$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: BuE1v5uiy32t7xiq3Ly4ocdCZVn/AILiEtGNLPzBmJA= Subject key identifier: 49:F1:E9:25:6A:DA:D8:A3:A1:28:2A:66:29:F8:63:21:CC:04:56:35 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 030A026EEDE8A68B680799DBE68FA3A61223B6C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 0174 Signing time: Sat 10 May 2025 00:10:49 +0000 Manifest this update: Sat 10 May 2025 00:05:49 +0000 Manifest next update: Tue 13 May 2025 07:29:49 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) 2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: aW3uVAIzNpE0b6ja1n1yD2J8z83H2Kp80aOCCXrO1yU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 07:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0a:02:6e:ed:e8:a6:8b:68:07:99:db:e6:8f:a3:a6:12:23:b6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: May 10 00:05:49 2025 GMT Not After : May 13 07:29:49 2025 GMT Subject: CN=49F1E9256ADAD8A3A1282A6629F86321CC045635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:d3:67:c9:d9:0c:2d:e1:81:b8:de:2d:53: 48:67:72:49:65:6a:43:be:5a:5f:95:88:2e:b9:ce: bf:c9:4f:87:7e:a5:65:40:fc:dc:69:bb:8a:45:cc: 02:4f:85:f4:e6:da:15:94:8c:78:a2:cd:d4:c8:6d: 90:4d:5a:cb:ab:ec:b9:a6:29:a8:47:3b:48:09:fc: de:59:89:a9:25:fa:15:0c:4a:c7:80:48:02:73:1c: 90:21:2c:a0:26:dc:df:d8:be:05:75:4b:15:d0:48: 08:ed:9f:91:b2:96:bf:7d:18:f9:44:2f:a6:03:db: 9a:83:19:f4:c9:4f:04:40:b3:fc:6e:34:27:6e:7b: 98:28:24:13:90:5a:64:29:96:e1:a1:8b:2f:de:e2: 63:3d:ad:81:15:7a:8f:e6:70:80:e1:98:81:4a:a5: bb:ae:64:15:e2:2f:42:28:a4:b9:ed:53:68:e4:ec: 07:29:64:57:c8:9d:c9:78:f7:db:2b:ae:46:5f:ae: af:54:fb:98:f3:f2:8f:05:92:df:bb:71:8f:8f:5d: 3c:2c:38:e3:85:65:98:2b:d8:b2:24:5d:fc:86:66: 7e:cb:d0:7d:04:12:9e:28:7f:a2:20:c2:50:5f:f4: 64:47:c2:ac:1d:eb:d7:ef:65:2f:45:eb:c7:58:fd: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:E9:25:6A:DA:D8:A3:A1:28:2A:66:29:F8:63:21:CC:04:56:35 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:61:a3:3a:ef:41:3f:32:fe:a8:1f:86:92:27:f3:94:54:40: 27:c0:63:09:39:22:64:92:9d:c3:5c:05:4f:ca:73:00:cd:df: f6:47:e2:83:3f:11:52:30:da:0c:8a:d5:35:03:7e:bc:fe:b1: 4f:d4:00:c9:61:41:e4:44:8d:3c:5e:03:f8:b1:d9:27:41:ea: d1:5d:02:b3:90:ce:90:07:74:37:36:a9:0f:2e:38:95:ef:cf: 9a:c5:fd:e4:0b:1b:47:e3:0f:ca:93:d7:56:f5:65:7b:8a:d2: e1:82:99:e4:b7:fe:89:73:ea:5f:d8:77:70:21:98:62:f1:c5: 44:a8:b8:b9:2c:67:7c:a3:4d:d8:07:6f:6e:ec:56:c3:0d:c7: ae:b0:37:ce:ef:a5:d6:ad:1c:e0:99:34:f6:a7:59:5b:fb:ea: 82:c6:b2:c0:d4:3b:fc:ec:6e:0c:e0:bc:f5:0f:87:81:39:5e: 75:b3:d7:f2:39:37:0f:1c:56:c1:f6:7b:ba:fe:80:03:46:35: 41:e4:b5:ad:af:b7:9d:f1:b8:c1:08:04:8f:0e:84:0c:9c:b5: aa:1e:5e:09:df:bf:79:a7:c4:e9:a4:b7:f9:6d:5b:7c:53:fd: ed:d1:9b:54:02:85:0a:68:df:d9:ac:8a:4f:b0:46:44:c3:e2: ce:8d:0f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwoCbu3opotoB5nb5o+jphIjtsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA1MTAwMDA1NDlaFw0yNTA1MTMwNzI5NDlaMDMxMTAvBgNV BAMTKDQ5RjFFOTI1NkFEQUQ4QTNBMTI4MkE2NjI5Rjg2MzIxQ0MwNDU2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvdNnydkMLeGBuN4tU0hnckll akO+Wl+ViC65zr/JT4d+pWVA/Nxpu4pFzAJPhfTm2hWUjHiizdTIbZBNWsur7Lmm KahHO0gJ/N5Ziakl+hUMSseASAJzHJAhLKAm3N/YvgV1SxXQSAjtn5Gylr99GPlE L6YD25qDGfTJTwRAs/xuNCdue5goJBOQWmQpluGhiy/e4mM9rYEVeo/mcIDhmIFK pbuuZBXiL0IopLntU2jk7AcpZFfIncl499srrkZfrq9U+5jz8o8Fkt+7cY+PXTws OOOFZZgr2LIkXfyGZn7L0H0EEp4of6IgwlBf9GRHwqwd69fvZS9F68dY/XuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfHpJWra2KOhKCpmKfhjIcwEVjUwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhhozrvQT8y/qgfhpIn85RUQCfAYwk5ImSS ncNcBU/KcwDN3/ZH4oM/EVIw2gyK1TUDfrz+sU/UAMlhQeREjTxeA/ix2SdB6tFd ArOQzpAHdDc2qQ8uOJXvz5rF/eQLG0fjD8qT11b1ZXuK0uGCmeS3/olz6l/Yd3Ah mGLxxUSouLksZ3yjTdgHb27sVsMNx66wN87vpdatHOCZNPanWVv76oLGssDUO/zs bgzgvPUPh4E5XnWz1/I5Nw8cVsH2e7r+gANGNUHkta2vt53xuMEIBI8OhAyctaoe Xgnfv3mnxOmkt/ltW3xT/e3Rm1QChQpo39msik+wRkTD4s6NDys= -----END CERTIFICATE-----Generated at Sun May 11 05:59:25 2025 by rpki-client