$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: KjEJrcAv039q9GdtfPIpLhULsI3zXzYdw2atONkeLhQ= Subject key identifier: F9:51:67:43:46:D9:D9:12:A6:CD:65:8B:9F:4C:3B:57:AE:38:96:27 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 7F7A812E5E40E7944C43E7E80D0511C84590EFF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 0481 Signing time: Thu 03 Apr 2025 23:41:50 +0000 Manifest this update: Thu 03 Apr 2025 23:36:50 +0000 Manifest next update: Mon 07 Apr 2025 02:14:50 +0000 Files and hashes: 1: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: Sv5+dMPwNKNRJQdaNch52pi/y/gtlM6wPg9HidMGHmE=) 2: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: uKza+NILBuHQRPIg5LCtzuv9seKbjSu4TPPeAiNkPk4=) 3: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: gBkr6kUrPdcPMuBqhNuB1Rrt2YvYjIjFofgP7k6VanI=) 4: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: 5QbcPGy/M7njxIhRGnhFNOXKsrYeYIRjfqDpCIGPyAA=) 5: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: heHR6tDdyfcDcl0ayUlIY67JEF5cb4FokE1+/fGTE2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7a:81:2e:5e:40:e7:94:4c:43:e7:e8:0d:05:11:c8:45:90:ef:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Apr 3 23:36:50 2025 GMT Not After : Apr 7 02:14:50 2025 GMT Subject: CN=F951674346D9D912A6CD658B9F4C3B57AE389627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:3f:65:38:38:28:e9:a8:c4:38:c9:d0:05: 7c:42:14:e0:0b:f6:f0:ce:17:74:36:00:28:26:18: f8:78:86:ab:21:56:39:3c:a4:bb:5c:1a:3f:2f:44: ec:05:84:13:04:f0:87:1b:fe:d3:8a:96:61:7e:7e: 3c:79:77:9b:d1:2c:78:f8:2c:5c:8e:e1:d0:79:33: 98:2e:28:f7:e6:2b:79:44:06:1a:57:dc:3b:82:52: 98:41:89:b1:74:2a:4c:32:7a:e8:c7:92:2f:91:12: 00:a6:1f:1b:03:29:9d:9a:1b:f1:07:39:01:37:10: 36:74:25:93:b3:35:f4:de:34:88:4d:6a:3a:93:02: 79:db:0e:cf:09:f3:fb:af:75:31:7c:93:10:f8:99: 34:dd:f3:90:4b:cd:78:3e:c7:0a:f4:e6:43:62:98: 06:8f:3f:d3:56:e3:ee:49:0d:45:df:99:68:d3:03: ad:43:d4:a9:b9:61:e1:99:ac:71:3e:79:96:b4:eb: db:db:d6:46:df:57:42:31:b8:76:40:9e:2c:ee:4b: d1:6a:e4:1c:bc:87:1b:d8:65:76:fd:81:dc:36:70: 09:18:07:74:7f:f9:d7:55:a4:ba:d9:0d:39:87:a3: 02:0c:aa:52:d7:ee:ae:42:f4:f5:7f:f8:3c:dd:fd: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:67:43:46:D9:D9:12:A6:CD:65:8B:9F:4C:3B:57:AE:38:96:27 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:dc:bc:33:74:7e:23:e0:e5:ca:4b:18:26:20:72:1b:a6:9c: dc:87:10:5f:60:55:fe:52:c8:a0:01:bf:ce:59:32:73:0d:6d: fe:03:94:67:00:4b:f0:24:3c:e2:b9:9a:2e:06:59:80:31:1e: 75:88:44:88:fa:b8:98:28:73:f1:1e:6f:51:2d:61:b7:3e:69: 12:23:09:a4:a0:a5:d0:e3:ac:d4:99:b3:cb:a0:5a:75:31:fa: ac:4d:27:a9:fa:44:1a:3e:23:27:da:3e:e0:0a:6f:b2:dd:2e: b5:df:c1:9c:22:5b:3a:d5:1c:6f:2b:29:b9:04:43:d5:b1:0c: a4:a6:94:1a:6f:07:da:c5:6e:d2:86:5c:f4:3b:7b:21:02:20: ff:b0:eb:3f:ca:a1:88:84:7d:0b:c8:7b:7b:f3:0f:61:d0:d8: 18:a2:89:c3:f5:1f:9c:a4:34:d2:e9:3f:22:3f:a3:a3:45:51: f1:af:92:5c:f9:14:58:81:78:6a:1d:70:63:0c:c3:6c:2b:3d: 38:a7:73:6c:3f:a6:ff:06:7e:39:78:00:68:a7:1d:5c:4b:e7: 0b:86:fd:ef:95:40:5e:01:97:e5:a5:db:94:e1:01:9e:b6:58: 46:ea:10:37:69:25:d8:4a:9e:aa:19:79:1c:99:ac:df:58:7f: 41:ac:cf:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3qBLl5A55RMQ+foDQURyEWQ7/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTA0MDMyMzM2NTBaFw0yNTA0MDcwMjE0NTBaMDMxMTAvBgNV BAMTKEY5NTE2NzQzNDZEOUQ5MTJBNkNENjU4QjlGNEMzQjU3QUUzODk2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQT9lODgo6ajEOMnQBXxCFOAL 9vDOF3Q2ACgmGPh4hqshVjk8pLtcGj8vROwFhBME8Icb/tOKlmF+fjx5d5vRLHj4 LFyO4dB5M5guKPfmK3lEBhpX3DuCUphBibF0KkwyeujHki+REgCmHxsDKZ2aG/EH OQE3EDZ0JZOzNfTeNIhNajqTAnnbDs8J8/uvdTF8kxD4mTTd85BLzXg+xwr05kNi mAaPP9NW4+5JDUXfmWjTA61D1Km5YeGZrHE+eZa069vb1kbfV0IxuHZAnizuS9Fq 5By8hxvYZXb9gdw2cAkYB3R/+ddVpLrZDTmHowIMqlLX7q5C9PV/+Dzd/VbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+VFnQ0bZ2RKmzWWLn0w7V644licwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbcvDN0fiPg5cpLGCYgchumnNyHEF9gVf5S yKABv85ZMnMNbf4DlGcAS/AkPOK5mi4GWYAxHnWIRIj6uJgoc/Eeb1EtYbc+aRIj CaSgpdDjrNSZs8ugWnUx+qxNJ6n6RBo+IyfaPuAKb7LdLrXfwZwiWzrVHG8rKbkE Q9WxDKSmlBpvB9rFbtKGXPQ7eyECIP+w6z/KoYiEfQvIe3vzD2HQ2BiiicP1H5yk NNLpPyI/o6NFUfGvklz5FFiBeGodcGMMw2wrPTinc2w/pv8Gfjl4AGinHVxL5wuG /e+VQF4Bl+Wl25ThAZ62WEbqEDdpJdhKnqoZeRyZrN9Yf0Gsz6c= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:12 2025 by rpki-client