$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: Vghv2Y5cGwyPvfn2q1htGJPQnJkJXPQ+ZSlSb7p1XEo= Subject key identifier: F3:85:40:11:96:AC:9A:34:7F:8F:A3:68:C4:96:E7:27:E4:16:92:73 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 13A2F6680BFC9CFB28B41B457B7B1AFE73A8402C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 0161 Signing time: Sun 11 May 2025 19:31:41 +0000 Manifest this update: Sun 11 May 2025 19:26:41 +0000 Manifest next update: Thu 15 May 2025 04:54:41 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: Wrbd0oqpwEuokRuYaveaVgMV0BpI3DZavQZ+CH5LlEQ=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a2:f6:68:0b:fc:9c:fb:28:b4:1b:45:7b:7b:1a:fe:73:a8:40:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: May 11 19:26:41 2025 GMT Not After : May 15 04:54:41 2025 GMT Subject: CN=F385401196AC9A347F8FA368C496E727E4169273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:41:8a:c1:69:19:2c:32:95:05:51:bf:f9: 14:4c:5d:0f:14:d3:62:44:c8:4f:2c:35:40:1d:49: c5:53:5f:5a:62:9e:f5:94:df:95:05:a1:e6:5f:87: 90:a8:ed:1c:b7:83:f1:f8:bb:66:de:d5:b5:9a:9d: 14:48:2b:08:c6:c7:d2:44:27:95:b0:b4:57:7a:04: 72:f5:d4:40:89:bf:cf:2d:df:09:3f:bb:e2:39:5c: fd:6c:ae:6c:48:1c:f4:a6:e4:b6:06:c3:f9:b9:f0: 4a:9b:d0:40:fa:c0:08:e6:96:d6:23:8c:62:2c:aa: 2e:ee:16:37:c2:1b:57:15:7d:5d:70:70:7e:d8:46: 87:4e:ca:fc:1d:23:6a:8f:50:e8:e5:08:5b:f5:ee: d5:9e:d4:23:b4:d2:48:f3:37:a4:45:20:d8:d8:cc: 7f:d3:b2:cf:64:00:3b:f2:71:2d:a1:b0:c0:35:ae: 32:d8:71:32:5b:62:4a:bd:2b:5a:8e:d2:39:b4:28: a0:ec:21:b6:cd:84:8d:1c:1f:b0:e2:33:8d:4f:e9: 69:f5:f1:c5:46:b3:b2:cc:44:c0:33:00:4f:a3:6c: bb:e4:5b:11:20:22:c9:1f:6e:9c:7c:a5:4c:22:8e: e9:5f:c2:21:69:5d:94:7e:6f:d1:88:05:91:83:10: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:85:40:11:96:AC:9A:34:7F:8F:A3:68:C4:96:E7:27:E4:16:92:73 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:88:9a:aa:90:4f:f3:2a:81:b5:aa:58:04:be:4e:4b:f1:47: 07:60:cb:b8:fc:38:ff:20:91:02:9c:cb:d0:c9:3b:15:18:35: 00:76:8b:e8:03:6c:a0:06:74:33:08:88:af:f0:6b:30:66:3d: 1c:b7:46:3f:3b:ab:5b:5b:92:0a:f5:55:f9:b5:16:22:c8:7d: 60:88:06:55:cc:cb:d3:50:4a:d9:9b:ae:a8:fa:2c:33:d7:3c: 5a:cd:fc:0e:ee:07:bb:b7:f9:c2:44:e7:dd:61:31:19:2b:67: e0:ca:8f:24:0c:8f:3e:27:3c:dc:5f:73:46:29:5b:f5:2e:a8: db:d5:e0:7e:e3:36:0f:05:cd:14:a2:88:82:3b:4a:94:ff:a6: ea:c8:ae:cd:57:1d:6a:08:5b:db:40:45:f3:7d:7f:5c:1a:3a: ef:1b:cb:d0:1c:ba:cb:3b:2a:c8:c0:28:6f:8c:24:75:c6:52: db:7d:6c:a1:ac:15:4b:34:75:80:d3:d4:82:82:bc:a4:13:9d: bd:6d:b5:c9:31:27:f0:e0:47:aa:10:0b:08:3d:3a:c2:23:8d: e8:7a:2e:a7:1c:ea:c8:48:3d:5a:95:f7:01:c2:f6:b4:84:83: a3:7d:d0:9c:b3:fb:59:20:b6:37:14:be:6f:c8:a6:b2:67:80: 26:5b:d2:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6L2aAv8nPsotBtFe3sa/nOoQCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA1MTExOTI2NDFaFw0yNTA1MTUwNDU0NDFaMDMxMTAvBgNV BAMTKEYzODU0MDExOTZBQzlBMzQ3RjhGQTM2OEM0OTZFNzI3RTQxNjkyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprUGKwWkZLDKVBVG/+RRMXQ8U 02JEyE8sNUAdScVTX1pinvWU35UFoeZfh5Co7Ry3g/H4u2be1bWanRRIKwjGx9JE J5WwtFd6BHL11ECJv88t3wk/u+I5XP1srmxIHPSm5LYGw/m58Eqb0ED6wAjmltYj jGIsqi7uFjfCG1cVfV1wcH7YRodOyvwdI2qPUOjlCFv17tWe1CO00kjzN6RFINjY zH/Tss9kADvycS2hsMA1rjLYcTJbYkq9K1qO0jm0KKDsIbbNhI0cH7DiM41P6Wn1 8cVGs7LMRMAzAE+jbLvkWxEgIskfbpx8pUwijulfwiFpXZR+b9GIBZGDEEpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84VAEZasmjR/j6NoxJbnJ+QWknMwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqImqqQT/MqgbWqWAS+TkvxRwdgy7j8OP8g kQKcy9DJOxUYNQB2i+gDbKAGdDMIiK/wazBmPRy3Rj87q1tbkgr1Vfm1FiLIfWCI BlXMy9NQStmbrqj6LDPXPFrN/A7uB7u3+cJE591hMRkrZ+DKjyQMjz4nPNxfc0Yp W/UuqNvV4H7jNg8FzRSiiII7SpT/purIrs1XHWoIW9tARfN9f1waOu8by9Acuss7 KsjAKG+MJHXGUtt9bKGsFUs0dYDT1IKCvKQTnb1ttckxJ/DgR6oQCwg9OsIjjeh6 Lqcc6shIPVqV9wHC9rSEg6N90Jyz+1kgtjcUvm/IprJngCZb0hQ= -----END CERTIFICATE-----Generated at Sun May 11 23:19:31 2025 by rpki-client