$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft File: 93B49EA86589396F687875020DE4D17DE244CD6E.mft (raw, json) Hash identifier: 9yhbaAdtwKQhqKr427S2eZL9SjUYkNAMQHTti2Qg/xk= Subject key identifier: B0:8E:0B:32:45:C5:C9:70:D4:72:D4:FF:F1:37:20:FB:00:CA:F3:3C Authority key identifier: 93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E Certificate issuer: /CN=93B49EA86589396F687875020DE4D17DE244CD6E Certificate serial: 7FD88A25E2F16E0ABF36B39BE9C03AFF99033DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft Manifest number: CB Signing time: Tue 08 Apr 2025 09:41:41 +0000 Manifest this update: Tue 08 Apr 2025 09:36:41 +0000 Manifest next update: Fri 11 Apr 2025 20:23:41 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: mEdT8OEiyI9JAMqfuO/nF4qCbRz5jV9PBOHoH0mrdzU=) 2: 93B49EA86589396F687875020DE4D17DE244CD6E.crl (hash: mWZrw0Ke1l9zzTcPcg6rtGJmYwM3pEiy/Zdvx3M3rgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d8:8a:25:e2:f1:6e:0a:bf:36:b3:9b:e9:c0:3a:ff:99:03:3d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93B49EA86589396F687875020DE4D17DE244CD6E Validity Not Before: Apr 8 09:36:41 2025 GMT Not After : Apr 11 20:23:41 2025 GMT Subject: CN=B08E0B3245C5C970D472D4FFF13720FB00CAF33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:67:f6:87:67:19:9b:75:28:5a:53:86:23: 61:79:54:4f:7d:fd:fd:14:56:16:41:11:b7:db:65: 03:2c:b9:f7:69:b1:24:2c:cc:71:23:e7:c6:08:1f: 5c:03:bc:52:c3:1a:fc:d8:44:ce:4f:e6:04:23:25: b8:a7:ee:6c:08:cf:9f:2d:68:53:82:c9:1d:62:a8: 14:22:53:86:c9:6e:d3:af:d9:fd:a0:9d:8f:88:87: 37:71:0e:1c:17:89:68:bf:84:c7:f8:92:17:36:48: 74:d6:28:1e:5a:a4:77:4b:5b:b5:c7:3b:71:28:c7: be:e1:1c:eb:e9:bb:78:04:f0:e8:1e:0c:59:e2:28: 48:92:fe:51:9e:72:52:b0:93:da:aa:e5:bc:8d:45: b5:29:85:83:4d:08:a3:fb:c2:a2:cc:7d:cb:14:a0: 5c:da:2b:a6:0d:dc:83:4c:10:46:ac:60:73:13:07: 63:f1:7e:88:db:34:23:69:83:e3:29:af:0f:9f:05: fb:4b:77:cf:9b:53:6b:57:61:2c:d4:45:6e:4f:d3: 12:d1:f2:d6:ce:ee:2c:06:61:55:c4:ee:1a:38:8d: 6e:24:2d:9b:d4:cd:fd:8a:d9:82:25:b6:5c:47:b2: 4d:d6:11:a7:1a:0d:57:51:53:dc:5f:4e:df:e8:7a: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8E:0B:32:45:C5:C9:70:D4:72:D4:FF:F1:37:20:FB:00:CA:F3:3C X509v3 Authority Key Identifier: keyid:93:B4:9E:A8:65:89:39:6F:68:78:75:02:0D:E4:D1:7D:E2:44:CD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93B49EA86589396F687875020DE4D17DE244CD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/1/93B49EA86589396F687875020DE4D17DE244CD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c0:ac:a5:03:9e:62:10:76:7c:be:6b:dd:73:d5:34:a7:0b: 06:43:0a:6b:ed:f6:63:f6:09:20:38:1c:fd:41:1b:b6:5b:60: b0:46:1b:c0:ef:dc:c2:a3:a7:2d:67:88:27:8d:ae:c6:3f:1b: 00:fd:d3:26:0e:7e:d6:ed:29:09:cb:a3:64:27:b2:b9:1b:a4: 94:83:82:68:ed:2a:a8:52:93:66:cc:af:a5:e2:b2:5e:26:9b: d8:8a:23:0c:ba:cc:63:49:87:60:0d:78:6c:41:91:48:67:30: 6e:94:2f:ff:0f:e8:f2:71:7b:67:3c:60:02:fb:bc:c8:6c:37: ea:f9:ea:fe:cb:7b:06:3b:b7:4d:27:3b:b0:c6:e3:cf:a7:6e: bd:21:35:5a:71:32:c7:56:59:98:45:f3:1a:ac:61:52:39:6e: ac:d7:4c:93:f1:ec:3a:70:da:b8:3a:8a:a1:8b:59:6c:95:60: 9b:9e:32:cd:3b:fd:e6:bb:19:ef:b7:65:3c:d3:c4:07:c2:ad: dc:3f:54:7f:ec:c3:33:0f:47:2e:71:b9:5d:e9:8f:c8:0a:4b: 47:39:bb:b8:9d:da:42:4c:d3:68:26:61:93:63:a0:3c:19:bf: 0a:a4:35:3b:89:74:21:37:b9:d7:8f:d8:d1:4a:93:74:58:60: b6:cf:f0:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9iKJeLxbgq/NrOb6cA6/5kDPdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3NTAyMERFNEQxN0RF MjQ0Q0Q2RTAeFw0yNTA0MDgwOTM2NDFaFw0yNTA0MTEyMDIzNDFaMDMxMTAvBgNV BAMTKEIwOEUwQjMyNDVDNUM5NzBENDcyRDRGRkYxMzcyMEZCMDBDQUYzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBmf2h2cZm3UoWlOGI2F5VE99 /f0UVhZBEbfbZQMsufdpsSQszHEj58YIH1wDvFLDGvzYRM5P5gQjJbin7mwIz58t aFOCyR1iqBQiU4bJbtOv2f2gnY+IhzdxDhwXiWi/hMf4khc2SHTWKB5apHdLW7XH O3Eox77hHOvpu3gE8OgeDFniKEiS/lGeclKwk9qq5byNRbUphYNNCKP7wqLMfcsU oFzaK6YN3INMEEasYHMTB2PxfojbNCNpg+Mprw+fBftLd8+bU2tXYSzURW5P0xLR 8tbO7iwGYVXE7ho4jW4kLZvUzf2K2YIltlxHsk3WEacaDVdRU9xfTt/oeoDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsI4LMkXFyXDUctT/8Tcg+wDK8zwwHwYDVR0j BBgwFoAUk7SeqGWJOW9oeHUCDeTRfeJEzW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMS85M0I0OUVBODY1 ODkzOTZGNjg3ODc1MDIwREU0RDE3REUyNDRDRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3NTAyMERFNEQxN0RFMjQ0 Q0Q2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzEvOTNCNDlFQTg2NTg5Mzk2RjY4Nzg3NTAyMERFNEQx N0RFMjQ0Q0Q2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzArKUDnmIQdny+a91z1TSnCwZDCmvt9mP2 CSA4HP1BG7ZbYLBGG8Dv3MKjpy1niCeNrsY/GwD90yYOftbtKQnLo2QnsrkbpJSD gmjtKqhSk2bMr6Xisl4mm9iKIwy6zGNJh2ANeGxBkUhnMG6UL/8P6PJxe2c8YAL7 vMhsN+r56v7LewY7t00nO7DG48+nbr0hNVpxMsdWWZhF8xqsYVI5bqzXTJPx7Dpw 2rg6iqGLWWyVYJueMs07/ea7Ge+3ZTzTxAfCrdw/VH/swzMPRy5xuV3pj8gKS0c5 u7id2kJM02gmYZNjoDwZvwqkNTuJdCE3udeP2NFKk3RYYLbP8JM= -----END CERTIFICATE-----Generated at Thu Apr 10 12:36:06 2025 by rpki-client