$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: g8iHL7iqDVBKleDg33rEJNVTiqY3gsmYuY0ZnL8rFvU= Subject key identifier: 4C:39:15:7C:83:40:D0:7B:89:94:E8:93:11:C4:D5:08:8C:40:A0:2C Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 3167031A428241E0F4368B679CA7C9E68AB98BFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 79 Signing time: Sat 05 Apr 2025 02:10:05 +0000 Manifest this update: Sat 05 Apr 2025 02:05:05 +0000 Manifest next update: Tue 08 Apr 2025 04:50:05 +0000 Files and hashes: 1: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=) 2: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=) 3: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 4: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=) 5: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=) 6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: xddM7w308QiPK52d4zzBSYQjKsp97GSqni7FDdZVE40=) 7: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=) 8: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=) 9: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:67:03:1a:42:82:41:e0:f4:36:8b:67:9c:a7:c9:e6:8a:b9:8b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Apr 5 02:05:05 2025 GMT Not After : Apr 8 04:50:05 2025 GMT Subject: CN=4C39157C8340D07B8994E89311C4D5088C40A02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:65:be:2e:4b:24:38:78:15:b3:54:47:75: 59:36:3d:55:a3:bd:c2:4a:21:e6:b0:cb:fc:ad:db: 2a:c4:f9:ab:0a:09:10:89:cf:71:83:5a:0e:17:5a: a4:4f:b6:d6:56:8a:92:e0:b7:3a:0e:ce:d3:19:a1: f9:5c:09:81:60:d7:7d:29:a8:58:5b:7b:86:d0:c6: 9c:70:77:11:e5:87:e5:40:01:fc:75:f0:53:47:9b: b1:6c:06:1e:b1:67:9b:ca:ad:25:60:7f:76:d7:f1: ac:b8:8c:75:0b:3e:03:a5:58:c0:01:76:eb:60:fa: 17:ff:85:b8:c3:ae:2f:65:88:e2:7c:0e:86:4b:8d: 08:8e:4c:41:71:0a:49:45:87:db:49:87:22:c9:e2: 69:5e:18:54:97:85:24:65:cd:7e:b8:08:bf:f2:ca: 86:17:fe:84:90:94:d5:ce:9d:eb:90:4f:68:02:e3: 64:99:7a:3a:5b:ee:06:cf:d0:93:e9:64:a1:b4:a3: ef:34:9a:6b:1e:b7:53:a5:67:0c:3b:c8:3e:5e:7d: ae:52:d1:1e:a5:2f:c1:c4:f7:61:ad:20:2e:fb:ef: bf:a9:f8:82:6e:bd:a7:fa:aa:ca:80:f1:0d:e5:fc: 1b:54:c2:67:14:71:57:c2:50:0f:e6:67:ba:e1:31: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:15:7C:83:40:D0:7B:89:94:E8:93:11:C4:D5:08:8C:40:A0:2C X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ee:d7:c5:1e:25:44:36:70:9a:e4:64:ca:b8:40:71:2c:fb: 54:d9:8c:b1:84:f7:b9:3f:da:a3:8e:d2:06:ee:70:48:32:4c: c9:76:68:28:68:fb:85:b8:98:9b:85:18:70:f5:2d:63:be:c9: 8c:c2:7e:ef:a6:70:03:1f:a8:13:9a:18:f0:b3:f0:4d:0c:37: c6:3e:4c:3e:c7:54:0d:e4:eb:fc:0f:b7:59:37:fc:94:8b:fc: 93:3e:b3:cb:e4:97:b7:42:3e:04:91:ef:b1:85:05:5d:0a:a0: 59:44:92:8c:db:31:f4:af:a3:45:7c:89:67:60:41:b1:f5:b6: 1e:8f:5a:38:38:39:b4:a0:53:0c:5c:03:72:5e:fb:4b:54:7b: 9c:4f:30:1d:63:1b:e0:88:72:27:cc:eb:f3:70:09:9d:9f:0a: bf:82:1f:b0:70:11:5a:51:46:5a:52:51:8e:a1:18:17:82:8b: 0b:62:b9:04:bb:7b:01:64:40:d6:c6:57:e5:51:a7:37:1c:51: ac:27:83:56:f6:d3:e5:b0:49:8e:a3:31:e6:94:f0:35:27:96: fd:15:9d:d6:47:31:c5:a6:48:a8:8b:ae:68:d7:89:9c:d1:91: 35:53:bc:6d:dd:5b:18:51:06:cf:b5:41:d3:e1:a2:4a:e2:4c: 46:df:1e:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWcDGkKCQeD0NotnnKfJ5oq5i/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA0MDUwMjA1MDVaFw0yNTA0MDgwNDUwMDVaMDMxMTAvBgNV BAMTKDRDMzkxNTdDODM0MEQwN0I4OTk0RTg5MzExQzRENTA4OEM0MEEwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX02W+LkskOHgVs1RHdVk2PVWj vcJKIeawy/yt2yrE+asKCRCJz3GDWg4XWqRPttZWipLgtzoOztMZoflcCYFg130p qFhbe4bQxpxwdxHlh+VAAfx18FNHm7FsBh6xZ5vKrSVgf3bX8ay4jHULPgOlWMAB dutg+hf/hbjDri9liOJ8DoZLjQiOTEFxCklFh9tJhyLJ4mleGFSXhSRlzX64CL/y yoYX/oSQlNXOneuQT2gC42SZejpb7gbP0JPpZKG0o+80mmset1OlZww7yD5efa5S 0R6lL8HE92GtIC7777+p+IJuvaf6qsqA8Q3l/BtUwmcUcVfCUA/mZ7rhMaHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDkVfINA0HuJlOiTEcTVCIxAoCwwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfu18UeJUQ2cJrkZMq4QHEs+1TZjLGE97k/ 2qOO0gbucEgyTMl2aCho+4W4mJuFGHD1LWO+yYzCfu+mcAMfqBOaGPCz8E0MN8Y+ TD7HVA3k6/wPt1k3/JSL/JM+s8vkl7dCPgSR77GFBV0KoFlEkozbMfSvo0V8iWdg QbH1th6PWjg4ObSgUwxcA3Je+0tUe5xPMB1jG+CIcifM6/NwCZ2fCr+CH7BwEVpR RlpSUY6hGBeCiwtiuQS7ewFkQNbGV+VRpzccUawng1b20+WwSY6jMeaU8DUnlv0V ndZHMcWmSKiLrmjXiZzRkTVTvG3dWxhRBs+1QdPhokriTEbfHgI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:35 2025 by rpki-client