$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: ogkXpGSfYS4t/vJw5L8uG5Cs+zuymk9eKUClrc/6yDU= Subject key identifier: 1B:DE:33:A9:2B:8A:82:23:D5:C1:0D:6F:23:D3:E6:C2:2F:63:EE:C6 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 65EE0C40F11286D601E543DBC6C43B0D2F3798CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: 42 Signing time: Sun 20 Apr 2025 00:41:18 +0000 Manifest this update: Sun 20 Apr 2025 00:36:18 +0000 Manifest next update: Wed 23 Apr 2025 01:53:18 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=) 2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: hlXXW+vujofwhtjtEI/VglKG18o1DvkGy74TaWdS5uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 01:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ee:0c:40:f1:12:86:d6:01:e5:43:db:c6:c4:3b:0d:2f:37:98:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Apr 20 00:36:18 2025 GMT Not After : Apr 23 01:53:18 2025 GMT Subject: CN=1BDE33A92B8A8223D5C10D6F23D3E6C22F63EEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:81:1f:03:53:f4:96:2a:c0:f7:b9:0f:ef: e5:6d:1b:7a:cd:32:75:b0:f2:64:60:42:51:72:b0: 7c:54:b9:98:31:4c:ca:a9:e4:1a:77:1a:dd:0b:93: 23:be:62:b1:6f:b8:77:ad:f7:fb:97:00:c6:fb:09: 9c:ca:45:89:5d:1e:2e:69:c2:c1:23:a1:48:bd:30: 17:c3:7b:89:cd:a9:ff:bc:ef:12:30:65:28:c7:d8: 21:4c:c9:0b:7d:84:23:4e:fe:26:57:25:27:79:c5: e1:60:dc:1b:8b:34:a2:28:b7:62:2f:a8:27:56:5e: 25:b2:31:68:c7:2a:3d:0d:25:70:d6:04:b8:f5:ba: b7:e7:2f:15:b2:c4:3a:46:09:eb:05:9d:e2:ca:d5: 3a:84:67:eb:0f:05:4e:5f:5a:5b:f9:33:70:64:44: e9:db:ee:66:4d:89:8d:ee:e0:3c:ea:7b:b1:69:4a: e9:49:b5:f6:e9:02:0e:d1:04:b5:39:f7:9e:ae:1b: 02:0f:46:ab:a0:50:a8:fb:c9:48:f6:0a:87:fe:71: 5a:cd:81:9a:6a:14:9c:3e:eb:07:a8:18:97:3e:a0: 7f:8f:e9:7f:a6:b5:31:04:0c:dc:33:c8:36:f4:26: 00:11:1e:ec:6e:35:19:c7:5f:5d:b8:5e:19:c9:16: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DE:33:A9:2B:8A:82:23:D5:C1:0D:6F:23:D3:E6:C2:2F:63:EE:C6 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9a:f9:5a:c3:44:b9:d4:8b:15:59:4b:ab:4f:76:97:ad:0a: 0c:f7:d0:67:9d:d1:c7:6b:b9:be:6d:f6:86:47:77:ef:fb:11: f0:1f:0d:a8:2d:84:5e:e3:ed:d6:c4:63:bf:e0:fd:0e:a2:f9: 1e:eb:e9:0d:e9:7d:fd:47:a8:0a:75:12:b6:b7:5a:00:62:d4: bb:fe:43:b9:b0:99:12:3c:9e:ef:eb:bc:6d:30:12:1f:96:bb: ff:6b:04:7e:e7:07:39:bc:a7:62:76:ca:b9:90:ff:48:b7:c0: 53:fe:ef:f1:20:b2:7b:3d:d0:cb:c5:44:a0:56:46:9b:85:1c: 9d:6a:19:6b:e9:48:b5:f4:4f:71:9c:31:32:31:02:c3:a6:27: dc:37:12:8e:1f:45:29:9f:7e:cc:5c:67:4c:44:cb:63:bf:5c: c5:c9:a2:4a:18:8d:61:bf:d0:16:96:0b:fb:26:eb:a5:1c:79: 32:43:4c:4e:46:8c:4a:fd:d2:dc:26:08:48:cc:6f:e7:7a:58: c6:01:2d:51:78:c8:98:0f:97:67:35:33:ae:4b:7e:2d:2a:35: 22:d1:c5:8d:2f:5c:10:1c:46:f9:6e:f2:2d:d8:65:5b:f5:df: f6:18:ce:3d:37:3a:b3:7b:0b:a0:6c:96:d5:35:69:0a:63:eb: 33:2e:5c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZe4MQPEShtYB5UPbxsQ7DS83mM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTA0MjAwMDM2MThaFw0yNTA0MjMwMTUzMThaMDMxMTAvBgNV BAMTKDFCREUzM0E5MkI4QTgyMjNENUMxMEQ2RjIzRDNFNkMyMkY2M0VFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUoEfA1P0lirA97kP7+VtG3rN MnWw8mRgQlFysHxUuZgxTMqp5Bp3Gt0LkyO+YrFvuHet9/uXAMb7CZzKRYldHi5p wsEjoUi9MBfDe4nNqf+87xIwZSjH2CFMyQt9hCNO/iZXJSd5xeFg3BuLNKIot2Iv qCdWXiWyMWjHKj0NJXDWBLj1urfnLxWyxDpGCesFneLK1TqEZ+sPBU5fWlv5M3Bk ROnb7mZNiY3u4Dzqe7FpSulJtfbpAg7RBLU5956uGwIPRqugUKj7yUj2Cof+cVrN gZpqFJw+6weoGJc+oH+P6X+mtTEEDNwzyDb0JgARHuxuNRnHX124XhnJFlm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG94zqSuKgiPVwQ1vI9Pmwi9j7sYwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIya+VrDRLnUixVZS6tPdpetCgz30Ged0cdr ub5t9oZHd+/7EfAfDagthF7j7dbEY7/g/Q6i+R7r6Q3pff1HqAp1Era3WgBi1Lv+ Q7mwmRI8nu/rvG0wEh+Wu/9rBH7nBzm8p2J2yrmQ/0i3wFP+7/Egsns90MvFRKBW RpuFHJ1qGWvpSLX0T3GcMTIxAsOmJ9w3Eo4fRSmffsxcZ0xEy2O/XMXJokoYjWG/ 0BaWC/sm66UceTJDTE5GjEr90twmCEjMb+d6WMYBLVF4yJgPl2c1M65Lfi0qNSLR xY0vXBAcRvlu8i3YZVv13/YYzj03OrN7C6BsltU1aQpj6zMuXIE= -----END CERTIFICATE-----Generated at Mon Apr 21 05:31:26 2025 by rpki-client