$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: o+Dgzle8fcw3eyw1ozEsqQ/j4xWS1GS7am5iVXg9gpA= Subject key identifier: 1F:9D:D6:1C:A6:64:98:C6:2C:8B:56:CE:ED:82:A2:F6:07:CC:29:F6 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 2D38F9D9ADB5CB56DC0FB11AB16C5DEB12F1A4E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 16:50:01 +0000 Manifest this update: Sat 05 Apr 2025 16:45:01 +0000 Manifest next update: Tue 08 Apr 2025 20:43:01 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 5Gu2z13wsV8/WfeUY7V0KVxrIwfV0qSkIlTIHlKZ5/A=) 2: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: xgQd/rPuf45cpwMdqKxEdoY8KAZbjEHoNo5iZUmNsDg=) 3: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: jT4Z6/MHeTnWGxjn2cP7Isj2FH1jLhMnl9NE6MSMYfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:38:f9:d9:ad:b5:cb:56:dc:0f:b1:1a:b1:6c:5d:eb:12:f1:a4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Apr 5 16:45:01 2025 GMT Not After : Apr 8 20:43:01 2025 GMT Subject: CN=1F9DD61CA66498C62C8B56CEED82A2F607CC29F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:91:84:67:df:ee:3e:e6:c8:74:39:50:45: ad:a6:fa:45:9f:27:18:3d:0e:df:55:44:93:45:e9: 9e:1e:3e:59:29:7f:c9:06:4d:d5:5b:26:8e:1b:6f: 98:d5:e2:8f:56:3b:2d:68:5d:3c:88:3f:4f:7d:38: c4:66:d9:ed:6a:13:40:56:ae:b3:12:96:02:8f:ef: f3:12:ba:5b:64:57:2d:2c:16:0e:43:8f:f8:02:52: 60:7f:94:fc:8a:eb:78:f9:7a:14:42:c3:5a:95:e6: 92:75:af:e1:d5:e4:9d:67:bc:9d:72:a0:c3:e3:83: 2a:97:32:7a:20:08:55:0f:95:0c:91:a9:46:df:09: 22:ed:d7:fb:8e:e1:86:81:92:b5:e9:9c:cb:5a:ea: 7a:12:92:a1:ae:dd:0e:c0:0e:21:71:77:66:c8:b8: 00:50:ff:df:69:2f:52:09:a6:bf:81:a1:00:6c:a7: 3d:67:43:88:44:4d:7d:ef:a6:44:81:7c:c5:e0:62: 18:a5:bb:5c:54:6d:fe:f9:a8:f4:f5:e6:73:8a:0d: 1f:3e:db:49:75:a3:44:4b:e2:a8:1b:4d:a3:74:53: f2:08:e4:51:3e:96:9e:21:92:1a:13:9a:9a:83:6f: 23:33:3b:78:83:3e:1e:4e:9a:77:42:21:4d:5f:04: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:D6:1C:A6:64:98:C6:2C:8B:56:CE:ED:82:A2:F6:07:CC:29:F6 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:65:e3:ec:df:81:18:93:65:6f:3f:ff:ce:7c:57:83:14:68: cd:2d:e9:23:c3:cf:13:aa:5a:8b:ce:d2:bf:1e:09:2a:3b:de: c2:fa:b8:cf:96:05:f9:e9:15:da:94:2f:67:b2:64:a3:4a:4d: 7f:6d:16:e5:1f:e6:95:a4:c4:17:92:43:e4:ca:17:e7:b3:c3: e3:2e:1e:ae:23:fc:37:ee:28:ab:a0:06:5c:3e:a7:e6:24:ad: 4e:10:23:05:71:1c:9d:dc:91:23:d9:83:5a:6e:1c:89:8f:0f: 37:a8:0a:dc:00:fb:c5:5e:4a:0b:e4:80:40:3b:57:c1:b5:de: 2c:5b:ae:f2:8f:a6:08:75:d1:84:0c:ba:49:99:3c:72:9b:ed: 51:f7:42:45:cd:af:0e:67:73:fe:f2:10:d0:3f:24:27:09:c3: 23:1a:38:ce:1f:b9:de:4b:36:50:9f:fd:66:f5:32:b4:40:f7: ef:00:68:e3:f5:61:18:0b:48:54:02:cc:30:a1:e1:ef:9b:10: e2:c9:6e:94:b2:c1:a5:9a:c7:01:e9:9a:ed:8b:0e:8e:39:77: d1:7c:e9:4a:88:2b:ce:de:75:3d:ee:e1:61:00:d7:6d:8c:96: a6:30:84:21:f4:c1:83:27:61:6f:3e:39:f8:81:d1:1f:4d:c0: bd:a5:be:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTj52a21y1bcD7EasWxd6xLxpOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA0MDUxNjQ1MDFaFw0yNTA0MDgyMDQzMDFaMDMxMTAvBgNV BAMTKDFGOURENjFDQTY2NDk4QzYyQzhCNTZDRUVEODJBMkY2MDdDQzI5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6ZGEZ9/uPubIdDlQRa2m+kWf Jxg9Dt9VRJNF6Z4ePlkpf8kGTdVbJo4bb5jV4o9WOy1oXTyIP099OMRm2e1qE0BW rrMSlgKP7/MSultkVy0sFg5Dj/gCUmB/lPyK63j5ehRCw1qV5pJ1r+HV5J1nvJ1y oMPjgyqXMnogCFUPlQyRqUbfCSLt1/uO4YaBkrXpnMta6noSkqGu3Q7ADiFxd2bI uABQ/99pL1IJpr+BoQBspz1nQ4hETX3vpkSBfMXgYhilu1xUbf75qPT15nOKDR8+ 20l1o0RL4qgbTaN0U/II5FE+lp4hkhoTmpqDbyMzO3iDPh5OmndCIU1fBPDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH53WHKZkmMYsi1bO7YKi9gfMKfYwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1l4+zfgRiTZW8//858V4MUaM0t6SPDzxOq WovO0r8eCSo73sL6uM+WBfnpFdqUL2eyZKNKTX9tFuUf5pWkxBeSQ+TKF+ezw+Mu Hq4j/DfuKKugBlw+p+YkrU4QIwVxHJ3ckSPZg1puHImPDzeoCtwA+8VeSgvkgEA7 V8G13ixbrvKPpgh10YQMukmZPHKb7VH3QkXNrw5nc/7yENA/JCcJwyMaOM4fud5L NlCf/Wb1MrRA9+8AaOP1YRgLSFQCzDCh4e+bEOLJbpSywaWaxwHpmu2LDo45d9F8 6UqIK87edT3u4WEA122MlqYwhCH0wYMnYW8+OfiB0R9NwL2lvqs= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:08 2025 by rpki-client