$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: Ozx+Hp5sDY7nZ+u8/MjspHHUobxjyOJzkzYN7yhElPU= Subject key identifier: 52:C5:79:57:51:42:77:4C:9F:A2:04:CB:27:57:62:51:95:06:3E:22 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 3BA1D117E52E72AB8DBA88D2219CC1F8C38E4B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 90 Signing time: Sun 06 Apr 2025 05:50:57 +0000 Manifest this update: Sun 06 Apr 2025 05:45:57 +0000 Manifest next update: Wed 09 Apr 2025 06:19:57 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: ruDlvZxwzH98WABBPfx4jUikFQHB1Z32f5yF+Dmn3Ng=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: LhuD37+2h8h6rVU+Tz1jzZs1zyu7ygx3cpoeLSlTsS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 06:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a1:d1:17:e5:2e:72:ab:8d:ba:88:d2:21:9c:c1:f8:c3:8e:4b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 6 05:45:57 2025 GMT Not After : Apr 9 06:19:57 2025 GMT Subject: CN=52C579575142774C9FA204CB2757625195063E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:2b:e7:78:37:b3:30:83:51:55:4a:34:71: 93:42:cf:6d:26:42:e2:1d:38:ba:f6:80:3b:95:37: 6e:2e:34:0d:a1:13:81:7d:51:4d:10:51:57:71:26: c8:50:62:a9:d7:8f:07:4c:72:5f:9b:08:7a:ed:af: 8c:3b:8a:84:a9:3c:cd:53:75:8d:4c:fe:4a:a2:3f: 4e:29:7c:be:74:b7:8e:f4:b6:96:16:1c:08:e6:1c: 3d:9b:d6:4f:2c:0e:c0:fa:54:4c:06:1f:55:49:1e: 62:ac:96:23:af:8b:69:db:20:13:2a:be:0d:61:d6: 08:d2:54:3d:ee:90:2a:ab:60:44:df:71:51:fb:ef: 25:15:dc:7d:be:5c:9c:0e:79:ef:4a:76:49:7b:3f: 69:13:7d:ba:e9:4d:02:cf:51:55:dd:4c:01:30:d1: 56:da:10:cf:df:80:63:84:56:72:21:2f:15:52:be: 0a:01:c0:7d:96:45:62:f8:2b:b8:b4:ec:cd:32:33: 1c:0c:a0:5d:8f:91:a3:39:22:62:fc:04:63:52:72: d2:c9:c4:46:02:a3:9e:ad:a7:f4:df:c1:f0:18:36: 97:81:84:e4:d1:42:fa:b1:c9:26:90:44:14:3a:6e: 00:aa:23:16:62:f7:fc:3d:28:25:d4:01:ed:84:22: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:79:57:51:42:77:4C:9F:A2:04:CB:27:57:62:51:95:06:3E:22 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3b:a6:e4:80:fd:ba:de:a2:ba:2b:ae:93:fd:b4:28:4a:b6: 5e:39:8c:a5:19:ac:69:83:39:a6:f6:b6:27:c6:35:8e:c2:f4: 7e:4c:8b:b4:73:7e:7c:4b:67:01:41:6d:f9:ea:85:1f:43:e0: 50:5b:62:c1:10:d9:19:ce:f2:04:64:f7:a0:f8:34:cd:23:84: a2:01:5d:fb:e2:93:c5:39:8b:17:81:e6:28:13:94:7c:55:06: 23:2b:92:ac:ec:1b:4e:10:1a:19:84:14:41:9e:e8:55:57:9f: ba:89:98:6d:13:48:4c:8b:49:fb:f6:15:b6:d8:da:5b:c9:b1: 37:c8:6d:bf:e7:74:51:6e:32:93:85:4e:b3:61:b7:eb:d2:cd: 9a:97:c5:a9:4e:75:24:db:1a:bb:31:4d:c4:9a:9d:10:e8:02: ed:0e:0f:9f:3f:b1:29:8e:16:63:7c:44:44:cd:51:c5:31:84: a0:de:1c:99:27:1d:0a:e1:f0:89:2f:76:7d:bb:23:8f:d4:8c: 05:bc:a0:31:a0:2b:b3:81:78:e4:c7:b7:05:ad:63:87:32:b3: 70:89:cd:db:7d:8e:dd:cd:3a:1c:14:85:99:55:d5:cf:e3:98: 73:79:45:3b:9c:76:d8:1f:8f:6d:ae:11:0e:58:b0:20:47:69: ac:6b:e0:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6HRF+UucquNuojSIZzB+MOOSxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA0MDYwNTQ1NTdaFw0yNTA0MDkwNjE5NTdaMDMxMTAvBgNV BAMTKDUyQzU3OTU3NTE0Mjc3NEM5RkEyMDRDQjI3NTc2MjUxOTUwNjNFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1CvneDezMINRVUo0cZNCz20m QuIdOLr2gDuVN24uNA2hE4F9UU0QUVdxJshQYqnXjwdMcl+bCHrtr4w7ioSpPM1T dY1M/kqiP04pfL50t470tpYWHAjmHD2b1k8sDsD6VEwGH1VJHmKsliOvi2nbIBMq vg1h1gjSVD3ukCqrYETfcVH77yUV3H2+XJwOee9Kdkl7P2kTfbrpTQLPUVXdTAEw 0VbaEM/fgGOEVnIhLxVSvgoBwH2WRWL4K7i07M0yMxwMoF2PkaM5ImL8BGNSctLJ xEYCo56tp/TfwfAYNpeBhOTRQvqxySaQRBQ6bgCqIxZi9/w9KCXUAe2EIhiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsV5V1FCd0yfogTLJ1diUZUGPiIwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs7puSA/breororrpP9tChKtl45jKUZrGmD Oab2tifGNY7C9H5Mi7RzfnxLZwFBbfnqhR9D4FBbYsEQ2RnO8gRk96D4NM0jhKIB Xfvik8U5ixeB5igTlHxVBiMrkqzsG04QGhmEFEGe6FVXn7qJmG0TSEyLSfv2FbbY 2lvJsTfIbb/ndFFuMpOFTrNht+vSzZqXxalOdSTbGrsxTcSanRDoAu0OD58/sSmO FmN8RETNUcUxhKDeHJknHQrh8Ikvdn27I4/UjAW8oDGgK7OBeOTHtwWtY4cys3CJ zdt9jt3NOhwUhZlV1c/jmHN5RTucdtgfj22uEQ5YsCBHaaxr4GA= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:15 2025 by rpki-client