$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: KV7uu/NkO24v4ux+J/RNBzq5fo3MTAHnJxd3DnnuuTU= Subject key identifier: 39:F0:2D:BE:80:16:7A:62:44:55:FC:B2:7C:D4:68:91:30:52:38:16 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 1A80DB99944B309D20F9B434FC41CFEA5331BE81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0104 Signing time: Wed 07 May 2025 14:31:14 +0000 Manifest this update: Wed 07 May 2025 14:26:14 +0000 Manifest next update: Sat 10 May 2025 16:15:14 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: fdKLklGtOpTaZiKknSWtQhokJ8SyF+EacKH1Get3Tjc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: 4q3oSibREIuuM+Gl57928ZycfH1j/CESrK+kaWGKu/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:80:db:99:94:4b:30:9d:20:f9:b4:34:fc:41:cf:ea:53:31:be:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: May 7 14:26:14 2025 GMT Not After : May 10 16:15:14 2025 GMT Subject: CN=39F02DBE80167A624455FCB27CD4689130523816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:58:cb:35:f5:40:f3:ce:84:e9:ea:59:ae: 49:f2:33:32:2a:e0:98:0e:50:17:4b:20:91:43:a6: b3:3c:91:e9:9c:ad:4b:d9:c8:4d:38:18:86:80:fe: 3e:f8:ed:06:38:ea:96:09:74:6b:3e:15:69:8f:f8: cd:1d:6e:7f:0f:f9:e7:ed:17:5c:21:f1:02:69:d2: 1c:b8:6a:72:7c:64:fd:84:25:c2:d2:be:3a:e8:3f: 08:23:26:75:90:25:d6:b1:97:e6:14:44:9f:af:c4: 52:45:ed:4d:27:40:60:a2:b4:bf:4d:20:1b:78:a4: 39:b6:70:ef:35:d7:ae:ce:a8:ff:0b:5e:0f:84:3b: 5a:d9:60:16:8f:95:96:b7:62:91:a2:cb:11:32:94: 1e:6e:1d:eb:fb:31:fa:66:99:4a:f3:92:bf:69:df: 2a:4b:41:29:ef:ff:af:62:47:30:d8:58:5c:02:be: 59:ac:98:44:90:93:83:d6:39:da:48:16:8a:13:0d: 52:02:4f:50:ff:25:8d:5d:a6:cd:5b:b0:2c:ac:19: f1:15:f7:aa:f8:1a:6e:4b:23:c6:09:cc:6a:2b:0f: 60:c1:9c:45:3e:8f:02:12:33:cb:b5:a2:91:12:79: 8f:1f:ff:71:f8:76:e9:62:f8:2f:18:d6:9d:d9:e0: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:2D:BE:80:16:7A:62:44:55:FC:B2:7C:D4:68:91:30:52:38:16 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ea:b0:91:93:ec:48:54:f1:18:74:12:4e:a0:18:78:ec:38: 54:1e:db:05:22:97:ed:05:3a:5b:98:61:23:a1:e4:b7:c6:f7: 99:5a:95:41:69:7f:9e:01:cb:b1:a8:e3:37:65:53:a3:1c:3d: 7c:01:24:5d:d4:54:e1:66:a8:de:11:e2:dc:ad:6d:db:e5:ed: 70:aa:c5:4b:bc:bc:65:7f:1c:b4:d9:70:d4:e5:ed:45:78:a9: a9:79:9b:18:f8:97:54:69:d8:55:39:c7:26:4d:fd:a0:7c:ff: e8:e5:cb:c6:af:07:c5:df:7a:2f:bc:9a:05:e9:ad:eb:b2:fe: e6:48:5e:71:80:15:b2:a3:f5:a5:ed:7a:d3:e3:41:ce:a2:62: f2:8a:bf:ad:1b:7b:ad:73:7f:63:04:81:50:24:4a:43:f5:fa: 47:47:b0:6c:64:18:dd:c7:80:95:10:6b:99:09:bd:13:60:05: ee:20:8d:a1:ed:20:51:59:72:85:71:30:20:94:28:ce:fd:d8: 72:f6:ee:64:b0:e9:34:90:d5:4e:50:55:f4:95:52:c2:e7:97: 1c:d4:1e:64:c8:f8:55:4a:dc:07:ef:a7:8d:2c:fd:7d:2b:03: f3:32:bd:61:79:cd:9b:0d:eb:71:74:46:fa:36:4e:ef:8f:f0: 28:90:47:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoDbmZRLMJ0g+bQ0/EHP6lMxvoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA1MDcxNDI2MTRaFw0yNTA1MTAxNjE1MTRaMDMxMTAvBgNV BAMTKDM5RjAyREJFODAxNjdBNjI0NDU1RkNCMjdDRDQ2ODkxMzA1MjM4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIljLNfVA886E6epZrknyMzIq 4JgOUBdLIJFDprM8kemcrUvZyE04GIaA/j747QY46pYJdGs+FWmP+M0dbn8P+eft F1wh8QJp0hy4anJ8ZP2EJcLSvjroPwgjJnWQJdaxl+YURJ+vxFJF7U0nQGCitL9N IBt4pDm2cO81167OqP8LXg+EO1rZYBaPlZa3YpGiyxEylB5uHev7MfpmmUrzkr9p 3ypLQSnv/69iRzDYWFwCvlmsmESQk4PWOdpIFooTDVICT1D/JY1dps1bsCysGfEV 96r4Gm5LI8YJzGorD2DBnEU+jwISM8u1opESeY8f/3H4duli+C8Y1p3Z4GYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfAtvoAWemJEVfyyfNRokTBSOBYwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjqsJGT7EhU8Rh0Ek6gGHjsOFQe2wUil+0F OluYYSOh5LfG95lalUFpf54By7Go4zdlU6McPXwBJF3UVOFmqN4R4tytbdvl7XCq xUu8vGV/HLTZcNTl7UV4qal5mxj4l1Rp2FU5xyZN/aB8/+jly8avB8Xfei+8mgXp reuy/uZIXnGAFbKj9aXtetPjQc6iYvKKv60be61zf2MEgVAkSkP1+kdHsGxkGN3H gJUQa5kJvRNgBe4gjaHtIFFZcoVxMCCUKM792HL27mSw6TSQ1U5QVfSVUsLnlxzU HmTI+FVK3Afvp40s/X0rA/MyvWF5zZsN63F0Rvo2Tu+P8CiQR28= -----END CERTIFICATE-----Generated at Thu May 8 02:48:11 2025 by rpki-client