$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: tGe0/cHcbndgxvtjTshLZeg4Gnyo04miTKY3TDIFUv4= Subject key identifier: 18:10:D6:DA:4B:8D:67:A5:2C:97:47:A1:27:2D:E6:05:29:42:DE:04 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 6B227549FAFDED70C85DA8CFC2899C4FCA8112DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 0180 Signing time: Sun 11 May 2025 14:21:26 +0000 Manifest this update: Sun 11 May 2025 14:16:26 +0000 Manifest next update: Wed 14 May 2025 18:57:26 +0000 Files and hashes: 1: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: dLdfq7Q9BBT/4GAUXzBGLwuVfstIxq1X8X8qB8pVLSg=) 2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=) 3: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: efQGExmEhnoXJray3dn6zshoqzcOBC7xZAkaxJJj1q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 18:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:22:75:49:fa:fd:ed:70:c8:5d:a8:cf:c2:89:9c:4f:ca:81:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: May 11 14:16:26 2025 GMT Not After : May 14 18:57:26 2025 GMT Subject: CN=1810D6DA4B8D67A52C9747A1272DE6052942DE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:a8:a6:79:2c:9b:9f:7d:71:64:fe:ad:bd: d5:3f:8f:34:2e:01:64:c0:7d:82:f3:6a:85:94:91: 42:79:0a:25:61:4c:8a:8b:d2:c6:c0:0f:ac:50:2e: 7a:d9:d5:dd:1b:2e:85:22:36:fd:6f:9b:2c:7e:2a: da:b6:da:ac:ff:67:a0:f1:ba:01:10:ec:2a:58:7f: b0:2a:61:9b:51:c8:f2:4c:ac:02:12:e0:5c:62:48: 99:60:ef:3b:41:8a:67:f3:d8:32:53:95:80:24:ca: d5:fd:f1:85:76:46:ee:35:90:00:53:b9:68:15:6d: 94:96:03:f6:ef:87:63:ac:47:65:59:ef:42:ca:04: 99:55:3a:a9:ca:db:92:e3:e3:ef:cb:9a:1e:ab:16: 63:be:6c:dc:ae:a1:f0:85:b1:e7:f1:5a:49:65:ec: 5e:39:c7:38:92:bf:e3:62:59:47:32:5a:70:e7:ca: 03:80:fa:4f:a1:0e:2d:dc:72:df:f5:be:4b:6d:3b: fe:3c:dd:00:a8:84:be:23:f9:f0:75:35:dd:c3:60: bd:25:82:86:54:b4:40:be:a1:18:12:ed:59:22:6a: b2:d2:c3:7b:45:1e:0e:0f:7c:27:33:ee:0e:69:fe: 3b:41:c5:45:a3:e2:69:71:2a:67:ca:eb:99:19:82: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:10:D6:DA:4B:8D:67:A5:2C:97:47:A1:27:2D:E6:05:29:42:DE:04 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:21:7d:43:65:35:c0:fc:ae:a9:ce:f9:20:3a:57:52:b9:28: 9f:e7:79:ab:f3:9e:59:65:66:20:41:43:83:f6:ba:f8:2b:a1: de:9b:b3:85:40:68:ca:de:e1:a5:26:b4:cd:43:a5:06:69:4d: 91:9a:ac:10:30:54:dd:8b:f2:25:9a:24:1f:7b:da:b1:d1:03: 73:23:ab:40:07:63:d8:ed:d3:a1:e1:1f:16:d9:77:fa:dd:37: 36:38:e0:eb:cb:37:63:47:31:0d:16:63:28:96:a0:46:ca:5a: fd:df:30:13:9f:4e:29:fe:09:3a:72:7e:9f:3b:cc:0d:a5:08: 5d:44:f5:5d:8b:46:aa:be:6b:bf:71:52:e4:01:60:7b:6e:7b: 10:c2:49:fd:07:9f:2b:00:15:fd:44:f1:55:34:54:ad:fc:16: 83:ee:36:ab:05:ba:a9:c2:e4:31:bd:56:ff:dc:28:40:9c:d7: 7d:72:52:1a:5b:f4:b2:42:ed:0b:29:d0:f6:bb:6a:38:30:d8: 5e:99:db:c5:03:d6:e2:78:53:26:d1:94:4e:c7:97:7b:06:0e: dd:da:20:88:45:b6:09:be:a2:b0:9f:98:2a:54:01:83:46:dd: 38:89:9d:89:b2:d1:35:1a:71:c2:82:db:bc:ec:55:58:5c:fe: d1:1d:04:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayJ1Sfr97XDIXajPwomcT8qBEtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTA1MTExNDE2MjZaFw0yNTA1MTQxODU3MjZaMDMxMTAvBgNV BAMTKDE4MTBENkRBNEI4RDY3QTUyQzk3NDdBMTI3MkRFNjA1Mjk0MkRFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePKimeSybn31xZP6tvdU/jzQu AWTAfYLzaoWUkUJ5CiVhTIqL0sbAD6xQLnrZ1d0bLoUiNv1vmyx+Ktq22qz/Z6Dx ugEQ7CpYf7AqYZtRyPJMrAIS4FxiSJlg7ztBimfz2DJTlYAkytX98YV2Ru41kABT uWgVbZSWA/bvh2OsR2VZ70LKBJlVOqnK25Lj4+/Lmh6rFmO+bNyuofCFsefxWkll 7F45xziSv+NiWUcyWnDnygOA+k+hDi3cct/1vkttO/483QCohL4j+fB1Nd3DYL0l goZUtEC+oRgS7VkiarLSw3tFHg4PfCcz7g5p/jtBxUWj4mlxKmfK65kZgkwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGBDW2kuNZ6Usl0ehJy3mBSlC3gQwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8hfUNlNcD8rqnO+SA6V1K5KJ/neavznlll ZiBBQ4P2uvgrod6bs4VAaMre4aUmtM1DpQZpTZGarBAwVN2L8iWaJB972rHRA3Mj q0AHY9jt06HhHxbZd/rdNzY44OvLN2NHMQ0WYyiWoEbKWv3fMBOfTin+CTpyfp87 zA2lCF1E9V2LRqq+a79xUuQBYHtuexDCSf0HnysAFf1E8VU0VK38FoPuNqsFuqnC 5DG9Vv/cKECc131yUhpb9LJC7Qsp0Pa7ajgw2F6Z28UD1uJ4UybRlE7Hl3sGDt3a IIhFtgm+orCfmCpUAYNG3TiJnYmy0TUaccKC27zsVVhc/tEdBME= -----END CERTIFICATE-----Generated at Mon May 12 11:20:55 2025 by rpki-client