$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: aXuxmQlccPpa5fh1mux3C+NOfsOizUAQ1U5P3LEDoSU= Subject key identifier: 08:00:5C:E9:00:6F:EF:A4:4C:73:C2:01:B0:9E:D2:BE:13:FB:D4:BE Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 0FE0F3DE61995445790147D15BDA09153CE55773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 0258 Signing time: Fri 09 May 2025 12:01:04 +0000 Manifest this update: Fri 09 May 2025 11:56:04 +0000 Manifest next update: Mon 12 May 2025 22:42:04 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) 2: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) 3: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: M+dLtoy3SQ55kGy3CxiG9haEc+AsAtvPSv4G8NJY9PA=) 4: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) 5: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) 6: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 7: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e0:f3:de:61:99:54:45:79:01:47:d1:5b:da:09:15:3c:e5:57:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: May 9 11:56:04 2025 GMT Not After : May 12 22:42:04 2025 GMT Subject: CN=08005CE9006FEFA44C73C201B09ED2BE13FBD4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:10:09:47:0a:84:6a:4c:4f:e0:3c:36:b4: 39:69:f8:28:e1:09:30:7d:3e:7d:9d:ec:1c:72:84: a4:16:20:e2:2d:8a:c8:31:7f:67:42:e6:d0:05:f4: ce:51:b5:33:dd:fd:8b:36:8c:b5:58:ee:ac:1e:15: 3c:50:ae:61:20:18:ed:fc:5f:c4:46:c2:36:cf:a4: 79:14:04:98:4d:c6:71:55:a0:81:98:95:a8:4f:66: 45:e2:61:77:71:3f:e6:c3:e8:60:ea:8a:30:96:00: 40:56:21:94:28:d5:b3:00:a6:f8:08:77:ae:39:74: a4:8f:bc:6a:40:90:e9:17:c9:40:e2:a6:12:c3:63: c2:7e:a1:ae:44:46:5d:d5:8c:37:05:41:c6:b5:b9: ef:f8:f7:83:1a:bd:df:0b:f1:7e:ea:4f:f9:92:9c: 8a:41:c2:00:0c:c5:07:36:cc:c6:4f:a3:2a:01:61: af:80:30:b4:b8:fd:e9:52:d8:c6:3c:33:4d:21:6e: 01:db:74:7a:81:40:22:bb:82:a5:1c:cc:26:9e:96: 15:85:45:41:ed:50:bc:6a:16:fb:b8:8f:c9:b8:88: b3:49:4b:38:69:d8:e7:82:1b:c8:47:94:61:f8:7b: 4f:dc:9b:66:ce:97:76:84:8d:ee:18:97:50:8c:b5: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:00:5C:E9:00:6F:EF:A4:4C:73:C2:01:B0:9E:D2:BE:13:FB:D4:BE X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5b:e6:17:be:f6:b2:31:66:4e:37:ef:68:24:f7:09:79:1a: b2:5e:b6:f4:b7:72:07:bc:12:f8:cf:bb:96:02:57:7a:bb:ae: d7:7d:ef:2f:af:53:eb:c2:f7:43:aa:29:41:2e:9c:be:a8:01: 1d:07:a7:cd:8e:49:2f:5b:a5:e8:ca:38:5e:9d:a0:3a:04:e5: a2:9c:8c:42:55:66:f5:aa:ee:71:7e:a8:72:c9:31:35:e3:e2: b7:29:d4:3b:a4:b2:0e:ca:2c:4f:09:81:f3:c5:9c:4a:c6:f8: 98:a3:a7:9a:07:34:8b:f0:3c:38:2c:b1:06:3d:4b:f8:c8:0b: ad:f8:a1:de:83:a6:01:13:bc:e9:69:46:56:0a:30:04:b7:2b: 69:d1:45:8d:94:72:f6:12:b4:81:a6:06:c6:e4:cb:9b:53:d5: e6:6a:53:72:75:a7:29:d0:3e:a7:50:4f:ed:d9:48:e5:e8:b5: 03:96:54:c9:14:b3:25:62:91:ea:4d:9c:bd:e9:e7:a6:a0:37: d2:c8:42:db:6e:d2:c9:81:95:f2:1c:d5:df:59:cc:d3:b4:f2: a5:45:31:35:34:c1:78:c8:78:eb:85:67:fe:a1:c6:b4:33:a7: 65:32:f6:48:6d:f6:74:f4:4a:d8:28:69:11:d1:4d:50:8a:7d: d0:83:5c:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+Dz3mGZVEV5AUfRW9oJFTzlV3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA1MDkxMTU2MDRaFw0yNTA1MTIyMjQyMDRaMDMxMTAvBgNV BAMTKDA4MDA1Q0U5MDA2RkVGQTQ0QzczQzIwMUIwOUVEMkJFMTNGQkQ0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6RAJRwqEakxP4Dw2tDlp+Cjh CTB9Pn2d7BxyhKQWIOItisgxf2dC5tAF9M5RtTPd/Ys2jLVY7qweFTxQrmEgGO38 X8RGwjbPpHkUBJhNxnFVoIGYlahPZkXiYXdxP+bD6GDqijCWAEBWIZQo1bMApvgI d645dKSPvGpAkOkXyUDiphLDY8J+oa5ERl3VjDcFQca1ue/494Mavd8L8X7qT/mS nIpBwgAMxQc2zMZPoyoBYa+AMLS4/elS2MY8M00hbgHbdHqBQCK7gqUczCaelhWF RUHtULxqFvu4j8m4iLNJSzhp2OeCG8hHlGH4e0/cm2bOl3aEje4Yl1CMtTh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCABc6QBv76RMc8IBsJ7SvhP71L4wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINb5he+9rIxZk4372gk9wl5GrJetvS3cge8 EvjPu5YCV3q7rtd97y+vU+vC90OqKUEunL6oAR0Hp82OSS9bpejKOF6doDoE5aKc jEJVZvWq7nF+qHLJMTXj4rcp1Duksg7KLE8JgfPFnErG+Jijp5oHNIvwPDgssQY9 S/jIC634od6DpgETvOlpRlYKMAS3K2nRRY2UcvYStIGmBsbky5tT1eZqU3J1pynQ PqdQT+3ZSOXotQOWVMkUsyVikepNnL3p56agN9LIQttu0smBlfIc1d9ZzNO08qVF MTU0wXjIeOuFZ/6hxrQzp2Uy9kht9nT0StgoaRHRTVCKfdCDXKE= -----END CERTIFICATE-----Generated at Sat May 10 14:57:29 2025 by rpki-client