$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: gg0wnDgSUicQXz58PoyNz0nPb4bZV9BT5CSp7S5ZjIY= Subject key identifier: 76:6A:71:C5:03:D9:63:A6:6A:DA:80:4C:4A:A8:20:0D:9F:D0:45:ED Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 175BACB4CB16066CC66FA4E877C1511F0DED07E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 0188 Signing time: Fri 04 Apr 2025 20:31:51 +0000 Manifest this update: Fri 04 Apr 2025 20:26:51 +0000 Manifest next update: Mon 07 Apr 2025 22:56:51 +0000 Files and hashes: 1: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) 2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) 3: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: jo7S9ovSBz7VFKREa5fWTeq763HkppG5/q6hsIvg5lQ=) 4: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:ac:b4:cb:16:06:6c:c6:6f:a4:e8:77:c1:51:1f:0d:ed:07:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Apr 4 20:26:51 2025 GMT Not After : Apr 7 22:56:51 2025 GMT Subject: CN=766A71C503D963A66ADA804C4AA8200D9FD045ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:b1:0a:28:05:4c:51:53:4b:ab:52:3f:6a: 97:9b:3d:34:ad:b3:d0:55:17:35:ff:09:8e:5a:0b: 90:cf:0a:52:c2:64:95:c4:fc:d5:ce:d3:c9:aa:73: b4:04:20:66:b4:59:c4:08:c0:56:1e:78:a8:c0:9e: f1:f3:a9:8f:91:48:9b:22:93:12:19:2c:46:27:56: b3:85:62:54:24:aa:9c:67:27:af:cd:37:f4:d3:2e: aa:13:10:89:38:aa:63:c7:ca:53:4f:b3:a8:33:d8: e6:34:e0:b7:6c:5f:e4:ab:1a:65:aa:24:24:06:34: 4f:e2:d0:ac:f3:b8:a1:db:7a:84:fe:da:89:d0:d7: 14:f2:89:33:94:6d:b0:0d:23:94:2a:9b:73:2c:9c: 90:6c:a9:00:ac:0c:65:33:db:d9:25:0e:80:31:03: 2a:a8:b7:91:00:0b:bf:40:38:00:37:7a:75:0e:7b: 1c:b0:43:f4:62:46:6e:a7:f5:1d:e8:81:75:e8:10: d5:5e:0c:db:b2:fb:5f:8c:ee:2b:b5:25:75:11:52: 33:cc:e9:f4:fb:b0:13:ef:77:8e:62:a1:dc:66:8a: fc:fd:5a:91:a3:0e:41:b3:82:6d:0c:b6:c9:23:03: 1e:6e:3b:98:8b:fa:a0:a7:39:2a:ba:b2:5b:85:e2: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6A:71:C5:03:D9:63:A6:6A:DA:80:4C:4A:A8:20:0D:9F:D0:45:ED X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1e:28:bc:e7:8a:44:16:3d:89:e7:04:ae:bc:67:5c:d4:2c: 80:67:2e:b9:2c:05:be:ef:8b:11:db:f9:e0:86:c3:ec:47:dd: c6:51:7e:5d:16:36:c0:29:6d:2f:20:28:b5:b6:4c:9f:19:07: d1:46:fc:05:5f:f8:ec:de:8e:09:9f:dd:2d:d5:70:70:1c:1f: 3f:56:61:9d:a8:a5:e2:4b:0d:6e:4c:41:5e:16:4a:dc:86:2c: c8:db:5b:d4:54:58:39:fa:24:4c:65:ba:a8:c2:bf:7e:3a:eb: ed:50:86:7c:34:ad:ea:e5:7a:86:a3:16:d2:9a:ee:37:a2:87: 25:a3:0e:d1:11:09:9f:98:d0:e4:d7:9f:1e:cc:92:1f:94:b5: 8e:db:fe:6f:28:f6:cd:c0:7d:1c:8c:fb:21:28:fc:01:84:be: ae:e0:f4:f4:28:28:14:88:ac:e5:36:2e:89:53:77:fd:82:dd: 50:b5:85:8b:18:fc:43:d2:c5:18:0c:16:e1:c2:3d:58:ec:cc: c0:98:7b:bd:0b:00:2b:4c:fa:8a:18:d4:f2:9c:29:c3:f4:d0: 82:3f:fb:f2:41:77:25:ee:75:d9:98:91:d3:0d:31:e7:5f:22: 76:d4:cc:74:b5:c0:f5:f8:42:cf:d4:84:7b:ea:e6:d3:e2:fd: 92:7d:84:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1ustMsWBmzGb6Tod8FRHw3tB+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA0MDQyMDI2NTFaFw0yNTA0MDcyMjU2NTFaMDMxMTAvBgNV BAMTKDc2NkE3MUM1MDNEOTYzQTY2QURBODA0QzRBQTgyMDBEOUZEMDQ1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M7EKKAVMUVNLq1I/apebPTSt s9BVFzX/CY5aC5DPClLCZJXE/NXO08mqc7QEIGa0WcQIwFYeeKjAnvHzqY+RSJsi kxIZLEYnVrOFYlQkqpxnJ6/NN/TTLqoTEIk4qmPHylNPs6gz2OY04LdsX+SrGmWq JCQGNE/i0KzzuKHbeoT+2onQ1xTyiTOUbbANI5Qqm3MsnJBsqQCsDGUz29klDoAx Ayqot5EAC79AOAA3enUOexywQ/RiRm6n9R3ogXXoENVeDNuy+1+M7iu1JXURUjPM 6fT7sBPvd45iodxmivz9WpGjDkGzgm0MtskjAx5uO5iL+qCnOSq6sluF4gJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmpxxQPZY6Zq2oBMSqggDZ/QRe0wHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIeKLznikQWPYnnBK68Z1zULIBnLrksBb7v ixHb+eCGw+xH3cZRfl0WNsApbS8gKLW2TJ8ZB9FG/AVf+Ozejgmf3S3VcHAcHz9W YZ2opeJLDW5MQV4WStyGLMjbW9RUWDn6JExluqjCv3466+1Qhnw0rerleoajFtKa 7jeihyWjDtERCZ+Y0OTXnx7Mkh+UtY7b/m8o9s3AfRyM+yEo/AGEvq7g9PQoKBSI rOU2LolTd/2C3VC1hYsY/EPSxRgMFuHCPVjszMCYe70LACtM+ooY1PKcKcP00II/ +/JBdyXuddmYkdMNMedfInbUzHS1wPX4Qs/UhHvq5tPi/ZJ9hDU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:26:57 2025 by rpki-client