$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: 6UgBvKzAb7dXaGGqQhJmSPsb6BiQcLa4FVSpzQQNBZo= Subject key identifier: B0:21:DD:1C:30:19:CB:6A:CB:57:89:E0:F5:D6:D9:71:BA:98:9B:13 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 63F006321829EE03D2269E65B86CBFCDDA1279B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: C9 Signing time: Sat 10 May 2025 19:21:45 +0000 Manifest this update: Sat 10 May 2025 19:16:45 +0000 Manifest next update: Tue 13 May 2025 22:09:45 +0000 Files and hashes: 1: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: Zf9TuYW+c7rmdCabYcCRbLf4dJT0ZHuOi5jDfgS8U0o=) 2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f0:06:32:18:29:ee:03:d2:26:9e:65:b8:6c:bf:cd:da:12:79:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: May 10 19:16:45 2025 GMT Not After : May 13 22:09:45 2025 GMT Subject: CN=B021DD1C3019CB6ACB5789E0F5D6D971BA989B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:6b:c0:a6:e2:d8:a4:a6:22:36:67:77:71: aa:69:53:ce:a0:78:ad:64:f6:c9:15:f0:11:0b:2b: 6e:08:e1:38:dd:ce:65:9c:83:e8:c5:70:2c:8e:89: 34:e2:d8:a7:8f:25:62:31:10:10:36:eb:2a:94:d2: 01:80:7b:3a:aa:8b:cd:02:e7:de:26:ce:ed:2e:13: 6a:03:dd:b2:a6:e5:97:f0:bc:4c:d2:a3:a8:67:cb: 0d:9e:d0:ee:e3:91:ec:f7:67:b2:e8:60:9f:a4:35: 9e:b8:c5:72:84:bb:62:8c:fd:7c:b1:8e:89:33:29: f1:32:8d:be:32:d1:1d:0b:5e:32:93:fe:f5:d8:ec: 23:9e:a6:1d:76:1a:07:d0:67:d6:41:05:96:67:ce: 68:96:be:7f:cf:f2:f1:90:2f:95:9b:b8:df:d8:4c: 81:1c:c0:8b:a6:c2:91:43:5b:dd:21:8e:94:50:a2: 9a:1c:ab:f2:3f:54:22:52:bf:e4:cb:54:6d:5d:2f: 4c:5b:57:e2:c6:57:9a:5a:ea:32:ba:9a:a2:a8:f3: b6:86:c5:28:75:a1:6c:97:d0:d1:fa:d4:99:ea:11: aa:de:c1:fe:84:8f:a2:86:9e:82:82:b5:fd:66:fa: 09:c2:64:54:af:a6:2d:b8:3c:f5:08:ba:d2:92:bd: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:DD:1C:30:19:CB:6A:CB:57:89:E0:F5:D6:D9:71:BA:98:9B:13 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:18:e4:9d:e5:1b:aa:20:b1:17:f4:1a:06:90:01:41:f5:07: f3:e0:35:6e:87:9f:40:51:1d:eb:78:eb:3f:2d:d0:d4:2a:23: c4:5e:43:12:5e:0f:cd:26:56:b2:05:a7:db:37:a2:0f:43:56: 98:8a:c3:8b:a7:45:5d:58:c0:b9:6f:d8:92:6d:b9:f4:ec:d3: 05:53:33:26:33:f2:e7:10:04:be:bb:42:7d:ce:eb:da:ea:a6: a8:7a:30:75:ac:1b:c5:17:4f:3e:dd:7a:f2:08:a0:88:fd:23: 59:ea:59:e1:1b:e8:a7:04:d4:09:92:27:d9:b0:be:21:bb:94: 69:b2:19:be:15:35:99:cd:d8:c0:3b:70:40:37:23:3e:70:a3: ba:50:56:22:08:b4:23:68:8a:09:49:0c:a3:a3:05:2f:c9:f1: 1e:ae:03:bd:0b:58:14:a5:89:90:24:7f:96:27:58:bb:55:1e: 91:42:2f:b8:95:86:14:c6:ae:46:b4:39:69:47:36:14:85:8a: 1d:3b:82:42:eb:93:e1:65:7a:00:4f:9d:c5:00:51:c4:f1:44: c1:4e:77:d7:61:31:a0:f0:85:0d:5e:c6:1d:c8:1c:44:95:bc: 26:85:24:08:89:e1:58:23:04:9f:f2:87:ef:10:1f:52:f9:d6: 50:3a:81:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/AGMhgp7gPSJp5luGy/zdoSebMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA1MTAxOTE2NDVaFw0yNTA1MTMyMjA5NDVaMDMxMTAvBgNV BAMTKEIwMjFERDFDMzAxOUNCNkFDQjU3ODlFMEY1RDZEOTcxQkE5ODlCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoGvApuLYpKYiNmd3cappU86g eK1k9skV8BELK24I4TjdzmWcg+jFcCyOiTTi2KePJWIxEBA26yqU0gGAezqqi80C 594mzu0uE2oD3bKm5ZfwvEzSo6hnyw2e0O7jkez3Z7LoYJ+kNZ64xXKEu2KM/Xyx jokzKfEyjb4y0R0LXjKT/vXY7COeph12GgfQZ9ZBBZZnzmiWvn/P8vGQL5WbuN/Y TIEcwIumwpFDW90hjpRQopocq/I/VCJSv+TLVG1dL0xbV+LGV5pa6jK6mqKo87aG xSh1oWyX0NH61JnqEarewf6Ej6KGnoKCtf1m+gnCZFSvpi24PPUIutKSvXOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCHdHDAZy2rLV4ng9dbZcbqYmxMwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMY5J3lG6ogsRf0GgaQAUH1B/PgNW6Hn0BR Het46z8t0NQqI8ReQxJeD80mVrIFp9s3og9DVpiKw4unRV1YwLlv2JJtufTs0wVT MyYz8ucQBL67Qn3O69rqpqh6MHWsG8UXTz7devIIoIj9I1nqWeEb6KcE1AmSJ9mw viG7lGmyGb4VNZnN2MA7cEA3Iz5wo7pQViIItCNoiglJDKOjBS/J8R6uA70LWBSl iZAkf5YnWLtVHpFCL7iVhhTGrka0OWlHNhSFih07gkLrk+FlegBPncUAUcTxRMFO d9dhMaDwhQ1exh3IHESVvCaFJAiJ4VgjBJ/yh+8QH1L51lA6gSQ= -----END CERTIFICATE-----Generated at Sun May 11 02:24:11 2025 by rpki-client