$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: 13K7CoAR1zsh+4MamDCoH2hqz5ViSuEPy0f/WhHEjTM= Subject key identifier: 2D:80:05:D4:42:1D:BA:53:12:C3:41:39:68:D5:49:9F:07:6C:6D:75 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 603DE883A3F9072F2A8440AE56FB249C2C35C6FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 04CE Signing time: Fri 09 May 2025 00:11:05 +0000 Manifest this update: Fri 09 May 2025 00:06:05 +0000 Manifest next update: Mon 12 May 2025 09:48:05 +0000 Files and hashes: 1: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: c35A7ZLT43I33FjeQsTZWY3/FOPpr3aST8HTksybM6s=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=) 3: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: YpXfCL82On8UTAObXpsp+TSzduNgz0G+wsNlyOIz0pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3d:e8:83:a3:f9:07:2f:2a:84:40:ae:56:fb:24:9c:2c:35:c6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: May 9 00:06:05 2025 GMT Not After : May 12 09:48:05 2025 GMT Subject: CN=2D8005D4421DBA5312C3413968D5499F076C6D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:bd:cf:e3:15:93:68:95:5b:46:da:30:5d: 06:be:d3:a1:e3:8d:ea:52:94:c3:84:d6:a9:16:40: 7c:93:de:af:3d:f8:34:4b:71:b7:51:40:c7:14:b0: e4:86:fa:8a:3e:ef:ee:2c:7b:2d:90:99:b5:cd:b0: b7:74:ff:2f:ad:9f:40:d5:f0:33:d8:34:36:c0:2a: 3d:92:68:aa:aa:f5:8b:94:4a:6b:15:b4:ba:0b:be: 5e:5e:68:a7:c5:d4:05:46:eb:25:2e:8c:aa:39:56: e0:a9:9a:80:11:0a:7f:e8:79:35:54:cf:ce:6c:d6: e8:74:35:ab:f2:24:43:22:ca:f4:e5:0c:59:78:67: d7:b2:71:75:c6:18:1e:03:a2:ba:ce:4d:df:01:7c: 84:45:d6:40:c8:a2:ff:b0:3a:35:3a:84:cb:23:92: fa:fd:ca:ff:f2:a2:e3:4d:e3:74:89:6e:ba:71:5e: 37:e5:f3:13:bd:35:80:2b:9a:63:df:cc:c7:25:c1: fb:b9:d9:21:85:9e:29:eb:f0:f8:68:6f:6e:37:89: 4a:98:e9:58:bc:4b:af:f3:9b:1b:a4:e0:7c:a9:75: 57:55:55:5e:fd:f8:00:a1:8b:68:ce:95:31:90:97: 96:ab:3e:bb:1d:1e:a8:b6:82:b3:a0:ee:4e:e4:71: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:05:D4:42:1D:BA:53:12:C3:41:39:68:D5:49:9F:07:6C:6D:75 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fc:e2:08:21:71:f7:e5:ae:b5:76:0e:e1:17:5e:34:d2:de: f4:b9:66:be:a0:54:fc:81:98:45:d1:65:b1:ec:50:81:9a:d5: 15:d4:82:30:cc:90:d4:8f:78:09:b1:98:c6:6a:cc:ce:2b:c6: 41:d3:1d:40:8f:fd:67:a6:be:72:d4:4c:9a:6a:20:3a:87:e8: 76:8b:c0:c7:d4:dc:37:6d:19:42:eb:d2:69:11:a2:51:4f:8a: c8:e1:e9:d3:f1:87:3d:73:20:91:90:c6:90:76:cb:56:50:c8: 69:80:4b:da:d2:41:b9:2e:34:48:ab:b6:2d:fd:96:df:0e:09: 8d:5f:ea:51:b7:f0:52:cf:b4:09:84:67:61:02:13:e1:eb:3d: 1a:d5:9c:61:ad:99:5a:41:21:56:54:8b:40:a8:a0:b6:5b:b4: b9:ee:6f:38:1b:f1:43:d0:68:c5:4b:27:66:84:35:6e:cc:29: f0:52:fc:e4:6b:59:96:8c:fb:d3:7e:ea:45:85:20:c6:79:fc: 5f:30:a5:84:7d:98:26:db:04:b8:a8:01:67:bd:a0:35:85:2d: 42:82:4c:7e:02:15:09:c9:13:00:73:95:dc:e8:63:6b:95:87: a8:42:e3:d8:be:d2:12:17:af:1c:9a:70:8d:b0:72:1e:bd:f9: 0c:4c:89:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYD3og6P5By8qhECuVvsknCw1xv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTA1MDkwMDA2MDVaFw0yNTA1MTIwOTQ4MDVaMDMxMTAvBgNV BAMTKDJEODAwNUQ0NDIxREJBNTMxMkMzNDEzOTY4RDU0OTlGMDc2QzZENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8L3P4xWTaJVbRtowXQa+06Hj jepSlMOE1qkWQHyT3q89+DRLcbdRQMcUsOSG+oo+7+4sey2QmbXNsLd0/y+tn0DV 8DPYNDbAKj2SaKqq9YuUSmsVtLoLvl5eaKfF1AVG6yUujKo5VuCpmoARCn/oeTVU z85s1uh0NavyJEMiyvTlDFl4Z9eycXXGGB4DorrOTd8BfIRF1kDIov+wOjU6hMsj kvr9yv/youNN43SJbrpxXjfl8xO9NYArmmPfzMclwfu52SGFninr8Phob243iUqY 6Vi8S6/zmxuk4HypdVdVVV79+AChi2jOlTGQl5arPrsdHqi2grOg7k7kcQKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYAF1EIdulMSw0E5aNVJnwdsbXUwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv84gghcfflrrV2DuEXXjTS3vS5Zr6gVPyB mEXRZbHsUIGa1RXUgjDMkNSPeAmxmMZqzM4rxkHTHUCP/WemvnLUTJpqIDqH6HaL wMfU3DdtGULr0mkRolFPisjh6dPxhz1zIJGQxpB2y1ZQyGmAS9rSQbkuNEirti39 lt8OCY1f6lG38FLPtAmEZ2ECE+HrPRrVnGGtmVpBIVZUi0CooLZbtLnubzgb8UPQ aMVLJ2aENW7MKfBS/ORrWZaM+9N+6kWFIMZ5/F8wpYR9mCbbBLioAWe9oDWFLUKC TH4CFQnJEwBzldzoY2uVh6hC49i+0hIXrxyacI2wch69+QxMiVg= -----END CERTIFICATE-----Generated at Sat May 10 08:21:04 2025 by rpki-client