$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: 75AxfADR9B5CNAhykK2wicw3Q1siHy2ocSmcv5+LLXs= Subject key identifier: EE:F9:DF:D3:53:CA:BA:56:AA:30:58:CC:A1:A2:33:49:53:BA:7E:CC Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 5A25FF944B91B78D7ACD563253663C67C2F80499 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: D6 Signing time: Sat 19 Apr 2025 03:41:13 +0000 Manifest this update: Sat 19 Apr 2025 03:36:13 +0000 Manifest next update: Tue 22 Apr 2025 08:10:13 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 3: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: 66D9b0rGZCqV8/PYmo48GPr6BCPTR/M0dpOrgNFsmCk=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:25:ff:94:4b:91:b7:8d:7a:cd:56:32:53:66:3c:67:c2:f8:04:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Apr 19 03:36:13 2025 GMT Not After : Apr 22 08:10:13 2025 GMT Subject: CN=EEF9DFD353CABA56AA3058CCA1A2334953BA7ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:f5:be:55:76:b8:ec:34:0f:84:7f:52:5c: 18:b6:ae:7b:7f:82:93:6c:2a:93:d0:8d:ed:fe:b6: 4e:c8:6c:e2:b5:16:5f:d9:09:d2:84:25:42:02:82: 6d:e2:6e:3d:eb:f6:69:6d:33:dd:c3:ba:2c:47:0b: 6a:2d:6e:04:39:30:ae:b5:ee:15:f0:c7:1f:12:77: 56:18:13:47:73:8b:9d:77:75:2f:76:cc:11:73:79: 08:3b:ec:c4:88:3e:c0:50:1b:b0:47:ca:04:fd:6e: 31:4f:23:a2:a7:70:cf:c8:2d:9e:81:5b:4a:8a:07: f4:71:4a:13:3a:35:21:7f:5e:18:20:7c:6b:59:13: 00:c0:4c:bf:d4:59:be:98:e1:20:c3:f0:10:ca:5a: f1:18:00:f1:24:bd:c6:61:05:b1:0a:f9:2b:fe:32: 03:ec:b4:aa:89:b9:ba:ae:38:cd:19:26:a2:b4:14: 1e:60:8e:94:a6:91:79:ff:67:d4:e3:00:ce:b3:3c: da:ed:ba:d2:cd:78:d9:27:b3:b3:26:e8:a7:59:4a: 01:5d:fb:0b:a6:f5:b6:10:0a:a0:3d:ab:76:be:9a: d7:df:b0:25:db:5b:4d:9c:03:0d:3e:42:6a:c9:b7: 74:7b:f2:04:b1:f9:e5:fb:ed:b2:43:67:3b:11:1e: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:DF:D3:53:CA:BA:56:AA:30:58:CC:A1:A2:33:49:53:BA:7E:CC X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:95:ff:b1:ef:2c:7a:02:de:50:86:bc:f5:cd:06:a2:82:60: 7f:f3:b1:1d:a6:44:5d:bb:96:8d:a7:c7:7b:6c:15:94:ab:6e: 97:8d:cc:07:fb:c4:1b:33:fd:0b:bd:f3:eb:d7:e9:72:e1:6f: a8:68:55:c1:d9:e3:e6:b8:e0:28:19:49:91:02:db:61:64:9d: ea:27:42:bb:5e:15:df:ac:83:f5:66:52:78:2d:66:a1:4d:0a: e5:54:67:24:5c:79:90:9d:39:4e:12:02:80:ed:eb:76:23:4c: 76:ba:57:1b:68:e7:b1:ab:0e:73:71:41:42:ad:a4:94:96:cd: 75:2c:fc:af:f6:6c:5e:e6:b8:7d:7b:43:64:4c:ca:2b:a1:e7: 71:a2:68:86:78:9f:45:93:e5:e6:af:b0:2f:fa:cc:83:6e:cb: 0c:65:9a:bd:fa:c5:4f:d9:34:d9:ae:28:1f:b4:a6:08:af:33: 94:16:b1:66:0c:dc:ee:46:fb:b0:b6:cb:4d:e5:f2:3d:5c:e7: ea:b4:3c:40:7c:77:b7:28:15:09:fe:a1:56:3b:1e:cf:b8:09: cb:db:1b:48:ff:fa:2f:19:bc:30:31:2a:b4:74:05:a8:36:14: a1:fb:4f:98:ec:ce:dd:80:ad:26:ff:b9:4a:fa:35:07:2d:09: 93:f2:39:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiX/lEuRt416zVYyU2Y8Z8L4BJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA0MTkwMzM2MTNaFw0yNTA0MjIwODEwMTNaMDMxMTAvBgNV BAMTKEVFRjlERkQzNTNDQUJBNTZBQTMwNThDQ0ExQTIzMzQ5NTNCQTdFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNd/W+VXa47DQPhH9SXBi2rnt/ gpNsKpPQje3+tk7IbOK1Fl/ZCdKEJUICgm3ibj3r9mltM93DuixHC2otbgQ5MK61 7hXwxx8Sd1YYE0dzi513dS92zBFzeQg77MSIPsBQG7BHygT9bjFPI6KncM/ILZ6B W0qKB/RxShM6NSF/XhggfGtZEwDATL/UWb6Y4SDD8BDKWvEYAPEkvcZhBbEK+Sv+ MgPstKqJubquOM0ZJqK0FB5gjpSmkXn/Z9TjAM6zPNrtutLNeNkns7Mm6KdZSgFd +wum9bYQCqA9q3a+mtffsCXbW02cAw0+QmrJt3R78gSx+eX77bJDZzsRHnYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vnf01PKulaqMFjMoaIzSVO6fswwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqV/7HvLHoC3lCGvPXNBqKCYH/zsR2mRF27 lo2nx3tsFZSrbpeNzAf7xBsz/Qu98+vX6XLhb6hoVcHZ4+a44CgZSZEC22Fkneon QrteFd+sg/VmUngtZqFNCuVUZyRceZCdOU4SAoDt63YjTHa6Vxto57GrDnNxQUKt pJSWzXUs/K/2bF7muH17Q2RMyiuh53GiaIZ4n0WT5eavsC/6zINuywxlmr36xU/Z NNmuKB+0pgivM5QWsWYM3O5G+7C2y03l8j1c5+q0PEB8d7coFQn+oVY7Hs+4Ccvb G0j/+i8ZvDAxKrR0Bag2FKH7T5jszt2ArSb/uUr6NQctCZPyObE= -----END CERTIFICATE-----Generated at Sat Apr 19 15:55:51 2025 by rpki-client