$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: s1UPP6mcGddB9ka58RaxqL6Tt3K3DtrFwRvM5C57tr0= Subject key identifier: 2A:39:5E:0A:1F:DD:AF:66:D8:80:36:0E:2D:F8:DC:84:E7:3E:42:40 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 4869058AF633C0A0434EA710B5614918AE3B0044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 81 Signing time: Mon 07 Apr 2025 12:00:35 +0000 Manifest this update: Mon 07 Apr 2025 11:55:35 +0000 Manifest next update: Thu 10 Apr 2025 17:15:35 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: 7oQo+y2HhKNAOjY1GtRl8hPcU20WOhW+Rym+UCGAnOk=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:69:05:8a:f6:33:c0:a0:43:4e:a7:10:b5:61:49:18:ae:3b:00:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Apr 7 11:55:35 2025 GMT Not After : Apr 10 17:15:35 2025 GMT Subject: CN=2A395E0A1FDDAF66D880360E2DF8DC84E73E4240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:50:3d:f4:08:4c:b1:44:c0:1d:07:fc:ad: 8b:d5:da:b4:68:81:25:5c:5a:a1:1b:25:1c:3c:e0: 8b:45:a0:17:b5:90:fc:e0:06:25:14:88:38:0a:62: 19:cb:91:03:36:bc:c5:ea:c8:b3:d6:1d:5e:32:f6: 09:cd:43:1c:e0:90:cb:1d:1e:45:03:d9:49:7e:73: 42:0b:25:d3:54:6a:c7:80:00:8f:62:a9:a7:a0:ca: 21:23:39:ea:5e:db:ad:3f:0f:fe:46:e9:4c:5f:09: 76:49:53:11:8c:f9:f8:6d:fc:d2:19:7f:39:66:b6: 1b:46:26:54:d2:b3:f2:dd:ab:d1:bc:e2:ae:f5:8a: 0f:59:1c:f4:85:18:e7:72:0b:4f:59:68:4e:f5:e4: 3e:95:d1:26:6c:5c:41:76:b0:ab:82:89:67:82:12: f0:8c:37:4f:9c:44:5a:17:b8:da:08:42:b3:2c:b5: 03:67:d3:89:c9:fa:a4:42:98:8b:ca:ae:54:02:82: d7:ad:e1:d6:a1:68:fc:2d:92:52:ba:e0:6e:9b:04: f8:90:38:55:4f:f9:c9:54:c9:09:49:95:85:19:69: ff:f3:0c:70:11:a8:3c:9f:50:48:ca:c1:c3:f7:8c: 08:44:f1:18:6a:b0:43:d1:9c:16:05:c7:c5:7b:36: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:5E:0A:1F:DD:AF:66:D8:80:36:0E:2D:F8:DC:84:E7:3E:42:40 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:5b:39:ed:39:f5:bb:26:14:30:ca:5a:de:54:88:2a:10: 9b:ef:92:b9:44:e6:d8:c8:12:3f:3b:80:ea:7e:2a:4e:af:d2: ee:74:3b:b8:d3:75:7e:18:52:ef:a9:0b:2a:1f:5a:c2:2b:1e: 90:32:ab:5b:49:1e:6b:10:f6:53:63:c7:e0:b2:ce:bf:ad:47: d0:e3:f5:a3:44:c1:ee:ed:5a:9f:ac:08:d5:32:66:79:f8:9e: 15:85:0c:57:71:31:32:f5:d8:a0:39:11:77:1c:50:78:1c:24: 37:3e:be:47:2b:de:05:60:be:b8:29:3f:97:2e:0a:2a:4d:a9: aa:7a:cf:e6:19:a4:29:a1:82:2f:ab:ea:fa:e0:56:17:aa:61: d7:e6:83:6f:cb:6f:20:82:f5:17:df:a7:39:f1:f9:17:71:83: 85:47:a9:88:6b:c9:3d:d7:b3:49:ec:e3:89:ed:45:8f:b6:a8: 9d:df:d3:f9:9b:58:62:d5:b5:cf:8e:e2:2d:ad:58:4d:3a:42: 30:fe:c8:eb:09:7a:69:81:1b:ac:84:74:e5:d5:d3:bb:45:bd: ef:30:a5:97:06:b6:4d:1c:c0:92:93:f6:50:f1:1d:90:e9:e3: 08:65:7b:df:e0:ed:c5:44:f4:a8:e2:d5:0f:16:ab:4d:13:39: f2:21:51:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGkFivYzwKBDTqcQtWFJGK47AEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA0MDcxMTU1MzVaFw0yNTA0MTAxNzE1MzVaMDMxMTAvBgNV BAMTKDJBMzk1RTBBMUZEREFGNjZEODgwMzYwRTJERjhEQzg0RTczRTQyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXa1A99AhMsUTAHQf8rYvV2rRo gSVcWqEbJRw84ItFoBe1kPzgBiUUiDgKYhnLkQM2vMXqyLPWHV4y9gnNQxzgkMsd HkUD2Ul+c0ILJdNUaseAAI9iqaegyiEjOepe260/D/5G6UxfCXZJUxGM+fht/NIZ fzlmthtGJlTSs/Ldq9G84q71ig9ZHPSFGOdyC09ZaE715D6V0SZsXEF2sKuCiWeC EvCMN0+cRFoXuNoIQrMstQNn04nJ+qRCmIvKrlQCgtet4dahaPwtklK64G6bBPiQ OFVP+clUyQlJlYUZaf/zDHARqDyfUEjKwcP3jAhE8RhqsEPRnBYFx8V7NhFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjleCh/dr2bYgDYOLfjchOc+QkAwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc4WzntOfW7JhQwylreVIgqEJvvkrlE5tjI Ej87gOp+Kk6v0u50O7jTdX4YUu+pCyofWsIrHpAyq1tJHmsQ9lNjx+Cyzr+tR9Dj 9aNEwe7tWp+sCNUyZnn4nhWFDFdxMTL12KA5EXccUHgcJDc+vkcr3gVgvrgpP5cu CipNqap6z+YZpCmhgi+r6vrgVheqYdfmg2/LbyCC9Rffpznx+Rdxg4VHqYhryT3X s0ns44ntRY+2qJ3f0/mbWGLVtc+O4i2tWE06QjD+yOsJemmBG6yEdOXV07tFve8w pZcGtk0cwJKT9lDxHZDp4whle9/g7cVE9Kji1Q8Wq00TOfIhUSw= -----END CERTIFICATE-----Generated at Mon Apr 7 16:52:13 2025 by rpki-client