$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: +X2mp+fiC0bEiO1mEKHSicLk7wiVJ1okXk2NZrjLXxY= Subject key identifier: CF:14:90:58:3C:19:3F:22:5A:FC:E3:AD:76:4B:92:91:A4:EA:BE:8B Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 0A225696FFE63EAFF561741CF58F057E59FBB0E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 017B Signing time: Fri 04 Apr 2025 14:42:19 +0000 Manifest this update: Fri 04 Apr 2025 14:37:19 +0000 Manifest next update: Mon 07 Apr 2025 17:24:19 +0000 Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: UR0TWMWgXqudddMKhRSP7Y5sJnog+ckXeMzXSamPQ84=) 2: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: 8bvQvtlBe7JNMYj2xQaIWZUm48/28VwMFP7AYXq8A30=) 3: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: Nr8D/f9iC8NQ2Yo9hiMGN5RbNCx6LxyWYylsMbJh9pU=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:22:56:96:ff:e6:3e:af:f5:61:74:1c:f5:8f:05:7e:59:fb:b0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Apr 4 14:37:19 2025 GMT Not After : Apr 7 17:24:19 2025 GMT Subject: CN=CF1490583C193F225AFCE3AD764B9291A4EABE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:eb:1e:f9:e9:7f:c3:8e:7c:b2:61:d9:c0: 4d:9f:a2:ba:58:e4:2d:eb:31:90:19:2c:e5:92:f8: 67:b7:e1:f1:13:c6:a1:47:d6:79:97:25:7f:d5:1b: 4b:ef:5a:1d:61:b1:2e:1d:03:ef:f3:d6:6f:90:70: f2:46:30:db:48:ea:e7:6d:02:ee:b4:1e:c4:ba:87: 0c:73:1e:7f:ec:01:98:51:49:3a:ad:c5:b1:8b:28: 44:5d:67:73:df:35:15:fb:b8:6f:0b:dd:bd:37:cc: ce:5d:ef:0f:d3:f0:1d:c4:5e:04:02:9c:21:ce:91: b7:8b:fc:a0:2c:32:de:0e:69:19:73:98:40:6f:bb: 18:88:78:23:f4:49:01:74:65:79:69:27:f7:6f:27: ff:81:be:d1:9a:8c:7a:b9:26:a0:64:c9:21:5a:34: 5f:55:1b:36:c8:ac:d1:62:8d:4d:5c:ce:79:04:cb: 2d:97:eb:81:e4:1a:5d:0a:25:65:3d:11:1e:81:06: a7:cd:40:76:10:c1:d8:13:32:17:29:f1:ca:27:2b: e1:36:2e:07:46:f0:89:dd:f1:df:e1:4e:b7:18:6f: 2c:65:99:2e:0e:04:e4:d2:ee:ef:a9:8e:31:dd:ea: 7c:b1:30:24:44:f3:b1:93:f5:a6:4d:e6:40:6f:61: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:14:90:58:3C:19:3F:22:5A:FC:E3:AD:76:4B:92:91:A4:EA:BE:8B X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ed:d7:57:74:5a:80:b2:6f:8a:8a:08:1e:6f:4f:93:66:82: 3f:d1:22:1d:c7:d4:8d:1d:5f:25:74:54:79:d6:eb:26:94:cc: f0:77:ed:4d:de:aa:87:2d:5f:84:40:f4:eb:52:0d:6c:53:b1: 2a:67:45:9a:ab:2b:0e:de:75:f0:9d:e1:9a:a3:2e:ca:92:f3: dc:a8:7f:6d:5d:ee:db:9a:55:3a:cd:19:83:9b:37:b7:08:6c: ee:2e:89:5d:fa:f8:b6:4d:d9:46:1e:d2:a6:61:6e:87:08:5b: 2f:a7:b9:a3:b4:f0:3e:a8:6d:c7:44:39:55:d3:3a:61:f1:9d: 7c:cf:73:e5:52:02:a1:8d:77:d1:f6:05:61:2e:ac:a9:21:da: 0d:e2:84:6a:46:04:f7:45:d0:27:09:04:93:a0:5f:9b:d4:ef: ce:d5:8f:37:b6:8f:a6:17:d6:82:70:06:39:24:df:84:0a:71: 86:5b:8f:5b:1b:88:e4:04:67:6c:a8:42:81:ea:7d:1f:ea:0d: 5c:47:5f:65:f2:ce:7e:c5:02:65:39:90:9c:1f:fb:54:37:8b: cf:c6:0a:fd:16:1e:9d:18:0d:71:5c:f7:50:e0:70:7f:58:0d: 99:c7:91:d8:ba:b5:38:c5:35:9e:ab:8c:30:08:40:3d:59:a6: 9d:dc:b9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiJWlv/mPq/1YXQc9Y8Ffln7sOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTA0MDQxNDM3MTlaFw0yNTA0MDcxNzI0MTlaMDMxMTAvBgNV BAMTKENGMTQ5MDU4M0MxOTNGMjI1QUZDRTNBRDc2NEI5MjkxQTRFQUJFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeOse+el/w458smHZwE2forpY 5C3rMZAZLOWS+Ge34fETxqFH1nmXJX/VG0vvWh1hsS4dA+/z1m+QcPJGMNtI6udt Au60HsS6hwxzHn/sAZhRSTqtxbGLKERdZ3PfNRX7uG8L3b03zM5d7w/T8B3EXgQC nCHOkbeL/KAsMt4OaRlzmEBvuxiIeCP0SQF0ZXlpJ/dvJ/+BvtGajHq5JqBkySFa NF9VGzbIrNFijU1cznkEyy2X64HkGl0KJWU9ER6BBqfNQHYQwdgTMhcp8conK+E2 LgdG8Ind8d/hTrcYbyxlmS4OBOTS7u+pjjHd6nyxMCRE87GT9aZN5kBvYbGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzxSQWDwZPyJa/OOtdkuSkaTqvoswHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEft11d0WoCyb4qKCB5vT5Nmgj/RIh3H1I0d XyV0VHnW6yaUzPB37U3eqoctX4RA9OtSDWxTsSpnRZqrKw7edfCd4ZqjLsqS89yo f21d7tuaVTrNGYObN7cIbO4uiV36+LZN2UYe0qZhbocIWy+nuaO08D6obcdEOVXT OmHxnXzPc+VSAqGNd9H2BWEurKkh2g3ihGpGBPdF0CcJBJOgX5vU787Vjze2j6YX 1oJwBjkk34QKcYZbj1sbiOQEZ2yoQoHqfR/qDVxHX2Xyzn7FAmU5kJwf+1Q3i8/G Cv0WHp0YDXFc91DgcH9YDZnHkdi6tTjFNZ6rjDAIQD1Zpp3cuQc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:03 2025 by rpki-client