$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: +UK/oU8UrkIQmldsaUsfK4oFc+9J3BCxHczK+BUsjcA= Subject key identifier: 8E:6F:C3:79:CE:28:05:4D:BA:6D:FC:6B:60:2B:8A:C4:31:BE:E6:00 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 33E272D5FC58749F32DA7462BE6C398A06F242DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 84 Signing time: Tue 06 May 2025 22:31:25 +0000 Manifest this update: Tue 06 May 2025 22:26:25 +0000 Manifest next update: Sat 10 May 2025 08:31:25 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: q1j200cCXynpo+LWDOvXa0/JNbWkKfE631JpKO0oJqI=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 08:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e2:72:d5:fc:58:74:9f:32:da:74:62:be:6c:39:8a:06:f2:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: May 6 22:26:25 2025 GMT Not After : May 10 08:31:25 2025 GMT Subject: CN=8E6FC379CE28054DBA6DFC6B602B8AC431BEE600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:1c:d4:1a:d8:8a:12:7a:00:23:b9:cc:f7: c7:06:2b:07:5a:6d:bb:db:a3:0f:2d:af:c3:6d:1e: 34:17:fd:21:87:81:f6:83:71:b6:87:92:c2:b0:b0: cf:e5:3e:44:8f:c5:44:5d:09:04:a5:62:9e:4d:02: ba:1c:ff:8a:35:1c:d3:36:ea:10:f6:d3:7c:fc:19: b4:aa:b5:5d:56:46:26:5a:1f:6a:1c:8d:b4:7e:2a: e6:1e:b2:17:81:4f:7b:e3:02:86:c6:14:f6:98:f4: a1:5a:a1:4b:32:3e:74:a2:4f:d9:0e:96:6e:cf:18: e4:50:d6:5c:d5:28:82:e3:7b:5d:d6:3a:4f:d6:b6: b9:8f:8e:4a:38:9c:ab:df:a5:86:f4:94:f6:d2:fb: 92:76:d5:01:89:9a:52:cb:eb:70:68:67:cd:85:79: 59:08:45:11:16:6b:03:28:3f:c6:1a:32:db:5c:57: 2b:76:f5:ae:2d:cb:73:eb:1b:99:7d:e3:da:6d:e9: 8d:d6:68:c7:3c:66:4d:4f:fd:0f:9e:a6:42:98:07: 8a:ab:30:ba:25:bc:b2:58:5d:06:70:cb:33:d0:b2: dd:b9:f8:e5:b2:76:9d:71:ab:41:d0:2e:be:36:e8: 1c:f6:7c:2d:7f:ee:51:5c:d2:33:22:85:b9:bd:83: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6F:C3:79:CE:28:05:4D:BA:6D:FC:6B:60:2B:8A:C4:31:BE:E6:00 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b6:78:05:d9:d2:40:3e:55:04:e1:f2:4e:23:0e:89:36:09: 9b:a0:28:e3:a5:ea:3d:43:09:72:60:75:76:18:d7:7c:a3:68: f6:b6:16:08:97:29:f5:88:6f:2a:07:20:5f:a9:8d:a0:a6:9a: 0d:7c:80:19:ca:7b:5e:5f:f8:da:99:2c:9e:3c:d5:21:bc:3e: 63:ea:97:50:49:ab:bd:1c:e4:77:9c:94:37:cf:12:26:c2:da: a2:13:24:27:15:54:fd:43:8b:ba:4c:65:9d:6d:24:db:10:e4: 41:2b:79:9c:2b:52:bb:09:b0:91:98:be:0e:c0:52:f9:ff:58: e4:c7:58:59:fa:2f:67:5f:d0:76:54:2b:a1:cb:52:56:3e:2b: 1f:39:6e:db:76:26:47:a4:43:c0:e8:63:f5:e1:5d:aa:20:62: e8:35:ec:3e:8e:f7:8e:5a:67:94:47:d9:79:a6:67:92:6e:6d: ac:2a:45:e8:fd:66:35:cc:eb:ae:9e:79:88:cd:18:c5:d1:c9: b9:ce:04:3a:53:72:d1:f2:79:f3:b6:51:da:79:1f:9d:bc:b3: f1:3b:b6:c5:c7:1b:f5:a3:c8:db:d0:a3:8d:10:a1:63:4c:24: 7e:58:90:bf:de:b2:7b:a8:9e:46:8f:9b:80:40:d6:13:7d:ab: 3d:0f:80:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+Jy1fxYdJ8y2nRivmw5igbyQtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA1MDYyMjI2MjVaFw0yNTA1MTAwODMxMjVaMDMxMTAvBgNV BAMTKDhFNkZDMzc5Q0UyODA1NERCQTZERkM2QjYwMkI4QUM0MzFCRUU2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPhzUGtiKEnoAI7nM98cGKwda bbvbow8tr8NtHjQX/SGHgfaDcbaHksKwsM/lPkSPxURdCQSlYp5NAroc/4o1HNM2 6hD203z8GbSqtV1WRiZaH2ocjbR+KuYesheBT3vjAobGFPaY9KFaoUsyPnSiT9kO lm7PGORQ1lzVKILje13WOk/WtrmPjko4nKvfpYb0lPbS+5J21QGJmlLL63BoZ82F eVkIRREWawMoP8YaMttcVyt29a4ty3PrG5l949pt6Y3WaMc8Zk1P/Q+epkKYB4qr MLolvLJYXQZwyzPQst25+OWydp1xq0HQLr426Bz2fC1/7lFc0jMihbm9g1wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjm/Dec4oBU26bfxrYCuKxDG+5gAwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO2eAXZ0kA+VQTh8k4jDok2CZugKOOl6j1D CXJgdXYY13yjaPa2FgiXKfWIbyoHIF+pjaCmmg18gBnKe15f+NqZLJ481SG8PmPq l1BJq70c5HeclDfPEibC2qITJCcVVP1Di7pMZZ1tJNsQ5EEreZwrUrsJsJGYvg7A Uvn/WOTHWFn6L2df0HZUK6HLUlY+Kx85btt2JkekQ8DoY/XhXaogYug17D6O945a Z5RH2XmmZ5JubawqRej9ZjXM666eeYjNGMXRybnOBDpTctHyefO2Udp5H528s/E7 tsXHG/WjyNvQo40QoWNMJH5YkL/esnuonkaPm4BA1hN9qz0PgNA= -----END CERTIFICATE-----Generated at Thu May 8 01:08:28 2025 by rpki-client