$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: OiHSV6e98BUf+c8bVkXtAjkjtSJV3AqCFCfYwi1xXPs= Subject key identifier: 0A:54:9E:23:56:78:DA:77:40:B1:58:2C:E2:8A:4E:3E:8B:6B:B7:8B Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 7EE51317357DA0AD3C34326BBB064F6B31CCAC5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: 95 Signing time: Tue 13 May 2025 12:04:27 +0000 Manifest this update: Tue 13 May 2025 11:59:27 +0000 Manifest next update: Fri 16 May 2025 23:17:27 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: 1Fnvq0n+NuWCscQHXmLdrenDKvUrYrhtPkeIC3QOfZs=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: LQZmNBMeuq1prbaiXxW4JaiefrWrLLJvTCpQclU5FMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 23:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e5:13:17:35:7d:a0:ad:3c:34:32:6b:bb:06:4f:6b:31:cc:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: May 13 11:59:27 2025 GMT Not After : May 16 23:17:27 2025 GMT Subject: CN=0A549E235678DA7740B1582CE28A4E3E8B6BB78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:80:59:40:2e:af:d4:d8:5f:79:e8:20:2b: 46:30:c2:90:57:52:23:ca:7f:2b:a0:79:b4:35:76: 21:66:6e:ba:75:71:89:6b:0e:2c:8e:14:13:7c:b2: f1:0a:2d:85:8b:5f:a0:9b:a4:6a:48:21:32:ff:15: c0:a2:59:b7:a6:93:e4:0a:fa:22:9c:16:5f:73:4e: 5f:63:ea:05:3d:99:96:be:2c:09:a5:8d:69:3a:a6: 75:95:ea:1f:fd:c6:b8:52:6a:30:0f:98:4a:c7:df: 50:32:3e:4f:db:e8:ad:25:d6:e0:1d:9a:9e:24:9b: 38:e2:12:0e:7e:d1:63:fd:77:55:24:dc:a2:7c:18: a9:66:0c:a4:11:61:3d:50:e1:8e:3d:58:f5:90:93: 74:04:2c:a6:96:dc:f8:a0:40:d9:67:06:bf:2c:be: 7f:3e:ed:53:de:9e:98:3c:94:62:a7:91:3c:77:22: 5e:41:10:10:2c:0b:ea:66:dd:ae:95:6d:fa:e4:2c: 1a:33:21:cc:ca:b5:f3:0b:aa:46:66:c7:07:c3:6b: 9e:70:bb:52:c2:1c:2c:2f:bc:37:6d:18:a9:0c:5f: e6:93:24:8d:84:82:02:a5:11:63:4a:11:1b:a2:00: bd:90:c9:36:59:3a:fa:08:21:69:f9:ef:37:1f:2f: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:9E:23:56:78:DA:77:40:B1:58:2C:E2:8A:4E:3E:8B:6B:B7:8B X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fb:fc:77:fb:a2:14:5c:3e:04:c5:5a:ef:d1:07:9b:12:86: ab:3e:55:03:af:7b:fd:55:bb:03:b4:b0:2b:76:d8:e5:08:d3: c0:55:ce:df:26:0d:b8:0c:24:e8:8e:b7:0a:b7:1e:18:83:11: 9f:46:63:2d:47:21:fc:0b:bb:ce:29:36:f8:c5:28:6a:90:45: 57:77:97:c8:32:1a:42:47:80:3e:61:b6:8c:28:b3:30:25:43: c9:ad:69:4b:a5:d9:4b:1c:9c:8f:24:66:7f:90:7c:5a:af:9b: 8f:ef:2c:ba:4a:c8:18:1f:39:fe:b4:3a:9c:c0:f0:86:dc:d1: f9:fe:b1:a8:bc:62:f2:5b:f7:c7:0f:6a:ce:2b:2a:b6:d6:b3: fa:a3:72:2d:62:8b:00:b7:26:e5:af:7d:1e:8a:a4:f3:ba:04: 09:80:cf:c0:16:8d:37:bf:71:9f:eb:9f:fc:e4:96:e0:2a:33: 60:4a:01:19:d1:0d:4c:1d:82:d0:19:54:f9:5a:4a:c1:01:86: 2b:01:d3:06:60:bd:6e:30:53:1b:e3:17:be:fe:83:6e:1b:f1: 76:e9:c7:e8:7e:7f:de:71:2e:d8:d5:d7:d7:d8:05:30:ab:6a: 7d:ae:f1:bc:93:ec:46:89:ed:b6:b5:9f:4e:5a:00:18:00:ff: 70:ec:f7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuUTFzV9oK08NDJruwZPazHMrF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTA1MTMxMTU5MjdaFw0yNTA1MTYyMzE3MjdaMDMxMTAvBgNV BAMTKDBBNTQ5RTIzNTY3OERBNzc0MEIxNTgyQ0UyOEE0RTNFOEI2QkI3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ToBZQC6v1NhfeeggK0YwwpBX UiPKfyugebQ1diFmbrp1cYlrDiyOFBN8svEKLYWLX6CbpGpIITL/FcCiWbemk+QK +iKcFl9zTl9j6gU9mZa+LAmljWk6pnWV6h/9xrhSajAPmErH31AyPk/b6K0l1uAd mp4kmzjiEg5+0WP9d1Uk3KJ8GKlmDKQRYT1Q4Y49WPWQk3QELKaW3PigQNlnBr8s vn8+7VPenpg8lGKnkTx3Il5BEBAsC+pm3a6VbfrkLBozIczKtfMLqkZmxwfDa55w u1LCHCwvvDdtGKkMX+aTJI2EggKlEWNKERuiAL2QyTZZOvoIIWn57zcfL5nlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClSeI1Z42ndAsVgs4opOPotrt4swHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD7/Hf7ohRcPgTFWu/RB5sShqs+VQOve/1V uwO0sCt22OUI08BVzt8mDbgMJOiOtwq3HhiDEZ9GYy1HIfwLu84pNvjFKGqQRVd3 l8gyGkJHgD5htowoszAlQ8mtaUul2UscnI8kZn+QfFqvm4/vLLpKyBgfOf60OpzA 8Ibc0fn+sai8YvJb98cPas4rKrbWs/qjci1iiwC3JuWvfR6KpPO6BAmAz8AWjTe/ cZ/rn/zkluAqM2BKARnRDUwdgtAZVPlaSsEBhisB0wZgvW4wUxvjF77+g24b8Xbp x+h+f95xLtjV19fYBTCran2u8byT7EaJ7ba1n05aABgA/3Ds9yU= -----END CERTIFICATE-----Generated at Thu May 15 05:33:50 2025 by rpki-client