$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: SRO0Ms/Ycnj+f+y/v2PWFQNTnWCTqZzKs+jJlDtyA+k= Subject key identifier: 9F:C5:1E:4F:44:54:24:84:02:C1:60:7E:B1:B3:83:FA:62:94:82:A4 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 2F016C3D5C3D14C9227B920B4EAE0F09645CC9ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 0299 Signing time: Fri 04 Apr 2025 11:01:07 +0000 Manifest this update: Fri 04 Apr 2025 10:56:07 +0000 Manifest next update: Mon 07 Apr 2025 11:45:07 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: DlGAeYut36CMMxPXnxxJPfgoj0LoAvO8IS5cBLBeCrM=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:01:6c:3d:5c:3d:14:c9:22:7b:92:0b:4e:ae:0f:09:64:5c:c9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Apr 4 10:56:07 2025 GMT Not After : Apr 7 11:45:07 2025 GMT Subject: CN=9FC51E4F4454248402C1607EB1B383FA629482A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:e4:72:9f:66:f5:9d:1b:a5:4b:b4:a9:47: 8f:f5:07:70:66:d0:61:95:35:70:8c:6c:d0:bf:51: 53:e8:f9:9b:ba:6d:23:8b:8c:28:72:eb:f5:96:9b: 99:5e:15:70:26:93:6b:53:84:9f:10:3e:6e:b9:96: 7d:d2:ae:b9:93:46:83:15:56:6a:11:95:20:f0:d3: b7:15:87:64:ba:2a:c7:67:6d:c9:94:74:b7:3c:e2: e5:89:69:c6:67:af:17:00:1b:3a:29:8f:e3:88:61: 48:f0:86:b7:1c:eb:d4:bd:8c:1d:67:7c:11:23:d1: 36:a9:89:42:44:0e:e7:7f:56:cd:06:7f:65:4d:5a: 9d:e8:8f:b7:de:43:b2:6d:a0:eb:6b:e0:9a:00:9a: 92:52:c2:15:ca:f5:96:1a:5a:c7:1a:2e:14:f4:28: 17:f1:0f:bb:ee:39:10:16:e3:ac:30:44:51:a3:96: e9:ca:e1:70:9b:b7:6a:d6:16:66:af:d2:c0:9c:04: 9c:be:ee:cd:f4:d5:57:35:c7:d9:a9:cb:72:cd:9f: 78:46:63:4b:f2:5a:cc:c4:55:36:55:5a:9a:a7:44: 7f:09:03:af:4d:8b:69:51:95:7a:a9:22:5b:96:75: f9:c0:7e:4e:d3:a7:75:cc:6c:31:04:d7:4d:35:a0: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:1E:4F:44:54:24:84:02:C1:60:7E:B1:B3:83:FA:62:94:82:A4 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:80:f5:24:55:f7:5f:58:7b:fc:12:46:09:9c:b1:c5:92: 11:25:1e:58:8c:0f:20:be:c3:21:0c:c2:73:19:cd:d9:95:30: aa:ac:37:20:f0:12:d0:6a:3b:53:93:aa:45:7d:b0:66:b8:95: 03:4b:a2:2b:f4:b6:1c:80:de:63:ae:c2:cc:44:c0:b6:52:68: eb:5a:0f:0c:47:49:e9:6c:50:4e:0b:08:53:40:ca:0f:59:93: 95:fa:33:2a:4e:39:f7:e8:ab:52:c8:1f:d9:2a:63:aa:58:3d: d9:1d:a5:fb:c2:c8:7e:92:44:75:7d:35:79:a7:c4:6b:a1:74: 06:30:a1:45:da:ee:70:d0:d8:8c:41:15:c1:5f:9d:aa:96:88: ef:26:3f:65:2e:39:12:75:de:c1:7b:b6:50:3b:26:51:c4:26: da:8a:ec:6c:76:e4:e4:65:89:89:c8:a6:7b:94:92:e7:4f:8c: 35:37:a4:8d:04:44:56:d1:43:c4:b8:2d:69:47:4f:ce:ac:a1: bd:24:f5:74:61:e1:e5:1a:73:cf:85:ec:98:3a:3c:66:cc:37: 9b:49:0f:2e:61:cd:1a:fc:3d:c7:9e:15:d6:17:6f:7c:52:5a: 91:fa:32:ae:3e:96:77:6a:6b:e6:a0:81:0f:a9:8d:9d:3a:55: f4:d2:72:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwFsPVw9FMkie5ILTq4PCWRcye0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA0MDQxMDU2MDdaFw0yNTA0MDcxMTQ1MDdaMDMxMTAvBgNV BAMTKDlGQzUxRTRGNDQ1NDI0ODQwMkMxNjA3RUIxQjM4M0ZBNjI5NDgyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CeRyn2b1nRulS7SpR4/1B3Bm 0GGVNXCMbNC/UVPo+Zu6bSOLjChy6/WWm5leFXAmk2tThJ8QPm65ln3SrrmTRoMV VmoRlSDw07cVh2S6KsdnbcmUdLc84uWJacZnrxcAGzopj+OIYUjwhrcc69S9jB1n fBEj0TapiUJEDud/Vs0Gf2VNWp3oj7feQ7JtoOtr4JoAmpJSwhXK9ZYaWscaLhT0 KBfxD7vuORAW46wwRFGjlunK4XCbt2rWFmav0sCcBJy+7s301Vc1x9mpy3LNn3hG Y0vyWszEVTZVWpqnRH8JA69Ni2lRlXqpIluWdfnAfk7Tp3XMbDEE1001oEKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8UeT0RUJIQCwWB+sbOD+mKUgqQwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiYgPUkVfdfWHv8EkYJnLHFkhElHliMDyC+ wyEMwnMZzdmVMKqsNyDwEtBqO1OTqkV9sGa4lQNLoiv0thyA3mOuwsxEwLZSaOta DwxHSelsUE4LCFNAyg9Zk5X6MypOOffoq1LIH9kqY6pYPdkdpfvCyH6SRHV9NXmn xGuhdAYwoUXa7nDQ2IxBFcFfnaqWiO8mP2UuORJ13sF7tlA7JlHEJtqK7Gx25ORl iYnIpnuUkudPjDU3pI0ERFbRQ8S4LWlHT86sob0k9XRh4eUac8+F7Jg6PGbMN5tJ Dy5hzRr8PceeFdYXb3xSWpH6Mq4+lndqa+aggQ+pjZ06VfTSciU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:19 2025 by rpki-client