$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: fXlg6mESy6weuwmJ891i2bL+1hJN3LZscKu01OXK5mI= Subject key identifier: 44:7D:99:A4:32:F5:87:B0:97:86:09:2A:D8:91:FD:CE:06:9B:61:D4 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 1F926EB924B32DAE86314CC39482B21415B6028B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 8E Signing time: Thu 17 Apr 2025 19:11:31 +0000 Manifest this update: Thu 17 Apr 2025 19:06:31 +0000 Manifest next update: Mon 21 Apr 2025 01:26:31 +0000 Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: yxChVSnUcBAshSi2tdYxCJl1ssWL26R5uijV6Q3HksQ=) 2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: XH+GyDKb/CcREHFz4Hh930xk66JSK2uyN7nC8+9hv0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 01:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:92:6e:b9:24:b3:2d:ae:86:31:4c:c3:94:82:b2:14:15:b6:02:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Apr 17 19:06:31 2025 GMT Not After : Apr 21 01:26:31 2025 GMT Subject: CN=447D99A432F587B09786092AD891FDCE069B61D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:64:04:a2:cb:a7:7f:a1:b2:6f:c3:4c:9d: 99:ea:77:ab:65:38:db:3d:b7:65:a2:b4:19:4f:7d: f0:82:29:7e:6b:bf:8f:ca:33:e4:b6:29:81:1c:04: c7:5e:8a:d3:8d:91:36:70:ea:13:f1:50:ec:35:d3: e0:68:8d:15:84:05:26:c4:20:ca:32:e4:96:e3:e4: b5:7a:a7:56:85:40:ed:90:55:92:6d:06:a9:52:ba: 85:be:db:2c:d2:c0:f0:ae:03:84:36:f2:f3:c8:95: ab:9d:1c:40:02:1f:11:80:6d:02:09:f9:ec:79:eb: cd:e5:89:97:b5:e8:65:da:e5:fa:27:be:53:a7:ab: 93:1d:66:26:4a:0f:87:c3:0c:d8:11:93:a7:2c:e2: 57:aa:9c:0c:6c:94:f5:b7:d4:06:72:95:90:ae:06: 1b:d4:a1:a5:7d:77:cb:ff:f1:2d:b9:ff:c4:5f:60: ae:84:b4:06:0a:93:82:7c:84:d6:07:a5:a2:58:fd: 10:16:ba:1a:94:05:4e:89:3f:ac:51:18:fe:e2:f4: cb:55:eb:04:d1:0b:df:f6:af:73:c5:03:ce:cd:8f: bf:bf:6d:17:76:fc:ee:a6:58:31:0a:93:3c:74:79: 85:dc:45:a0:14:6f:4a:c8:74:4d:10:75:72:30:74: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:99:A4:32:F5:87:B0:97:86:09:2A:D8:91:FD:CE:06:9B:61:D4 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c9:0d:c6:d8:2c:b2:2b:4a:2a:c9:d1:db:96:28:f4:a1:07: 26:f3:57:a9:92:ac:fd:9a:a1:57:f8:e6:5a:6c:5b:a2:61:42: b4:b1:65:85:2a:de:36:20:75:f8:9a:4b:eb:4b:06:40:b3:3d: d6:ee:f0:6c:9c:66:50:77:95:61:c8:e3:2b:c5:9b:ea:31:47: 43:b4:af:05:bf:65:81:53:fc:6c:bc:29:19:85:1c:14:7a:3e: 30:d4:23:e6:07:ed:6c:f8:73:15:86:69:1f:4e:05:fc:b9:71: f2:6a:19:c9:87:a2:e3:32:1b:75:28:8f:8a:08:0f:40:b0:b8: 01:e7:39:c8:a2:de:fb:48:b9:85:75:15:3d:22:e8:da:d7:4a: 65:02:6b:d1:c6:bb:cd:a4:73:7c:04:bf:63:b6:3e:c9:66:2e: 70:2e:b0:09:a9:7f:16:8e:12:a8:42:4f:e2:af:b8:4e:bc:39: 30:ed:4f:9a:f9:2e:e0:33:33:3c:48:c8:90:54:15:b2:af:b4: e4:0d:a6:10:2a:ea:e5:0a:3e:8c:2c:a6:38:dd:e2:e6:fa:62: 27:e2:6f:fa:ed:70:34:5b:82:e9:4d:d1:70:0f:f4:61:a9:e2: 72:bb:51:a2:cf:77:6c:d6:c6:e2:f4:62:a8:75:54:4f:45:b4: 8b:ff:c1:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5JuuSSzLa6GMUzDlIKyFBW2AoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA0MTcxOTA2MzFaFw0yNTA0MjEwMTI2MzFaMDMxMTAvBgNV BAMTKDQ0N0Q5OUE0MzJGNTg3QjA5Nzg2MDkyQUQ4OTFGRENFMDY5QjYxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSrmQEosunf6Gyb8NMnZnqd6tl ONs9t2WitBlPffCCKX5rv4/KM+S2KYEcBMdeitONkTZw6hPxUOw10+BojRWEBSbE IMoy5Jbj5LV6p1aFQO2QVZJtBqlSuoW+2yzSwPCuA4Q28vPIlaudHEACHxGAbQIJ +ex5683liZe16GXa5fonvlOnq5MdZiZKD4fDDNgRk6cs4leqnAxslPW31AZylZCu BhvUoaV9d8v/8S25/8RfYK6EtAYKk4J8hNYHpaJY/RAWuhqUBU6JP6xRGP7i9MtV 6wTRC9/2r3PFA87Nj7+/bRd2/O6mWDEKkzx0eYXcRaAUb0rIdE0QdXIwdN1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURH2ZpDL1h7CXhgkq2JH9zgabYdQwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrJDcbYLLIrSirJ0duWKPShBybzV6mSrP2a oVf45lpsW6JhQrSxZYUq3jYgdfiaS+tLBkCzPdbu8GycZlB3lWHI4yvFm+oxR0O0 rwW/ZYFT/Gy8KRmFHBR6PjDUI+YH7Wz4cxWGaR9OBfy5cfJqGcmHouMyG3Uoj4oI D0CwuAHnOcii3vtIuYV1FT0i6NrXSmUCa9HGu82kc3wEv2O2PslmLnAusAmpfxaO EqhCT+KvuE68OTDtT5r5LuAzMzxIyJBUFbKvtOQNphAq6uUKPowspjjd4ub6Yifi b/rtcDRbgulN0XAP9GGp4nK7UaLPd2zWxuL0Yqh1VE9FtIv/wWg= -----END CERTIFICATE-----Generated at Sat Apr 19 01:49:07 2025 by rpki-client