$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: OLJDgYjtZWJIBQkrDRHUrEt8ctlvp7Xl0Q2JjJVLxTo= Subject key identifier: 72:1C:0A:62:8A:37:65:BC:8B:16:BA:DA:BB:B7:83:CC:E6:E2:B4:4E Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 69BA6E258A43594364A24A170CBC613221908C31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0121 Signing time: Sun 06 Apr 2025 09:40:34 +0000 Manifest this update: Sun 06 Apr 2025 09:35:34 +0000 Manifest next update: Wed 09 Apr 2025 12:51:34 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: n4clkKv/SOU90V5TxuH94mWY1smtgcsAQKkiUQvHG/Y=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: 0izt0ixBqZDKlwQm147KqSgUjQ+0Y2XNOWDyyGnRVas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 12:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ba:6e:25:8a:43:59:43:64:a2:4a:17:0c:bc:61:32:21:90:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Apr 6 09:35:34 2025 GMT Not After : Apr 9 12:51:34 2025 GMT Subject: CN=721C0A628A3765BC8B16BADABBB783CCE6E2B44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:b2:9a:25:5b:9e:e7:d8:0c:54:8d:6b:8b: a2:ac:e1:b3:63:86:4a:ed:1a:c2:aa:e8:00:75:50: 31:0f:ae:39:5e:69:0b:21:29:7c:a3:91:dc:d0:51: 72:47:91:68:f5:bf:b7:bd:67:71:14:a1:12:72:22: b1:d6:4b:46:ff:8f:53:43:cd:c9:ef:f8:64:23:eb: 12:32:ef:87:8d:2c:fe:e7:4f:01:a0:4b:df:36:4e: 22:a9:14:30:1b:20:a4:43:b2:25:97:69:3d:26:ba: 41:c5:2d:72:f0:0d:f3:cd:7a:c0:74:06:ac:37:fd: 78:39:4b:06:11:86:c6:3a:fa:f5:dd:c5:7e:f8:9b: a7:4d:96:36:60:64:5d:0e:3e:5c:a7:07:73:28:3a: 56:38:f5:63:ea:06:dd:f3:eb:69:5e:02:97:cb:b5: 7e:31:84:e4:0c:d6:38:2e:28:97:48:70:ad:f2:7b: cd:c3:be:8c:b1:7b:80:10:61:9e:67:f9:d8:7a:f6: 66:9c:1f:ef:38:9a:33:90:17:97:28:15:8f:8a:0e: f2:1e:fa:7b:aa:32:4a:c1:8a:40:9d:b4:44:bd:fd: 21:e9:bb:3e:ef:d0:d8:c3:c6:90:2f:b4:84:4a:f1: 87:86:34:ed:3a:59:d8:44:bf:5c:bc:e0:54:d5:31: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:0A:62:8A:37:65:BC:8B:16:BA:DA:BB:B7:83:CC:E6:E2:B4:4E X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:78:2a:35:c2:bc:b1:8a:23:8e:1b:ea:40:51:3c:7e:81:c4: 06:8e:65:44:ae:53:fb:27:ec:58:2d:ad:0f:ba:8b:cf:c1:02: b2:70:3f:bb:2b:3b:d0:5f:9b:5a:41:90:5e:4a:55:aa:38:db: a2:26:e4:00:db:f6:c1:19:a9:8a:b5:50:45:1b:be:e1:76:6b: af:de:77:3d:c2:5c:7c:9b:1a:e3:2b:f1:87:19:07:cc:56:84: f1:88:ab:73:3f:10:3c:31:f5:47:58:23:4a:47:ee:24:e2:6d: 82:d2:1b:42:38:dc:f2:4e:46:df:e1:19:74:f5:0a:ce:0b:7f: 45:be:93:a0:59:91:5f:d2:ee:8a:6e:84:3e:36:56:d8:36:ae: 33:2f:fc:d2:01:c1:70:95:65:af:f1:a2:d0:71:8b:b7:89:76: d2:71:83:1c:53:4d:25:ff:00:6d:21:d5:73:33:76:f6:f2:74: 9c:10:cf:b3:d1:24:c0:8f:35:8d:2c:db:d4:de:20:0a:69:b9: a3:bc:6f:2a:5d:b4:a8:d5:9b:aa:c4:6f:b8:10:c3:fb:63:23: ea:4f:93:d0:65:83:c6:58:45:64:b8:f4:ca:a0:65:20:d7:9c: 04:e2:2c:3d:dc:58:66:fa:e7:a5:b9:0e:f3:7d:de:8c:2c:8e: e0:c2:40:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabpuJYpDWUNkokoXDLxhMiGQjDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA0MDYwOTM1MzRaFw0yNTA0MDkxMjUxMzRaMDMxMTAvBgNV BAMTKDcyMUMwQTYyOEEzNzY1QkM4QjE2QkFEQUJCQjc4M0NDRTZFMkI0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnz7KaJVue59gMVI1ri6Ks4bNj hkrtGsKq6AB1UDEPrjleaQshKXyjkdzQUXJHkWj1v7e9Z3EUoRJyIrHWS0b/j1ND zcnv+GQj6xIy74eNLP7nTwGgS982TiKpFDAbIKRDsiWXaT0mukHFLXLwDfPNesB0 Bqw3/Xg5SwYRhsY6+vXdxX74m6dNljZgZF0OPlynB3MoOlY49WPqBt3z62leApfL tX4xhOQM1jguKJdIcK3ye83Dvoyxe4AQYZ5n+dh69macH+84mjOQF5coFY+KDvIe +nuqMkrBikCdtES9/SHpuz7v0NjDxpAvtIRK8YeGNO06WdhEv1y84FTVMUwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchwKYoo3ZbyLFrrau7eDzObitE4wHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABR4KjXCvLGKI44b6kBRPH6BxAaOZUSuU/sn 7FgtrQ+6i8/BArJwP7srO9Bfm1pBkF5KVao426Im5ADb9sEZqYq1UEUbvuF2a6/e dz3CXHybGuMr8YcZB8xWhPGIq3M/EDwx9UdYI0pH7iTibYLSG0I43PJORt/hGXT1 Cs4Lf0W+k6BZkV/S7opuhD42Vtg2rjMv/NIBwXCVZa/xotBxi7eJdtJxgxxTTSX/ AG0h1XMzdvbydJwQz7PRJMCPNY0s29TeIAppuaO8bypdtKjVm6rEb7gQw/tjI+pP k9Blg8ZYRWS49MqgZSDXnATiLD3cWGb656W5DvN93owsjuDCQCU= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:21 2025 by rpki-client