$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: EP/tKqK0u9TWwLBMZhcTNVF2I4+ouWp5W2EEO5HtIt8= Subject key identifier: B8:56:60:58:DC:AC:E3:D1:BD:50:69:15:73:9C:3E:D5:2B:12:37:0D Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 6977D5F9A22F048A834B0773EE9B8506FC91CF89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: F6 Signing time: Sat 05 Apr 2025 20:01:10 +0000 Manifest this update: Sat 05 Apr 2025 19:56:10 +0000 Manifest next update: Wed 09 Apr 2025 05:40:10 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: fdKLklGtOpTaZiKknSWtQhokJ8SyF+EacKH1Get3Tjc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: XediEhIaQUeOGSfuzVTnaTuhSju/4Wd0mwYTQ8T+spc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 05:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:77:d5:f9:a2:2f:04:8a:83:4b:07:73:ee:9b:85:06:fc:91:cf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Apr 5 19:56:10 2025 GMT Not After : Apr 9 05:40:10 2025 GMT Subject: CN=B8566058DCACE3D1BD506915739C3ED52B12370D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ea:5a:ee:9d:67:78:48:bc:11:50:e9:9e:89: 8b:16:c7:18:67:0a:07:e1:2d:b5:d6:13:a1:26:e2: 46:95:21:70:7f:be:fe:f6:a6:31:ba:24:45:fe:e0: d7:67:2e:b5:e3:11:cd:b6:7b:b6:f6:5f:fe:77:3d: 91:f4:a7:fd:87:10:33:22:dd:91:e3:d4:92:f6:46: be:ee:b4:e7:61:2c:ac:02:98:d4:2a:61:87:e7:75: 1d:98:09:b7:31:7f:2d:87:7b:86:e4:5b:03:36:65: b5:24:9d:dd:ab:e4:b4:77:d1:1d:32:22:8b:e4:0f: 32:36:f0:fa:e1:fc:52:ec:5f:bf:50:22:7a:e7:07: 4e:60:be:16:dc:60:f3:49:85:b6:be:17:7e:b7:7c: 52:1b:16:71:9b:c4:95:a1:75:7b:62:3b:d1:e7:87: 4c:d6:52:0f:74:40:79:db:62:58:f2:91:96:7d:a6: f4:97:ca:b9:19:e2:a6:a1:44:8b:2f:50:a3:e0:6e: 6f:18:dd:47:c3:bf:4f:0f:bb:a1:09:17:40:03:47: 8f:d7:b2:05:38:9a:2b:4e:10:7d:78:60:6d:db:47: 92:19:04:f9:34:ca:05:95:de:fb:90:8c:3c:87:8c: 97:be:52:74:f1:a6:bf:46:60:a5:bc:29:51:70:c4: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:56:60:58:DC:AC:E3:D1:BD:50:69:15:73:9C:3E:D5:2B:12:37:0D X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d3:06:a6:47:6d:54:e7:74:2f:ab:d7:09:43:93:55:e0:ff: da:7f:80:55:85:a2:82:84:e0:ae:af:0a:a3:fc:04:62:73:1e: dc:69:54:49:06:4f:b0:b7:da:54:02:f5:c7:f1:3d:ee:86:73: 80:e7:ad:ec:b3:fe:67:8d:bc:4d:a3:94:9a:2d:36:4d:ed:03: 12:0b:22:34:58:92:48:d6:01:f3:ae:41:2d:96:ee:19:f5:9f: 80:01:72:3f:23:09:d6:0e:58:0c:75:6f:61:fc:63:50:88:c1: 2d:a1:c0:5a:8f:5f:1b:0c:8b:99:b3:80:30:0e:6f:db:ca:90: ed:14:4c:9f:c1:c6:33:74:37:b5:84:47:44:7f:9d:ce:a9:d2: 7b:03:9e:b8:ef:80:cf:58:79:f7:b5:6b:54:5f:fc:ee:35:08: e3:08:db:32:76:51:0b:38:e1:3f:44:cb:5b:1b:6b:1a:97:59: 38:02:0e:20:57:5a:93:4a:34:22:1c:1c:26:ef:3a:82:61:4e: 55:d7:a6:11:59:da:de:17:6e:14:2a:79:cf:d9:2f:12:02:9b: 50:a0:58:9f:68:37:1e:db:64:2a:2e:76:33:26:52:ec:ac:4d: ef:68:7e:41:88:af:7c:7e:49:ed:88:28:c1:92:c7:15:0c:46: 07:fb:59:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXfV+aIvBIqDSwdz7puFBvyRz4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA0MDUxOTU2MTBaFw0yNTA0MDkwNTQwMTBaMDMxMTAvBgNV BAMTKEI4NTY2MDU4RENBQ0UzRDFCRDUwNjkxNTczOUMzRUQ1MkIxMjM3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD06lrunWd4SLwRUOmeiYsWxxhn CgfhLbXWE6Em4kaVIXB/vv72pjG6JEX+4NdnLrXjEc22e7b2X/53PZH0p/2HEDMi 3ZHj1JL2Rr7utOdhLKwCmNQqYYfndR2YCbcxfy2He4bkWwM2ZbUknd2r5LR30R0y IovkDzI28Prh/FLsX79QInrnB05gvhbcYPNJhba+F363fFIbFnGbxJWhdXtiO9Hn h0zWUg90QHnbYljykZZ9pvSXyrkZ4qahRIsvUKPgbm8Y3UfDv08Pu6EJF0ADR4/X sgU4mitOEH14YG3bR5IZBPk0ygWV3vuQjDyHjJe+UnTxpr9GYKW8KVFwxFWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFZgWNys49G9UGkVc5w+1SsSNw0wHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzTBqZHbVTndC+r1wlDk1Xg/9p/gFWFooKE 4K6vCqP8BGJzHtxpVEkGT7C32lQC9cfxPe6Gc4Dnreyz/meNvE2jlJotNk3tAxIL IjRYkkjWAfOuQS2W7hn1n4ABcj8jCdYOWAx1b2H8Y1CIwS2hwFqPXxsMi5mzgDAO b9vKkO0UTJ/BxjN0N7WER0R/nc6p0nsDnrjvgM9Yefe1a1Rf/O41COMI2zJ2UQs4 4T9Ey1sbaxqXWTgCDiBXWpNKNCIcHCbvOoJhTlXXphFZ2t4XbhQqec/ZLxICm1Cg WJ9oNx7bZCoudjMmUuysTe9ofkGIr3x+Se2IKMGSxxUMRgf7WfA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:21 2025 by rpki-client