$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: cbr3YF2iSMhoY976yO2Ur3S/uKo8lmsVZUk2Cups4zA= Subject key identifier: E9:6C:FC:BE:E9:B2:6D:BA:06:7D:7A:C9:4B:F8:40:2E:9B:87:FB:F1 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 607FCBFC708E85CE9B7D5452E945FE49D7162230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 01D7 Signing time: Wed 09 Apr 2025 15:20:02 +0000 Manifest this update: Wed 09 Apr 2025 15:15:02 +0000 Manifest next update: Sun 13 Apr 2025 02:32:02 +0000 Files and hashes: 1: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 2: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: in2JbV3wh6NiNYa5dfOeXdVzOwG5cooQJNHnygKUMiY=) 3: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 4: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 5: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 6: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7f:cb:fc:70:8e:85:ce:9b:7d:54:52:e9:45:fe:49:d7:16:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Apr 9 15:15:02 2025 GMT Not After : Apr 13 02:32:02 2025 GMT Subject: CN=E96CFCBEE9B26DBA067D7AC94BF8402E9B87FBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:1e:92:39:f0:2e:da:ef:bb:31:3e:e3:07: f0:b4:bf:35:b8:c2:c9:58:f3:40:f2:da:28:f1:c1: 1a:43:c4:28:1d:8d:73:c0:a4:f4:31:9e:ca:86:69: 19:de:45:51:a7:10:a0:1c:62:99:70:bb:23:a6:ef: d5:36:d8:fd:30:d4:6a:5a:8e:43:d7:2d:0f:a7:29: 06:a9:07:89:35:df:8e:9d:10:ae:4d:31:dd:4f:c9: c5:28:7e:a5:ce:e6:12:fd:13:2a:f9:0c:a5:cd:2b: c1:d3:b0:6f:6c:b4:f5:45:bf:3f:7e:d1:98:fa:90: b2:1f:a9:03:c3:22:ac:05:2d:a6:a9:37:08:a3:43: 91:62:fe:cb:ec:fc:f2:9b:9a:f7:1b:cc:07:95:09: 62:9b:8d:19:14:31:5c:fe:15:48:6f:53:fd:e2:85: a3:a0:2f:45:40:15:54:c4:13:24:85:84:bc:f4:15: 9b:3d:a3:4e:42:25:f1:c2:c7:3f:29:92:6f:99:70: 88:94:e3:bb:b1:79:38:fb:e5:00:13:e2:a1:91:3f: cc:90:f5:b7:76:03:23:c4:14:68:ec:3f:89:df:20: 67:1f:2a:c1:a9:d3:aa:f6:81:d0:25:77:66:52:82: 86:8d:e2:d3:8e:ba:74:9f:5f:b9:ba:ae:cb:09:3f: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6C:FC:BE:E9:B2:6D:BA:06:7D:7A:C9:4B:F8:40:2E:9B:87:FB:F1 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f2:bd:d3:72:fd:46:f9:be:b7:9a:f9:7d:fb:11:56:11:f1: 10:5e:91:c1:4f:77:57:79:05:66:c6:95:2c:4d:85:7d:0d:bd: 8c:0b:ac:ee:3a:13:79:80:5a:5c:0b:3a:b6:b4:3e:52:2c:67: 43:45:8b:0d:9b:98:17:ad:67:32:98:e0:70:c4:fe:5f:99:30: 80:c3:9c:2a:46:e1:a3:09:18:d6:cc:2f:74:c0:e1:61:f1:2c: 5a:e4:24:72:93:e2:54:47:ac:dc:35:1e:98:e3:0c:2c:f2:3f: a7:eb:93:4b:ad:5b:ad:18:27:d9:60:2e:8a:24:ae:91:3b:36: fe:d8:9b:df:4a:82:9c:c2:dc:82:a1:b7:aa:fd:76:4f:5e:67: 71:da:af:09:17:8d:f0:93:38:9c:35:31:10:89:ef:6b:b5:37: 20:53:45:3d:fc:7d:64:2f:1d:9a:01:c3:10:c2:5c:e5:13:13: 3b:03:53:43:76:8b:41:15:19:22:8f:59:ff:7d:00:33:68:90: d9:67:0c:8e:a9:32:71:c5:8f:bb:04:37:ad:fa:da:ee:6f:f1: de:64:34:88:4d:27:55:41:95:71:73:29:2a:3b:fd:b8:3c:74: e9:f6:19:63:fe:21:ad:0d:ee:89:e2:77:27:55:cc:8a:4f:bc: b1:00:84:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYH/L/HCOhc6bfVRS6UX+SdcWIjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA0MDkxNTE1MDJaFw0yNTA0MTMwMjMyMDJaMDMxMTAvBgNV BAMTKEU5NkNGQ0JFRTlCMjZEQkEwNjdEN0FDOTRCRjg0MDJFOUI4N0ZCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUx6SOfAu2u+7MT7jB/C0vzW4 wslY80Dy2ijxwRpDxCgdjXPApPQxnsqGaRneRVGnEKAcYplwuyOm79U22P0w1Gpa jkPXLQ+nKQapB4k1346dEK5NMd1PycUofqXO5hL9Eyr5DKXNK8HTsG9stPVFvz9+ 0Zj6kLIfqQPDIqwFLaapNwijQ5Fi/svs/PKbmvcbzAeVCWKbjRkUMVz+FUhvU/3i haOgL0VAFVTEEySFhLz0FZs9o05CJfHCxz8pkm+ZcIiU47uxeTj75QAT4qGRP8yQ 9bd2AyPEFGjsP4nfIGcfKsGp06r2gdAld2ZSgoaN4tOOunSfX7m6rssJP9SXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Wz8vumybboGfXrJS/hALpuH+/EwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/yvdNy/Ub5vrea+X37EVYR8RBekcFPd1d5 BWbGlSxNhX0NvYwLrO46E3mAWlwLOra0PlIsZ0NFiw2bmBetZzKY4HDE/l+ZMIDD nCpG4aMJGNbML3TA4WHxLFrkJHKT4lRHrNw1HpjjDCzyP6frk0utW60YJ9lgLook rpE7Nv7Ym99KgpzC3IKht6r9dk9eZ3HarwkXjfCTOJw1MRCJ72u1NyBTRT38fWQv HZoBwxDCXOUTEzsDU0N2i0EVGSKPWf99ADNokNlnDI6pMnHFj7sEN6362u5v8d5k NIhNJ1VBlXFzKSo7/bg8dOn2GWP+Ia0N7onidydVzIpPvLEAhKQ= -----END CERTIFICATE-----Generated at Thu Apr 10 12:30:02 2025 by rpki-client