$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: KHUNsPXES/Tq3qvZSNdGFlG+f6LnOGYKHjULvKIz2Kc= Subject key identifier: FA:3A:3A:6A:22:1C:D7:0E:1E:BB:AC:30:BE:3A:03:0E:04:DE:5C:50 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 0956C74956A8921EB39259875CD899F4D11E6C3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01CE Signing time: Fri 04 Apr 2025 16:22:18 +0000 Manifest this update: Fri 04 Apr 2025 16:17:18 +0000 Manifest next update: Mon 07 Apr 2025 18:00:18 +0000 Files and hashes: 1: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: w+yDgiAH2CLQlSaKfSdjIBnoNjlZzSfxsJVVPmaChBU=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:56:c7:49:56:a8:92:1e:b3:92:59:87:5c:d8:99:f4:d1:1e:6c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Apr 4 16:17:18 2025 GMT Not After : Apr 7 18:00:18 2025 GMT Subject: CN=FA3A3A6A221CD70E1EBBAC30BE3A030E04DE5C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:54:18:6e:65:53:ce:79:df:1e:85:c0:f9: 4a:ff:07:19:a8:79:57:1d:c8:cc:84:03:fa:34:9f: 16:bf:a5:4a:bf:5d:d6:a4:ac:87:f2:c3:ce:1d:94: 58:b5:03:00:40:b5:e6:23:ce:d9:37:42:aa:9d:52: f9:e3:cc:10:bb:38:4c:93:e2:46:50:be:a7:5c:45: 7e:58:8c:73:4c:fa:a2:71:33:b0:c2:fa:ec:ee:ff: 31:e8:5c:b3:50:a3:b4:33:06:5f:0d:b5:4a:bd:38: 0e:9e:11:1a:08:a4:19:03:89:98:68:0b:4c:01:86: d0:a3:86:3d:c3:53:59:ca:55:a6:a9:46:aa:5f:2c: 55:0a:4f:c9:8b:62:57:1b:36:1e:8e:b9:10:fa:d8: 02:a7:4b:d4:ea:c8:38:a1:9d:98:03:13:af:84:04: 04:98:38:a6:86:b4:9c:77:5a:c1:65:45:e8:ea:8e: dd:09:89:4a:96:ea:95:40:41:71:03:c5:47:00:d8: 55:27:5a:6f:1c:8d:44:49:81:70:d4:2f:36:f9:71: 35:d3:23:b1:be:ae:6c:b0:15:a5:32:4a:11:6b:24: d3:10:49:42:ca:92:1b:26:8f:e7:4b:3f:36:ef:b9: d0:41:64:80:05:3b:11:a0:3e:11:20:09:e9:0e:b2: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:3A:6A:22:1C:D7:0E:1E:BB:AC:30:BE:3A:03:0E:04:DE:5C:50 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c5:a6:69:c7:75:99:45:47:9b:e2:dc:eb:b2:07:e3:23:b2: bc:39:8b:74:50:f7:f3:61:0d:96:68:ad:b3:ec:29:a1:01:67: 95:a9:50:2e:4c:c7:7f:10:00:b7:db:02:c5:08:ba:6e:b6:87: d3:41:63:35:c7:43:ce:38:32:59:ae:68:aa:54:b1:e2:0b:6d: b4:26:b8:3b:b2:d5:63:74:75:b1:a2:ad:5d:03:e4:0c:dd:e0: a1:a4:dd:bb:29:f5:90:dc:ce:b4:19:f6:17:de:6a:4c:57:4c: f9:96:49:41:33:e8:a9:a0:ae:8e:28:84:40:4d:32:45:61:9a: ed:63:16:d5:00:0e:d4:1e:f2:17:75:af:6b:4c:06:26:64:b3: 66:0b:7d:d4:95:ee:3a:eb:53:d1:79:6e:55:2e:28:fc:79:de: 3f:c4:d9:5d:b6:01:1d:37:86:74:e6:f7:9c:bb:52:bf:b1:8d: f6:a5:fb:21:94:f1:b8:25:9f:95:18:c0:29:a3:4e:ba:dd:1e: 0c:92:1a:1c:e6:42:2d:45:8c:97:11:42:44:18:e8:77:57:84: 98:3a:de:a6:cc:91:27:27:8f:d0:9f:81:1f:32:e7:e7:be:9a: b2:85:92:64:58:3b:db:c9:07:eb:b4:53:da:d6:dd:29:82:a0: 40:c3:6f:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVbHSVaokh6zklmHXNiZ9NEebDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA0MDQxNjE3MThaFw0yNTA0MDcxODAwMThaMDMxMTAvBgNV BAMTKEZBM0EzQTZBMjIxQ0Q3MEUxRUJCQUMzMEJFM0EwMzBFMDRERTVDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgFQYbmVTznnfHoXA+Ur/Bxmo eVcdyMyEA/o0nxa/pUq/XdakrIfyw84dlFi1AwBAteYjztk3QqqdUvnjzBC7OEyT 4kZQvqdcRX5YjHNM+qJxM7DC+uzu/zHoXLNQo7QzBl8NtUq9OA6eERoIpBkDiZho C0wBhtCjhj3DU1nKVaapRqpfLFUKT8mLYlcbNh6OuRD62AKnS9TqyDihnZgDE6+E BASYOKaGtJx3WsFlRejqjt0JiUqW6pVAQXEDxUcA2FUnWm8cjURJgXDULzb5cTXT I7G+rmywFaUyShFrJNMQSULKkhsmj+dLPzbvudBBZIAFOxGgPhEgCekOss5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jo6aiIc1w4eu6wwvjoDDgTeXFAwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7FpmnHdZlFR5vi3OuyB+Mjsrw5i3RQ9/Nh DZZorbPsKaEBZ5WpUC5Mx38QALfbAsUIum62h9NBYzXHQ844MlmuaKpUseILbbQm uDuy1WN0dbGirV0D5Azd4KGk3bsp9ZDczrQZ9hfeakxXTPmWSUEz6Kmgro4ohEBN MkVhmu1jFtUADtQe8hd1r2tMBiZks2YLfdSV7jrrU9F5blUuKPx53j/E2V22AR03 hnTm95y7Ur+xjfal+yGU8bgln5UYwCmjTrrdHgySGhzmQi1FjJcRQkQY6HdXhJg6 3qbMkScnj9CfgR8y5+e+mrKFkmRYO9vJB+u0U9rW3SmCoEDDb+0= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:15 2025 by rpki-client