$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: NcZM2A8oaiOo6lA3AIVozADc4mmsJe7AnBCV8+mHVAE= Subject key identifier: 4E:1C:F2:14:BB:C5:C2:E5:9D:30:10:24:30:B0:EB:C5:87:F1:66:45 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 3ED9517C48419A7DB0CC76D11FA6BE457920BC9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: A9 Signing time: Tue 08 Apr 2025 09:32:13 +0000 Manifest this update: Tue 08 Apr 2025 09:27:13 +0000 Manifest next update: Fri 11 Apr 2025 14:54:13 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: oEE6Di0SdgIs9NEPtvXmNGns07cX2qgvAPqAVzpOgPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d9:51:7c:48:41:9a:7d:b0:cc:76:d1:1f:a6:be:45:79:20:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Apr 8 09:27:13 2025 GMT Not After : Apr 11 14:54:13 2025 GMT Subject: CN=4E1CF214BBC5C2E59D30102430B0EBC587F16645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:92:64:47:a5:90:02:00:cd:15:7d:3f:8b: f6:41:3a:b4:3c:96:fa:65:b6:77:24:1d:f0:0c:d1: 6d:b3:33:5a:00:4a:90:fe:52:53:86:eb:a1:17:b5: cb:0b:fa:4c:3a:fd:22:49:10:2a:7a:6f:cc:a4:23: c5:de:c8:cf:82:87:e3:f9:8d:0d:39:9e:0b:23:b0: d4:5a:56:90:bc:7f:b0:d9:b4:0c:16:0c:0a:12:51: 75:3b:ca:35:42:0a:0c:b2:74:ec:fd:c5:c9:5e:53: 76:45:8c:e9:ef:f2:2e:94:da:c9:77:3b:d9:c7:6c: 99:82:f0:44:26:c6:a3:a5:f8:0e:c8:39:58:12:9e: 61:b6:aa:0c:be:ca:f7:a8:5b:83:6d:fd:72:b6:b8: a6:cd:b2:2b:f9:27:d6:c5:5c:48:61:fc:fd:52:6a: aa:37:0c:b6:97:c0:8c:a1:16:b4:4b:e6:49:05:19: 6c:5a:f7:02:c1:f9:a0:94:c7:76:e1:6f:d4:6a:83: a0:05:f1:91:9a:5f:dd:3a:8d:75:fd:bf:de:a8:2e: 86:c5:e3:8c:4e:93:64:99:5b:c9:ff:82:3f:ff:53: 3d:a5:a5:f8:8b:39:cf:9c:36:42:be:d3:08:a2:d3: fd:73:9e:2a:41:e1:de:4f:5c:bf:ab:7d:8b:d1:33: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1C:F2:14:BB:C5:C2:E5:9D:30:10:24:30:B0:EB:C5:87:F1:66:45 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ad:53:aa:ac:b8:07:de:a6:da:b0:ee:c6:cd:82:61:89:88: da:b7:28:d9:88:2f:1c:19:a2:6f:9b:be:d6:46:b9:03:ed:33: e0:17:40:5c:02:2b:6a:95:a0:0d:46:8d:22:79:55:e2:31:68: 76:53:70:bf:c1:e9:d4:a3:a4:91:1d:c4:16:f8:6f:0b:d6:d1: 7b:ac:e2:f9:63:f6:8e:63:b9:22:dd:60:45:4c:6b:de:91:7c: e6:6c:36:30:30:11:fc:d8:f0:77:3f:40:e9:03:76:71:b3:8a: 8d:80:3a:fc:73:76:ae:b5:9c:ea:f4:94:4c:cf:a6:bf:4f:85: f1:3b:d9:10:30:fd:de:7a:48:20:4c:20:a3:dd:fc:28:d6:bf: 4a:55:e4:5e:98:79:43:c5:11:2c:c3:44:2c:02:16:e9:74:88: 14:2a:60:12:61:93:f4:05:f3:ab:ad:1a:9d:c6:e0:56:e2:26: c1:cb:cd:d5:75:8c:5f:e6:a1:55:58:ab:65:1e:8f:77:e9:66: e1:4c:de:d9:d6:b2:cb:e8:12:33:41:8a:3e:8c:56:d7:11:fb: c0:19:6d:bc:cd:f6:45:8d:ae:7e:aa:f9:6c:61:12:a8:9a:00: a3:04:a7:ad:ba:68:ce:f1:a9:4a:a4:ef:83:08:6d:ca:7a:ab: c3:2f:e9:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtlRfEhBmn2wzHbRH6a+RXkgvJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA0MDgwOTI3MTNaFw0yNTA0MTExNDU0MTNaMDMxMTAvBgNV BAMTKDRFMUNGMjE0QkJDNUMyRTU5RDMwMTAyNDMwQjBFQkM1ODdGMTY2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rZJkR6WQAgDNFX0/i/ZBOrQ8 lvpltnckHfAM0W2zM1oASpD+UlOG66EXtcsL+kw6/SJJECp6b8ykI8XeyM+Ch+P5 jQ05ngsjsNRaVpC8f7DZtAwWDAoSUXU7yjVCCgyydOz9xcleU3ZFjOnv8i6U2sl3 O9nHbJmC8EQmxqOl+A7IOVgSnmG2qgy+yveoW4Nt/XK2uKbNsiv5J9bFXEhh/P1S aqo3DLaXwIyhFrRL5kkFGWxa9wLB+aCUx3bhb9Rqg6AF8ZGaX906jXX9v96oLobF 44xOk2SZW8n/gj//Uz2lpfiLOc+cNkK+0wii0/1znipB4d5PXL+rfYvRM8FbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThzyFLvFwuWdMBAkMLDrxYfxZkUwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACStU6qsuAfeptqw7sbNgmGJiNq3KNmILxwZ om+bvtZGuQPtM+AXQFwCK2qVoA1GjSJ5VeIxaHZTcL/B6dSjpJEdxBb4bwvW0Xus 4vlj9o5juSLdYEVMa96RfOZsNjAwEfzY8Hc/QOkDdnGzio2AOvxzdq61nOr0lEzP pr9PhfE72RAw/d56SCBMIKPd/CjWv0pV5F6YeUPFESzDRCwCFul0iBQqYBJhk/QF 86utGp3G4FbiJsHLzdV1jF/moVVYq2Uej3fpZuFM3tnWssvoEjNBij6MVtcR+8AZ bbzN9kWNrn6q+WxhEqiaAKMEp626aM7xqUqk74MIbcp6q8Mv6TE= -----END CERTIFICATE-----Generated at Wed Apr 9 17:24:57 2025 by rpki-client