$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: tmAexNfy2Ij8J4NH7bUN0FkhboWAfDlrT35rs4Hdl64= Subject key identifier: 6F:15:F5:83:DD:B9:77:50:7E:FA:20:34:2B:FF:F7:31:05:8D:F9:BF Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 210098DF0A369E322DF6C64D43F18D7BD5A9CE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 0150 Signing time: Fri 04 Apr 2025 10:21:36 +0000 Manifest this update: Fri 04 Apr 2025 10:16:36 +0000 Manifest next update: Mon 07 Apr 2025 16:20:36 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: MmAQZlQ2LpTs4dPrg47nCJoTuPyj/0qD25QUUDQ3h8U=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 16:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:00:98:df:0a:36:9e:32:2d:f6:c6:4d:43:f1:8d:7b:d5:a9:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Apr 4 10:16:36 2025 GMT Not After : Apr 7 16:20:36 2025 GMT Subject: CN=6F15F583DDB977507EFA20342BFFF731058DF9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:28:65:69:82:95:7e:d4:d3:c8:02:2b:ee: 04:2f:88:ca:f5:aa:b8:31:b2:27:e0:57:4a:a8:ba: 29:eb:48:ba:8f:6b:e9:49:48:be:99:7e:55:5f:53: b5:eb:38:e5:c5:5b:1c:00:f3:78:83:7e:9a:e5:7f: 00:9e:af:39:e1:15:8b:16:78:9e:ba:66:8c:3f:27: c7:20:7b:0b:4f:ef:41:78:62:68:9b:f8:ed:b3:08: d4:b0:0f:0d:6d:c0:b5:94:29:db:6a:47:32:5b:52: 2e:f8:f0:b8:73:e4:3b:47:9b:d4:45:24:bd:e8:19: f9:a4:21:73:8d:59:fb:93:7f:86:8e:9b:ca:bd:e8: e8:a4:dc:f8:16:a2:8c:79:82:73:e0:83:9b:91:db: 3c:ec:5f:6a:27:ac:9e:67:76:14:c8:13:f0:63:a6: 3c:e5:30:99:bc:03:37:34:e4:76:81:6d:83:5a:8e: 7d:91:1b:c4:a4:6a:4b:04:ad:81:84:14:64:0a:af: a9:0d:3f:be:72:b7:a9:06:a9:d5:db:77:b7:9b:a7: a4:51:6e:ce:46:60:b1:d9:c3:30:07:49:57:9a:53: 8c:38:21:48:8c:38:2d:4a:b1:2b:21:7a:9b:84:24: 01:fe:fe:cd:76:0b:ef:b4:49:0b:dd:23:12:1f:f1: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:15:F5:83:DD:B9:77:50:7E:FA:20:34:2B:FF:F7:31:05:8D:F9:BF X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cd:ae:e3:f5:d8:5b:7f:ec:78:86:bd:e4:ad:48:a9:b2:25: 14:c7:73:f3:72:6b:48:3f:1d:7e:26:a5:cd:50:3f:32:de:8b: 7c:e6:eb:a4:ce:b4:ba:0e:91:64:b0:84:7c:30:b0:0e:7f:0b: 2b:ab:5c:2f:83:13:c7:e5:f6:13:c6:15:79:0d:5e:26:4b:56: 57:46:6e:7f:5f:6e:c6:01:19:ac:51:6c:8b:30:31:55:7a:49: 11:d7:7c:5b:80:b8:8f:33:58:69:c7:e0:63:5b:16:bb:b6:99: d7:d3:ce:b7:dd:c9:ce:89:bb:9d:df:b1:8b:04:25:68:51:1c: 22:9a:1a:42:7a:91:a0:8a:1e:43:d8:20:17:df:e3:51:6d:f0: b2:f7:63:38:ee:d8:67:d7:a7:10:f8:9e:6d:ce:44:8f:b4:b5: 5b:34:ff:22:36:ba:ee:a5:67:90:ac:27:d0:c7:c3:3a:7b:d5: 7c:4d:f8:d7:96:c2:7f:97:d5:4f:75:25:78:8e:50:16:2d:1e: a3:f6:c0:90:93:9f:15:01:a7:88:07:4b:0d:f4:d9:0f:8c:42: 51:15:1c:94:ad:e6:c4:ef:1b:48:a6:9a:6c:c0:ed:bb:07:6b: f9:13:42:7c:7b:cc:6e:2f:0b:6d:e2:70:90:a7:4f:47:9c:52: c9:65:17:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQCY3wo2njIt9sZNQ/GNe9WpznAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA0MDQxMDE2MzZaFw0yNTA0MDcxNjIwMzZaMDMxMTAvBgNV BAMTKDZGMTVGNTgzRERCOTc3NTA3RUZBMjAzNDJCRkZGNzMxMDU4REY5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSChlaYKVftTTyAIr7gQviMr1 qrgxsifgV0qouinrSLqPa+lJSL6ZflVfU7XrOOXFWxwA83iDfprlfwCerznhFYsW eJ66Zow/J8cgewtP70F4Ymib+O2zCNSwDw1twLWUKdtqRzJbUi748Lhz5DtHm9RF JL3oGfmkIXONWfuTf4aOm8q96Oik3PgWoox5gnPgg5uR2zzsX2onrJ5ndhTIE/Bj pjzlMJm8Azc05HaBbYNajn2RG8SkaksErYGEFGQKr6kNP75yt6kGqdXbd7ebp6RR bs5GYLHZwzAHSVeaU4w4IUiMOC1KsSshepuEJAH+/s12C++0SQvdIxIf8T/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbxX1g925d1B++iA0K//3MQWN+b8wHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHNruP12Ft/7HiGveStSKmyJRTHc/Nya0g/ HX4mpc1QPzLei3zm66TOtLoOkWSwhHwwsA5/CyurXC+DE8fl9hPGFXkNXiZLVldG bn9fbsYBGaxRbIswMVV6SRHXfFuAuI8zWGnH4GNbFru2mdfTzrfdyc6Ju53fsYsE JWhRHCKaGkJ6kaCKHkPYIBff41Ft8LL3Yzju2GfXpxD4nm3ORI+0tVs0/yI2uu6l Z5CsJ9DHwzp71XxN+NeWwn+X1U91JXiOUBYtHqP2wJCTnxUBp4gHSw302Q+MQlEV HJSt5sTvG0immmzA7bsHa/kTQnx7zG4vC23icJCnT0ecUsllF1o= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:42 2025 by rpki-client