$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: AK2aSTJvlB7ePvD2F1GmRNm24QEJWnBJ+pn/1jacBNs= Subject key identifier: AA:D7:CF:D1:70:6C:6A:B1:6F:CA:A4:BF:F2:2A:9D:43:2B:2D:3D:FE Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 7EA5E149834672F2A25C309528E349CBC15BD11D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0122 Signing time: Sun 06 Apr 2025 14:30:49 +0000 Manifest this update: Sun 06 Apr 2025 14:25:49 +0000 Manifest next update: Wed 09 Apr 2025 16:40:49 +0000 Files and hashes: 1: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: XFsIo6zuwz17xqiKOSEFnvK2Jc1wZXg/6Dw1KB4MNIs=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 5eQlD68HaKHERHfII59DwwAA8bgfmp1d8Ez+zw7QzCU=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7cXszIEC7Z7nD1ldnqKl+8siMGel8w55J7g/+p+W100=) 4: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: FTQc8KTcXWOZuxpHK1FDGQLlT1Om+TzQbY88waIRjVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 16:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a5:e1:49:83:46:72:f2:a2:5c:30:95:28:e3:49:cb:c1:5b:d1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Apr 6 14:25:49 2025 GMT Not After : Apr 9 16:40:49 2025 GMT Subject: CN=AAD7CFD1706C6AB16FCAA4BFF22A9D432B2D3DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:50:99:c0:c3:d6:a2:8f:82:11:72:88:1c: ee:94:e7:37:47:c2:c3:2e:e5:55:ee:37:a9:6f:5e: 20:0c:23:40:9f:7e:a7:aa:bb:18:eb:d7:84:3e:e4: ea:02:69:57:3d:ac:15:90:76:0d:c4:9c:54:f5:fc: ee:c2:62:bc:9e:58:38:d5:cb:41:b0:f8:c6:32:a7: 63:cc:04:56:d6:25:b5:2a:58:ec:c4:d1:b6:f0:09: 30:ea:3b:80:be:0e:d7:75:fe:40:03:c4:b5:80:d3: c8:22:ca:72:e8:6a:5d:52:fc:45:9c:e0:4e:e2:ba: 02:14:ea:09:34:35:8a:8d:2b:66:c3:43:b5:dc:36: 4e:4c:2d:f3:ff:31:cf:2d:45:dc:ef:39:72:54:91: 1e:d0:a5:ae:ee:dd:9a:54:9c:73:c9:4e:1b:b7:4f: ed:a3:95:e7:cf:46:3a:89:fa:b7:dc:46:1d:35:c8: 96:a0:10:82:0c:42:d7:50:7e:45:5c:df:e2:a3:94: 32:19:5b:e0:30:78:32:f7:17:fb:5c:7b:fc:1d:de: 7f:11:80:a6:9f:2f:bc:8b:f7:fc:78:3b:5c:18:fc: 64:4f:02:49:a0:ce:90:18:79:85:54:85:b9:21:66: b7:2a:22:a1:31:12:07:a7:63:45:2d:7e:a9:56:c5: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:CF:D1:70:6C:6A:B1:6F:CA:A4:BF:F2:2A:9D:43:2B:2D:3D:FE X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ef:f2:0c:51:0d:14:a7:cc:32:ad:80:34:d0:d0:d6:f9:a2: f1:f7:b6:eb:a7:08:21:a8:36:b2:90:f4:9b:d1:d6:bc:73:d9: ef:dc:21:1b:b3:43:09:0b:8c:9f:30:14:c0:97:b5:c4:e7:7d: 99:e9:d7:a7:35:2c:82:23:a3:22:c3:ae:32:ec:f9:1f:2e:ad: 0c:20:46:ba:ea:9e:6b:92:bb:bd:d4:c2:02:6e:0a:ad:13:0a: ab:5a:c6:09:0f:b9:43:49:7c:1d:b1:5d:9c:02:8d:18:4d:a6: 48:b2:4e:cc:97:ef:7d:c6:33:74:e4:4d:72:ec:ce:06:f4:9c: 23:ae:a5:92:38:92:83:af:f4:5a:ec:80:cd:01:33:dd:fd:55: 78:83:f0:60:e5:55:b8:a0:29:83:14:55:fb:42:47:16:02:f5: 90:fc:2e:ba:90:10:61:c7:a6:f1:99:83:f6:c2:b2:c0:8b:b9: 9a:24:26:7a:a0:b5:06:4c:86:52:5d:4b:8b:e4:70:0c:ca:f8: 8e:5c:73:3b:27:57:5e:ef:0a:c8:e7:93:8f:da:63:10:9e:f5: a7:65:22:17:6e:de:91:c8:5e:c0:a8:e8:cf:7e:ef:19:9a:b7: 0d:6b:ab:af:89:96:23:ca:2f:42:7f:88:9e:a7:91:36:cf:98: 36:fe:d3:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqXhSYNGcvKiXDCVKONJy8Fb0R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA0MDYxNDI1NDlaFw0yNTA0MDkxNjQwNDlaMDMxMTAvBgNV BAMTKEFBRDdDRkQxNzA2QzZBQjE2RkNBQTRCRkYyMkE5RDQzMkIyRDNERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZVCZwMPWoo+CEXKIHO6U5zdH wsMu5VXuN6lvXiAMI0Cffqequxjr14Q+5OoCaVc9rBWQdg3EnFT1/O7CYryeWDjV y0Gw+MYyp2PMBFbWJbUqWOzE0bbwCTDqO4C+Dtd1/kADxLWA08giynLoal1S/EWc 4E7iugIU6gk0NYqNK2bDQ7XcNk5MLfP/Mc8tRdzvOXJUkR7Qpa7u3ZpUnHPJThu3 T+2jlefPRjqJ+rfcRh01yJagEIIMQtdQfkVc3+KjlDIZW+AweDL3F/tce/wd3n8R gKafL7yL9/x4O1wY/GRPAkmgzpAYeYVUhbkhZrcqIqExEgenY0UtfqlWxdBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtfP0XBsarFvyqS/8iqdQystPf4wHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjv8gxRDRSnzDKtgDTQ0Nb5ovH3tuunCCGo NrKQ9JvR1rxz2e/cIRuzQwkLjJ8wFMCXtcTnfZnp16c1LIIjoyLDrjLs+R8urQwg RrrqnmuSu73UwgJuCq0TCqtaxgkPuUNJfB2xXZwCjRhNpkiyTsyX733GM3TkTXLs zgb0nCOupZI4koOv9FrsgM0BM939VXiD8GDlVbigKYMUVftCRxYC9ZD8LrqQEGHH pvGZg/bCssCLuZokJnqgtQZMhlJdS4vkcAzK+I5cczsnV17vCsjnk4/aYxCe9adl Ihdu3pHIXsCo6M9+7xmatw1rq6+JliPKL0J/iJ6nkTbPmDb+0zU= -----END CERTIFICATE-----Generated at Mon Apr 7 10:34:03 2025 by rpki-client