$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft File: 99F644C407D1C8C133A923CC84619FC228E767AC.mft (raw, json) Hash identifier: iw8hkE753FnUTpohT5gWDxYQoI3ZrAGG1Yfn5sMx4EQ= Subject key identifier: 1E:46:D2:3D:23:23:B2:5D:81:34:4A:67:92:7E:9D:54:5C:85:2A:98 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 63E53FB695212A4D2157D699554F12B7DEF65B91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft Manifest number: 024C Signing time: Sun 11 May 2025 07:01:27 +0000 Manifest this update: Sun 11 May 2025 06:56:27 +0000 Manifest next update: Wed 14 May 2025 07:19:27 +0000 Files and hashes: 1: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: A7MLMixWF2CjxzKsC2Md5bWob9r0+ouHpUvVIqmVqLw=) 2: 99F644C407D1C8C133A923CC84619FC228E767AC.crl (hash: RHMO2g0P1iGAT9lhJcaX6Tu2DJuAhCiejO1+BVtwxFc=) 3: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: ll5+Eoysy8XpiM0nraFXO1sEZ22G9cLIqmWZw25BjG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 07:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e5:3f:b6:95:21:2a:4d:21:57:d6:99:55:4f:12:b7:de:f6:5b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: May 11 06:56:27 2025 GMT Not After : May 14 07:19:27 2025 GMT Subject: CN=1E46D23D2323B25D81344A67927E9D545C852A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:1a:d7:3a:83:a7:aa:cf:66:e5:d1:ea:0a: 06:a2:fa:f2:1f:ee:9a:66:ab:7b:93:ab:8c:00:94: 1e:ed:d8:f2:bb:ab:34:c8:db:bc:ca:f2:92:9c:84: 42:7d:ce:24:40:36:76:15:2e:3b:7d:bf:43:ea:fa: 3a:fc:71:f6:18:cd:ba:5b:26:5f:a3:46:4d:21:b0: d8:cb:30:12:6e:ac:26:bb:85:5d:82:da:2d:5f:a5: a2:ef:4c:6a:27:5f:c8:2c:43:77:c3:f1:dc:0c:09: ac:f6:83:44:9e:5b:b4:e0:e8:ae:21:96:06:a2:89: 2c:c1:e1:5c:31:8f:4f:36:80:de:08:ef:36:b7:3d: e2:c8:05:c0:da:76:35:06:2e:d7:34:ab:17:36:39: e0:4c:d1:74:49:b3:3c:88:c9:fd:66:63:1d:63:32: 02:c4:7f:db:31:f5:2b:8d:75:3a:21:5d:02:00:84: a6:44:1f:ff:09:63:0d:f3:62:04:23:ff:ae:33:bb: cc:87:12:b4:c3:b9:fd:72:32:f7:9f:5d:44:33:c9: 23:a6:ea:af:25:6d:33:22:fa:9d:c5:01:05:80:53: 67:5e:3c:e2:0b:cf:f4:fa:c1:67:8d:9e:0c:93:ff: 27:d4:a8:0e:5b:79:fe:d9:5e:54:86:27:25:6a:27: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:46:D2:3D:23:23:B2:5D:81:34:4A:67:92:7E:9D:54:5C:85:2A:98 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:92:78:15:cf:19:c7:5a:73:ba:2f:6f:cb:42:7f:6f:4f:ef: e8:44:4e:58:da:90:49:79:6b:de:f1:03:2a:19:5a:86:18:f1: 44:e6:6c:18:b4:8c:c2:ce:41:66:18:83:d8:0f:38:5b:31:f7: dd:32:f4:b6:23:d7:0a:c6:51:1c:d8:5b:eb:61:88:0d:03:f1: 83:a8:ea:37:0a:92:87:ca:bc:15:7b:6a:67:64:dd:21:c8:cc: fa:a9:a7:69:38:e9:f2:56:40:f5:98:cc:83:d8:89:5a:12:da: b9:db:0b:02:3d:4b:6c:6e:e8:5a:d3:ce:93:11:c1:cd:0a:b1: e2:53:46:a6:46:54:82:fc:ac:4d:0d:a7:28:13:c3:03:90:d8: db:a2:81:2c:14:6a:54:82:8f:42:d4:c8:bd:d5:85:01:ac:22: 04:35:a5:84:ff:08:6a:3f:cb:84:aa:31:f5:0c:db:fd:1d:42: ad:ee:e4:ed:9a:ae:f1:56:1b:8a:bb:84:4c:33:65:3e:f0:5b: 13:75:59:1f:e7:89:e5:43:06:21:c8:c7:71:51:06:a0:1d:88: 16:19:47:fc:54:81:3e:ed:c1:06:4b:68:c1:78:19:e1:38:1d: 49:ed:dc:96:e7:40:99:47:1e:a2:d7:66:1a:06:6e:86:30:cf: 23:08:e1:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+U/tpUhKk0hV9aZVU8St972W5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTA1MTEwNjU2MjdaFw0yNTA1MTQwNzE5MjdaMDMxMTAvBgNV BAMTKDFFNDZEMjNEMjMyM0IyNUQ4MTM0NEE2NzkyN0U5RDU0NUM4NTJBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlhrXOoOnqs9m5dHqCgai+vIf 7ppmq3uTq4wAlB7t2PK7qzTI27zK8pKchEJ9ziRANnYVLjt9v0Pq+jr8cfYYzbpb Jl+jRk0hsNjLMBJurCa7hV2C2i1fpaLvTGonX8gsQ3fD8dwMCaz2g0SeW7Tg6K4h lgaiiSzB4Vwxj082gN4I7za3PeLIBcDadjUGLtc0qxc2OeBM0XRJszyIyf1mYx1j MgLEf9sx9SuNdTohXQIAhKZEH/8JYw3zYgQj/64zu8yHErTDuf1yMvefXUQzySOm 6q8lbTMi+p3FAQWAU2dePOILz/T6wWeNngyT/yfUqA5bef7ZXlSGJyVqJ3X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkbSPSMjsl2BNEpnkn6dVFyFKpgwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ2YjUyNDgtY2UzMy00ZTk3LTg4 MmYtZjYxNDVmMzE5MDI2LzAvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlG QzIyOEU3NjdBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaSeBXPGcdac7ovb8tCf29P7+hETljakEl5 a97xAyoZWoYY8UTmbBi0jMLOQWYYg9gPOFsx990y9LYj1wrGURzYW+thiA0D8YOo 6jcKkofKvBV7amdk3SHIzPqpp2k46fJWQPWYzIPYiVoS2rnbCwI9S2xu6FrTzpMR wc0KseJTRqZGVIL8rE0NpygTwwOQ2NuigSwUalSCj0LUyL3VhQGsIgQ1pYT/CGo/ y4SqMfUM2/0dQq3u5O2arvFWG4q7hEwzZT7wWxN1WR/nieVDBiHIx3FRBqAdiBYZ R/xUgT7twQZLaMF4GeE4HUnt3JbnQJlHHqLXZhoGboYwzyMI4bg= -----END CERTIFICATE-----Generated at Tue May 13 04:42:21 2025 by rpki-client