$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: Mz7vvul77VsW1jkmEaktqTN210gFQWRL3uYLtDiEI4U= Subject key identifier: 0D:BC:E9:19:1F:52:F5:C1:44:E8:1C:E7:6F:56:7B:9F:0F:04:48:6B Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 359BF93DC692B873CB1904A6D9E0677CA5FD01AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: DF Signing time: Thu 08 May 2025 22:01:15 +0000 Manifest this update: Thu 08 May 2025 21:56:15 +0000 Manifest next update: Mon 12 May 2025 09:17:15 +0000 Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 3: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) 4: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: hUJzI2aqkkNuzK0HtS60MflrVXicZ9DoQqk4LByzExM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9b:f9:3d:c6:92:b8:73:cb:19:04:a6:d9:e0:67:7c:a5:fd:01:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: May 8 21:56:15 2025 GMT Not After : May 12 09:17:15 2025 GMT Subject: CN=0DBCE9191F52F5C144E81CE76F567B9F0F04486B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:5e:cb:6d:98:94:4f:55:9d:ec:fc:c7:57: 92:8c:2f:89:c6:92:96:93:a3:e8:14:bc:3b:b2:94: 70:9d:3e:44:2e:76:89:cb:8b:09:ae:df:95:97:37: 30:c6:1f:d0:b2:f7:bd:28:93:28:ae:28:09:fc:d7: 21:0a:f9:c4:d8:67:7e:a3:2e:04:48:50:78:05:05: 81:10:ca:65:71:94:fc:4e:41:ef:f5:2a:5e:d3:d4: 36:6b:17:ff:8f:3d:83:f6:e9:dc:88:94:5f:b5:a3: 5a:7f:20:bf:82:e0:ce:aa:95:54:41:a0:9d:b7:34: b3:01:d0:b3:f8:ff:e6:1f:cd:f1:d8:5b:9c:af:d4: 17:56:03:03:73:b1:b5:b9:36:fb:5f:94:37:72:3b: 00:c1:ec:2a:6e:bc:b1:c0:2d:7c:c6:31:9d:fa:99: c5:2d:5b:62:64:66:9c:6b:46:3c:54:a9:10:13:53: aa:81:7e:58:b2:ad:4f:92:f0:db:40:ae:34:fb:6f: c3:03:97:7f:0a:61:e2:ec:f4:a8:98:0c:6e:6b:ae: d3:9e:ad:c9:b4:ba:e8:a0:0f:f2:84:15:8d:c8:f6: 82:31:fd:1d:fe:c0:68:42:d6:98:f5:f2:50:e7:7c: 71:7b:9c:6c:5b:ec:3d:50:af:1e:11:a5:82:14:ed: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BC:E9:19:1F:52:F5:C1:44:E8:1C:E7:6F:56:7B:9F:0F:04:48:6B X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:81:86:0a:6b:1b:d4:22:48:29:09:27:a1:8d:2c:f6:ec:81: ae:5f:8d:0e:db:69:59:a8:71:1c:08:4b:f0:59:d7:fd:71:64: bd:12:3a:30:24:51:de:40:fd:2e:59:9f:3f:aa:18:44:b3:61: 1e:9f:fa:13:44:c0:bc:d3:b0:e3:e8:20:a4:59:9b:00:98:10: 80:d4:cf:51:b7:a1:4c:42:0f:07:e9:f9:a2:1e:20:6f:a6:e4: d5:48:91:c9:33:73:42:12:b5:5c:05:90:2f:b5:56:09:c7:a1: 83:43:41:55:33:8c:a0:04:94:fb:3c:11:36:c9:eb:8a:99:e3: fc:de:6e:a4:d4:0d:09:1c:04:76:b5:6b:86:fd:e0:0b:d8:56: 08:44:dd:1c:06:ae:44:73:aa:d5:65:68:4a:ca:52:05:10:91: b9:d8:9d:d2:ca:2c:ca:40:39:20:14:bb:a9:5d:8a:a2:3b:7d: 9f:75:0f:8d:e6:ec:84:8e:6f:de:a6:45:f4:2f:3d:82:09:29: 03:02:04:3e:e3:4a:3f:48:57:f5:0a:97:df:30:97:d8:71:64: 68:9a:19:4b:b8:38:51:ad:3b:11:de:8d:8d:06:90:15:56:db: 34:27:a3:38:4b:df:cb:e6:0d:0b:f8:c0:46:2a:a4:36:43:7a: 7f:57:e2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZv5PcaSuHPLGQSm2eBnfKX9Aa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA1MDgyMTU2MTVaFw0yNTA1MTIwOTE3MTVaMDMxMTAvBgNV BAMTKDBEQkNFOTE5MUY1MkY1QzE0NEU4MUNFNzZGNTY3QjlGMEYwNDQ4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuaV7LbZiUT1Wd7PzHV5KML4nG kpaTo+gUvDuylHCdPkQudonLiwmu35WXNzDGH9Cy970okyiuKAn81yEK+cTYZ36j LgRIUHgFBYEQymVxlPxOQe/1Kl7T1DZrF/+PPYP26dyIlF+1o1p/IL+C4M6qlVRB oJ23NLMB0LP4/+YfzfHYW5yv1BdWAwNzsbW5NvtflDdyOwDB7CpuvLHALXzGMZ36 mcUtW2JkZpxrRjxUqRATU6qBfliyrU+S8NtArjT7b8MDl38KYeLs9KiYDG5rrtOe rcm0uuigD/KEFY3I9oIx/R3+wGhC1pj18lDnfHF7nGxb7D1Qrx4RpYIU7Sz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbzpGR9S9cFE6Bznb1Z7nw8ESGswHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKBhgprG9QiSCkJJ6GNLPbsga5fjQ7baVmo cRwIS/BZ1/1xZL0SOjAkUd5A/S5Znz+qGESzYR6f+hNEwLzTsOPoIKRZmwCYEIDU z1G3oUxCDwfp+aIeIG+m5NVIkckzc0IStVwFkC+1VgnHoYNDQVUzjKAElPs8ETbJ 64qZ4/zebqTUDQkcBHa1a4b94AvYVghE3RwGrkRzqtVlaErKUgUQkbnYndLKLMpA OSAUu6ldiqI7fZ91D43m7ISOb96mRfQvPYIJKQMCBD7jSj9IV/UKl98wl9hxZGia GUu4OFGtOxHejY0GkBVW2zQnozhL38vmDQv4wEYqpDZDen9X4kU= -----END CERTIFICATE-----Generated at Sun May 11 05:20:40 2025 by rpki-client