$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: NiqWRRv1BQAQdVDBOum+KkAnZeBIOWiqyMSCpNIswFM= Subject key identifier: ED:EB:B1:79:E9:AA:BF:84:8A:A9:9C:BB:09:1D:05:E4:98:26:13:19 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 2AF4679E96BCE6157B1CEB24825F91A093EABE16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 6B Signing time: Sat 10 May 2025 12:31:24 +0000 Manifest this update: Sat 10 May 2025 12:26:24 +0000 Manifest next update: Tue 13 May 2025 20:36:24 +0000 Files and hashes: 1: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 2: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) 3: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 4: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 5: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: loaEeyrKhiEfWssbCN3NPPi1u3iLUq8gTWMvOo4q92c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f4:67:9e:96:bc:e6:15:7b:1c:eb:24:82:5f:91:a0:93:ea:be:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: May 10 12:26:24 2025 GMT Not After : May 13 20:36:24 2025 GMT Subject: CN=EDEBB179E9AABF848AA99CBB091D05E498261319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:e1:d0:6c:3f:67:a6:43:85:e4:a2:6b:b1: 5e:ff:f0:4e:98:1b:bf:ff:31:31:c4:47:75:3a:8d: eb:28:f8:e3:f8:43:4b:ae:e4:c4:2d:1a:f3:c7:5e: 52:6b:11:9b:7c:b7:c8:32:53:c2:1c:f4:e9:f0:57: 4a:71:c3:25:26:47:50:f6:88:ff:24:3a:b9:6c:9e: a9:5b:7c:dd:6e:f6:34:7b:cb:3e:33:93:cb:5b:f1: 1b:9b:57:5a:b3:c8:a1:ed:86:95:06:b4:14:59:dc: e0:d8:d3:73:66:b8:13:78:82:a6:45:46:e2:83:c4: 41:ff:de:64:c1:f5:c8:ac:6b:21:ab:77:0d:63:1b: 85:6e:c4:c3:6c:9f:7d:8e:a8:25:ab:c2:a7:03:c8: b1:7d:ec:96:be:b3:e9:1b:ce:ee:d3:ec:58:cf:ce: a4:33:c4:20:dc:6c:77:d7:dd:da:78:64:68:04:b1: e5:d1:20:b5:60:82:8a:9a:21:f9:4a:6c:10:3e:c5: 9b:8b:ec:f3:1c:56:8b:42:ee:6a:ec:2c:cf:10:00: 73:c8:eb:69:24:97:ad:f1:ca:40:36:78:ce:39:42: 3d:9e:91:45:a9:e2:8c:49:7d:26:34:c1:d9:e7:18: ff:0d:91:f1:67:70:1e:4a:ca:f7:5f:2e:63:09:da: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:B1:79:E9:AA:BF:84:8A:A9:9C:BB:09:1D:05:E4:98:26:13:19 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:69:25:20:e8:6c:31:60:b1:01:41:63:fc:78:45:6d:33:86: 56:63:72:f2:a1:6d:bc:db:ff:d5:b1:26:2e:54:b6:95:56:57: a1:87:ff:35:be:78:13:34:93:af:07:0f:89:6a:41:2a:7e:96: 61:02:22:ed:b2:a3:af:ac:6e:d3:b2:1f:8d:fe:25:41:9d:51: 48:d2:51:17:ac:c1:11:a5:9c:76:93:16:de:9b:18:c5:e0:78: 70:0d:73:a1:8a:65:45:de:d8:b1:54:d1:bc:82:be:7f:6f:69: f0:f3:06:2e:ac:af:39:f6:bc:ba:27:9f:dc:de:71:36:14:bc: 4b:30:52:18:3f:84:3c:99:34:7a:e4:cc:06:ec:74:1b:d0:a1: 3a:35:f4:b0:0f:f8:a9:6e:84:27:72:15:02:79:15:b3:07:96: 8d:97:63:37:17:6f:63:99:c4:af:a1:31:6f:d5:7e:c9:91:1d: 0f:af:da:b6:14:43:79:76:6a:13:08:89:1d:83:26:22:b5:c4: 71:c7:91:ef:51:8e:ea:28:55:94:43:0e:75:ed:4f:67:eb:f5: c5:31:62:52:e8:8b:73:4a:22:6f:03:24:82:d9:de:86:0c:e0: 20:6d:6f:22:2b:fb:ad:0a:02:59:ec:f6:7c:bf:0f:1b:ef:40: 0c:51:41:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvRnnpa85hV7HOskgl+RoJPqvhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA1MTAxMjI2MjRaFw0yNTA1MTMyMDM2MjRaMDMxMTAvBgNV BAMTKEVERUJCMTc5RTlBQUJGODQ4QUE5OUNCQjA5MUQwNUU0OTgyNjEzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaOHQbD9npkOF5KJrsV7/8E6Y G7//MTHER3U6jeso+OP4Q0uu5MQtGvPHXlJrEZt8t8gyU8Ic9OnwV0pxwyUmR1D2 iP8kOrlsnqlbfN1u9jR7yz4zk8tb8RubV1qzyKHthpUGtBRZ3ODY03NmuBN4gqZF RuKDxEH/3mTB9cisayGrdw1jG4VuxMNsn32OqCWrwqcDyLF97Ja+s+kbzu7T7FjP zqQzxCDcbHfX3dp4ZGgEseXRILVggoqaIflKbBA+xZuL7PMcVotC7mrsLM8QAHPI 62kkl63xykA2eM45Qj2ekUWp4oxJfSY0wdnnGP8NkfFncB5KyvdfLmMJ2hEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7euxeemqv4SKqZy7CR0F5JgmExkwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNpJSDobDFgsQFBY/x4RW0zhlZjcvKhbbzb /9WxJi5UtpVWV6GH/zW+eBM0k68HD4lqQSp+lmECIu2yo6+sbtOyH43+JUGdUUjS UReswRGlnHaTFt6bGMXgeHANc6GKZUXe2LFU0byCvn9vafDzBi6srzn2vLonn9ze cTYUvEswUhg/hDyZNHrkzAbsdBvQoTo19LAP+KluhCdyFQJ5FbMHlo2XYzcXb2OZ xK+hMW/VfsmRHQ+v2rYUQ3l2ahMIiR2DJiK1xHHHke9RjuooVZRDDnXtT2fr9cUx YlLoi3NKIm8DJILZ3oYM4CBtbyIr+60KAlns9ny/DxvvQAxRQWo= -----END CERTIFICATE-----Generated at Sun May 11 12:43:25 2025 by rpki-client