$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: WQELMh8p/K8U8WJKvZZjZmq0L0BawIEeQHYr/dNtim8= Subject key identifier: 0E:4B:C3:78:0A:37:D5:A6:D3:C5:8F:51:5D:B9:E3:F8:9F:20:52:E2 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 07450CCA1F071092BE4CBD894E142F185BF2DD7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: 88 Signing time: Thu 08 May 2025 18:00:04 +0000 Manifest this update: Thu 08 May 2025 17:55:04 +0000 Manifest next update: Sun 11 May 2025 20:08:04 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: LDrGtcJTq4OgY5/UX37tOI+FxWVDVhlk7fAC/6U0Evc=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: HiJzuN/V/C24uWjpd+XwVGg0tlin3BfVfdpKy8fBT8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:45:0c:ca:1f:07:10:92:be:4c:bd:89:4e:14:2f:18:5b:f2:dd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: May 8 17:55:04 2025 GMT Not After : May 11 20:08:04 2025 GMT Subject: CN=0E4BC3780A37D5A6D3C58F515DB9E3F89F2052E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:ec:61:00:98:42:a6:6e:08:ed:8b:38:42: 4f:79:63:24:93:9f:5f:b0:a5:82:80:55:e9:94:42: 7f:b8:a1:40:27:08:59:f4:e0:cd:e1:2a:d7:db:fb: 06:6c:9b:a3:af:58:dd:9d:da:9a:b6:0c:6e:46:c8: 55:e7:84:f7:0a:cc:b3:5c:79:2d:79:8c:98:e4:f2: d6:9a:d3:92:7f:98:8d:e5:c0:d0:8f:17:84:a9:fc: ad:f6:aa:91:5f:aa:32:a1:9d:98:0c:72:d9:d8:f9: f1:2a:e0:35:78:5e:bc:2a:97:3c:cc:62:bb:c1:9c: 81:9f:a4:57:3a:76:c4:72:0f:3e:45:4e:ba:a8:10: 0e:19:44:63:e0:12:ef:8e:77:52:49:ee:d5:6e:8d: 64:1e:f8:71:86:25:33:76:ec:b5:8b:17:0b:1b:42: 23:07:1b:2f:84:0a:2d:fd:b2:bd:42:1a:9f:8c:96: c5:6d:c6:1e:82:10:90:56:4f:bc:59:7a:6f:b2:75: a3:9a:a6:52:38:65:bf:72:48:d4:b0:63:57:c1:79: 66:32:7e:74:8c:02:73:ff:f7:64:29:d1:5e:d1:0b: 66:68:51:c4:db:7f:28:fe:15:95:1e:64:13:97:3e: 72:e3:6d:80:12:2c:1b:55:c8:1a:be:d9:ad:98:f6: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4B:C3:78:0A:37:D5:A6:D3:C5:8F:51:5D:B9:E3:F8:9F:20:52:E2 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f0:97:f5:0c:bd:8b:4c:c2:33:f9:41:bb:9c:13:4a:33:db: 52:1a:ba:5f:5a:d7:98:e6:b2:b0:50:88:ea:e6:a9:17:7e:ec: e8:3c:aa:33:6d:04:da:38:a9:50:db:f1:de:82:f6:e3:f8:a6: 51:2b:df:9f:1b:30:e6:f1:14:e0:da:4b:5f:69:ce:a6:58:2d: 74:d1:88:d9:6d:c9:cd:dd:bb:5e:f9:0a:4f:67:6c:75:60:9c: 72:fe:fa:64:ab:ed:d2:70:34:c9:51:27:fe:6c:a3:3b:21:ed: d6:c5:da:45:aa:54:21:04:5c:f2:d3:ca:f8:16:18:6a:54:51: e0:9f:22:48:a3:f3:f1:5e:61:59:42:ed:41:9d:60:25:21:5f: 59:d3:6d:9f:17:55:d2:b1:30:16:e3:13:f4:51:17:f2:af:71: 32:e9:cd:b0:46:d7:4f:68:fe:44:06:49:19:2c:1e:dc:ba:b6: ae:58:ec:c3:98:5d:af:81:78:a1:f6:11:59:06:6e:70:44:bd: 3f:1e:05:a6:71:4f:83:ee:82:f3:ff:85:f6:31:44:bd:cc:bf: 2e:b7:fb:48:c2:93:74:2b:95:0c:16:3d:94:59:b7:f7:92:65: 4e:06:c9:2a:b6:f4:e9:77:9a:d7:41:4c:71:0d:a9:b0:8a:2a: d7:69:5c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0UMyh8HEJK+TL2JThQvGFvy3XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTA1MDgxNzU1MDRaFw0yNTA1MTEyMDA4MDRaMDMxMTAvBgNV BAMTKDBFNEJDMzc4MEEzN0Q1QTZEM0M1OEY1MTVEQjlFM0Y4OUYyMDUyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bOxhAJhCpm4I7Ys4Qk95YyST n1+wpYKAVemUQn+4oUAnCFn04M3hKtfb+wZsm6OvWN2d2pq2DG5GyFXnhPcKzLNc eS15jJjk8taa05J/mI3lwNCPF4Sp/K32qpFfqjKhnZgMctnY+fEq4DV4XrwqlzzM YrvBnIGfpFc6dsRyDz5FTrqoEA4ZRGPgEu+Od1JJ7tVujWQe+HGGJTN27LWLFwsb QiMHGy+ECi39sr1CGp+MlsVtxh6CEJBWT7xZem+ydaOaplI4Zb9ySNSwY1fBeWYy fnSMAnP/92Qp0V7RC2ZoUcTbfyj+FZUeZBOXPnLjbYASLBtVyBq+2a2Y9uu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkvDeAo31abTxY9RXbnj+J8gUuIwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLwl/UMvYtMwjP5QbucE0oz21Iaul9a15jm srBQiOrmqRd+7Og8qjNtBNo4qVDb8d6C9uP4plEr358bMObxFODaS19pzqZYLXTR iNltyc3du175Ck9nbHVgnHL++mSr7dJwNMlRJ/5sozsh7dbF2kWqVCEEXPLTyvgW GGpUUeCfIkij8/FeYVlC7UGdYCUhX1nTbZ8XVdKxMBbjE/RRF/KvcTLpzbBG109o /kQGSRksHty6tq5Y7MOYXa+BeKH2EVkGbnBEvT8eBaZxT4PugvP/hfYxRL3Mvy63 +0jCk3QrlQwWPZRZt/eSZU4GySq29Ol3mtdBTHENqbCKKtdpXPw= -----END CERTIFICATE-----Generated at Thu May 8 20:44:16 2025 by rpki-client