$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: wrFXwx+pQeuR+cQJpEckJLVAJ3DmP+GDcvznwA0n0eg= Subject key identifier: E2:85:21:6C:87:6A:74:F2:17:63:B9:93:39:43:F1:7C:4C:4C:F1:50 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 4244A34FBA803D7AB9CEE528DDE273D27F9B37E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 9A Signing time: Wed 07 May 2025 04:30:34 +0000 Manifest this update: Wed 07 May 2025 04:25:34 +0000 Manifest next update: Sat 10 May 2025 06:05:34 +0000 Files and hashes: 1: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: 1RPSrQRHDB3Npp8/ISl5F6aoJY/QClJlS6mnUSXVaOY=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: K5oquwrLK66NgAAxhssyU9cE1S+99n3MDQtPouQSzd0=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: SCqKZWrRiy8nw8cakY/jAbd2qy6+t2kss9DaTtS0TyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:44:a3:4f:ba:80:3d:7a:b9:ce:e5:28:dd:e2:73:d2:7f:9b:37:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: May 7 04:25:34 2025 GMT Not After : May 10 06:05:34 2025 GMT Subject: CN=E285216C876A74F21763B9933943F17C4C4CF150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:32:87:78:73:ef:64:08:fe:b1:00:2a:a4: 11:9b:34:69:d6:3c:8f:a6:8e:34:4c:fc:27:bd:79: bf:d3:35:f8:2c:c9:9f:2c:ac:e1:91:b3:f9:83:2c: 7b:bb:54:8a:22:d3:41:14:ea:32:26:6d:fa:3b:c3: 5f:c5:52:d8:e6:fe:3e:ab:42:eb:af:be:82:ef:6a: a7:cc:5f:0e:29:dd:59:0b:0a:1f:fa:6d:2c:50:f5: 5b:f8:13:7c:d7:4b:b2:b6:7f:f4:74:a1:b0:d1:d8: e7:a9:5a:a7:7f:50:24:61:40:1f:95:ab:c5:d9:1b: 0e:d2:7b:4f:88:a2:ea:33:df:c8:82:27:1d:44:b9: 8e:92:24:53:f3:3a:bb:17:89:4a:0b:39:e6:c4:93: c1:07:9c:bc:fd:0e:e2:be:44:64:54:2d:42:95:9e: 8d:66:e6:cd:c1:4c:8d:c2:e4:a4:34:37:ef:8e:1c: d4:4e:70:71:39:a4:54:64:b3:1b:24:c2:4e:2e:a7: 43:57:6f:00:0c:60:27:90:be:1b:7b:e6:be:2e:27: 57:9c:ac:e2:59:89:5f:d6:25:fa:01:ae:e6:40:44: aa:22:87:6c:8d:71:98:90:2e:37:a5:6e:df:30:aa: 70:da:a0:ec:c2:17:2c:26:83:8e:16:d1:e1:c4:36: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:21:6C:87:6A:74:F2:17:63:B9:93:39:43:F1:7C:4C:4C:F1:50 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2c:6b:58:ec:65:8b:c1:95:ac:b1:ad:bd:e5:c0:59:c7:b0: 2e:43:6f:ff:49:70:d9:5e:7f:fd:3c:f9:e7:0d:c2:bc:d8:bc: b3:39:77:61:40:73:4d:13:f0:cd:65:2b:1a:ae:de:1b:45:fd: 88:fa:f5:d1:4c:6c:19:00:77:91:1d:b9:26:1f:3c:64:b9:ac: 5b:41:ed:c1:43:51:7a:90:2f:0f:32:db:19:ed:2b:81:91:07: ac:e0:a6:bd:bd:2f:04:e8:b9:6a:2f:33:77:ad:ac:52:57:e5: 7d:23:b6:64:aa:84:22:ae:4d:0c:56:75:b2:ee:c3:45:6d:69: d1:8e:01:5a:73:b8:12:13:da:cb:38:c2:ee:94:3c:99:d3:c5: cc:f0:6c:4d:e3:d5:0f:97:f0:30:d8:1b:33:b8:03:7a:e9:cd: 56:6d:96:4c:d5:0f:88:7c:22:87:67:9a:b2:cf:81:93:82:74: c1:c1:35:02:c0:0b:07:31:de:12:c9:1d:83:7c:72:15:4b:a0: b6:6d:c5:e2:f3:77:29:1b:53:d6:b5:0a:1b:f4:64:7b:7c:a2: 9a:a3:e0:9f:87:cd:94:05:5b:d0:27:1d:9d:30:c5:1e:f4:73: 10:d5:3b:9a:d3:37:97:62:f7:5d:bc:a7:15:ae:80:5f:35:8b: 78:76:51:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkSjT7qAPXq5zuUo3eJz0n+bN+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTA1MDcwNDI1MzRaFw0yNTA1MTAwNjA1MzRaMDMxMTAvBgNV BAMTKEUyODUyMTZDODc2QTc0RjIxNzYzQjk5MzM5NDNGMTdDNEM0Q0YxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtODKHeHPvZAj+sQAqpBGbNGnW PI+mjjRM/Ce9eb/TNfgsyZ8srOGRs/mDLHu7VIoi00EU6jImbfo7w1/FUtjm/j6r QuuvvoLvaqfMXw4p3VkLCh/6bSxQ9Vv4E3zXS7K2f/R0obDR2OepWqd/UCRhQB+V q8XZGw7Se0+Iouoz38iCJx1EuY6SJFPzOrsXiUoLOebEk8EHnLz9DuK+RGRULUKV no1m5s3BTI3C5KQ0N++OHNROcHE5pFRksxskwk4up0NXbwAMYCeQvht75r4uJ1ec rOJZiV/WJfoBruZARKoih2yNcZiQLjelbt8wqnDaoOzCFywmg44W0eHENuXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oUhbIdqdPIXY7mTOUPxfExM8VAwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4sa1jsZYvBlayxrb3lwFnHsC5Db/9JcNle f/08+ecNwrzYvLM5d2FAc00T8M1lKxqu3htF/Yj69dFMbBkAd5EduSYfPGS5rFtB 7cFDUXqQLw8y2xntK4GRB6zgpr29LwTouWovM3etrFJX5X0jtmSqhCKuTQxWdbLu w0VtadGOAVpzuBIT2ss4wu6UPJnTxczwbE3j1Q+X8DDYGzO4A3rpzVZtlkzVD4h8 IodnmrLPgZOCdMHBNQLACwcx3hLJHYN8chVLoLZtxeLzdykbU9a1Chv0ZHt8opqj 4J+HzZQFW9AnHZ0wxR70cxDVO5rTN5di9128pxWugF81i3h2Ubg= -----END CERTIFICATE-----Generated at Thu May 8 06:03:25 2025 by rpki-client