$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: xdrz1vGqEe5qe8W8xWPtrAwnLT628/mhEwLqeB6hboE= Subject key identifier: B4:9F:A7:59:86:B6:A1:AF:54:49:59:DA:A2:FA:F6:BC:8E:32:E0:02 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 0C834E3300453AB6CC67EDF63C1C330266509906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0202 Signing time: Fri 04 Apr 2025 08:10:37 +0000 Manifest this update: Fri 04 Apr 2025 08:05:37 +0000 Manifest next update: Mon 07 Apr 2025 19:53:37 +0000 Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: eLJrm4YcAcgT7SOLlw+8eUN9a+GCB4fRLcuP3eymbEM=) 2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: YeMgeIPIu434910S3YpIEelYEAJVlFY+GNTUIjHDpNQ=) 3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: lo2Vk1iwPOAeWHe18ZoZOb7f+oK3frxdmjMpWVUzEsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:83:4e:33:00:45:3a:b6:cc:67:ed:f6:3c:1c:33:02:66:50:99:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Apr 4 08:05:37 2025 GMT Not After : Apr 7 19:53:37 2025 GMT Subject: CN=B49FA75986B6A1AF544959DAA2FAF6BC8E32E002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0b:4f:13:5f:82:56:4c:49:8e:95:f4:08:dd: 60:1a:66:4d:2a:f1:de:80:aa:24:ae:f7:14:f9:00: f6:2d:42:61:d6:f2:17:f5:8a:8a:41:21:e6:34:d4: 31:8d:6c:11:f9:10:5e:43:8d:c8:24:55:80:6f:c9: 6a:4e:45:5b:7a:cf:09:53:d3:26:13:38:61:48:aa: bc:dd:6e:06:d8:39:be:7c:fc:92:cc:3a:ea:0b:87: 66:1a:72:93:9d:3b:a0:2b:f1:78:c9:95:2f:4e:25: 02:dd:a0:33:31:71:da:ac:a5:59:12:af:04:a1:de: 2e:9b:be:7a:ad:62:f5:c0:9a:6f:4f:da:1b:02:41: 65:03:f3:f1:ec:2b:5d:d1:52:fd:b1:eb:bb:da:a6: 5d:8d:43:8f:a0:28:8f:d0:7b:e2:fb:ca:fc:e5:5c: 9e:5d:ea:d0:9f:87:23:8d:a6:6f:07:91:f8:1f:19: f6:5f:ac:ef:40:bb:0c:49:51:a3:c3:07:25:08:55: 29:53:4b:8d:65:d0:33:64:63:26:27:f9:18:9f:2f: ad:d3:12:cb:47:39:a7:7b:d1:b3:e0:a9:be:83:ef: f8:88:36:48:7a:35:eb:4c:6f:a7:0c:99:0d:41:cd: ac:54:23:b7:25:80:85:b4:5d:bd:80:fc:36:3f:47: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9F:A7:59:86:B6:A1:AF:54:49:59:DA:A2:FA:F6:BC:8E:32:E0:02 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c7:1e:49:86:09:3a:85:85:0c:b7:1f:70:81:c4:85:a3:26: 5e:58:fc:85:a5:5e:b7:a5:32:13:52:90:35:67:e7:1d:85:ef: cc:78:87:b7:71:e8:e4:ef:f3:05:d0:80:ac:89:7b:3c:ab:dc: 26:3c:10:92:5a:e8:cb:91:3f:79:0f:2f:bc:73:91:c5:ed:cd: 64:5f:49:41:78:ce:2d:d7:a6:86:40:a4:5d:54:2d:f6:35:d1: f6:c4:f1:c3:31:15:01:6b:f9:95:9c:38:d6:44:3a:91:ec:d7: 16:25:95:82:1c:65:05:a3:d7:01:ee:18:38:3c:14:3f:fb:b3: 37:b6:ba:67:34:25:94:d7:21:e0:de:9f:42:61:18:3b:ed:22: 0a:18:d4:18:e1:25:dc:f0:f1:5a:73:d9:b9:99:d4:00:b7:50: 44:d1:86:6d:a6:34:61:ee:31:0b:a4:b2:be:aa:27:8b:31:f1: 3c:51:f8:ab:67:e9:98:22:62:e3:aa:90:93:8b:dd:d0:a5:c1: 28:47:b7:d6:b4:d0:e4:2a:ed:51:ae:7f:42:a2:5f:6b:97:cb: f5:d8:e7:f0:9e:76:74:41:13:75:b4:7d:9b:ec:1b:b7:25:a9: 05:17:b1:3f:70:bb:d5:e2:14:1d:51:2a:be:7c:b8:de:1e:4e: 66:64:c3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDINOMwBFOrbMZ+32PBwzAmZQmQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTA0MDQwODA1MzdaFw0yNTA0MDcxOTUzMzdaMDMxMTAvBgNV BAMTKEI0OUZBNzU5ODZCNkExQUY1NDQ5NTlEQUEyRkFGNkJDOEUzMkUwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0C08TX4JWTEmOlfQI3WAaZk0q 8d6AqiSu9xT5APYtQmHW8hf1iopBIeY01DGNbBH5EF5DjcgkVYBvyWpORVt6zwlT 0yYTOGFIqrzdbgbYOb58/JLMOuoLh2YacpOdO6Ar8XjJlS9OJQLdoDMxcdqspVkS rwSh3i6bvnqtYvXAmm9P2hsCQWUD8/HsK13RUv2x67vapl2NQ4+gKI/Qe+L7yvzl XJ5d6tCfhyONpm8HkfgfGfZfrO9AuwxJUaPDByUIVSlTS41l0DNkYyYn+RifL63T EstHOad70bPgqb6D7/iINkh6NetMb6cMmQ1BzaxUI7clgIW0Xb2A/DY/R5zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJ+nWYa2oa9USVnaovr2vI4y4AIwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjHHkmGCTqFhQy3H3CBxIWjJl5Y/IWlXrel MhNSkDVn5x2F78x4h7dx6OTv8wXQgKyJezyr3CY8EJJa6MuRP3kPL7xzkcXtzWRf SUF4zi3XpoZApF1ULfY10fbE8cMxFQFr+ZWcONZEOpHs1xYllYIcZQWj1wHuGDg8 FD/7sze2umc0JZTXIeDen0JhGDvtIgoY1BjhJdzw8Vpz2bmZ1AC3UETRhm2mNGHu MQuksr6qJ4sx8TxR+Ktn6ZgiYuOqkJOL3dClwShHt9a00OQq7VGuf0KiX2uXy/XY 5/CednRBE3W0fZvsG7clqQUXsT9wu9XiFB1RKr58uN4eTmZkwwo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:30 2025 by rpki-client