$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: gyNuvx7LRiBqzomIl8r7AfI1HOZPtYLZl7v2KbU8wMs= Subject key identifier: 1E:73:42:27:A4:9C:03:2E:8E:B8:14:4F:0D:01:3A:89:BA:C5:D4:54 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 13ABE67776E2674E0B192AD138CCD2B637453FAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 73 Signing time: Fri 09 May 2025 13:22:05 +0000 Manifest this update: Fri 09 May 2025 13:17:05 +0000 Manifest next update: Mon 12 May 2025 23:42:05 +0000 Files and hashes: 1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) 2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: xl6VDbIIjcIRH3lVrP0TAN9wZjElkT9z3sypCfQXgSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ab:e6:77:76:e2:67:4e:0b:19:2a:d1:38:cc:d2:b6:37:45:3f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: May 9 13:17:05 2025 GMT Not After : May 12 23:42:05 2025 GMT Subject: CN=1E734227A49C032E8EB8144F0D013A89BAC5D454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:1f:95:37:03:ee:48:0d:4b:52:82:8d:02: 44:f7:9f:1a:ea:d0:30:a0:9f:bb:5b:e5:85:93:3a: 11:c2:08:8f:4b:8c:c7:af:c5:5a:d7:96:21:08:76: 04:5c:53:6d:80:c3:1d:e1:01:88:7d:b5:a5:c6:27: 1d:e7:93:43:e1:a3:01:77:95:ee:45:c2:0a:c7:f6: 1f:df:e2:1e:85:f6:a4:48:e4:5c:26:aa:6c:1f:2d: 40:b0:ee:43:0a:9e:37:2d:36:49:c1:91:51:73:59: 29:39:14:dc:ac:04:0f:45:3a:3f:8b:fa:8f:b0:54: c4:5a:ef:5e:5d:82:c2:75:e4:4d:2c:9c:e8:33:59: f4:da:27:96:2e:46:1e:23:28:ce:aa:13:9b:1c:4d: 05:a1:14:70:52:2b:80:8a:c5:dc:42:f1:b3:2c:2a: 46:62:9b:66:70:11:a6:cf:9f:8f:e3:f4:b6:76:73: 95:df:73:00:6c:4f:e3:0b:05:4e:6d:1b:ab:2b:c1: d0:6a:86:76:16:36:bb:97:7d:2e:97:58:d7:a6:f9: 16:12:ef:f3:6e:f3:c4:9b:52:a8:3a:03:f0:b6:58: e3:2a:9a:5d:69:94:fb:74:af:97:78:02:56:4a:49: 9f:32:29:fc:d3:77:e3:d2:62:b7:3e:ea:47:74:f1: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:42:27:A4:9C:03:2E:8E:B8:14:4F:0D:01:3A:89:BA:C5:D4:54 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:7e:6a:bf:1e:ab:5f:d2:77:87:78:59:38:dc:5c:03:85: 89:b5:05:57:68:44:19:90:24:8a:be:63:7b:e2:7a:6f:9f:a7: 22:bf:49:8f:14:9d:46:28:82:12:08:9d:39:2c:43:32:46:32: 19:c7:86:51:85:4c:29:83:71:5f:92:13:49:a5:ca:58:ea:0a: 4a:cc:6d:17:a5:68:cf:b3:87:a5:63:f2:b9:44:89:dc:ef:68: ec:04:b9:ff:fe:ff:f0:fc:6c:f4:1a:51:81:f9:9f:32:aa:30: 67:dc:73:76:8f:16:99:54:2b:d0:35:78:22:2a:ed:a5:98:9f: ca:a3:68:65:86:4a:b5:f7:cf:1d:1e:c3:85:84:b1:7f:45:a0: d9:a7:ec:93:d2:db:18:1e:5c:32:30:16:92:55:8b:74:52:7f: 4b:d0:ef:41:a2:da:4f:09:60:84:1f:cf:0c:b1:41:af:05:28: da:be:78:e7:50:39:5a:21:f7:4b:7e:d5:25:a1:c5:8d:51:ad: 01:02:15:be:bd:95:5e:43:a3:1c:27:5b:45:79:58:89:dc:fc: d0:51:b9:ea:c5:a2:50:9e:94:73:68:ae:2e:15:f2:42:93:95: 1b:2a:d5:3b:2b:47:53:f5:8d:a3:07:be:c9:14:3c:89:85:1c: 64:84:d4:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6vmd3biZ04LGSrROMzStjdFP6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA1MDkxMzE3MDVaFw0yNTA1MTIyMzQyMDVaMDMxMTAvBgNV BAMTKDFFNzM0MjI3QTQ5QzAzMkU4RUI4MTQ0RjBEMDEzQTg5QkFDNUQ0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTh+VNwPuSA1LUoKNAkT3nxrq 0DCgn7tb5YWTOhHCCI9LjMevxVrXliEIdgRcU22Awx3hAYh9taXGJx3nk0PhowF3 le5FwgrH9h/f4h6F9qRI5FwmqmwfLUCw7kMKnjctNknBkVFzWSk5FNysBA9FOj+L +o+wVMRa715dgsJ15E0snOgzWfTaJ5YuRh4jKM6qE5scTQWhFHBSK4CKxdxC8bMs KkZim2ZwEabPn4/j9LZ2c5XfcwBsT+MLBU5tG6srwdBqhnYWNruXfS6XWNem+RYS 7/Nu88SbUqg6A/C2WOMqml1plPt0r5d4AlZKSZ8yKfzTd+PSYrc+6kd08YAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnNCJ6ScAy6OuBRPDQE6ibrF1FQwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9gfmq/Hqtf0neHeFk43FwDhYm1BVdoRBmQ JIq+Y3viem+fpyK/SY8UnUYoghIInTksQzJGMhnHhlGFTCmDcV+SE0mlyljqCkrM bRelaM+zh6Vj8rlEidzvaOwEuf/+//D8bPQaUYH5nzKqMGfcc3aPFplUK9A1eCIq 7aWYn8qjaGWGSrX3zx0ew4WEsX9FoNmn7JPS2xgeXDIwFpJVi3RSf0vQ70Gi2k8J YIQfzwyxQa8FKNq+eOdQOVoh90t+1SWhxY1RrQECFb69lV5DoxwnW0V5WInc/NBR uerFolCelHNori4V8kKTlRsq1TsrR1P1jaMHvskUPImFHGSE1BE= -----END CERTIFICATE-----Generated at Sun May 11 04:33:52 2025 by rpki-client