$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: 6O+WWFcoPVC/T2PfsjFD2wpYOGJywZ9MSiPJ6A2mMlY= Subject key identifier: 67:54:03:6C:84:FC:AA:00:7F:34:0C:FD:4D:0A:9F:B9:30:7E:2E:00 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 0C17FC7BBB979457D84AA191EE213BC39EEECF8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 01BF Signing time: Mon 12 May 2025 18:51:35 +0000 Manifest this update: Mon 12 May 2025 18:46:35 +0000 Manifest next update: Thu 15 May 2025 22:40:35 +0000 Files and hashes: 1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: gYQ4sZZZIeQ/u/7/CQjNRVG2I1X0pp6RfA8/mFrKQwE=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: uk3D/rCjhhElv4EaWGmIYhdMgwZYLaPqwk9faLvVMj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:fc:7b:bb:97:94:57:d8:4a:a1:91:ee:21:3b:c3:9e:ee:cf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: May 12 18:46:35 2025 GMT Not After : May 15 22:40:35 2025 GMT Subject: CN=6754036C84FCAA007F340CFD4D0A9FB9307E2E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:31:de:1a:a6:cd:05:31:f6:5c:b6:90:1a: 46:54:e0:4e:7e:f4:e2:9b:21:52:67:eb:e7:c2:73: 00:95:ed:dd:a1:c0:54:9f:2e:55:9a:9c:88:38:67: 02:70:a7:a7:82:92:66:a6:12:96:f2:ba:48:4b:57: 05:0c:fd:f5:eb:0d:fa:d5:3a:36:97:29:70:b9:3d: 60:e1:29:30:ed:a2:cb:d5:5a:16:ab:0c:8b:b8:44: 12:d1:5e:61:a2:b9:fe:79:61:94:3a:1a:85:b2:2d: 3c:88:c2:a3:a3:32:91:bd:b6:7e:38:7b:4f:ef:f1: 88:3e:c4:39:ae:b4:2f:8b:31:84:9d:94:1d:09:d4: 63:58:79:17:9d:9d:f4:6e:b1:de:c6:f4:12:13:03: ba:0b:df:b7:7a:c2:ef:ca:66:0e:9f:39:00:4d:41: 8b:f6:5d:8d:02:2c:19:1a:57:07:a3:3c:57:5a:38: 98:74:bb:eb:3f:bf:dc:e0:33:17:43:25:8e:a8:d2: 0f:5e:f6:18:1d:b7:f8:66:94:0d:d7:a6:aa:e6:47: 9d:82:aa:27:cd:b1:62:8d:f7:37:eb:62:c4:08:92: 4e:b4:c1:75:3d:b5:83:b4:cc:e2:5b:a9:b6:a5:9d: c2:7e:aa:4f:a9:72:aa:e3:3d:c1:02:93:e1:d1:54: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:03:6C:84:FC:AA:00:7F:34:0C:FD:4D:0A:9F:B9:30:7E:2E:00 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2e:c1:52:43:24:36:0a:70:7e:23:fd:56:82:e4:d0:fd:c4: 1f:72:e7:51:c5:78:3b:28:4f:00:02:2e:6e:18:8e:d3:b4:46: 8a:8e:01:29:13:b5:9c:de:d5:3c:91:d4:7a:61:f5:e9:72:3d: 54:40:ed:7c:6f:54:be:93:59:92:f6:2a:a5:a7:19:59:6a:4d: 13:c5:d5:4f:8c:78:d3:37:56:48:fd:e1:e2:28:fc:52:e1:83: 21:6c:00:0d:01:8f:06:cc:fe:b4:9d:e2:c3:d0:47:e1:77:d5: f3:00:67:2a:09:3d:f6:0b:b8:cf:c4:08:cf:88:81:4d:67:06: 3b:93:0a:0d:14:f4:8e:e7:71:cf:ee:c5:1c:67:83:8d:a3:5e: b4:f5:48:6f:c1:c7:41:f1:f3:8b:55:db:40:80:14:05:c5:76: 52:37:16:43:f0:32:a4:a0:61:f1:ef:69:3f:90:93:55:12:95: 48:31:ba:7d:84:75:bb:02:62:50:c1:1f:df:73:6e:f9:f3:a4: 8d:84:d6:13:a5:4d:a6:f6:1d:61:56:ab:d2:c7:2d:f9:b8:e4: b6:66:42:29:3b:3d:a1:41:3c:60:ca:01:54:64:5d:b2:a2:5f: 81:63:bb:71:8e:b4:a6:54:30:4d:2a:99:04:e0:d4:17:0b:c3: ba:f9:a3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBf8e7uXlFfYSqGR7iE7w57uz4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTA1MTIxODQ2MzVaFw0yNTA1MTUyMjQwMzVaMDMxMTAvBgNV BAMTKDY3NTQwMzZDODRGQ0FBMDA3RjM0MENGRDREMEE5RkI5MzA3RTJFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBjHeGqbNBTH2XLaQGkZU4E5+ 9OKbIVJn6+fCcwCV7d2hwFSfLlWanIg4ZwJwp6eCkmamEpbyukhLVwUM/fXrDfrV OjaXKXC5PWDhKTDtosvVWharDIu4RBLRXmGiuf55YZQ6GoWyLTyIwqOjMpG9tn44 e0/v8Yg+xDmutC+LMYSdlB0J1GNYeRednfRusd7G9BITA7oL37d6wu/KZg6fOQBN QYv2XY0CLBkaVwejPFdaOJh0u+s/v9zgMxdDJY6o0g9e9hgdt/hmlA3XpqrmR52C qifNsWKN9zfrYsQIkk60wXU9tYO0zOJbqbalncJ+qk+pcqrjPcECk+HRVKX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ1QDbIT8qgB/NAz9TQqfuTB+LgAwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJguwVJDJDYKcH4j/VaC5ND9xB9y51HFeDso TwACLm4YjtO0RoqOASkTtZze1TyR1Hph9elyPVRA7XxvVL6TWZL2KqWnGVlqTRPF 1U+MeNM3Vkj94eIo/FLhgyFsAA0BjwbM/rSd4sPQR+F31fMAZyoJPfYLuM/ECM+I gU1nBjuTCg0U9I7ncc/uxRxng42jXrT1SG/Bx0Hx84tV20CAFAXFdlI3FkPwMqSg YfHvaT+Qk1USlUgxun2EdbsCYlDBH99zbvnzpI2E1hOlTab2HWFWq9LHLfm45LZm Qik7PaFBPGDKAVRkXbKiX4Fju3GOtKZUME0qmQTg1BcLw7r5o1I= -----END CERTIFICATE-----Generated at Wed May 14 07:15:05 2025 by rpki-client