$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: UIFuYeuMHzPYAtxNVszP5S3LcRVO7BFHxLZx0LZEn8Y= Subject key identifier: 12:89:D3:17:6D:03:3C:C7:15:0B:C6:3E:2E:A3:A2:D4:A4:F8:BC:D3 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 5A5C9366ED70EA693A8E3EAFC357E9D22B0A5C9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 016B Signing time: Wed 07 May 2025 21:11:15 +0000 Manifest this update: Wed 07 May 2025 21:06:15 +0000 Manifest next update: Sun 11 May 2025 08:14:15 +0000 Files and hashes: 1: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: jFUY1Y8pdxw6vf/SxAqlilkH3Nl5GqoirGwj0jaTOfM=) 2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5c:93:66:ed:70:ea:69:3a:8e:3e:af:c3:57:e9:d2:2b:0a:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: May 7 21:06:15 2025 GMT Not After : May 11 08:14:15 2025 GMT Subject: CN=1289D3176D033CC7150BC63E2EA3A2D4A4F8BCD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:1c:fd:40:86:2c:9b:47:53:ff:b7:f4:ea: 97:16:11:2d:12:64:5a:2b:1b:64:de:99:71:47:8a: a6:a8:18:86:bc:f7:49:3b:66:a1:22:a5:8d:98:a8: f0:8f:e0:52:5b:ce:a6:3a:17:e9:de:30:d6:e7:cc: 21:73:52:53:bf:c7:a3:cc:11:80:56:a4:a7:bf:fe: 43:e5:ba:80:00:b8:80:bc:3f:4e:bc:a4:85:96:9a: 97:b7:1c:0e:b6:15:cf:fb:90:67:33:d7:08:d4:6e: e3:e1:d1:04:d8:98:90:d5:67:86:60:bb:b4:07:5d: 5b:fd:23:78:bc:7a:c2:ac:83:9d:fd:a8:ce:fd:64: c5:af:e4:99:4d:64:bd:c4:64:57:3a:74:31:8a:07: 22:f8:ca:2e:a1:e2:3d:09:67:85:b2:b5:27:c8:26: 90:f3:99:22:e8:a4:0e:1b:b6:f3:08:4d:59:65:52: 61:74:86:48:79:e2:b5:fc:45:9e:c5:83:4f:b8:21: 59:ff:77:60:5d:8f:de:cc:cb:0b:94:e0:75:1b:ae: 25:6f:4a:f7:9d:3d:c6:c3:85:a1:65:ab:4d:8d:19: cf:b7:34:4b:db:f7:f4:39:0e:fc:01:5f:ed:ac:75: 8c:e0:71:d0:e8:1a:2c:b5:1e:74:73:96:24:e0:a0: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:D3:17:6D:03:3C:C7:15:0B:C6:3E:2E:A3:A2:D4:A4:F8:BC:D3 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:77:b3:7a:5a:fa:08:5d:9a:db:bf:3c:f3:0a:de:4c:d6:00: 31:98:1b:12:1a:6d:3f:88:4b:68:3d:28:53:26:a8:fd:6b:aa: e9:62:08:5c:aa:25:dd:d8:5f:28:fd:8f:9a:3e:e3:52:d4:d1: e0:3a:d5:88:82:15:76:d6:c1:4a:a9:63:9a:74:2f:f9:1a:bc: 39:3c:69:c1:a7:ed:b0:5f:0d:91:24:3c:b0:70:13:b3:b7:f9: 30:d8:c6:4d:5c:a1:e9:1b:fa:79:29:88:68:28:de:6a:ee:ba: 26:29:25:94:b4:77:8e:f8:87:73:e4:11:25:63:1b:17:51:ac: 12:31:34:e0:cc:d6:f9:0a:30:a4:cf:db:68:8e:4d:bf:70:4b: e0:83:67:bd:7f:1d:46:74:e4:6a:7f:30:20:5e:0e:eb:e2:25: c3:36:2f:44:2a:07:4e:9f:b0:be:49:10:0b:0a:79:c0:92:90: 5f:17:66:5e:52:43:d3:b2:ce:54:96:7e:22:a4:62:d0:18:05: 54:97:20:dd:fe:98:ef:75:de:fb:06:ab:5a:a8:4e:ad:5f:a4: 80:54:bd:23:70:c9:c4:e0:ef:31:f8:ea:35:59:f3:02:ba:fb: 57:62:9b:50:c1:37:d8:16:74:55:fc:62:80:86:2f:35:a8:1c: 47:1a:bf:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlyTZu1w6mk6jj6vw1fp0isKXJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA1MDcyMTA2MTVaFw0yNTA1MTEwODE0MTVaMDMxMTAvBgNV BAMTKDEyODlEMzE3NkQwMzNDQzcxNTBCQzYzRTJFQTNBMkQ0QTRGOEJDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVhz9QIYsm0dT/7f06pcWES0S ZForG2TemXFHiqaoGIa890k7ZqEipY2YqPCP4FJbzqY6F+neMNbnzCFzUlO/x6PM EYBWpKe//kPluoAAuIC8P068pIWWmpe3HA62Fc/7kGcz1wjUbuPh0QTYmJDVZ4Zg u7QHXVv9I3i8esKsg539qM79ZMWv5JlNZL3EZFc6dDGKByL4yi6h4j0JZ4WytSfI JpDzmSLopA4btvMITVllUmF0hkh54rX8RZ7Fg0+4IVn/d2Bdj97MywuU4HUbriVv SvedPcbDhaFlq02NGc+3NEvb9/Q5DvwBX+2sdYzgcdDoGiy1HnRzliTgoCHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEonTF20DPMcVC8Y+LqOi1KT4vNMwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh3s3pa+ghdmtu/PPMK3kzWADGYGxIabT+I S2g9KFMmqP1rquliCFyqJd3YXyj9j5o+41LU0eA61YiCFXbWwUqpY5p0L/kavDk8 acGn7bBfDZEkPLBwE7O3+TDYxk1coekb+nkpiGgo3mruuiYpJZS0d474h3PkESVj GxdRrBIxNODM1vkKMKTP22iOTb9wS+CDZ71/HUZ05Gp/MCBeDuviJcM2L0QqB06f sL5JEAsKecCSkF8XZl5SQ9OyzlSWfiKkYtAYBVSXIN3+mO913vsGq1qoTq1fpIBU vSNwycTg7zH46jVZ8wK6+1dim1DBN9gWdFX8YoCGLzWoHEcavzU= -----END CERTIFICATE-----Generated at Sat May 10 08:20:59 2025 by rpki-client