$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: Dfzd7Gnod2gdKc8WeIcutYCv8CSYRQIJ5J6lDG7pk4Q= Subject key identifier: 4F:4D:2F:EF:D5:DB:23:B6:CE:63:07:D6:84:BB:AF:4C:E0:CE:33:55 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 3F2A3353FCC212B458A5018EAE6F5ACFF803FEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 01DB Signing time: Wed 07 May 2025 12:50:00 +0000 Manifest this update: Wed 07 May 2025 12:45:00 +0000 Manifest next update: Sat 10 May 2025 16:56:00 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) 2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: 2WWgRexm5UwxIqlKdPmaUI/7GSt76s1EmlWzsWa2wNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2a:33:53:fc:c2:12:b4:58:a5:01:8e:ae:6f:5a:cf:f8:03:fe:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: May 7 12:45:00 2025 GMT Not After : May 10 16:56:00 2025 GMT Subject: CN=4F4D2FEFD5DB23B6CE6307D684BBAF4CE0CE3355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:36:42:7f:79:1b:a6:7d:b6:24:cd:1e:dd: 62:52:dc:70:d0:ee:ba:ae:5d:8b:84:c7:2a:20:b4: 19:c0:06:e3:b5:3e:63:a8:ce:34:96:ce:d0:9b:15: bb:82:05:2b:63:c9:4e:6d:e3:37:f0:7f:8c:bc:f4: 97:89:3a:b2:c7:5e:f1:e1:a5:10:09:f9:aa:92:cf: 2b:6c:5e:26:1c:25:51:f3:87:61:36:c1:30:37:d9: 00:bc:da:9f:db:7f:7a:ae:77:8e:50:06:5b:50:1d: fe:d0:93:8f:ee:e8:e2:6c:75:37:57:48:68:41:98: ef:dc:9d:d3:36:bb:96:32:9a:2c:0d:da:92:4c:ca: f5:4d:4a:ca:a9:61:6b:34:46:ee:a8:28:05:6e:04: a0:7d:29:da:60:80:c7:5c:21:91:3f:d8:f8:2b:9c: e3:15:4e:35:5d:67:f6:47:01:96:89:14:b1:70:2e: 24:55:77:6d:08:07:7c:57:3d:57:e6:24:ff:d6:d7: 71:f5:c4:54:6a:7c:d4:fb:e1:07:14:38:66:08:c8: 3c:34:06:a2:08:23:df:c2:4d:9b:51:0d:cc:5b:25: b0:32:e3:57:26:94:a7:97:3e:00:73:45:2e:d6:0c: e4:c7:de:97:25:17:9b:9e:44:aa:f6:8e:12:c0:77: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:2F:EF:D5:DB:23:B6:CE:63:07:D6:84:BB:AF:4C:E0:CE:33:55 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:87:a0:10:98:02:f1:16:d2:1f:5c:51:69:31:70:3f:c9: bd:30:b6:28:d7:03:4e:14:e1:16:27:2b:0b:d9:8e:e1:26:77: 6d:9e:1b:31:b6:d8:a7:79:43:67:a1:11:b3:e9:06:31:fa:00: b6:da:3f:63:ba:a3:6c:a0:79:43:7c:0d:13:b1:c3:91:85:6d: f6:89:7a:c4:0f:b4:b2:ce:40:f2:c2:50:0a:9b:d6:d5:38:0d: c1:78:3f:e4:60:20:34:dc:3f:d5:6c:79:4f:4d:24:0d:7f:46: 72:3f:4b:15:fc:0c:af:ff:88:ce:63:06:49:5d:e2:05:7d:a7: f0:73:17:5b:89:a8:45:21:5b:aa:84:f8:33:2e:49:20:2a:30: f2:52:ad:32:72:97:3f:99:a0:b6:17:fe:d2:a8:46:96:7a:c3: 49:cd:9b:67:31:12:8a:3a:28:d5:2c:0a:43:0a:0f:a2:49:b5: 1d:60:e7:32:48:70:e7:aa:d1:46:fe:e2:73:86:88:9f:ce:7a: 3a:a9:5b:06:24:2a:d9:2a:24:b0:04:5a:f6:b5:94:5c:f1:86: 93:72:e5:2e:5e:44:df:c2:a5:25:13:33:7f:bf:72:da:a3:7c: 49:c8:e1:97:ba:68:05:34:ec:0b:ee:33:a3:d8:9a:e0:af:b6: 20:39:a1:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyozU/zCErRYpQGOrm9az/gD/vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA1MDcxMjQ1MDBaFw0yNTA1MTAxNjU2MDBaMDMxMTAvBgNV BAMTKDRGNEQyRkVGRDVEQjIzQjZDRTYzMDdENjg0QkJBRjRDRTBDRTMzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAzZCf3kbpn22JM0e3WJS3HDQ 7rquXYuExyogtBnABuO1PmOozjSWztCbFbuCBStjyU5t4zfwf4y89JeJOrLHXvHh pRAJ+aqSzytsXiYcJVHzh2E2wTA32QC82p/bf3qud45QBltQHf7Qk4/u6OJsdTdX SGhBmO/cndM2u5YymiwN2pJMyvVNSsqpYWs0Ru6oKAVuBKB9KdpggMdcIZE/2Pgr nOMVTjVdZ/ZHAZaJFLFwLiRVd20IB3xXPVfmJP/W13H1xFRqfNT74QcUOGYIyDw0 BqIII9/CTZtRDcxbJbAy41cmlKeXPgBzRS7WDOTH3pclF5ueRKr2jhLAd2VrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT00v79XbI7bOYwfWhLuvTODOM1UwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg/h6AQmALxFtIfXFFpMXA/yb0wtijXA04U 4RYnKwvZjuEmd22eGzG22Kd5Q2ehEbPpBjH6ALbaP2O6o2ygeUN8DROxw5GFbfaJ esQPtLLOQPLCUAqb1tU4DcF4P+RgIDTcP9VseU9NJA1/RnI/SxX8DK//iM5jBkld 4gV9p/BzF1uJqEUhW6qE+DMuSSAqMPJSrTJylz+ZoLYX/tKoRpZ6w0nNm2cxEoo6 KNUsCkMKD6JJtR1g5zJIcOeq0Ub+4nOGiJ/OejqpWwYkKtkqJLAEWva1lFzxhpNy 5S5eRN/CpSUTM3+/ctqjfEnI4Ze6aAU07AvuM6PYmuCvtiA5oe8= -----END CERTIFICATE-----Generated at Fri May 9 08:31:45 2025 by rpki-client