$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: LN9GQvKuw89cTaQX/6vAHDe1qxloCahhd+Deelyiwso= Subject key identifier: E0:EC:FC:2E:EA:98:22:3A:66:1D:04:A3:DB:35:2E:22:EB:84:63:9F Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 7DD3C720E2E861199BA4A4AC3BC00394B7155FAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01BB Signing time: Wed 07 May 2025 01:51:35 +0000 Manifest this update: Wed 07 May 2025 01:46:35 +0000 Manifest next update: Sat 10 May 2025 05:58:35 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: IGI3ClctmWaFL0gfdzUyLJyt5YIqDflj0CAxtPruJMM=) 2: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: aJ6yeaFWCFa2B4qpJ9r50sKAMri4AwJSN6yvdprUaXc=) 3: 3130332e3139312e3132362e302f32332d3233203d3e203233393534.roa (hash: l2uiHKJBa35V6k/v9zIecJuuUvb5XaymDek7y3LkDOI=) 4: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: 3U0ISVkbJdGDW4+GBdp7oI7vmCAl8OT6fIdmIk7GJsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d3:c7:20:e2:e8:61:19:9b:a4:a4:ac:3b:c0:03:94:b7:15:5f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: May 7 01:46:35 2025 GMT Not After : May 10 05:58:35 2025 GMT Subject: CN=E0ECFC2EEA98223A661D04A3DB352E22EB84639F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:38:56:69:6f:41:31:a7:a5:70:7d:4d:5c:81: 87:4f:23:d0:df:f7:64:64:1c:e9:07:df:54:f1:84: 76:2e:2a:b7:08:0e:0e:cd:3a:d8:fe:37:f2:5e:8e: 6e:c2:7b:fd:7d:12:d3:20:08:79:5e:11:d5:46:29: df:71:e9:99:6a:ac:5e:36:12:51:24:2e:25:6e:79: 20:df:ca:9d:4f:88:87:36:68:01:a2:f0:8a:e7:ff: 0e:46:18:6a:ca:eb:35:44:48:9d:08:07:59:0f:84: a5:49:8f:1d:e4:ef:d6:35:01:9e:0e:fa:81:81:e7: dd:ab:cd:e8:59:ea:84:7c:69:e2:c1:3e:1d:e7:91: 3d:21:9c:d1:82:e1:49:d9:a4:c0:23:1c:2a:13:33: 2d:b2:4a:b2:6c:ac:73:fb:b5:28:7d:8d:f8:81:01: c5:c2:b9:93:c0:e4:95:3c:74:84:2f:71:32:45:80: 83:b8:c5:80:25:fa:b9:3d:1e:e9:f1:5b:99:d3:cc: 6e:be:be:bc:df:7d:d7:85:60:93:ca:66:da:54:90: 69:61:e6:66:06:38:c7:aa:2e:fd:72:da:bb:0b:66: f1:4e:b3:37:af:7c:f9:17:34:2f:cf:7b:42:b8:3e: eb:2a:49:25:18:8a:f0:07:dd:97:99:d5:21:6f:5a: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EC:FC:2E:EA:98:22:3A:66:1D:04:A3:DB:35:2E:22:EB:84:63:9F X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6c:4f:f7:ba:4f:52:10:62:63:28:de:39:72:a5:ea:b5:74: f9:d0:15:5d:54:46:b4:c6:80:f2:ac:fb:4c:eb:df:83:86:13: d8:48:19:26:9d:92:ec:fe:93:1f:5b:4b:aa:e5:eb:82:5f:68: b6:9c:3b:52:0e:39:15:b4:71:cd:71:13:bf:4e:d5:d3:b6:0d: 41:d8:d2:69:1a:b8:48:9f:00:4c:cb:e4:74:9b:ef:ee:6d:3c: 70:a3:c4:d5:94:b9:22:e8:b1:20:db:13:e6:1f:e2:bc:49:e8: 0e:19:2d:29:8c:df:73:5e:e0:7b:09:10:61:34:e4:c5:cf:19: 9f:07:0c:c9:03:8f:f0:d0:6a:ec:10:89:eb:4d:7e:f3:78:5b: dc:68:6b:67:24:cc:71:55:2e:a7:54:b6:fb:73:f9:2d:c3:9e: ac:7d:be:74:ba:13:25:d2:a5:30:2b:2f:d9:20:b4:f7:2c:ca: 08:f0:f9:9e:70:aa:ff:c9:9a:d9:4e:23:ff:7d:9d:03:11:56: f9:45:21:6f:0c:bc:ce:f5:e4:7a:7b:4e:5d:0e:d6:b3:b8:f9: 6d:e2:ab:bb:7d:4b:e7:d2:2f:ec:f3:54:89:42:79:eb:40:b6: f7:96:8f:ce:2a:1f:22:b6:f4:a3:02:ca:3c:d1:a7:45:95:4a: 12:00:92:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdPHIOLoYRmbpKSsO8ADlLcVX68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA1MDcwMTQ2MzVaFw0yNTA1MTAwNTU4MzVaMDMxMTAvBgNV BAMTKEUwRUNGQzJFRUE5ODIyM0E2NjFEMDRBM0RCMzUyRTIyRUI4NDYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1OFZpb0Exp6VwfU1cgYdPI9Df 92RkHOkH31TxhHYuKrcIDg7NOtj+N/Jejm7Ce/19EtMgCHleEdVGKd9x6ZlqrF42 ElEkLiVueSDfyp1PiIc2aAGi8Irn/w5GGGrK6zVESJ0IB1kPhKVJjx3k79Y1AZ4O +oGB592rzehZ6oR8aeLBPh3nkT0hnNGC4UnZpMAjHCoTMy2ySrJsrHP7tSh9jfiB AcXCuZPA5JU8dIQvcTJFgIO4xYAl+rk9HunxW5nTzG6+vrzffdeFYJPKZtpUkGlh 5mYGOMeqLv1y2rsLZvFOszevfPkXNC/Pe0K4PusqSSUYivAH3ZeZ1SFvWv0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Oz8LuqYIjpmHQSj2zUuIuuEY58wHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtsT/e6T1IQYmMo3jlypeq1dPnQFV1URrTG gPKs+0zr34OGE9hIGSadkuz+kx9bS6rl64JfaLacO1IOORW0cc1xE79O1dO2DUHY 0mkauEifAEzL5HSb7+5tPHCjxNWUuSLosSDbE+Yf4rxJ6A4ZLSmM33Ne4HsJEGE0 5MXPGZ8HDMkDj/DQauwQietNfvN4W9xoa2ckzHFVLqdUtvtz+S3Dnqx9vnS6EyXS pTArL9kgtPcsygjw+Z5wqv/JmtlOI/99nQMRVvlFIW8MvM715Hp7Tl0O1rO4+W3i q7t9S+fSL+zzVIlCeetAtveWj84qHyK29KMCyjzRp0WVShIAknI= -----END CERTIFICATE-----Generated at Fri May 9 03:15:49 2025 by rpki-client