$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: cPjvRgaNuPbl2tkEzEWEpAB22fndUJc/NNm4kVOr5Qg= Subject key identifier: A7:1B:38:AC:29:48:4C:95:BD:5E:5C:09:9E:A1:36:1E:F7:B9:EE:34 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 1AE7B2C88B60F89C3BDE9DDFE9B9FDF25AD4E296 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0111 Signing time: Wed 04 Jun 2025 16:31:14 +0000 Manifest this update: Wed 04 Jun 2025 16:26:14 +0000 Manifest next update: Sat 07 Jun 2025 23:27:14 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: jS09HendhqzNRtsPKRu4JPM6BK+/DbPTFCZbAHK0x2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e7:b2:c8:8b:60:f8:9c:3b:de:9d:df:e9:b9:fd:f2:5a:d4:e2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Jun 4 16:26:14 2025 GMT Not After : Jun 7 23:27:14 2025 GMT Subject: CN=A71B38AC29484C95BD5E5C099EA1361EF7B9EE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:d9:23:9a:8a:ae:a5:c9:5e:45:0c:f6:c0: 0f:d8:e0:84:66:8c:10:26:eb:30:55:e7:21:76:e2: 66:b1:e5:ab:aa:dd:2f:3b:4b:65:f6:56:41:86:ca: e2:63:8c:28:64:bd:1b:b8:d2:24:ed:e2:19:ba:21: e7:70:34:75:bc:02:27:31:1f:96:49:7b:cd:41:d9: 1b:56:0d:52:3c:ef:42:bc:7e:3c:c2:20:de:da:e2: d4:0f:6a:3d:63:fe:73:ad:b4:29:80:bf:1d:ed:d5: 91:9c:e0:6d:65:b3:d8:22:ac:43:bc:74:86:e5:e1: 5b:a4:dc:be:d8:f5:db:70:83:9f:1e:51:d1:f7:d8: 3e:24:43:21:7d:fe:89:7e:8a:9c:91:65:0b:1a:7b: f2:bd:52:25:48:a9:ce:2f:66:38:51:45:99:43:56: 1a:cb:03:db:66:22:a3:d6:5b:f9:f8:31:60:e2:07: e8:dd:46:2b:3b:06:70:ba:a0:bc:8a:99:64:b5:eb: 19:2e:ed:ab:0b:3b:c3:96:ec:5b:8b:3a:fe:6b:d0: 2a:72:06:05:74:bd:18:60:f5:83:4b:2c:57:68:8a: bb:ee:5c:ce:bc:ab:71:42:0d:cb:65:5c:9e:ea:fd: 43:22:5e:76:47:e6:d0:59:16:1d:fb:e0:bc:41:0c: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1B:38:AC:29:48:4C:95:BD:5E:5C:09:9E:A1:36:1E:F7:B9:EE:34 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:36:51:2a:66:bc:63:1e:ed:34:18:1f:ec:aa:a0:ef:0c:d7: 71:e1:06:e9:85:e6:09:24:5c:05:53:35:07:ec:40:06:02:fc: 7c:bd:68:f2:4e:45:90:6e:42:1d:96:e6:15:ca:4f:ed:04:26: 29:c5:d1:5c:68:d8:11:b5:15:e3:50:3c:a4:b2:a5:5a:ba:42: ff:4a:13:01:1d:66:cf:f6:2e:fd:40:79:3d:77:50:a4:27:b2: 54:6f:ea:aa:6b:fd:6a:6e:a2:85:b2:34:03:81:5e:98:bb:f1: 55:10:a3:b5:64:72:7c:f4:96:4d:c2:0c:2c:c2:4f:6d:c8:ac: 12:e3:73:13:fa:c4:fc:e5:4c:46:48:13:a7:a4:b8:93:05:50: ea:3e:4d:02:f8:f6:77:9c:67:13:d7:08:7c:88:1e:92:95:bf: e8:5b:49:6b:f3:8b:8d:aa:24:0f:2d:87:32:bf:dd:2e:36:d5: 25:c0:13:29:9e:c6:0c:cd:0e:38:f5:e4:aa:ae:ac:f2:18:fe: d1:56:98:e6:3d:58:f3:c0:d7:c1:4f:0d:92:59:ad:c9:c8:ab: 7f:b3:4f:54:9d:ce:55:9a:fa:f7:02:f0:ae:ba:be:d9:56:e2: 22:91:e4:83:4c:58:e6:55:eb:b1:65:d5:e4:e9:46:bd:40:df: d9:52:20:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGueyyItg+Jw73p3f6bn98lrU4pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA2MDQxNjI2MTRaFw0yNTA2MDcyMzI3MTRaMDMxMTAvBgNV BAMTKEE3MUIzOEFDMjk0ODRDOTVCRDVFNUMwOTlFQTEzNjFFRjdCOUVFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5tkjmoqupcleRQz2wA/Y4IRm jBAm6zBV5yF24max5auq3S87S2X2VkGGyuJjjChkvRu40iTt4hm6IedwNHW8Aicx H5ZJe81B2RtWDVI870K8fjzCIN7a4tQPaj1j/nOttCmAvx3t1ZGc4G1ls9girEO8 dIbl4Vuk3L7Y9dtwg58eUdH32D4kQyF9/ol+ipyRZQsae/K9UiVIqc4vZjhRRZlD VhrLA9tmIqPWW/n4MWDiB+jdRis7BnC6oLyKmWS16xku7asLO8OW7FuLOv5r0Cpy BgV0vRhg9YNLLFdoirvuXM68q3FCDctlXJ7q/UMiXnZH5tBZFh374LxBDLWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxs4rClITJW9XlwJnqE2Hve57jQwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU2USpmvGMe7TQYH+yqoO8M13HhBumF5gkk XAVTNQfsQAYC/Hy9aPJORZBuQh2W5hXKT+0EJinF0Vxo2BG1FeNQPKSypVq6Qv9K EwEdZs/2Lv1AeT13UKQnslRv6qpr/WpuooWyNAOBXpi78VUQo7Vkcnz0lk3CDCzC T23IrBLjcxP6xPzlTEZIE6ekuJMFUOo+TQL49necZxPXCHyIHpKVv+hbSWvzi42q JA8thzK/3S421SXAEymexgzNDjj15KqurPIY/tFWmOY9WPPA18FPDZJZrcnIq3+z T1SdzlWa+vcC8K66vtlW4iKR5INMWOZV67Fl1eTpRr1A39lSILM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:04 2025 by rpki-client