$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: qDKM854YRmh1ZUaLoJO082xgp2qeRJpQJA37heYPQko= Subject key identifier: BF:72:70:23:97:47:C2:16:0E:3A:D2:A6:EA:4B:8A:4D:62:45:35:8C Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 2E1292E9D50EC6C005C0DFAECC2B4D5B9FA22EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0325 Signing time: Tue 08 Apr 2025 02:11:36 +0000 Manifest this update: Tue 08 Apr 2025 02:06:36 +0000 Manifest next update: Fri 11 Apr 2025 12:25:36 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: RCSsugrVHHaWW1VoTpB/pu1sLvL9ikhdper77PML78k=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: 1oBi52XFtqvCZ2a4BZr5dEnnF9q5LEbCYvbvAxUbvWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 12:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:12:92:e9:d5:0e:c6:c0:05:c0:df:ae:cc:2b:4d:5b:9f:a2:2e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Apr 8 02:06:36 2025 GMT Not After : Apr 11 12:25:36 2025 GMT Subject: CN=BF7270239747C2160E3AD2A6EA4B8A4D6245358C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:79:d7:df:ca:b8:40:51:65:61:fe:69:1a: 4d:19:95:a5:a6:34:31:4a:53:64:1b:e4:9e:99:42: d7:c8:77:ba:75:55:1b:4d:f8:c4:0f:ef:98:78:41: 72:e4:51:17:b7:5b:31:53:4c:e8:e1:3b:2a:3d:5e: 04:ce:52:99:94:0e:76:64:a7:62:4b:fb:0a:51:82: 97:20:01:45:58:ad:3e:c0:1b:87:78:ce:2f:3d:a1: 6e:65:2f:bc:88:be:d5:d7:2b:ee:b8:31:aa:c2:94: c8:bd:49:6e:5b:0d:1e:73:40:ad:ed:42:1b:5a:7d: 76:a7:e7:84:d5:db:d6:f2:6e:eb:6e:d7:58:0e:78: 1f:ca:ca:ac:23:6e:c5:26:1e:b9:88:b9:bc:14:63: 04:05:8b:2b:c4:bc:b2:86:e3:c0:c4:02:43:73:b1: 1a:3a:69:5d:69:16:8b:fa:41:c5:cd:9c:ac:78:7e: 62:03:e1:9b:8c:1d:ff:97:20:34:28:67:7f:a3:8a: 50:53:5f:d6:4e:9e:85:cc:3f:a4:76:a7:3e:59:b1: 66:ea:72:2e:70:5a:7a:fd:1a:83:2c:65:ae:6c:39: 7b:c5:7e:b1:99:ed:69:94:d5:93:5f:7e:63:ef:45: e1:98:8d:d6:0a:69:33:f6:3d:11:e2:bc:7a:26:2c: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:70:23:97:47:C2:16:0E:3A:D2:A6:EA:4B:8A:4D:62:45:35:8C X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3a:b5:d7:6c:21:fd:a1:cc:48:90:6f:37:6f:85:45:61:5b: 08:ee:88:93:16:95:43:51:aa:d5:18:06:29:7a:a0:a9:b0:d6: 2f:d4:47:f7:f6:5c:52:f3:bf:4f:a9:4d:36:79:d5:a0:ba:9c: 77:e4:ae:d9:2f:99:3c:9d:46:36:cc:ce:9a:e7:11:56:f7:d5: 08:5d:92:87:8b:3f:33:23:a6:9f:b5:79:00:01:5c:fa:07:20: 41:f2:09:a8:03:18:c9:6b:ec:15:75:95:10:04:0a:b9:57:75: ed:16:eb:64:51:65:4e:ed:e8:b7:ba:4e:e6:69:3c:d6:4a:92: 00:f3:dc:30:ae:cf:12:eb:c1:fc:6a:74:e4:c6:1b:8e:84:6c: f0:27:b1:ed:71:0f:a6:1a:ae:44:58:25:73:9a:59:23:1b:d0: 45:a8:e2:aa:b6:60:27:30:f2:a1:77:36:99:48:e6:54:0d:81: 64:d0:66:1a:95:14:d2:c3:77:4a:3a:11:f3:25:c6:7a:1c:b9: f7:28:54:c2:8a:f7:54:5a:50:30:57:7d:64:e9:9c:60:c4:d8: 9b:5b:40:42:04:0c:d9:78:58:b4:c8:fd:c6:39:5e:6d:b6:5b: 4d:99:ee:8a:89:be:06:88:66:70:1b:83:3b:3f:20:fb:5c:9d: 4b:15:da:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhKS6dUOxsAFwN+uzCtNW5+iLrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA0MDgwMjA2MzZaFw0yNTA0MTExMjI1MzZaMDMxMTAvBgNV BAMTKEJGNzI3MDIzOTc0N0MyMTYwRTNBRDJBNkVBNEI4QTRENjI0NTM1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq3nX38q4QFFlYf5pGk0ZlaWm NDFKU2Qb5J6ZQtfId7p1VRtN+MQP75h4QXLkURe3WzFTTOjhOyo9XgTOUpmUDnZk p2JL+wpRgpcgAUVYrT7AG4d4zi89oW5lL7yIvtXXK+64MarClMi9SW5bDR5zQK3t QhtafXan54TV29bybutu11gOeB/KyqwjbsUmHrmIubwUYwQFiyvEvLKG48DEAkNz sRo6aV1pFov6QcXNnKx4fmID4ZuMHf+XIDQoZ3+jilBTX9ZOnoXMP6R2pz5ZsWbq ci5wWnr9GoMsZa5sOXvFfrGZ7WmU1ZNffmPvReGYjdYKaTP2PRHivHomLC4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3JwI5dHwhYOOtKm6kuKTWJFNYwwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE6tddsIf2hzEiQbzdvhUVhWwjuiJMWlUNR qtUYBil6oKmw1i/UR/f2XFLzv0+pTTZ51aC6nHfkrtkvmTydRjbMzprnEVb31Qhd koeLPzMjpp+1eQABXPoHIEHyCagDGMlr7BV1lRAECrlXde0W62RRZU7t6Le6TuZp PNZKkgDz3DCuzxLrwfxqdOTGG46EbPAnse1xD6YarkRYJXOaWSMb0EWo4qq2YCcw 8qF3NplI5lQNgWTQZhqVFNLDd0o6EfMlxnocufcoVMKK91RaUDBXfWTpnGDE2Jtb QEIEDNl4WLTI/cY5Xm22W02Z7oqJvgaIZnAbgzs/IPtcnUsV2nU= -----END CERTIFICATE-----Generated at Thu Apr 10 13:14:27 2025 by rpki-client