$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: kEPHnuESn6uIgkZglu3/2ECYd9xq/VOJf2oBtU3kpQM= Subject key identifier: 94:63:1C:02:EA:16:EA:28:04:90:22:A1:64:1B:DB:6B:9F:7F:C8:02 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 029E476995C0B5FE3A8665AF11C0A27865916D0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 9F Signing time: Sat 03 May 2025 15:00:58 +0000 Manifest this update: Sat 03 May 2025 14:55:58 +0000 Manifest next update: Tue 06 May 2025 22:55:58 +0000 Files and hashes: 1: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 3: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: OwkV5n4qld74vsWgQHOK/72wqaJod87fhoFu150rFFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 22:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9e:47:69:95:c0:b5:fe:3a:86:65:af:11:c0:a2:78:65:91:6d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: May 3 14:55:58 2025 GMT Not After : May 6 22:55:58 2025 GMT Subject: CN=94631C02EA16EA28049022A1641BDB6B9F7FC802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:a1:35:08:db:9e:88:d6:d1:b0:0c:4b:77: ca:3b:f2:8e:e9:58:06:7d:66:e7:ff:0b:91:c0:76: ff:37:3a:28:65:bf:09:df:8e:87:e0:f9:69:00:e8: 47:44:e2:f0:96:0b:8f:10:ce:02:52:42:f7:f4:43: 09:1b:fa:0c:23:c9:c0:b7:51:36:2f:7e:3e:14:16: 92:1f:cb:5b:2a:de:53:50:5b:e1:74:d0:22:6b:5e: 8c:07:7d:4e:51:da:a4:a5:dd:dc:36:c9:f8:61:41: 80:0d:e2:9b:c8:a3:41:74:21:fb:c1:73:f2:c8:01: b2:d4:64:e5:18:09:f5:f7:d5:13:c4:13:e5:ec:ac: 43:ef:9c:f5:36:a3:62:2a:8f:b3:51:ba:da:3c:18: 4f:0e:56:68:df:aa:6c:6d:92:64:40:71:b4:4d:21: 22:b6:85:14:f4:21:69:db:54:47:3d:5c:90:7c:00: 2d:db:64:8b:59:fd:e1:90:cb:c9:2f:4f:8c:68:23: 8e:0f:72:30:39:8a:ec:4f:8e:1f:9a:ad:39:67:16: 12:f6:bb:91:85:64:7f:84:c8:15:3a:df:c4:63:af: 93:06:bc:af:db:99:64:15:08:d7:ce:b0:1a:cc:33: f3:75:b8:a4:84:4e:62:5e:99:22:94:1d:67:60:fd: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:63:1C:02:EA:16:EA:28:04:90:22:A1:64:1B:DB:6B:9F:7F:C8:02 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a4:89:6c:73:3e:e0:bc:fc:af:3f:73:d9:ee:5c:f7:a5:b3: 21:4b:95:5c:78:74:46:70:4f:e2:09:f2:6e:e0:78:93:40:ba: c1:30:4a:08:63:40:27:49:a3:26:50:bb:0c:fc:af:10:23:ff: 48:41:55:22:5e:78:bc:8f:67:ad:0a:13:7c:1e:4c:cb:12:7e: e6:cc:77:47:93:05:f7:43:69:32:c4:71:de:02:9c:f9:da:01: 2b:d2:5a:5c:ed:ff:32:c2:83:4f:ed:38:b5:e7:72:e8:8d:7c: 8c:a6:66:ab:15:f0:b8:21:62:5f:83:8a:b2:89:f2:b3:f3:c7: 7b:fa:2c:06:25:18:5d:57:d0:f9:11:36:dd:8f:8c:44:46:2b: f5:86:dd:2a:12:f3:bb:72:e5:9a:07:cc:f3:50:f8:44:61:3f: aa:4b:93:fd:5e:10:50:44:5f:ea:4f:19:44:16:88:a5:d3:2c: e0:77:1c:34:2e:44:bb:05:00:a8:bc:a4:6b:eb:ce:e2:16:72: 9a:1a:1b:4f:aa:67:59:c5:91:5c:5a:11:fb:36:9b:dc:5b:14: 15:79:e4:dc:55:4c:e2:59:69:66:8c:7f:99:ab:e4:24:bb:ec: 64:74:84:c6:25:51:ee:68:3b:e1:a2:f5:8f:00:8d:70:ed:dc: 03:9b:d1:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAp5HaZXAtf46hmWvEcCieGWRbQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA1MDMxNDU1NThaFw0yNTA1MDYyMjU1NThaMDMxMTAvBgNV BAMTKDk0NjMxQzAyRUExNkVBMjgwNDkwMjJBMTY0MUJEQjZCOUY3RkM4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ26E1CNueiNbRsAxLd8o78o7p WAZ9Zuf/C5HAdv83Oihlvwnfjofg+WkA6EdE4vCWC48QzgJSQvf0Qwkb+gwjycC3 UTYvfj4UFpIfy1sq3lNQW+F00CJrXowHfU5R2qSl3dw2yfhhQYAN4pvIo0F0IfvB c/LIAbLUZOUYCfX31RPEE+XsrEPvnPU2o2Iqj7NRuto8GE8OVmjfqmxtkmRAcbRN ISK2hRT0IWnbVEc9XJB8AC3bZItZ/eGQy8kvT4xoI44PcjA5iuxPjh+arTlnFhL2 u5GFZH+EyBU638Rjr5MGvK/bmWQVCNfOsBrMM/N1uKSETmJemSKUHWdg/eOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGMcAuoW6igEkCKhZBvba59/yAIwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOkiWxzPuC8/K8/c9nuXPelsyFLlVx4dEZw T+IJ8m7geJNAusEwSghjQCdJoyZQuwz8rxAj/0hBVSJeeLyPZ60KE3weTMsSfubM d0eTBfdDaTLEcd4CnPnaASvSWlzt/zLCg0/tOLXncuiNfIymZqsV8LghYl+DirKJ 8rPzx3v6LAYlGF1X0PkRNt2PjERGK/WG3SoS87ty5ZoHzPNQ+ERhP6pLk/1eEFBE X+pPGUQWiKXTLOB3HDQuRLsFAKi8pGvrzuIWcpoaG0+qZ1nFkVxaEfs2m9xbFBV5 5NxVTOJZaWaMf5mr5CS77GR0hMYlUe5oO+Gi9Y8AjXDt3AOb0fc= -----END CERTIFICATE-----Generated at Tue May 6 22:51:09 2025 by rpki-client