$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: mpsBT7dktSIE9VHyTzeoR1wyZXbjE0Psc7G/agentBw= Subject key identifier: A5:0C:5A:5B:B6:99:0A:BC:32:18:9F:40:EC:F6:FE:A7:AB:AC:02:84 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 4FA035C8BBB028A85EBC9B7A64C2C74053FA7205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04D1 Signing time: Thu 08 May 2025 03:31:53 +0000 Manifest this update: Thu 08 May 2025 03:26:53 +0000 Manifest next update: Sun 11 May 2025 06:07:53 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: diSJtF4pncDv3TYDAQkVNDujeOW0TndNL50eRWU9t2k=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: Qxuu7xwA3bFll+x7Gz00e/A7K57Gw//gmo5Yq+Lr63E=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 06:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a0:35:c8:bb:b0:28:a8:5e:bc:9b:7a:64:c2:c7:40:53:fa:72:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: May 8 03:26:53 2025 GMT Not After : May 11 06:07:53 2025 GMT Subject: CN=A50C5A5BB6990ABC32189F40ECF6FEA7ABAC0284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:62:1d:fa:74:26:c3:b1:bf:33:3c:61:08: b0:01:da:dd:83:54:f8:8a:b1:80:dc:8c:11:62:ef: 1d:08:ae:25:77:ec:d1:21:23:b8:45:f4:58:da:0a: 05:46:1f:58:f4:67:8b:9d:d3:58:96:e8:05:29:5d: ce:ea:41:ed:5f:d6:b5:88:08:05:0e:b6:5b:cf:78: 28:9d:5f:39:82:2a:6a:e6:95:02:19:99:db:2f:1e: 00:0b:43:44:81:43:cc:c8:b3:af:7b:12:ee:96:d9: b9:2c:92:a2:4d:92:cc:c0:56:45:4c:a6:57:30:80: 56:46:a7:35:48:ad:7b:4c:34:8e:d6:b3:89:b6:ba: 35:19:f5:54:b2:af:83:cb:81:61:9f:33:86:01:c4: 8e:7f:4b:39:53:85:1c:98:76:3b:e6:2f:34:c2:44: 49:ff:a3:81:f2:77:25:08:f6:7e:a1:d2:f6:37:65: 53:c6:94:bb:94:82:fb:7e:0e:cb:ff:5e:ff:33:79: 7b:bf:4e:6c:aa:ae:a1:92:19:cf:4c:7f:28:b0:40: b4:ba:8e:63:fc:4c:f9:72:40:9d:da:89:7f:1d:77: cd:25:30:53:39:39:d1:82:36:2d:f8:34:01:9f:39: c8:4a:82:0b:19:f5:19:4f:f9:ea:31:57:37:9a:26: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:5A:5B:B6:99:0A:BC:32:18:9F:40:EC:F6:FE:A7:AB:AC:02:84 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a1:be:bb:e6:ab:7c:ec:ba:60:d7:45:f9:0a:4d:32:8c:38: 76:12:dc:a3:b3:5d:ff:fe:fe:0f:2e:d6:bf:4b:6b:08:7e:f9: a6:28:49:1d:fb:43:9c:fb:4f:52:b1:76:d9:c1:c2:fa:20:aa: 4e:bf:9e:34:80:0b:cf:c7:93:16:a8:f5:d2:89:2a:80:ef:b7: c4:1e:99:8a:ab:fa:a1:e9:c4:4d:34:c2:7b:41:dc:81:08:8f: 1a:32:01:3e:b4:2e:f8:66:a8:85:05:ca:da:a4:d4:8d:92:ea: 99:bb:fd:25:7a:c8:10:7f:5b:96:c1:52:d5:82:fc:66:ce:1a: 8b:3a:9b:67:8a:0c:db:e9:55:50:1b:21:28:2c:66:30:4a:a3: e2:68:a1:93:75:61:40:2f:7b:d0:b3:5d:f1:76:66:de:1d:1f: bd:44:e3:6c:57:a6:da:66:2f:08:52:31:37:8b:97:3a:63:0b: 70:ff:00:e3:5b:c5:e7:3b:df:ce:e6:71:ee:d0:ca:55:97:67: 3b:87:1b:e2:f9:c4:ce:ae:18:dd:d5:92:78:2c:fd:49:24:1d: fb:e4:2a:3f:d0:44:1d:fa:61:e2:a0:18:c2:7c:bf:a2:fa:23: 54:ca:6f:1b:1e:5f:36:73:5a:5e:c2:36:ce:49:e7:9b:a1:20: 85:71:15:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6A1yLuwKKhevJt6ZMLHQFP6cgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA1MDgwMzI2NTNaFw0yNTA1MTEwNjA3NTNaMDMxMTAvBgNV BAMTKEE1MEM1QTVCQjY5OTBBQkMzMjE4OUY0MEVDRjZGRUE3QUJBQzAyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdmId+nQmw7G/MzxhCLAB2t2D VPiKsYDcjBFi7x0IriV37NEhI7hF9FjaCgVGH1j0Z4ud01iW6AUpXc7qQe1f1rWI CAUOtlvPeCidXzmCKmrmlQIZmdsvHgALQ0SBQ8zIs697Eu6W2bkskqJNkszAVkVM plcwgFZGpzVIrXtMNI7Ws4m2ujUZ9VSyr4PLgWGfM4YBxI5/SzlThRyYdjvmLzTC REn/o4HydyUI9n6h0vY3ZVPGlLuUgvt+Dsv/Xv8zeXu/TmyqrqGSGc9MfyiwQLS6 jmP8TPlyQJ3aiX8dd80lMFM5OdGCNi34NAGfOchKggsZ9RlP+eoxVzeaJtsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQxaW7aZCrwyGJ9A7Pb+p6usAoQwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADChvrvmq3zsumDXRfkKTTKMOHYS3KOzXf/+ /g8u1r9Lawh++aYoSR37Q5z7T1KxdtnBwvogqk6/njSAC8/Hkxao9dKJKoDvt8Qe mYqr+qHpxE00wntB3IEIjxoyAT60LvhmqIUFytqk1I2S6pm7/SV6yBB/W5bBUtWC /GbOGos6m2eKDNvpVVAbISgsZjBKo+JooZN1YUAve9CzXfF2Zt4dH71E42xXptpm LwhSMTeLlzpjC3D/AONbxec7387mce7QylWXZzuHG+L5xM6uGN3Vkngs/UkkHfvk Kj/QRB36YeKgGMJ8v6L6I1TKbxseXzZzWl7CNs5J55uhIIVxFVA= -----END CERTIFICATE-----Generated at Fri May 9 23:56:42 2025 by rpki-client