$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: SSjnYKstyjTfXYtBJmNqNg9XuFyQvvFy+qisahwXPek= Subject key identifier: 50:C7:9F:91:B5:91:6C:C9:AC:EA:61:02:9E:AE:D6:CC:A9:D8:97:E0 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 686A11655A325F1C432A7C47FC3997977845C2E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: DB Signing time: Fri 04 Apr 2025 02:10:39 +0000 Manifest this update: Fri 04 Apr 2025 02:05:39 +0000 Manifest next update: Mon 07 Apr 2025 10:21:39 +0000 Files and hashes: 1: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: 0pbhY3+ZOn905lOOqLf7iFU1/R0Kw6NLkuPOqSHrcx4=) 2: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) 3: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: ri6zVldaGRpOaYEv3osVBPZnxBBgRNJX89+3uDFPHP8=) 4: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6a:11:65:5a:32:5f:1c:43:2a:7c:47:fc:39:97:97:78:45:c2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Apr 4 02:05:39 2025 GMT Not After : Apr 7 10:21:39 2025 GMT Subject: CN=50C79F91B5916CC9ACEA61029EAED6CCA9D897E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:90:fa:f4:0e:4c:c5:c8:0b:1b:e1:f5:d2: 71:d2:85:52:57:32:88:53:98:99:fb:1c:ea:8e:9a: a7:2b:26:79:04:5d:8a:69:bb:f6:47:4f:9c:17:73: 7c:18:95:dc:1b:fb:9a:2b:e7:b3:54:c7:e0:6c:f0: 6b:fd:4b:cc:7c:29:34:71:03:9a:b1:db:fb:f6:d3: 71:a3:f6:01:cc:54:25:9a:34:8e:ba:ac:96:61:db: dd:c9:00:d7:0a:98:44:52:0b:57:7b:a9:bd:8e:5e: 54:16:40:fa:6a:3f:1b:7c:00:19:3c:c0:e3:39:b4: b4:82:4b:5b:1d:a8:7e:74:81:46:66:88:a2:16:c4: cb:76:e1:c1:50:d0:62:22:00:0e:12:65:26:a2:ba: da:4b:bc:b7:29:f3:36:a7:08:db:c5:9d:bc:68:90: e3:17:30:df:b3:50:32:46:ca:da:83:fe:44:25:9a: 5b:17:b3:f1:ec:45:a2:38:72:dc:12:bf:93:65:35: c7:40:cb:df:07:26:a9:29:23:a3:de:55:78:50:25: 48:5b:cf:9f:15:7b:e3:2d:a2:7b:a1:bd:e2:62:7e: fb:c5:d1:bc:cd:1e:34:9f:c9:3c:e2:11:fd:5a:cf: dd:0e:4d:c1:64:cd:04:f3:44:66:f6:fd:d3:00:88: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:9F:91:B5:91:6C:C9:AC:EA:61:02:9E:AE:D6:CC:A9:D8:97:E0 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d0:aa:7c:0a:07:21:81:d9:55:63:07:47:35:e0:c8:3c:05: b1:86:be:7d:26:df:f4:ed:05:7f:fc:e6:e7:16:7f:51:01:23: 3f:2b:95:85:ee:74:84:db:4d:77:52:13:58:52:85:6d:f7:54: 91:b6:81:7f:92:75:c9:c5:80:24:43:6c:90:7f:10:78:dc:78: 1b:ed:71:d6:b3:4e:70:4a:c5:9a:39:ab:a8:5c:27:b5:0b:46: 59:9b:04:48:45:a2:56:48:37:31:f6:47:d6:3d:f6:bb:65:f2: 77:46:e6:f1:37:ca:0a:19:12:4e:e2:47:d2:3c:f3:35:d6:91: b4:71:71:5d:69:0e:57:ed:30:26:23:a5:35:71:f5:b7:3d:fc: 2a:d1:03:78:1d:d5:16:64:e7:9e:2b:4e:e5:8e:fc:ca:43:86: 70:0c:f1:e0:40:05:a9:d8:a1:87:d9:28:bc:19:7a:fa:07:55: 39:a1:60:1d:24:8b:fa:2d:bd:7c:d8:3a:8c:83:db:19:da:d2: f8:1c:56:32:91:6d:9d:5e:ef:5e:d2:b3:77:e6:81:b9:6a:aa: ac:ff:28:a8:2f:56:80:81:d9:34:cc:94:2e:ce:af:20:4a:ea: b3:d1:5c:26:68:b4:9f:c5:2c:6c:ff:21:29:6a:5c:03:d8:f9: 2c:2b:8f:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGoRZVoyXxxDKnxH/DmXl3hFwugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA0MDQwMjA1MzlaFw0yNTA0MDcxMDIxMzlaMDMxMTAvBgNV BAMTKDUwQzc5RjkxQjU5MTZDQzlBQ0VBNjEwMjlFQUVENkNDQTlEODk3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8V5D69A5MxcgLG+H10nHShVJX MohTmJn7HOqOmqcrJnkEXYppu/ZHT5wXc3wYldwb+5or57NUx+Bs8Gv9S8x8KTRx A5qx2/v203Gj9gHMVCWaNI66rJZh293JANcKmERSC1d7qb2OXlQWQPpqPxt8ABk8 wOM5tLSCS1sdqH50gUZmiKIWxMt24cFQ0GIiAA4SZSaiutpLvLcp8zanCNvFnbxo kOMXMN+zUDJGytqD/kQlmlsXs/HsRaI4ctwSv5NlNcdAy98HJqkpI6PeVXhQJUhb z58Ve+MtonuhveJifvvF0bzNHjSfyTziEf1az90OTcFkzQTzRGb2/dMAiPMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMefkbWRbMms6mECnq7WzKnYl+AwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXQqnwKByGB2VVjB0c14Mg8BbGGvn0m3/Tt BX/85ucWf1EBIz8rlYXudITbTXdSE1hShW33VJG2gX+SdcnFgCRDbJB/EHjceBvt cdazTnBKxZo5q6hcJ7ULRlmbBEhFolZINzH2R9Y99rtl8ndG5vE3ygoZEk7iR9I8 8zXWkbRxcV1pDlftMCYjpTVx9bc9/CrRA3gd1RZk554rTuWO/MpDhnAM8eBABanY oYfZKLwZevoHVTmhYB0ki/otvXzYOoyD2xna0vgcVjKRbZ1e717Ss3fmgblqqqz/ KKgvVoCB2TTMlC7OryBK6rPRXCZotJ/FLGz/ISlqXAPY+Swrj7I= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:19 2025 by rpki-client