$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: HfwLSzXK2qM0pbfaWAJmmYeDl+qlac/mBpec+u28h18= Subject key identifier: 65:5A:F3:AB:AB:E4:E2:D1:16:E5:DF:8B:1C:77:9D:84:93:D5:E7:CF Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 4502496D90AB7C78DBD7D1352C690804B883837C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0130 Signing time: Fri 09 May 2025 06:30:35 +0000 Manifest this update: Fri 09 May 2025 06:25:35 +0000 Manifest next update: Mon 12 May 2025 17:05:35 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: f77gJCPUq9G2VCty5CuUxsbnzkFCl3kVdR/GB+VU12I=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:02:49:6d:90:ab:7c:78:db:d7:d1:35:2c:69:08:04:b8:83:83:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: May 9 06:25:35 2025 GMT Not After : May 12 17:05:35 2025 GMT Subject: CN=655AF3ABABE4E2D116E5DF8B1C779D8493D5E7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:86:55:de:f1:d8:88:cb:4e:ce:3c:aa:77: fd:95:9b:e1:98:5b:9e:02:b6:d9:0d:6f:04:78:19: 19:90:76:c5:c6:bc:f9:1d:e5:0d:eb:8b:b0:da:ba: 72:e0:3e:53:a9:a1:9d:8e:af:4c:27:34:47:ae:4e: bc:38:d5:fd:ff:7f:63:1d:ab:ff:0b:9c:c6:69:92: 8d:ef:79:83:39:93:65:91:a1:54:fa:e1:80:09:66: 69:9d:da:b1:bb:f0:83:f3:3e:8b:17:db:52:66:da: 31:e4:70:20:83:02:71:05:5d:ca:be:6b:f6:d7:cd: ac:de:43:61:a9:db:d6:07:5f:3e:d0:6a:fa:ec:08: c3:28:93:13:16:7e:12:9a:65:57:a0:3d:0f:bb:94: 99:8f:9a:05:2e:49:57:35:c9:6a:b6:74:54:9f:fc: 90:59:e1:4e:a5:91:87:3c:8d:12:4f:ed:4f:49:2c: 1c:fe:85:b5:d9:fe:24:17:8c:8f:b4:7d:23:15:75: 51:be:73:bc:29:c3:6d:90:97:5d:37:62:fe:b6:e5: 3c:bd:9f:51:1b:93:15:a4:c5:7c:83:dd:47:c3:bb: 2f:b5:f3:3a:05:e1:59:e0:11:19:fa:36:70:15:75: 8b:30:5f:77:d2:89:2a:b4:da:2c:f1:a9:48:5d:18: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:F3:AB:AB:E4:E2:D1:16:E5:DF:8B:1C:77:9D:84:93:D5:E7:CF X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:d2:a7:b6:96:e6:fa:8f:b1:bc:5d:c5:28:0a:b8:50:1e: ca:de:2e:30:72:95:cf:30:01:08:a0:67:74:24:26:e3:25:0d: 76:b7:ab:91:57:d7:4b:bb:c4:0c:1d:a5:f3:1c:68:85:30:b8: f6:54:f2:c2:b7:62:f1:6e:25:5c:92:15:cd:c2:b4:c5:8f:1d: b9:e0:c5:d7:a8:7c:54:de:cb:95:62:a0:74:4c:83:61:a1:92: c5:73:45:61:eb:b5:07:fc:d2:9a:cc:1a:18:ab:06:f4:bc:ba: 9e:9c:04:f2:66:06:4d:f7:28:f4:df:99:e2:12:d2:9e:47:f2: 1b:15:57:8a:49:58:9c:a8:4f:e1:24:a3:aa:9c:ee:f2:4e:a7: 8c:a8:13:a1:3d:1a:67:65:5c:ee:87:49:66:8a:6b:48:eb:a6: 34:58:b0:6b:75:d2:c8:db:af:6b:4c:b5:21:6f:91:6c:04:cb: 9c:7b:4b:40:4d:2c:23:40:3b:36:01:74:50:b9:46:4e:34:32: 30:79:57:17:4f:c8:73:ba:f1:03:05:3b:6a:59:07:c9:46:c2: d3:f3:46:e5:25:22:27:39:29:c0:f9:91:5e:3a:99:83:dc:77: f7:80:e8:84:35:46:fc:48:75:6e:0b:5b:4f:e6:d5:4f:e8:5d: df:a3:85:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQJJbZCrfHjb19E1LGkIBLiDg3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA1MDkwNjI1MzVaFw0yNTA1MTIxNzA1MzVaMDMxMTAvBgNV BAMTKDY1NUFGM0FCQUJFNEUyRDExNkU1REY4QjFDNzc5RDg0OTNENUU3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT4ZV3vHYiMtOzjyqd/2Vm+GY W54CttkNbwR4GRmQdsXGvPkd5Q3ri7DaunLgPlOpoZ2Or0wnNEeuTrw41f3/f2Md q/8LnMZpko3veYM5k2WRoVT64YAJZmmd2rG78IPzPosX21Jm2jHkcCCDAnEFXcq+ a/bXzazeQ2Gp29YHXz7QavrsCMMokxMWfhKaZVegPQ+7lJmPmgUuSVc1yWq2dFSf /JBZ4U6lkYc8jRJP7U9JLBz+hbXZ/iQXjI+0fSMVdVG+c7wpw22Ql103Yv625Ty9 n1EbkxWkxXyD3UfDuy+18zoF4VngERn6NnAVdYswX3fSiSq02izxqUhdGBkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVrzq6vk4tEW5d+LHHedhJPV588wHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8s0qe2lub6j7G8XcUoCrhQHsreLjBylc8w AQigZ3QkJuMlDXa3q5FX10u7xAwdpfMcaIUwuPZU8sK3YvFuJVySFc3CtMWPHbng xdeofFTey5VioHRMg2GhksVzRWHrtQf80prMGhirBvS8up6cBPJmBk33KPTfmeIS 0p5H8hsVV4pJWJyoT+Eko6qc7vJOp4yoE6E9GmdlXO6HSWaKa0jrpjRYsGt10sjb r2tMtSFvkWwEy5x7S0BNLCNAOzYBdFC5Rk40MjB5VxdPyHO68QMFO2pZB8lGwtPz RuUlIic5KcD5kV46mYPcd/eA6IQ1RvxIdW4LW0/m1U/oXd+jhUY= -----END CERTIFICATE-----Generated at Fri May 9 18:48:35 2025 by rpki-client