$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: WUGaAb1/HBuqznDidj6rbJQCdX1ZSpfMHOa2UPF2zUw= Subject key identifier: 05:B1:CC:F7:8D:57:B9:2C:A0:4A:C2:CB:04:F1:7E:8A:FA:76:29:F8 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 794B4EC1A9EAE3DA40200DC68ABF5A85DA1949F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: 86 Signing time: Wed 09 Apr 2025 10:32:11 +0000 Manifest this update: Wed 09 Apr 2025 10:27:11 +0000 Manifest next update: Sat 12 Apr 2025 13:19:11 +0000 Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: LQZmNBMeuq1prbaiXxW4JaiefrWrLLJvTCpQclU5FMA=) 2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: eVMx0VzwHbIVHEbqGg41Ee9qJOubfElLHVVJ4SPXQpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 13:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4b:4e:c1:a9:ea:e3:da:40:20:0d:c6:8a:bf:5a:85:da:19:49:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Apr 9 10:27:11 2025 GMT Not After : Apr 12 13:19:11 2025 GMT Subject: CN=05B1CCF78D57B92CA04AC2CB04F17E8AFA7629F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:39:af:1b:83:c2:4b:2f:fa:01:74:0f:3a: 01:f3:a8:1d:f2:5b:2e:06:f6:15:e5:d7:2b:90:d7: 0c:69:0e:2f:f3:19:d4:c7:46:fb:4e:31:12:85:0b: 59:82:54:c8:2b:cf:5d:c1:e4:2d:ab:b4:15:26:50: f2:41:11:85:ef:15:bf:19:6f:6b:e1:45:13:e7:15: eb:ba:56:b3:ca:6f:a0:8a:7d:f6:46:6e:c3:98:e9: 33:73:7e:a3:b9:1e:21:4b:6c:92:01:bc:41:31:f4: 5f:8a:6c:f8:fd:f2:f0:31:61:97:7b:67:11:c8:ad: 02:9c:2b:30:fe:f4:c3:a3:f6:dd:8a:08:10:38:66: fa:a1:13:7c:96:b2:70:6d:e8:e3:8c:1a:52:ce:13: 48:29:91:6b:df:f4:a2:fc:57:89:4e:d6:1f:60:22: 5c:06:a1:a2:e3:93:f7:d6:3a:52:e3:29:7d:7e:f1: e6:24:78:7f:7d:e2:af:7a:0a:1d:9d:62:96:9f:09: 40:c3:5a:82:29:ee:a3:c7:13:60:ed:3b:87:3f:c0: 70:cd:db:b0:4f:f2:a9:0e:00:a8:dc:5c:6d:23:85: 3b:5e:74:90:fa:9a:97:92:b1:d1:c1:03:4d:69:5b: 45:4a:95:89:89:47:6e:b4:82:0d:5b:44:61:b7:71: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B1:CC:F7:8D:57:B9:2C:A0:4A:C2:CB:04:F1:7E:8A:FA:76:29:F8 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4d:09:00:5d:d5:ef:1a:88:08:3a:11:29:c4:f6:90:64:14: 54:ea:6e:5f:22:c4:cb:6f:aa:24:dc:2a:e5:17:3d:d4:1d:97: 92:e8:83:dd:7a:78:d0:d3:dc:77:4b:95:61:35:1e:0b:64:24: 4b:8f:5c:a5:ca:7c:39:b8:bf:95:37:9c:20:e6:89:d3:5e:48: 21:bb:b4:98:03:10:9e:d4:b7:93:56:16:7c:6f:0a:88:f9:bf: 3c:6f:cc:5a:6d:b1:88:e1:28:9d:0e:0e:3a:71:92:83:90:17: 88:06:11:7e:e6:41:a6:4c:2d:fc:5b:ff:54:a1:96:33:4a:e6: 37:e7:1f:b3:45:e5:5f:28:3b:40:a9:08:8f:3f:56:70:73:92: 44:cb:28:19:57:3a:b8:98:7d:93:a5:16:f1:71:b5:f7:ad:c3: 38:b1:22:55:88:e5:85:6d:84:21:a0:b8:4c:c8:16:fb:30:4d: fa:91:69:db:49:d3:ea:0f:d4:87:b2:fb:d3:ff:c9:70:51:0c: 73:b1:d0:13:65:ae:05:4f:13:40:61:0c:89:1c:fa:10:1a:ac: b4:39:8f:ff:bc:92:3d:c5:f0:65:db:cc:d3:95:b4:72:a6:00: 7b:4d:aa:30:ed:91:6b:a9:c9:30:93:22:ac:dc:30:fb:6a:36: db:af:7d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUtOwanq49pAIA3Gir9ahdoZSfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTA0MDkxMDI3MTFaFw0yNTA0MTIxMzE5MTFaMDMxMTAvBgNV BAMTKDA1QjFDQ0Y3OEQ1N0I5MkNBMDRBQzJDQjA0RjE3RThBRkE3NjI5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/DmvG4PCSy/6AXQPOgHzqB3y Wy4G9hXl1yuQ1wxpDi/zGdTHRvtOMRKFC1mCVMgrz13B5C2rtBUmUPJBEYXvFb8Z b2vhRRPnFeu6VrPKb6CKffZGbsOY6TNzfqO5HiFLbJIBvEEx9F+KbPj98vAxYZd7 ZxHIrQKcKzD+9MOj9t2KCBA4ZvqhE3yWsnBt6OOMGlLOE0gpkWvf9KL8V4lO1h9g IlwGoaLjk/fWOlLjKX1+8eYkeH994q96Ch2dYpafCUDDWoIp7qPHE2DtO4c/wHDN 27BP8qkOAKjcXG0jhTtedJD6mpeSsdHBA01pW0VKlYmJR260gg1bRGG3cVf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbHM941XuSygSsLLBPF+ivp2KfgwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERNCQBd1e8aiAg6ESnE9pBkFFTqbl8ixMtv qiTcKuUXPdQdl5Log916eNDT3HdLlWE1HgtkJEuPXKXKfDm4v5U3nCDmidNeSCG7 tJgDEJ7Ut5NWFnxvCoj5vzxvzFptsYjhKJ0ODjpxkoOQF4gGEX7mQaZMLfxb/1Sh ljNK5jfnH7NF5V8oO0CpCI8/VnBzkkTLKBlXOriYfZOlFvFxtfetwzixIlWI5YVt hCGguEzIFvswTfqRadtJ0+oP1Iey+9P/yXBRDHOx0BNlrgVPE0BhDIkc+hAarLQ5 j/+8kj3F8GXbzNOVtHKmAHtNqjDtkWupyTCTIqzcMPtqNtuvfU8= -----END CERTIFICATE-----Generated at Thu Apr 10 11:44:31 2025 by rpki-client