$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: QUQnn/9b0oZGfDEvTQICMslSgO7Lc5tofEuM2ZvqnJ4= Subject key identifier: 11:1E:84:8E:B1:05:83:8E:04:01:EB:E4:04:5C:E5:A8:7E:B5:E5:95 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 2C35439E74065E3C8A59B4FBE0FD9DF2E9CA83BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 6E Signing time: Sun 13 Apr 2025 20:50:00 +0000 Manifest this update: Sun 13 Apr 2025 20:45:00 +0000 Manifest next update: Thu 17 Apr 2025 06:26:00 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1k/F9QvhsWyHzMYSAMED8rAGgh3NCF/Y7RiQpGt2sak=) 2: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: 4DRyhmndqTj2PT3j7eZHVC63WBBqqNlzVKIsK0nqI50=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: 1H3IKAx7UXRMU3wtvDvmP+OHRrM19D65H1BvyoXZOOA=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:43:9e:74:06:5e:3c:8a:59:b4:fb:e0:fd:9d:f2:e9:ca:83:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Apr 13 20:45:00 2025 GMT Not After : Apr 17 06:26:00 2025 GMT Subject: CN=111E848EB105838E0401EBE4045CE5A87EB5E595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:db:23:36:b5:b4:9c:b8:14:32:17:5b:e5: 2d:e8:fa:8f:f5:5a:78:d3:4e:06:17:e7:ee:af:95: 75:1b:e5:cf:b7:a9:ad:f3:4f:f0:5c:b5:0b:72:34: b5:36:92:3d:65:6e:e4:4c:d8:0d:c3:35:c9:ed:55: 52:13:9b:65:51:53:92:69:9d:54:5d:e8:f8:00:23: e1:04:2b:ed:7c:b4:a4:73:ec:24:88:e8:dd:72:44: 68:49:34:48:3b:9e:7a:fa:da:ad:ed:f3:5b:13:44: d5:c8:45:a7:d0:24:38:c2:46:82:78:b2:95:2c:a9: 38:e1:4e:3f:f5:22:c3:ca:18:c9:55:63:d4:4e:fd: c2:ec:ed:52:39:62:7c:e5:d0:1d:80:e3:47:39:7e: d7:02:61:ca:09:30:91:a6:73:3a:67:87:54:50:c7: 32:09:4f:77:b2:8b:24:a5:7c:a1:76:bd:a1:7f:0a: b0:5e:b5:a8:f1:ce:a3:f3:98:04:3c:66:38:d4:b0: 9d:d4:bc:34:ea:d8:8d:2a:c1:ef:51:4a:43:af:40: 65:5e:33:8d:43:6e:e5:49:f5:05:5b:08:8e:20:47: f0:80:14:48:61:a7:95:4b:b7:bb:d4:42:f4:60:f6: e0:b0:18:69:3f:02:4e:42:f9:3d:f7:b0:8c:81:34: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1E:84:8E:B1:05:83:8E:04:01:EB:E4:04:5C:E5:A8:7E:B5:E5:95 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:17:de:2e:d6:c0:6d:f7:44:4c:1f:34:93:32:be:91:ac:10: 7b:60:5d:cc:44:9f:77:7b:a9:f1:5e:a9:b1:7f:4c:ec:66:c0: d4:e1:03:fd:57:1a:b8:75:66:92:07:0b:9b:98:57:ef:9d:af: 2f:a6:c9:a3:bd:c2:05:57:41:03:1d:da:af:e4:a7:9b:f7:d2: ab:2a:21:71:30:7a:26:cc:d1:98:e9:a7:67:11:cd:d0:38:29: a8:5b:24:1c:fe:58:f4:4e:03:c1:4c:ec:ad:c8:ad:f2:0e:93: ac:7c:08:b5:d1:1c:82:59:61:b5:b9:01:aa:d9:cf:74:11:5a: 6f:05:bb:10:eb:c2:92:03:9a:c3:63:d3:f3:1f:4d:60:3e:a9: d5:c8:c6:28:e4:3c:a6:0e:3e:72:73:e0:9d:dd:0a:70:5e:c0: 43:24:07:fb:11:66:77:e8:32:e7:96:34:8d:c3:ef:a3:7a:a5: 52:3b:52:99:94:6f:31:24:cd:1f:bc:31:7d:d9:40:7a:af:60: 26:5d:b8:3f:bc:4a:4c:1b:76:50:15:9d:be:cc:f8:94:e4:e1: ec:d3:ec:e1:c2:36:5c:d7:44:da:94:5c:63:39:13:64:22:4f: 08:db:33:60:fc:a1:b6:23:32:55:9b:01:da:09:31:0b:5f:40: 49:68:21:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDVDnnQGXjyKWbT74P2d8unKg7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTA0MTMyMDQ1MDBaFw0yNTA0MTcwNjI2MDBaMDMxMTAvBgNV BAMTKDExMUU4NDhFQjEwNTgzOEUwNDAxRUJFNDA0NUNFNUE4N0VCNUU1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0NsjNrW0nLgUMhdb5S3o+o/1 WnjTTgYX5+6vlXUb5c+3qa3zT/BctQtyNLU2kj1lbuRM2A3DNcntVVITm2VRU5Jp nVRd6PgAI+EEK+18tKRz7CSI6N1yRGhJNEg7nnr62q3t81sTRNXIRafQJDjCRoJ4 spUsqTjhTj/1IsPKGMlVY9RO/cLs7VI5Ynzl0B2A40c5ftcCYcoJMJGmczpnh1RQ xzIJT3eyiySlfKF2vaF/CrBetajxzqPzmAQ8ZjjUsJ3UvDTq2I0qwe9RSkOvQGVe M41DbuVJ9QVbCI4gR/CAFEhhp5VLt7vUQvRg9uCwGGk/Ak5C+T33sIyBNOfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUER6EjrEFg44EAevkBFzlqH615ZUwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIX3i7WwG33REwfNJMyvpGsEHtgXcxEn3d7 qfFeqbF/TOxmwNThA/1XGrh1ZpIHC5uYV++dry+myaO9wgVXQQMd2q/kp5v30qsq IXEweibM0Zjpp2cRzdA4KahbJBz+WPROA8FM7K3IrfIOk6x8CLXRHIJZYbW5AarZ z3QRWm8FuxDrwpIDmsNj0/MfTWA+qdXIxijkPKYOPnJz4J3dCnBewEMkB/sRZnfo MueWNI3D76N6pVI7UpmUbzEkzR+8MX3ZQHqvYCZduD+8SkwbdlAVnb7M+JTk4ezT 7OHCNlzXRNqUXGM5E2QiTwjbM2D8obYjMlWbAdoJMQtfQEloIT4= -----END CERTIFICATE-----Generated at Tue Apr 15 10:01:10 2025 by rpki-client