$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: R+v9fh55E2pH8mOPTdqdQ4tCO/DFDxHKMXQJgUkH4q8= Subject key identifier: B6:FF:F1:08:CB:D4:60:03:90:2B:9C:46:D9:8D:FC:E7:10:F6:7E:A5 Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 7A2D3D5EE21F8E854C45DC4E995D68F0ADE746C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 0425 Signing time: Mon 05 May 2025 05:01:02 +0000 Manifest this update: Mon 05 May 2025 04:56:02 +0000 Manifest next update: Thu 08 May 2025 07:02:02 +0000 Files and hashes: 1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: F4lhjIk4edd/H/nx6oTyCnJODJxFCbHqdlklw4Wo7Ts=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: U3Gs6gFYrqKdvd5j47kgxX4NaXmZB4E+Rz3ST2VSWc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2d:3d:5e:e2:1f:8e:85:4c:45:dc:4e:99:5d:68:f0:ad:e7:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: May 5 04:56:02 2025 GMT Not After : May 8 07:02:02 2025 GMT Subject: CN=B6FFF108CBD46003902B9C46D98DFCE710F67EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:2c:b1:07:d0:68:54:ed:76:fc:9e:94:9c: 22:93:8b:82:58:a0:77:e9:f5:b0:f9:10:0b:9f:af: 38:a4:e0:a9:59:07:16:99:78:9a:6f:74:72:86:12: cf:3b:83:8c:81:54:99:82:9c:5b:4b:99:9b:e1:65: 4d:fe:b3:0e:83:37:76:14:78:d2:a6:db:13:98:19: 27:9f:92:56:82:66:31:8e:34:eb:a2:52:ca:60:8d: 52:92:9d:5e:65:7d:bb:a4:e2:e7:8f:15:f1:2a:43: 37:2e:14:27:2e:6a:c2:c9:c5:1c:2c:2c:c7:4a:83: 7e:4f:3b:6c:d2:a7:78:9b:10:d4:c0:b3:52:9c:d5: 30:a0:35:3f:33:91:94:9d:50:bb:fb:08:c3:d8:84: 12:d4:3b:a3:1b:cf:6d:fb:9f:5e:79:83:b0:cc:5b: f2:18:14:82:4d:96:7f:bb:82:b2:3d:82:0a:a6:4b: e2:25:54:dc:24:86:01:e0:eb:17:6d:26:9d:aa:bb: 22:3c:76:b5:f7:d5:22:75:3c:9e:65:01:2b:43:57: f0:92:45:4e:c6:7b:de:a0:fe:53:45:53:e0:30:5b: 70:45:ad:1c:94:8e:d4:7c:6d:40:e1:c4:c4:19:1e: 3c:66:6f:41:f2:e5:f1:a9:77:97:7b:f3:26:2c:9e: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FF:F1:08:CB:D4:60:03:90:2B:9C:46:D9:8D:FC:E7:10:F6:7E:A5 X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:59:97:dc:b8:6d:1c:fe:ad:aa:fd:4c:33:12:3a:78:1b: f9:7b:00:6b:53:d8:82:36:3c:9d:b6:08:20:d1:db:d7:e5:de: 13:6d:fa:83:dc:64:f1:ca:08:e2:4f:d8:29:f0:52:47:3f:a8: 84:1a:9c:e8:4e:9b:c0:55:92:2a:c3:08:a3:87:43:a2:80:55: b0:ec:7d:de:ff:52:24:e4:95:34:b8:da:14:6b:52:51:f3:02: ec:14:9b:bb:61:16:fe:48:aa:83:96:11:c7:83:8d:1c:75:a9: 8b:da:32:0e:bf:8a:d5:ae:1f:73:f7:2a:d4:05:10:80:a0:ef: 25:37:c0:2d:1c:e5:44:78:1e:cf:70:33:cd:33:44:55:93:56: 48:12:af:d7:64:ae:3d:3a:5b:48:b9:3d:b9:14:c3:9c:10:33: f4:8d:0b:76:40:92:dc:95:a4:9c:b2:ae:3c:ce:55:1b:64:db: dc:2f:6e:2e:c8:65:42:f7:a0:2a:86:53:90:38:fb:8f:92:ad: e6:fe:7a:f2:b0:e3:f3:f4:d9:72:3c:12:d8:c7:cd:26:69:b4: fc:3a:c2:ed:2c:ee:a8:02:99:fb:69:a6:ec:ac:d7:7d:a8:45: b8:fd:eb:81:3e:f7:d6:ec:62:a4:b9:61:92:cf:3b:79:4a:3c: d8:e5:c2:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUei09XuIfjoVMRdxOmV1o8K3nRsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTA1MDUwNDU2MDJaFw0yNTA1MDgwNzAyMDJaMDMxMTAvBgNV BAMTKEI2RkZGMTA4Q0JENDYwMDM5MDJCOUM0NkQ5OERGQ0U3MTBGNjdFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFyyxB9BoVO12/J6UnCKTi4JY oHfp9bD5EAufrzik4KlZBxaZeJpvdHKGEs87g4yBVJmCnFtLmZvhZU3+sw6DN3YU eNKm2xOYGSefklaCZjGONOuiUspgjVKSnV5lfbuk4uePFfEqQzcuFCcuasLJxRws LMdKg35PO2zSp3ibENTAs1Kc1TCgNT8zkZSdULv7CMPYhBLUO6Mbz237n155g7DM W/IYFIJNln+7grI9ggqmS+IlVNwkhgHg6xdtJp2quyI8drX31SJ1PJ5lAStDV/CS RU7Ge96g/lNFU+AwW3BFrRyUjtR8bUDhxMQZHjxmb0Hy5fGpd5d78yYsnuQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtv/xCMvUYAOQK5xG2Y385xD2fqUwHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1hWZfcuG0c/q2q/UwzEjp4G/l7AGtT2II2 PJ22CCDR29fl3hNt+oPcZPHKCOJP2CnwUkc/qIQanOhOm8BVkirDCKOHQ6KAVbDs fd7/UiTklTS42hRrUlHzAuwUm7thFv5IqoOWEceDjRx1qYvaMg6/itWuH3P3KtQF EICg7yU3wC0c5UR4Hs9wM80zRFWTVkgSr9dkrj06W0i5PbkUw5wQM/SNC3ZAktyV pJyyrjzOVRtk29wvbi7IZUL3oCqGU5A4+4+Sreb+evKw4/P02XI8EtjHzSZptPw6 wu0s7qgCmftppuys132oRbj964E+99bsYqS5YZLPO3lKPNjlwm8= -----END CERTIFICATE-----Generated at Tue May 6 18:03:32 2025 by rpki-client