$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: uiU0nRXJWuELt+yTcqAapPryNgVpH1SjCvXg20jY01w= Subject key identifier: 41:78:DD:9E:AF:97:0A:76:F9:A8:2C:33:A3:51:89:CD:62:EF:CF:4D Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 747F6EEA54E72DDE4F6F85393E4746CE474957AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 04CC Signing time: Thu 08 May 2025 02:11:22 +0000 Manifest this update: Thu 08 May 2025 02:06:22 +0000 Manifest next update: Sun 11 May 2025 03:28:22 +0000 Files and hashes: 1: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: dvULEqhoA17mvmbEhTbWzJ8r/xF0W2Vgy0H0TBErNcI=) 2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: 5kZBs0MwlAvgbpTo5lvEhRFoXXn8T8wVA4QFQGUwhPo=) 3: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: lb+K+WTWt6br4aXEPHp1eJt2rMKTqZMuVAejfy0YULU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7f:6e:ea:54:e7:2d:de:4f:6f:85:39:3e:47:46:ce:47:49:57:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: May 8 02:06:22 2025 GMT Not After : May 11 03:28:22 2025 GMT Subject: CN=4178DD9EAF970A76F9A82C33A35189CD62EFCF4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:cd:05:1b:8b:3a:5c:f1:62:15:7f:77:4c: b0:5a:b1:7a:9f:85:be:83:d1:27:d5:4e:f2:32:75: 5b:d6:ea:f3:6e:ae:09:c5:b3:87:33:ee:35:e5:78: de:2e:d2:02:f0:d7:05:6f:4f:67:3f:b6:d6:ee:71: f8:93:66:9b:07:38:7a:f9:db:d5:22:c1:93:80:99: 16:10:17:df:77:01:0b:d8:4a:d8:09:0d:b3:9c:ea: 78:96:da:07:b2:f5:57:3a:17:0b:2f:a1:df:d2:a6: ec:87:f7:d7:ab:41:c8:06:74:55:d0:a0:a2:1b:36: 41:cf:ef:a7:bc:93:9a:a7:16:36:7f:9c:bf:e4:4c: 34:b3:5c:0a:c7:ad:ee:75:d1:f3:08:8a:35:25:61: 4c:c9:1e:22:e8:5f:cb:c9:cf:dc:ad:fd:0e:14:31: 27:ed:ef:21:25:94:a2:46:53:bc:ab:8f:5a:c3:48: d4:18:d0:ba:2e:c4:2a:fb:94:db:c6:12:02:a6:fc: fe:f6:3f:f3:9e:ec:03:0f:db:13:01:bf:a6:20:f7: eb:45:4f:05:c5:05:6f:7f:3f:5d:ca:46:1b:bc:12: 6b:94:ec:3f:43:2e:03:97:aa:d8:b6:aa:08:65:28: 88:75:ae:39:40:bc:a3:e9:ea:1a:3a:d3:ac:0c:d0: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:DD:9E:AF:97:0A:76:F9:A8:2C:33:A3:51:89:CD:62:EF:CF:4D X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:07:61:f5:b3:77:50:ab:ab:b2:24:75:32:d5:dc:67:90:ff: 1c:20:38:7e:22:c4:4e:05:1f:af:27:cb:aa:8d:2a:ce:21:de: a5:db:74:d0:dc:5e:0f:7d:6e:27:41:70:cf:2a:29:48:2d:f7: ca:8c:51:9d:47:55:e2:c5:f1:9a:b2:b6:a0:8d:16:fd:ad:b0: bc:b8:16:b4:d1:be:31:9b:7f:d9:ac:08:a7:05:b9:9e:73:ef: cf:a4:dd:dd:6d:3c:7c:8b:9e:a4:e9:8c:19:6b:a1:cb:3a:20: c7:28:4b:7b:93:10:89:97:03:b9:a9:d1:7a:c3:68:8a:e2:7c: 8a:85:45:79:72:ad:5d:af:ff:34:66:fe:2f:e1:cc:64:56:90: d5:6e:b5:6a:2b:d0:6c:0b:81:3a:b3:f2:aa:79:6a:17:bb:db: 4c:b0:38:4e:26:94:db:e8:c6:51:fc:08:2e:11:7d:c2:69:b8: 88:0b:84:80:cb:58:d5:fb:d9:45:7e:34:c8:f6:9c:28:77:06: 4a:cc:1c:65:e4:5e:e3:09:a7:35:69:7c:fe:5d:31:87:32:69: 21:5e:94:47:dc:32:ee:8d:75:db:a5:aa:96:70:1c:4d:0d:91: 8a:86:d0:4f:94:c1:e4:6f:36:6c:49:e9:fb:4c:e2:d2:76:00: 50:d1:04:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdH9u6lTnLd5Pb4U5PkdGzkdJV60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTA1MDgwMjA2MjJaFw0yNTA1MTEwMzI4MjJaMDMxMTAvBgNV BAMTKDQxNzhERDlFQUY5NzBBNzZGOUE4MkMzM0EzNTE4OUNENjJFRkNGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcM0FG4s6XPFiFX93TLBasXqf hb6D0SfVTvIydVvW6vNurgnFs4cz7jXleN4u0gLw1wVvT2c/ttbucfiTZpsHOHr5 29UiwZOAmRYQF993AQvYStgJDbOc6niW2gey9Vc6Fwsvod/SpuyH99erQcgGdFXQ oKIbNkHP76e8k5qnFjZ/nL/kTDSzXArHre510fMIijUlYUzJHiLoX8vJz9yt/Q4U MSft7yEllKJGU7yrj1rDSNQY0LouxCr7lNvGEgKm/P72P/Oe7AMP2xMBv6Yg9+tF TwXFBW9/P13KRhu8EmuU7D9DLgOXqti2qghlKIh1rjlAvKPp6ho606wM0EnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQXjdnq+XCnb5qCwzo1GJzWLvz00wHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMHYfWzd1Crq7IkdTLV3GeQ/xwgOH4ixE4F H68ny6qNKs4h3qXbdNDcXg99bidBcM8qKUgt98qMUZ1HVeLF8ZqytqCNFv2tsLy4 FrTRvjGbf9msCKcFuZ5z78+k3d1tPHyLnqTpjBlrocs6IMcoS3uTEImXA7mp0XrD aIrifIqFRXlyrV2v/zRm/i/hzGRWkNVutWor0GwLgTqz8qp5ahe720ywOE4mlNvo xlH8CC4RfcJpuIgLhIDLWNX72UV+NMj2nCh3BkrMHGXkXuMJpzVpfP5dMYcyaSFe lEfcMu6NddulqpZwHE0NkYqG0E+UweRvNmxJ6ftM4tJ2AFDRBP8= -----END CERTIFICATE-----Generated at Thu May 8 10:25:15 2025 by rpki-client