$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: TzVn5hq3SR2/y974fYjYX+D8iaZa6M+05QQ9W/nKTw4= Subject key identifier: 75:7A:4C:76:30:76:D5:AF:37:F4:A2:7F:C2:E8:0B:74:4D:5F:3E:F0 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 7E3DDDCF0E5A3C6C7BDD87232E400AFAFB880E28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 50 Signing time: Thu 03 Apr 2025 06:10:51 +0000 Manifest this update: Thu 03 Apr 2025 06:05:51 +0000 Manifest next update: Sun 06 Apr 2025 16:02:51 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: ZpWRp4SaVMLKyNHApT4IOGEbRM/wacJwPBq8fksdDHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3d:dd:cf:0e:5a:3c:6c:7b:dd:87:23:2e:40:0a:fa:fb:88:0e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Apr 3 06:05:51 2025 GMT Not After : Apr 6 16:02:51 2025 GMT Subject: CN=757A4C763076D5AF37F4A27FC2E80B744D5F3EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:59:71:38:55:0a:32:df:dd:d4:76:f3:ca: f2:e4:d2:00:b4:a9:1d:8d:e5:08:6b:a9:32:c9:3c: 22:40:91:63:e7:13:78:9a:d8:26:d4:72:71:40:72: f0:a9:af:bc:0c:57:21:cd:7f:fd:69:3f:c6:1f:0b: 73:99:aa:5e:8b:f5:a9:c9:2a:d7:b5:34:0a:be:a8: 41:53:35:dd:7a:15:a3:8c:8b:20:11:3c:c8:54:be: 13:3b:d3:a8:2d:f5:58:98:ab:af:26:cb:6a:a4:e7: a1:fa:06:9f:90:45:24:4f:bb:4b:70:f6:62:58:84: cb:92:16:10:d0:54:6b:a7:00:b6:ca:d9:4c:69:d8: 14:2a:a2:46:db:57:6a:be:db:da:30:65:0e:34:31: df:47:02:b4:31:03:65:cc:cb:4d:2d:8c:9d:e8:0d: d8:dc:a1:15:55:bc:24:0b:d2:31:2b:9b:19:86:90: 5c:22:5c:75:45:8c:ef:b3:d3:75:1b:aa:e4:b7:95: bb:e0:95:84:24:5e:85:d4:34:02:f1:31:47:3d:bc: 12:ea:07:d2:d5:2a:e4:d1:c5:1d:d5:26:c8:f6:af: 64:9e:a5:53:a9:a9:97:04:e7:99:5e:85:d0:ea:13: f7:6f:fd:ec:bb:b8:16:ab:cb:cf:89:1a:b6:58:ed: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:4C:76:30:76:D5:AF:37:F4:A2:7F:C2:E8:0B:74:4D:5F:3E:F0 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:77:7f:80:f1:d3:66:a6:19:54:c9:03:84:be:b6:93:d1: 2c:de:33:8d:45:71:03:75:42:b9:f3:cd:5d:75:c1:1d:84:10: 86:bd:8c:67:cc:5a:1e:b7:a7:a3:34:8a:38:af:3b:d9:ec:29: bf:fb:48:1d:04:60:f4:bd:1c:13:fe:8e:9f:ad:03:a9:7d:6b: 22:9a:83:73:59:ab:a3:80:24:75:1b:35:58:c8:da:24:37:82: f8:4d:b3:7c:74:ae:fc:a3:16:00:24:f0:85:f5:e3:60:57:bf: 21:67:db:c7:27:04:88:d5:20:7e:9d:02:80:fa:2e:56:f0:a3: 77:0f:2a:65:0a:44:1e:5c:22:c6:7a:8b:c8:fb:04:11:8c:52: 4d:21:f5:f1:23:9c:0a:4b:ac:d3:26:4d:45:51:5e:c2:68:8e: 4c:36:f4:84:e5:65:fa:65:04:f1:3c:51:ae:9e:d3:52:a7:63: 49:80:77:1e:00:d9:b8:65:3a:81:13:a3:04:1b:6b:da:2c:e2: 41:b1:e9:ba:3f:0e:c8:ba:b2:36:32:9c:7d:bf:2e:d5:d4:5b: 2b:78:b6:03:d3:88:6e:3a:29:f7:11:4b:f5:2e:9f:1f:5f:44: 49:a7:fb:54:ca:1e:aa:f7:62:ab:55:8c:40:6e:2e:4b:6b:38: 64:e2:ae:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfj3dzw5aPGx73YcjLkAK+vuIDigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA0MDMwNjA1NTFaFw0yNTA0MDYxNjAyNTFaMDMxMTAvBgNV BAMTKDc1N0E0Qzc2MzA3NkQ1QUYzN0Y0QTI3RkMyRTgwQjc0NEQ1RjNFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLj1lxOFUKMt/d1HbzyvLk0gC0 qR2N5QhrqTLJPCJAkWPnE3ia2CbUcnFAcvCpr7wMVyHNf/1pP8YfC3OZql6L9anJ Kte1NAq+qEFTNd16FaOMiyARPMhUvhM706gt9ViYq68my2qk56H6Bp+QRSRPu0tw 9mJYhMuSFhDQVGunALbK2Uxp2BQqokbbV2q+29owZQ40Md9HArQxA2XMy00tjJ3o DdjcoRVVvCQL0jErmxmGkFwiXHVFjO+z03UbquS3lbvglYQkXoXUNALxMUc9vBLq B9LVKuTRxR3VJsj2r2SepVOpqZcE55lehdDqE/dv/ey7uBary8+JGrZY7VZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdXpMdjB21a839KJ/wugLdE1fPvAwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD4d3+A8dNmphlUyQOEvraT0SzeM41FcQN1 QrnzzV11wR2EEIa9jGfMWh63p6M0ijivO9nsKb/7SB0EYPS9HBP+jp+tA6l9ayKa g3NZq6OAJHUbNVjI2iQ3gvhNs3x0rvyjFgAk8IX142BXvyFn28cnBIjVIH6dAoD6 Llbwo3cPKmUKRB5cIsZ6i8j7BBGMUk0h9fEjnApLrNMmTUVRXsJojkw29ITlZfpl BPE8Ua6e01KnY0mAdx4A2bhlOoETowQba9os4kGx6bo/Dsi6sjYynH2/LtXUWyt4 tgPTiG46KfcRS/Uunx9fREmn+1TKHqr3YqtVjEBuLktrOGTiruA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:48 2025 by rpki-client