:8f:3d:85:51:52:79:fd:75:09:09:02:65: 9e:5b:ec:ad:b7:fe:1a:53:50:03:20:0f:03:68:ed:ec:b4:7e: 90:69:4f:ca:56:88:da:45:40:ae:42:26:d0:8f:0f:67:bb:2d: da:7b:f4:64:0c:72:7d:e8:d8:38:2d:4c:58:51:02:2d:bd:9a: 52:e0:c4:59:64:96:75:33:ba:5e:ef:f0:eb:34:d9:23:2c:bc: 69:1c:c2:0f:28:51:cd:9b:c6:e0:0f:a8:fd:23:d8:7c:9f:c6: e3:00:98:8d:e3:ed:7b:df:32:73:6e:74:10:1a:d0:3a:04:38: 67:7a:0b:a1:74:5a:13:69:86:de:c1:b8:e1:10:c4:51:73:39: cc:05:4e:4c:72:34:53:b3:32:23:62:00:30:13:eb:d2:93:4d: a6:a2:8c:e1:d5:64:ae:91:2b:a7:a6:18:b2:0c:8d:c9:6f:1f: 1f:67:e9:bb:5e:f0:8d:59:9d:a4:c4:45:aa:e2:b9:de:d1:0e: ca:d3:a8:41:09:40:d9:1d:19:96:ad:43:1a:59:2e:4a:e8:d7: d4:bb:ce:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwxGbMjhqzpuUEdkcPOMX+2W+gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA1MDgxNzA1NDlaFw0yNTA1MTExNzI2NDlaMDMxMTAvBgNV BAMTKDU2MzdCRjBDMTY5NTdCQzUyNzM3Q0Y1NTBBOURBMDhCNDg1NEMxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg1+kJ4rRWtVR10MqCinkGG4Y P/k8Lj2dKCGTxdqFiQzm2skOKodb6xRCqmtG2VoGV6GoPyFeTBjNOPBGZQijxJM7 t/O+Pjxt/a9ZGd/27mYPatn1UE+JE1ESEgnquN0uJpu1BPsTtw/xfPtwSsx2K82d d6BmLu7uBhaHn5F6NDgmpT4KVqQQQdO6ygdDDdVRi3sIuC8aSzqJZGgsDUrJxLmj fixeTdQo8iWjfGcEDLsoISAXaVJvR18MrXRDbOKikxGuQ7ceYXK+TV42+eMgte95 xqyUl1aBcEgOUzFMSY47DXAImJKc5YjEQc9UJQXM8aS5vUqlTnSEEhfw8cgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVje/DBaVe8UnN89VCp2gi0hUwdkwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/aqlZK+qb4R1rR3sSHvzcAZva5bOzLnNjE NEk2SCiP4Y0oBF/Q2jwoUo89hVFSef11CQkCZZ5b7K23/hpTUAMgDwNo7ey0fpBp T8pWiNpFQK5CJtCPD2e7Ldp79GQMcn3o2DgtTFhRAi29mlLgxFlklnUzul7v8Os0 2SMsvGkcwg8oUc2bxuAPqP0j2HyfxuMAmI3j7XvfMnNudBAa0DoEOGd6C6F0WhNp ht7BuOEQxFFzOcwFTkxyNFOzMiNiADAT69KTTaaijOHVZK6RK6emGLIMjclvHx9n 6bte8I1ZnaTERariud7RDsrTqEEJQNkdGZatQxpZLkro19S7zlc= -----END CERTIFICATE-----Generated at Fri May 9 06:51:45 2025 by rpki-client