$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: T5qHoL2WoMM4t93iq6kUdZfy4cIxMuGXm8sNTLDh8bk= Subject key identifier: D8:04:7E:E3:72:79:37:D2:91:E2:6D:C9:B5:7D:18:AC:36:B1:1B:99 Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 544EED72E97747052037A311DBE66AC2F93EC508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 0418 Signing time: Sat 05 Apr 2025 12:01:00 +0000 Manifest this update: Sat 05 Apr 2025 11:56:00 +0000 Manifest next update: Tue 08 Apr 2025 19:10:00 +0000 Files and hashes: 1: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: O97QWFOUB0ThEkhfBsj2Or5N9OXhiqe7rvhDUpsfPmc=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: U3Gs6gFYrqKdvd5j47kgxX4NaXmZB4E+Rz3ST2VSWc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4e:ed:72:e9:77:47:05:20:37:a3:11:db:e6:6a:c2:f9:3e:c5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Apr 5 11:56:00 2025 GMT Not After : Apr 8 19:10:00 2025 GMT Subject: CN=D8047EE3727937D291E26DC9B57D18AC36B11B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:05:b9:92:fb:a9:f1:0e:44:06:63:55:d1: 84:4d:b4:b8:c9:33:22:dc:bc:88:fa:93:15:2f:88: b8:c9:82:52:a5:be:b6:50:06:21:61:5a:90:fb:5f: e7:d5:62:59:99:79:e6:27:aa:5c:2b:0b:00:36:ea: bb:fe:2a:09:b9:58:ad:b6:0c:96:70:dc:a3:91:3b: 7f:9e:7e:5b:5f:58:7e:00:1b:ab:02:16:02:f9:c8: 9f:90:95:6c:23:31:5b:78:d2:b6:47:78:bd:ca:6f: 6d:aa:54:3a:93:82:5d:10:93:30:ed:bb:31:a9:05: 81:e3:43:f6:d2:fb:39:e0:7e:71:ad:e9:44:60:44: c7:40:0d:8b:67:88:01:a0:5f:be:2f:30:5f:8d:b0: f6:f0:0d:02:ab:9b:41:37:af:1a:91:78:29:22:11: c9:6b:d9:1f:85:0c:74:33:b2:46:a8:82:e6:0c:25: ab:cb:1f:b5:4e:c0:b4:92:84:7a:4a:18:ca:13:a4: a4:70:1c:37:91:63:be:6c:4c:0c:a7:28:93:d2:5c: af:c6:bd:94:cf:c1:32:02:ed:05:60:5a:a0:05:1e: 45:7c:6f:e9:ad:f6:ef:df:7c:a7:9c:4f:9a:61:c7: b0:eb:5d:61:44:10:23:55:be:82:45:a9:46:d4:39: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:7E:E3:72:79:37:D2:91:E2:6D:C9:B5:7D:18:AC:36:B1:1B:99 X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:05:3a:4a:3f:30:b0:21:5b:d8:80:78:03:ec:1e:7a:64:89: 2e:7c:0e:63:b7:90:47:0b:d8:d7:77:35:f7:52:6f:15:47:88: 81:b7:aa:7f:8b:27:06:80:44:e5:ea:99:cf:b2:e0:9a:f6:31: c5:e5:85:e8:07:1d:dd:a2:0d:b3:59:93:7b:7f:91:ce:1e:68: 6d:5a:ae:7c:22:a8:3c:ab:c4:7f:70:d7:29:48:2a:0e:15:25: dc:3c:11:a5:f3:f4:c6:8d:77:0e:56:79:66:c7:a5:7c:5f:6d: a0:05:78:77:34:37:97:03:b6:48:6e:51:5c:fe:d7:06:da:a3: b8:87:07:1e:00:f6:16:5d:9d:f9:26:ce:07:0c:5c:5f:07:87: cc:b9:2d:7f:1b:43:66:1e:05:05:2e:e5:ce:38:3a:4d:83:b2: 76:c8:93:f7:b4:6c:f8:5c:31:c7:ab:bf:b7:b5:2a:dd:17:06: 34:8a:a6:82:b0:e3:f4:4a:0e:7d:b0:9e:b7:63:e0:be:3d:ad: 98:37:60:f8:f7:75:88:bb:92:7c:a0:7f:a0:2d:e4:ee:9d:7b: c3:fa:33:3c:d3:8b:ee:fe:1b:e2:f0:e0:61:16:2b:cf:08:16: d2:bf:40:48:e4:c0:83:31:34:6b:4e:fc:76:63:5f:58:69:aa: 31:93:6a:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVE7tcul3RwUgN6MR2+Zqwvk+xQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTA0MDUxMTU2MDBaFw0yNTA0MDgxOTEwMDBaMDMxMTAvBgNV BAMTKEQ4MDQ3RUUzNzI3OTM3RDI5MUUyNkRDOUI1N0QxOEFDMzZCMTFCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdVwW5kvup8Q5EBmNV0YRNtLjJ MyLcvIj6kxUviLjJglKlvrZQBiFhWpD7X+fVYlmZeeYnqlwrCwA26rv+Kgm5WK22 DJZw3KORO3+efltfWH4AG6sCFgL5yJ+QlWwjMVt40rZHeL3Kb22qVDqTgl0QkzDt uzGpBYHjQ/bS+zngfnGt6URgRMdADYtniAGgX74vMF+NsPbwDQKrm0E3rxqReCki Eclr2R+FDHQzskaoguYMJavLH7VOwLSShHpKGMoTpKRwHDeRY75sTAynKJPSXK/G vZTPwTIC7QVgWqAFHkV8b+mt9u/ffKecT5phx7DrXWFEECNVvoJFqUbUOVFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2AR+43J5N9KR4m3JtX0YrDaxG5kwHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4FOko/MLAhW9iAeAPsHnpkiS58DmO3kEcL 2Nd3NfdSbxVHiIG3qn+LJwaAROXqmc+y4Jr2McXlhegHHd2iDbNZk3t/kc4eaG1a rnwiqDyrxH9w1ylIKg4VJdw8EaXz9MaNdw5WeWbHpXxfbaAFeHc0N5cDtkhuUVz+ 1wbao7iHBx4A9hZdnfkmzgcMXF8Hh8y5LX8bQ2YeBQUu5c44Ok2DsnbIk/e0bPhc Mcerv7e1Kt0XBjSKpoKw4/RKDn2wnrdj4L49rZg3YPj3dYi7knygf6At5O6de8P6 MzzTi+7+G+Lw4GEWK88IFtK/QEjkwIMxNGtO/HZjX1hpqjGTavE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:11 2025 by rpki-client