$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: wO2ijOOh5ixid3gK10sxSx6mkgbmCNDK8R9xmdpD+bs= Subject key identifier: B9:14:11:C3:20:8A:5C:68:DE:31:2D:0D:13:D0:95:EE:38:DE:50:36 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 5CA87C07999EFE1CB9B87CA8227E26B840B38938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 04EB Signing time: Wed 07 May 2025 05:20:39 +0000 Manifest this update: Wed 07 May 2025 05:15:39 +0000 Manifest next update: Sat 10 May 2025 07:08:39 +0000 Files and hashes: 1: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 2: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=) 3: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: 2N6p/wZYxKm076QVid63w7Ynxcdq0PVyz4hgmE+Jxxg=) 4: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: 0aRFrXTSbHUOy2mZwEH0txx1Tk9Q/AHJdIJdOAn4gUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a8:7c:07:99:9e:fe:1c:b9:b8:7c:a8:22:7e:26:b8:40:b3:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: May 7 05:15:39 2025 GMT Not After : May 10 07:08:39 2025 GMT Subject: CN=B91411C3208A5C68DE312D0D13D095EE38DE5036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:82:12:00:b6:aa:15:1a:45:1b:e3:62:c5: 5e:25:25:5c:93:2e:66:46:22:2b:57:b8:46:f7:60: 33:b9:29:df:e6:a4:88:ea:a0:ef:12:41:1b:fc:e5: f7:c3:76:cf:ea:b9:4c:8f:69:cd:04:83:33:12:94: 7c:01:92:a8:1c:dc:7d:73:b7:a7:11:b1:6a:d5:6e: 0f:55:2a:da:d5:a5:32:2f:86:01:ac:8a:3c:43:d1: 33:a2:23:c7:e0:e9:47:02:fa:52:9e:33:4d:df:0e: 01:7b:6b:48:66:69:a4:b0:08:58:df:93:50:de:e6: 28:b9:1c:0c:ba:f7:88:3f:69:47:04:e0:14:51:9a: ff:0a:a3:07:aa:55:e6:cb:e5:b4:a3:0d:9c:75:7f: 27:62:75:01:81:78:1d:8e:3a:3e:1e:b5:d4:3c:0d: 75:c9:e5:b9:62:87:ab:05:c7:5d:26:41:2c:ec:5c: 57:58:58:28:aa:a3:db:0e:6e:55:b2:88:fb:01:d9: 3f:92:ac:7d:77:29:44:37:d6:08:c6:6b:8c:60:14: fe:82:ee:de:af:b9:89:99:f4:51:56:d4:b2:ea:4f: 59:02:9f:56:f8:3d:bf:12:a0:69:8e:25:e2:a3:c8: 67:64:2f:8c:ea:cc:33:fd:75:33:9a:75:45:3c:34: 8b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:11:C3:20:8A:5C:68:DE:31:2D:0D:13:D0:95:EE:38:DE:50:36 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b4:e2:a2:4f:61:87:80:fe:91:9a:99:00:b6:aa:d4:79:65: 98:b7:a0:17:3e:5d:dd:04:0d:9f:e3:3d:b4:a7:2d:72:7e:f8: c0:eb:88:22:5b:9c:f1:27:27:68:af:c6:58:18:cc:fd:17:21: a8:8f:84:a6:ad:29:78:ee:68:bd:5c:c1:22:c4:4b:db:6a:7e: 42:ad:e3:01:e9:3b:e1:0d:0f:93:6c:6b:64:bb:2d:53:7a:03: eb:5a:b0:30:54:f0:14:ed:4a:e1:da:f3:d2:26:80:b7:21:ba: fa:5a:dd:a1:27:55:bd:bb:49:b0:58:2d:b5:35:1f:de:43:55: 6c:6f:08:5b:f6:35:db:62:96:96:1e:a7:68:64:84:bd:ca:42: bd:6a:e6:70:59:6d:34:5f:b2:a0:13:4a:cb:8b:34:fc:ea:71: 28:a3:10:a5:2a:ed:72:38:40:6d:14:d6:5a:9a:36:6d:0c:e4: f1:b3:83:c5:6f:5c:00:ce:7c:f1:46:77:6f:cd:a6:56:e1:25: 01:3a:13:32:b9:7c:e3:11:a6:39:f9:12:88:07:1d:3d:a7:61: d8:81:8a:72:c7:93:a4:4f:46:d2:8f:33:95:07:b2:b5:ae:78: 18:a9:e0:31:fe:60:e8:d6:8e:e5:27:12:2d:b8:7e:00:79:f2: 0c:70:c9:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXKh8B5me/hy5uHyoIn4muECziTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA1MDcwNTE1MzlaFw0yNTA1MTAwNzA4MzlaMDMxMTAvBgNV BAMTKEI5MTQxMUMzMjA4QTVDNjhERTMxMkQwRDEzRDA5NUVFMzhERTUwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHr4ISALaqFRpFG+NixV4lJVyT LmZGIitXuEb3YDO5Kd/mpIjqoO8SQRv85ffDds/quUyPac0EgzMSlHwBkqgc3H1z t6cRsWrVbg9VKtrVpTIvhgGsijxD0TOiI8fg6UcC+lKeM03fDgF7a0hmaaSwCFjf k1De5ii5HAy694g/aUcE4BRRmv8KoweqVebL5bSjDZx1fydidQGBeB2OOj4etdQ8 DXXJ5blih6sFx10mQSzsXFdYWCiqo9sOblWyiPsB2T+SrH13KUQ31gjGa4xgFP6C 7t6vuYmZ9FFW1LLqT1kCn1b4Pb8SoGmOJeKjyGdkL4zqzDP9dTOadUU8NIsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRQRwyCKXGjeMS0NE9CV7jjeUDYwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW04qJPYYeA/pGamQC2qtR5ZZi3oBc+Xd0E DZ/jPbSnLXJ++MDriCJbnPEnJ2ivxlgYzP0XIaiPhKatKXjuaL1cwSLES9tqfkKt 4wHpO+END5Nsa2S7LVN6A+tasDBU8BTtSuHa89ImgLchuvpa3aEnVb27SbBYLbU1 H95DVWxvCFv2NdtilpYep2hkhL3KQr1q5nBZbTRfsqATSsuLNPzqcSijEKUq7XI4 QG0U1lqaNm0M5PGzg8VvXADOfPFGd2/NplbhJQE6EzK5fOMRpjn5EogHHT2nYdiB inLHk6RPRtKPM5UHsrWueBip4DH+YOjWjuUnEi24fgB58gxwyag= -----END CERTIFICATE-----Generated at Thu May 8 20:33:05 2025 by rpki-client