$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: 24fm339CbxqQKNgcr0oZd7vYedruMHch67VBFk7pTY4= Subject key identifier: 20:39:74:42:66:D4:FA:75:A4:31:7F:8A:78:D2:10:67:06:1E:97:F0 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 47BA809EAD9E29160D2D8886EA4C514BE706C67D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 51 Signing time: Sat 10 May 2025 05:00:45 +0000 Manifest this update: Sat 10 May 2025 04:55:45 +0000 Manifest next update: Tue 13 May 2025 12:21:45 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: 4WLggNknwY/OoytpmK1lJFkgulwHAf12hkayNn/yw8k=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) 4: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ba:80:9e:ad:9e:29:16:0d:2d:88:86:ea:4c:51:4b:e7:06:c6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: May 10 04:55:45 2025 GMT Not After : May 13 12:21:45 2025 GMT Subject: CN=2039744266D4FA75A4317F8A78D21067061E97F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:56:20:c9:e5:e0:0d:f9:e1:55:65:1e:54: 29:34:cc:85:1d:ff:69:74:48:96:ff:3d:a5:e9:13: 57:f4:3d:97:2d:4b:a2:e7:b6:77:37:ab:b0:ae:74: fd:37:04:c0:9f:53:52:78:20:f2:98:81:8a:0a:4c: 3a:d0:3b:d6:b1:4d:bb:e7:ca:0d:be:6f:c3:d5:eb: 72:8c:92:45:f7:7a:74:84:eb:b9:ac:d7:81:38:49: a8:6c:85:7e:9e:3f:b7:70:3c:b2:04:e6:9b:b4:9e: 19:c2:36:b8:39:6d:e5:9b:bf:5c:48:46:31:e1:22: 69:9a:58:6a:6a:c5:e4:2d:7f:f5:95:28:aa:a1:fe: 61:a1:46:b9:03:6f:27:e7:0f:6e:03:4f:9c:b1:bf: 0a:9b:74:ed:f1:97:5a:01:85:d5:4c:50:00:1f:b6: ba:27:fd:81:47:83:bd:99:34:29:83:ef:06:d0:e8: 13:5d:4d:98:0f:57:45:ac:c9:57:7f:51:eb:f6:61: 88:8f:03:c5:99:61:62:df:54:25:eb:ac:e0:16:ec: 98:3b:2b:29:89:2b:bd:8d:e1:cc:8e:0d:e1:e2:70: cd:c1:39:cb:c1:b9:d4:c1:65:2c:5f:06:29:8d:d1: 37:08:51:52:da:60:3c:62:48:63:15:cd:44:14:6a: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:74:42:66:D4:FA:75:A4:31:7F:8A:78:D2:10:67:06:1E:97:F0 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:67:c2:b4:3b:35:1d:a5:03:7d:19:36:26:3f:5c:bb:45:20: d9:e8:70:74:a2:b5:e9:3b:7e:e6:6f:ef:2d:61:10:73:67:38: 9f:e6:b0:b7:7c:f3:27:10:d3:9b:c8:ae:ca:71:a2:c5:33:47: 05:6d:6a:9b:5c:81:5f:79:1f:61:63:24:ce:05:3e:da:3a:eb: a2:1f:8d:57:cf:c5:fc:df:64:ff:17:11:0b:cb:8b:e4:60:d8: d1:fa:c7:34:4e:09:b2:6f:b8:6e:b7:bb:9b:fc:0b:d6:93:4b: 84:74:c0:00:26:f6:dd:83:02:e5:46:80:29:27:94:4d:ac:da: 43:68:91:35:40:3f:bf:e4:46:22:3e:35:e3:a0:b8:6a:ee:73: bf:1a:be:42:10:0d:3d:6d:d9:3c:93:64:ab:92:3e:4f:c1:df: f6:fc:df:82:b2:16:4c:f8:04:70:b9:e4:a4:39:15:8b:ac:90: 81:b6:95:03:b7:18:03:c8:95:c3:e0:1b:11:1b:f0:16:20:e3: 55:75:73:89:f5:74:bd:5c:c7:f4:08:a8:5b:1c:24:0f:8a:40: 98:10:42:8b:b5:1a:3a:6c:94:10:16:da:86:f6:5f:e8:59:54: 5b:eb:0d:c1:9c:03:79:4c:e1:15:cb:fa:70:e6:87:e4:a4:02: ad:a4:a5:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7qAnq2eKRYNLYiG6kxRS+cGxn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA1MTAwNDU1NDVaFw0yNTA1MTMxMjIxNDVaMDMxMTAvBgNV BAMTKDIwMzk3NDQyNjZENEZBNzVBNDMxN0Y4QTc4RDIxMDY3MDYxRTk3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWVYgyeXgDfnhVWUeVCk0zIUd /2l0SJb/PaXpE1f0PZctS6Lntnc3q7CudP03BMCfU1J4IPKYgYoKTDrQO9axTbvn yg2+b8PV63KMkkX3enSE67ms14E4SahshX6eP7dwPLIE5pu0nhnCNrg5beWbv1xI RjHhImmaWGpqxeQtf/WVKKqh/mGhRrkDbyfnD24DT5yxvwqbdO3xl1oBhdVMUAAf tron/YFHg72ZNCmD7wbQ6BNdTZgPV0WsyVd/Uev2YYiPA8WZYWLfVCXrrOAW7Jg7 KymJK72N4cyODeHicM3BOcvBudTBZSxfBimN0TcIUVLaYDxiSGMVzUQUaha5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDl0QmbU+nWkMX+KeNIQZwYel/AwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9nwrQ7NR2lA30ZNiY/XLtFINnocHSitek7 fuZv7y1hEHNnOJ/msLd88ycQ05vIrspxosUzRwVtaptcgV95H2FjJM4FPto666If jVfPxfzfZP8XEQvLi+Rg2NH6xzROCbJvuG63u5v8C9aTS4R0wAAm9t2DAuVGgCkn lE2s2kNokTVAP7/kRiI+NeOguGruc78avkIQDT1t2TyTZKuSPk/B3/b834KyFkz4 BHC55KQ5FYuskIG2lQO3GAPIlcPgGxEb8BYg41V1c4n1dL1cx/QIqFscJA+KQJgQ Qou1GjpslBAW2ob2X+hZVFvrDcGcA3lM4RXL+nDmh+SkAq2kpTg= -----END CERTIFICATE-----Generated at Sat May 10 07:38:12 2025 by rpki-client