$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: NpOYRDWrpFR/+BNpneEx4VedPo2qKXKu1rMNP2B6Gxg= Subject key identifier: 0F:EF:DA:39:91:C2:7C:0E:41:E8:89:00:12:27:03:22:67:A2:74:62 Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 57B1AC73306D68C1AAE9D204949CDD59D022026E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 0181 Signing time: Fri 18 Apr 2025 05:02:04 +0000 Manifest this update: Fri 18 Apr 2025 04:57:04 +0000 Manifest next update: Mon 21 Apr 2025 11:59:04 +0000 Files and hashes: 1: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 2: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: JtKj28O/FZVNdIVy4pT+iKk3NuDMizdHDN0PLStbY2M=) 3: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) 4: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 11:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b1:ac:73:30:6d:68:c1:aa:e9:d2:04:94:9c:dd:59:d0:22:02:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Apr 18 04:57:04 2025 GMT Not After : Apr 21 11:59:04 2025 GMT Subject: CN=0FEFDA3991C27C0E41E889001227032267A27462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:11:0c:fd:29:72:2b:76:2a:e3:0e:71:79: 9a:72:fb:1f:25:39:9c:78:6c:e9:d0:89:56:16:9c: b3:18:cb:a3:fe:93:75:8e:7e:9e:e7:e7:8c:f5:12: 7a:83:10:ed:5f:a7:9f:76:09:6a:b2:2e:a4:f1:6c: b5:5d:13:67:9a:58:16:c5:d0:7d:f3:2e:66:38:26: 5d:2b:1e:7f:f2:01:f5:54:71:98:be:40:02:c3:98: ec:e9:38:c1:38:cb:6a:e5:de:fc:51:23:f4:28:7f: dc:33:cc:f6:40:d6:af:42:8b:68:d0:a3:48:d3:de: 53:a9:f0:67:8e:f7:3b:6b:46:69:f3:5f:e0:6c:5a: 1b:9b:61:4f:e5:fa:4f:0f:a0:8a:2a:46:3b:d5:d4: 6c:83:06:11:df:d7:c3:56:41:25:7a:30:50:83:7a: 7d:a3:1f:21:f3:bb:f5:4f:9a:06:52:64:24:d1:dc: fb:be:fb:e2:66:9e:0e:cb:82:16:78:b6:5d:ac:37: c8:b0:c2:41:a8:2b:16:24:63:2b:0c:24:e5:57:d1: 66:f2:90:23:3d:09:29:49:91:8c:3d:e3:35:f6:17: 38:99:b2:4a:08:67:03:37:36:ae:b8:da:3a:96:b2: a9:11:d2:18:6c:9f:60:6d:f7:e1:f6:71:5c:d2:6c: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EF:DA:39:91:C2:7C:0E:41:E8:89:00:12:27:03:22:67:A2:74:62 X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:49:c7:b1:34:ab:03:20:06:3f:d9:51:b7:4d:db:71:bc:73: 91:3c:ce:ec:58:32:1c:eb:1c:44:5e:9f:17:2d:55:fc:bf:66: bd:ab:ee:c0:bc:ca:5c:f9:c4:d3:15:0d:c5:70:ae:82:a5:b5: d2:dd:dd:81:27:e8:57:e8:b1:2f:0e:93:41:c1:11:18:26:84: f6:eb:2e:24:0e:8c:89:98:83:b6:bf:aa:56:59:54:b7:bd:a7: 57:a8:bd:4c:e5:e0:14:56:75:f4:2f:58:e8:e3:92:dd:e2:eb: 5a:22:bc:a7:f0:ad:af:c3:d7:10:cc:26:b5:17:36:c4:79:8f: ca:c5:91:ba:d8:d3:c8:de:cf:63:f2:63:fe:b5:75:9e:50:6f: 29:05:38:4b:51:ba:cc:86:d3:54:93:05:57:a2:13:bc:17:f2: 12:2d:e3:5d:a8:c0:92:e0:a5:da:0a:21:31:dc:a3:ea:26:96: db:36:98:23:88:c6:08:bb:66:eb:f5:52:ab:24:8f:82:4e:cb: db:77:5b:0e:e2:3d:18:28:82:f4:ab:86:ef:a2:c1:d0:2d:0d: a7:05:bf:b2:1b:ff:45:a2:a6:67:de:0d:99:04:30:fb:8d:bc: 9f:0a:03:1e:13:27:c8:4f:6f:6a:1d:e3:3c:ae:f3:01:1b:aa: f5:d5:dd:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7GsczBtaMGq6dIElJzdWdAiAm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTA0MTgwNDU3MDRaFw0yNTA0MjExMTU5MDRaMDMxMTAvBgNV BAMTKDBGRUZEQTM5OTFDMjdDMEU0MUU4ODkwMDEyMjcwMzIyNjdBMjc0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqxEM/SlyK3Yq4w5xeZpy+x8l OZx4bOnQiVYWnLMYy6P+k3WOfp7n54z1EnqDEO1fp592CWqyLqTxbLVdE2eaWBbF 0H3zLmY4Jl0rHn/yAfVUcZi+QALDmOzpOME4y2rl3vxRI/Qof9wzzPZA1q9Ci2jQ o0jT3lOp8GeO9ztrRmnzX+BsWhubYU/l+k8PoIoqRjvV1GyDBhHf18NWQSV6MFCD en2jHyHzu/VPmgZSZCTR3Pu+++Jmng7LghZ4tl2sN8iwwkGoKxYkYysMJOVX0Wby kCM9CSlJkYw94zX2FziZskoIZwM3Nq642jqWsqkR0hhsn2Bt9+H2cVzSbI+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+/aOZHCfA5B6IkAEicDImeidGIwHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNJx7E0qwMgBj/ZUbdN23G8c5E8zuxYMhzr HERenxctVfy/Zr2r7sC8ylz5xNMVDcVwroKltdLd3YEn6FfosS8Ok0HBERgmhPbr LiQOjImYg7a/qlZZVLe9p1eovUzl4BRWdfQvWOjjkt3i61oivKfwra/D1xDMJrUX NsR5j8rFkbrY08jez2PyY/61dZ5QbykFOEtRusyG01STBVeiE7wX8hIt412owJLg pdoKITHco+omlts2mCOIxgi7Zuv1Uqskj4JOy9t3Ww7iPRgogvSrhu+iwdAtDacF v7Ib/0WipmfeDZkEMPuNvJ8KAx4TJ8hPb2od4zyu8wEbqvXV3fc= -----END CERTIFICATE-----Generated at Sat Apr 19 16:14:21 2025 by rpki-client