$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: EvbX8yhs1XDjtX+0q3ifrn4psAb/0inHRAWZS6q2OI4= Subject key identifier: BB:9C:9C:96:5F:EE:43:30:72:48:ED:37:E0:31:7F:DE:F4:C4:7E:33 Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 3AA3D21693CA49E9D0B6F1FE42C39AE47C5B7A53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 0463 Signing time: Sat 05 Apr 2025 11:30:33 +0000 Manifest this update: Sat 05 Apr 2025 11:25:33 +0000 Manifest next update: Tue 08 Apr 2025 17:56:33 +0000 Files and hashes: 1: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: PU1gfcHLclvgHN7hHNC/CSkYWiAkZBupaZ0zsKy54SU=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: XBcMKvqKnHxV1D5bbi11pDPW6SLy98RnzJVn5qbJXc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:d2:16:93:ca:49:e9:d0:b6:f1:fe:42:c3:9a:e4:7c:5b:7a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Apr 5 11:25:33 2025 GMT Not After : Apr 8 17:56:33 2025 GMT Subject: CN=BB9C9C965FEE43307248ED37E0317FDEF4C47E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:68:fb:1b:09:2f:f2:30:41:ff:66:5a:88: 37:a3:14:ee:4e:96:2c:f0:20:ea:d4:ba:bd:e9:10: bf:b9:3b:8b:33:05:a5:cc:4c:db:b3:30:b7:ca:05: 4e:79:0a:31:c0:b6:97:5b:83:59:05:47:82:c0:0c: 69:b0:56:17:c8:13:24:ca:12:91:12:74:a5:b5:fc: fa:61:8c:fd:be:20:ca:e2:14:88:b5:80:df:e1:f6: da:aa:fd:9f:60:e3:43:c6:be:e7:c5:fa:57:80:f4: 74:f0:9c:b0:8b:bf:bd:b8:24:84:1d:5e:fc:1c:f2: e8:e5:09:d0:07:e7:1e:ec:2a:2d:58:b0:48:56:56: 11:72:af:c1:ea:a8:16:f2:67:95:79:92:df:ae:b6: b5:ef:4f:f3:1d:5e:1e:54:e6:cd:d7:9e:27:d0:d9: 0a:54:d8:42:63:5c:bc:81:0c:f0:d1:8c:50:7f:81: 26:c4:f5:73:0f:97:35:50:97:cc:8b:bb:90:ce:74: 3c:89:3a:35:c9:70:96:49:c8:97:3f:9b:95:f2:f2: 8a:74:46:aa:9c:17:8d:8a:9f:47:be:5d:57:1e:a9: 51:4e:ea:15:44:15:79:42:41:79:0b:12:62:cb:cb: 29:2e:23:d9:2c:f6:ff:9f:aa:8e:7a:c2:d9:bd:d8: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:9C:96:5F:EE:43:30:72:48:ED:37:E0:31:7F:DE:F4:C4:7E:33 X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3a:f5:7e:4e:b1:34:a3:c3:cc:e7:eb:f9:ff:52:50:53:d5: f9:6a:e0:85:92:78:e4:b7:2b:e2:ef:af:3c:3b:d4:90:ed:78: 99:7e:92:2b:18:a5:52:f2:13:57:4e:c2:02:f7:3c:9d:2d:de: 4b:66:62:8a:b4:a0:be:4a:ca:b2:68:84:f5:91:17:70:14:64: d7:79:df:00:c7:f9:8f:ff:67:ea:4c:9b:39:16:7f:d2:fc:fc: d7:40:11:2f:de:ef:2d:f1:cd:e7:56:e1:80:86:cc:b6:83:b9: ae:04:db:ac:f5:ec:a8:dd:04:95:00:14:10:f2:a1:d8:b1:6b: 95:04:50:41:59:f7:fc:66:9a:d7:89:4f:2d:27:da:8b:de:50: 67:22:2b:e2:2a:79:11:df:37:0b:46:69:4f:b2:36:b7:fe:61: a4:37:15:dc:1f:ac:a0:5a:bc:a0:81:54:a1:d2:00:57:18:83: 6f:43:e9:98:b1:50:09:8c:45:d3:9d:ea:69:0b:5f:d9:99:93: 74:88:19:13:1a:64:66:c0:a2:a3:2e:fd:58:82:08:ae:98:bf: 8b:c3:1f:6f:73:d8:3a:18:4a:fb:5e:48:20:c9:8a:0e:39:cd: ec:75:bc:81:41:be:35:46:d5:ce:57:f3:f8:f3:26:8d:07:94: 2f:51:e1:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqPSFpPKSenQtvH+QsOa5HxbelMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNTA0MDUxMTI1MzNaFw0yNTA0MDgxNzU2MzNaMDMxMTAvBgNV BAMTKEJCOUM5Qzk2NUZFRTQzMzA3MjQ4RUQzN0UwMzE3RkRFRjRDNDdFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZGj7Gwkv8jBB/2ZaiDejFO5O lizwIOrUur3pEL+5O4szBaXMTNuzMLfKBU55CjHAtpdbg1kFR4LADGmwVhfIEyTK EpESdKW1/PphjP2+IMriFIi1gN/h9tqq/Z9g40PGvufF+leA9HTwnLCLv724JIQd Xvwc8ujlCdAH5x7sKi1YsEhWVhFyr8HqqBbyZ5V5kt+utrXvT/MdXh5U5s3XnifQ 2QpU2EJjXLyBDPDRjFB/gSbE9XMPlzVQl8yLu5DOdDyJOjXJcJZJyJc/m5Xy8op0 RqqcF42Kn0e+XVceqVFO6hVEFXlCQXkLEmLLyykuI9ks9v+fqo56wtm92DrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu5ycll/uQzBySO034DF/3vTEfjMwHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg69X5OsTSjw8zn6/n/UlBT1flq4IWSeOS3 K+Lvrzw71JDteJl+kisYpVLyE1dOwgL3PJ0t3ktmYoq0oL5KyrJohPWRF3AUZNd5 3wDH+Y//Z+pMmzkWf9L8/NdAES/e7y3xzedW4YCGzLaDua4E26z17KjdBJUAFBDy odixa5UEUEFZ9/xmmteJTy0n2oveUGciK+IqeRHfNwtGaU+yNrf+YaQ3FdwfrKBa vKCBVKHSAFcYg29D6ZixUAmMRdOd6mkLX9mZk3SIGRMaZGbAoqMu/ViCCK6Yv4vD H29z2DoYSvteSCDJig45zex1vIFBvjVG1c5X8/jzJo0HlC9R4aw= -----END CERTIFICATE-----Generated at Mon Apr 7 11:45:31 2025 by rpki-client