$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: TDybq+0QQVyCTx7KgFFTNYPZjFtVDdxIYlaPX7iNcfU= Subject key identifier: DB:11:F4:68:46:E4:4C:52:69:3D:BF:CF:B9:2C:39:02:05:CE:AB:B9 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 6F9670D6846A47CF76277A65574F635E2CBA0091 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 0531 Signing time: Fri 04 Apr 2025 02:51:36 +0000 Manifest this update: Fri 04 Apr 2025 02:46:36 +0000 Manifest next update: Mon 07 Apr 2025 03:20:36 +0000 Files and hashes: 1: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: 8mnXjxpQ6SLxzLBvqpGhB10LJu8ZPJ6scfGXQv6IL5I=) 2: AS56242.roa (hash: tSzKKpcbE6bo3w9bV3TVhMwcF8jKEriX5Wm0rnvAgIg=) 3: AS59281.roa (hash: 3OoTAmlO4zWNGL/bSRhl8jP1S0EccRMZ9zeQlEN9DAw=) 4: AS137342.roa (hash: CMk60fE5UdVZv/MxL6/n0+3Rya8vaHN7xLAuSG2v4iA=) 5: AS38511.roa (hash: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=) 6: AS137379.roa (hash: Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:96:70:d6:84:6a:47:cf:76:27:7a:65:57:4f:63:5e:2c:ba:00:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Apr 4 02:46:36 2025 GMT Not After : Apr 7 03:20:36 2025 GMT Subject: CN=DB11F46846E44C52693DBFCFB92C390205CEABB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:99:62:2d:d8:0a:3d:58:27:90:36:c8:3e: 6a:5c:c8:b4:e4:b2:ce:01:ef:e3:3b:d8:d0:a4:f7: 22:76:d9:96:74:a9:73:38:2e:6f:23:f0:40:ff:bf: 72:42:21:cd:c9:b2:94:3e:00:b2:4d:3f:23:d2:df: 6f:33:4e:b0:be:d8:c6:4e:da:55:a4:1a:97:a0:02: 1d:c3:a2:1a:66:5d:b9:15:b7:b1:89:45:0d:1e:b2: ba:fb:73:00:c2:b6:1b:05:a4:10:62:78:42:ec:d0: 32:c1:36:53:fd:96:af:85:d0:29:54:23:ab:c6:02: f5:d5:7e:43:eb:e9:88:cb:c9:74:61:61:29:52:47: 92:70:ba:b6:c2:11:a8:9e:ba:ce:92:d5:9e:2f:c1: 19:08:bf:1d:98:14:f3:02:f9:fe:54:e1:8e:8b:eb: 42:7a:04:c7:b2:3b:93:ae:04:1f:8e:9e:35:7d:63: 6f:0c:32:16:85:ec:66:bd:cc:f3:b3:38:22:6e:1c: 70:42:0d:3e:ae:2c:db:d9:a2:69:2b:17:84:d5:b6: e3:47:5a:a0:a9:35:95:17:2c:cc:52:6d:af:d3:5d: 44:f5:ea:2d:67:90:83:9c:a7:21:4a:01:4d:6e:01: 21:00:57:90:76:53:1d:ed:e5:bc:12:51:67:e0:dc: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:11:F4:68:46:E4:4C:52:69:3D:BF:CF:B9:2C:39:02:05:CE:AB:B9 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5e:3d:64:d4:27:d0:5f:26:42:06:c8:6e:e1:bb:84:87:b0: ce:d0:e2:1d:90:38:59:00:94:c7:4f:04:65:b0:21:03:80:d5: b7:da:e1:98:dc:53:ae:0f:6e:66:e3:37:cf:6c:0a:e9:24:0a: 0c:1d:1b:78:6d:69:3f:d2:ec:d1:fa:d4:4e:20:00:5e:68:71: a4:6f:f5:5e:b7:2d:40:e5:5e:24:1c:a0:88:12:44:7b:6b:fd: d7:f1:b2:1f:a1:48:10:4e:67:d3:f0:ae:c6:c6:6a:dd:4a:65: 34:85:ee:33:a7:8f:6b:4c:68:39:86:54:0c:a4:17:d2:e4:4b: 6d:de:de:b0:a5:9f:49:8e:cd:4b:cd:e7:25:90:bf:7e:82:85: 4f:68:8c:ae:ac:f5:54:29:e8:91:2f:67:83:70:06:aa:6e:e1: 12:f0:5e:87:90:30:02:53:8c:51:6d:84:bb:42:b4:74:73:20: ae:de:65:5d:ac:e7:fe:08:3b:51:d7:a7:56:ae:63:61:33:90: 3b:8a:2d:d8:e1:e5:bb:f7:44:15:d8:e4:b2:91:ee:cd:bf:cb: 1e:c0:0a:5e:4f:66:9f:6e:5d:27:fe:b9:d5:72:38:27:be:59: db:e3:b3:ae:32:49:5a:d9:3a:8f:19:34:92:92:ae:a0:e6:76: 88:ca:41:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5Zw1oRqR892J3plV09jXiy6AJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNTA0MDQwMjQ2MzZaFw0yNTA0MDcwMzIwMzZaMDMxMTAvBgNV BAMTKERCMTFGNDY4NDZFNDRDNTI2OTNEQkZDRkI5MkMzOTAyMDVDRUFCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWZliLdgKPVgnkDbIPmpcyLTk ss4B7+M72NCk9yJ22ZZ0qXM4Lm8j8ED/v3JCIc3JspQ+ALJNPyPS328zTrC+2MZO 2lWkGpegAh3DohpmXbkVt7GJRQ0esrr7cwDCthsFpBBieELs0DLBNlP9lq+F0ClU I6vGAvXVfkPr6YjLyXRhYSlSR5JwurbCEaieus6S1Z4vwRkIvx2YFPMC+f5U4Y6L 60J6BMeyO5OuBB+OnjV9Y28MMhaF7Ga9zPOzOCJuHHBCDT6uLNvZomkrF4TVtuNH WqCpNZUXLMxSba/TXUT16i1nkIOcpyFKAU1uASEAV5B2Ux3t5bwSUWfg3KW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xH0aEbkTFJpPb/PuSw5AgXOq7kwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZePWTUJ9BfJkIGyG7hu4SHsM7Q4h2QOFkA lMdPBGWwIQOA1bfa4ZjcU64PbmbjN89sCukkCgwdG3htaT/S7NH61E4gAF5ocaRv 9V63LUDlXiQcoIgSRHtr/dfxsh+hSBBOZ9PwrsbGat1KZTSF7jOnj2tMaDmGVAyk F9LkS23e3rCln0mOzUvN5yWQv36ChU9ojK6s9VQp6JEvZ4NwBqpu4RLwXoeQMAJT jFFthLtCtHRzIK7eZV2s5/4IO1HXp1auY2EzkDuKLdjh5bv3RBXY5LKR7s2/yx7A Cl5PZp9uXSf+udVyOCe+Wdvjs64ySVrZOo8ZNJKSrqDmdojKQZM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:57 2025 by rpki-client