$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: IOKNMtcRZwG6IFH902/lwBfvMH+VqQ0T3nW7sCbWxzk= Subject key identifier: E1:12:02:11:B8:62:93:AF:0E:E8:C4:73:74:2E:A0:15:49:73:AC:79 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 0C57E0569B030118C719EECB332F44818BA4770A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 89 Signing time: Sat 10 May 2025 11:30:05 +0000 Manifest this update: Sat 10 May 2025 11:25:05 +0000 Manifest next update: Tue 13 May 2025 16:55:05 +0000 Files and hashes: 1: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: PDuvx7eJC1X9lgxoSou76Ku5IhsKGsu7Zc6EN+EQsSo=) 2: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=) 3: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=) 4: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=) 5: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=) 6: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 7: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=) 8: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:57:e0:56:9b:03:01:18:c7:19:ee:cb:33:2f:44:81:8b:a4:77:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: May 10 11:25:05 2025 GMT Not After : May 13 16:55:05 2025 GMT Subject: CN=E1120211B86293AF0EE8C473742EA0154973AC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:0f:92:be:60:93:1d:39:68:61:7a:82:07: 25:c3:61:97:5f:22:04:9e:a7:af:15:6f:f5:16:44: 71:aa:55:cf:1c:fb:10:a9:47:86:82:1d:bb:ce:e2: d1:c7:57:49:91:10:72:ab:ef:3d:d0:c6:be:39:b8: e0:e0:9f:0d:bd:8b:59:b3:25:d4:aa:20:68:2b:6a: 35:77:22:a7:75:ea:45:74:e5:d7:72:e7:a6:75:6b: 48:61:b8:8e:82:af:9e:ec:1a:14:f5:1f:4b:15:6a: 3a:36:f5:ec:96:91:6e:b6:a0:28:ce:e8:87:e2:a8: a2:d3:22:92:60:f5:08:38:6e:4b:96:46:a2:15:94: 83:b1:6e:1d:26:14:1f:89:6d:6d:93:e3:f7:af:a5: 04:89:94:74:de:7a:f0:0f:1e:31:69:a3:58:16:6d: e2:55:c6:b0:95:34:d7:8e:24:b7:19:14:e9:38:2f: 76:63:f0:f2:a1:03:db:48:7b:9f:0a:53:14:8e:54: b2:15:54:70:3e:96:51:b8:11:96:ee:ca:c5:6f:ea: eb:f6:46:8a:15:0b:ac:9c:cc:25:e0:39:35:7c:b3: 9a:37:23:44:4b:37:a1:9b:af:b0:c5:65:9e:16:5e: 1d:be:b1:8c:52:7b:97:eb:e5:e5:ee:62:6d:44:93: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:12:02:11:B8:62:93:AF:0E:E8:C4:73:74:2E:A0:15:49:73:AC:79 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ec:70:2e:d6:59:7b:9c:35:a2:0e:d9:84:6a:47:26:28:96: f1:bc:25:bb:1a:69:e8:57:88:8f:ae:61:13:ff:49:00:cf:b0: c8:a2:c1:e1:e8:a4:28:38:6f:c0:20:66:39:66:30:60:96:49: e2:95:4f:6b:64:12:a9:e7:e6:da:55:e1:7d:cd:80:cb:cb:50: 08:a1:ce:de:52:0c:9b:9c:0a:93:d3:03:fb:c6:c1:9c:33:13: e6:f2:93:12:ef:12:f2:38:38:87:e3:d9:8b:c9:97:92:43:a2: 89:ec:4f:57:a3:8c:c1:1a:c4:b4:87:a4:f0:01:f0:af:bb:1f: 92:52:68:10:99:f0:17:db:af:90:e8:5e:40:82:9c:d6:32:ec: c4:b4:96:7e:78:21:38:42:4a:3b:6a:c8:85:48:e2:b0:9f:79: 46:91:c4:2f:59:ea:bb:85:54:29:00:cb:ef:2f:a7:06:c1:e9: 98:dd:75:ac:2f:ef:9e:7a:64:fb:44:68:0e:c8:f2:aa:6c:8a: 52:dc:19:a9:28:f8:6f:d6:2f:bb:dc:b9:af:3d:b8:b6:93:26: fa:16:ab:36:32:d7:2a:d0:b7:59:89:27:ca:87:9c:bc:02:89: b9:9c:67:2b:19:65:45:18:b0:f8:db:92:66:80:b5:1c:d8:33: df:0b:22:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFfgVpsDARjHGe7LMy9EgYukdwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA1MTAxMTI1MDVaFw0yNTA1MTMxNjU1MDVaMDMxMTAvBgNV BAMTKEUxMTIwMjExQjg2MjkzQUYwRUU4QzQ3Mzc0MkVBMDE1NDk3M0FDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlw+SvmCTHTloYXqCByXDYZdf IgSep68Vb/UWRHGqVc8c+xCpR4aCHbvO4tHHV0mREHKr7z3Qxr45uODgnw29i1mz JdSqIGgrajV3Iqd16kV05ddy56Z1a0hhuI6Cr57sGhT1H0sVajo29eyWkW62oCjO 6IfiqKLTIpJg9Qg4bkuWRqIVlIOxbh0mFB+JbW2T4/evpQSJlHTeevAPHjFpo1gW beJVxrCVNNeOJLcZFOk4L3Zj8PKhA9tIe58KUxSOVLIVVHA+llG4EZbuysVv6uv2 RooVC6yczCXgOTV8s5o3I0RLN6Gbr7DFZZ4WXh2+sYxSe5fr5eXuYm1Ek58dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RICEbhik68O6MRzdC6gFUlzrHkwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnscC7WWXucNaIO2YRqRyYolvG8JbsaaehX iI+uYRP/SQDPsMiiweHopCg4b8AgZjlmMGCWSeKVT2tkEqnn5tpV4X3NgMvLUAih zt5SDJucCpPTA/vGwZwzE+bykxLvEvI4OIfj2YvJl5JDoonsT1ejjMEaxLSHpPAB 8K+7H5JSaBCZ8Bfbr5DoXkCCnNYy7MS0ln54IThCSjtqyIVI4rCfeUaRxC9Z6ruF VCkAy+8vpwbB6Zjddawv7556ZPtEaA7I8qpsilLcGako+G/WL7vcua89uLaTJvoW qzYy1yrQt1mJJ8qHnLwCibmcZysZZUUYsPjbkmaAtRzYM98LIhk= -----END CERTIFICATE-----Generated at Mon May 12 10:44:26 2025 by rpki-client