$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: XwV7Y7ZkJPs87HgXas9uTa/KQlYN1w4qa+yyih5y+gY= Subject key identifier: 90:8D:8E:ED:D9:D1:9A:4A:DB:1E:74:3D:5C:34:6A:5C:95:C4:83:FF Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 0D01BE8DB68DD6A974EAD062CE652DD495FAB674 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02DD Signing time: Thu 08 May 2025 14:11:53 +0000 Manifest this update: Thu 08 May 2025 14:06:53 +0000 Manifest next update: Sun 11 May 2025 16:31:53 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: +q+Mo4mZR6ENUQpNX870+bfinQttccH3aYulkB3an3o=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: i+gbmLv/cDTRzVSCU7nzrBuTZdrg904knWZTmS6Nm1M=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /BdahLT6vSLpuEBY3+9TOtbzLb267nsMd1TmGCjkxzI=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: rW2LU9K/rfb3qygTA6381vvcBFybx4fuXGfuXbWXxfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:01:be:8d:b6:8d:d6:a9:74:ea:d0:62:ce:65:2d:d4:95:fa:b6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: May 8 14:06:53 2025 GMT Not After : May 11 16:31:53 2025 GMT Subject: CN=908D8EEDD9D19A4ADB1E743D5C346A5C95C483FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:75:64:a1:5b:66:95:a7:3e:5c:3c:53:52: 67:cb:fc:bd:7e:42:ff:29:26:7e:41:80:9c:5a:c6: e5:9c:56:7a:58:c1:88:87:a8:61:7f:30:6d:f2:15: cd:08:13:3e:45:24:d9:f5:fc:71:b3:2e:55:46:3e: af:1f:c8:34:32:c4:6f:04:24:23:30:00:22:cc:9b: b3:ea:98:98:9b:97:e4:ba:ed:52:78:ba:17:ab:43: b8:e8:7a:2f:29:54:d0:e1:fb:51:66:2b:27:48:d4: 8a:85:64:e5:13:9a:bc:72:05:ef:63:c3:ad:49:75: be:ce:d2:44:61:b5:9c:e3:89:d5:a1:6b:82:ff:c0: 0e:fe:4e:33:ab:e5:db:6c:01:01:91:a2:91:d1:fe: fb:ed:30:6b:1c:b9:9d:91:2e:58:96:d2:bc:12:9f: 91:51:5c:6d:64:eb:f2:fd:da:4d:a1:d3:d5:91:11: 64:49:00:46:77:90:41:b4:69:f2:94:97:55:d1:49: 6f:1f:0b:27:8a:ec:d9:a4:ae:b0:0b:1f:6f:df:c2: df:4d:cf:e4:be:59:ee:8b:98:7e:66:c9:bf:c3:8d: 9c:29:3a:92:b3:6f:69:bd:74:ec:a7:a1:8f:86:36: bc:a9:00:1a:26:3c:75:48:63:c4:5f:e3:7f:8f:e4: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:8E:ED:D9:D1:9A:4A:DB:1E:74:3D:5C:34:6A:5C:95:C4:83:FF X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:67:9b:16:75:1d:31:a1:c6:1c:08:f6:00:40:9a:a9:05:fb: d9:aa:46:f7:ce:96:1c:74:78:d9:7e:83:32:96:74:65:90:21: ab:6c:5d:2b:13:32:71:75:d7:60:cb:7a:5e:05:22:71:76:cb: 67:b2:50:59:c6:04:68:43:47:3f:5e:70:5e:ca:98:1e:a1:81: 24:5d:3d:8c:3a:c5:57:e4:28:fb:d2:7e:93:a2:7b:90:59:59: ee:29:ef:76:e0:ae:5d:ee:04:ec:a1:55:67:ce:1c:dd:05:f5: 3d:dd:75:48:41:73:f2:1f:cb:6c:c8:2e:67:46:11:b1:b9:2a: 38:c9:12:32:12:a5:15:a9:62:0c:1d:17:ca:a0:97:b3:b3:03: 87:e2:79:b7:a8:09:d3:1c:6b:5b:87:50:40:48:47:9f:c3:f8: 3e:00:70:46:a8:8b:7d:ca:75:9b:40:70:f2:81:31:48:cc:62: 15:ca:25:41:03:8f:6f:0e:c1:6b:15:43:17:ec:87:c0:e1:19: d9:5d:82:90:8a:86:0c:3f:25:e3:e7:25:05:4b:4e:42:b7:5c: 45:08:a1:08:9b:60:e6:4b:e9:fd:57:5d:d8:61:cf:2f:99:54: 2f:00:ea:1a:bb:91:9f:9e:12:16:14:ce:74:d7:0b:bd:93:81: 53:e6:bd:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQG+jbaN1ql06tBizmUt1JX6tnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA1MDgxNDA2NTNaFw0yNTA1MTExNjMxNTNaMDMxMTAvBgNV BAMTKDkwOEQ4RUVERDlEMTlBNEFEQjFFNzQzRDVDMzQ2QTVDOTVDNDgzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/3VkoVtmlac+XDxTUmfL/L1+ Qv8pJn5BgJxaxuWcVnpYwYiHqGF/MG3yFc0IEz5FJNn1/HGzLlVGPq8fyDQyxG8E JCMwACLMm7PqmJibl+S67VJ4uherQ7joei8pVNDh+1FmKydI1IqFZOUTmrxyBe9j w61Jdb7O0kRhtZzjidWha4L/wA7+TjOr5dtsAQGRopHR/vvtMGscuZ2RLliW0rwS n5FRXG1k6/L92k2h09WREWRJAEZ3kEG0afKUl1XRSW8fCyeK7NmkrrALH2/fwt9N z+S+We6LmH5myb/DjZwpOpKzb2m9dOynoY+GNrypABomPHVIY8Rf43+P5FVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkI2O7dnRmkrbHnQ9XDRqXJXEg/8wHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9nmxZ1HTGhxhwI9gBAmqkF+9mqRvfOlhx0 eNl+gzKWdGWQIatsXSsTMnF112DLel4FInF2y2eyUFnGBGhDRz9ecF7KmB6hgSRd PYw6xVfkKPvSfpOie5BZWe4p73bgrl3uBOyhVWfOHN0F9T3ddUhBc/Ify2zILmdG EbG5KjjJEjISpRWpYgwdF8qgl7OzA4fiebeoCdMca1uHUEBIR5/D+D4AcEaoi33K dZtAcPKBMUjMYhXKJUEDj28OwWsVQxfsh8DhGdldgpCKhgw/JePnJQVLTkK3XEUI oQibYOZL6f1XXdhhzy+ZVC8A6hq7kZ+eEhYUznTXC72TgVPmvbc= -----END CERTIFICATE-----Generated at Sat May 10 14:39:16 2025 by rpki-client