$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: ZsIDiO2F2ANm9bMlZ91RXD9wJC0AhiHmjuGPtTXsjIU= Subject key identifier: 01:49:2B:92:87:A9:54:A2:58:C9:A6:65:AF:84:79:44:C8:0F:C1:1A Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 4730CE396A68A97631E18679CBE8B6D99010B898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 0413 Signing time: Fri 04 Apr 2025 13:01:02 +0000 Manifest this update: Fri 04 Apr 2025 12:56:02 +0000 Manifest next update: Tue 08 Apr 2025 00:03:02 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: IJE11zWl6Bd22ECBH1B+diB+bL1zv7uu4MShP4zlbeo=) 2: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: 7eWgB/28Z19DuctSJmo4Z/v3QQApxZoEJLdj3RY++xc=) 3: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: KO2mKvpMoMyIKER769jdSFzf1/LySduDyaOom82gJP4=) 4: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:30:ce:39:6a:68:a9:76:31:e1:86:79:cb:e8:b6:d9:90:10:b8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Apr 4 12:56:02 2025 GMT Not After : Apr 8 00:03:02 2025 GMT Subject: CN=01492B9287A954A258C9A665AF847944C80FC11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:2b:69:61:8d:2c:8c:7b:b4:e1:64:b7:ec: e9:4d:e1:1d:eb:a0:22:92:a4:42:57:ef:e3:5d:82: d4:3f:5c:97:0a:7b:c2:ee:c6:ac:6d:f0:2d:df:4a: ad:5f:bb:36:fe:ff:00:60:33:5d:64:88:2a:69:78: e2:87:8a:1e:1b:8c:4f:08:d9:d7:e8:74:03:b6:64: dc:1c:82:4a:e3:9b:91:32:4e:30:3c:72:09:83:41: ab:fd:f1:62:89:5b:34:1c:51:3d:9c:ca:55:c6:62: 4f:c6:5e:6c:2e:cc:a6:0c:3e:5a:77:8a:29:b7:fd: 5d:44:5e:06:77:1a:f0:32:60:e1:82:47:3b:b3:71: da:0c:ad:79:55:0f:a9:47:b8:10:e1:85:a0:f3:f6: e9:e2:bd:7b:6f:8b:78:84:4e:bf:20:53:c6:da:cb: 2f:55:e2:f1:fa:81:b3:4c:d4:c5:21:e5:4c:82:e9: 7d:1d:fe:49:0e:22:fe:a4:bd:be:31:d8:3d:59:dd: c5:ea:89:bb:40:94:58:3c:62:2c:b9:75:9d:d7:67: 33:79:6b:08:50:90:1c:f4:27:53:19:b8:06:f9:49: 02:13:00:db:c7:fe:10:b6:6c:7e:ab:7a:9f:f0:ac: a4:1f:eb:65:66:e7:a2:fa:79:38:1a:e2:cc:6f:0f: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:2B:92:87:A9:54:A2:58:C9:A6:65:AF:84:79:44:C8:0F:C1:1A X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e9:a5:bc:11:20:d6:4c:6d:8d:eb:ac:d1:8f:d2:d1:71:6f: 74:50:de:63:c5:90:5a:07:e2:e8:24:5d:b3:c5:b6:72:93:81: ef:05:bd:30:a1:30:dd:50:4a:a3:c8:97:da:37:9b:e7:d1:88: 00:0a:6f:bf:bc:4c:36:93:81:dc:ac:12:fd:5f:87:61:7b:9c: d7:f5:65:de:a5:ed:0c:75:d6:3a:dc:70:06:48:8d:4e:4c:a1: c6:3d:d2:ff:03:fc:cb:c0:49:4c:8e:02:b1:db:f6:ac:20:1d: a6:0f:48:2d:7a:23:d5:68:93:84:54:43:c7:aa:ba:7f:b6:24: 07:90:89:b5:36:06:54:f1:e9:21:b1:c7:04:7a:01:5d:11:e2: 3e:28:e0:d6:76:81:dd:2e:56:32:d4:d6:3c:cb:2d:c1:1b:7e: 6c:e0:d6:64:e3:71:0b:d5:00:73:60:8c:85:ef:a0:20:fd:2d: be:d3:6d:69:2c:ea:12:28:ab:15:d9:a9:db:a9:b2:57:7c:71: 21:73:fe:ad:4f:1b:f2:1f:56:9e:a4:41:f3:c8:2b:0f:48:a4: 9f:ff:8d:5a:13:94:46:c4:a6:c9:6a:df:c5:b1:ab:e6:d9:2e: df:fb:48:0d:84:89:db:12:1f:2e:65:bf:9f:e1:3f:98:77:c0: c9:9d:26:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzDOOWpoqXYx4YZ5y+i22ZAQuJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNTA0MDQxMjU2MDJaFw0yNTA0MDgwMDAzMDJaMDMxMTAvBgNV BAMTKDAxNDkyQjkyODdBOTU0QTI1OEM5QTY2NUFGODQ3OTQ0QzgwRkMxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxytpYY0sjHu04WS37OlN4R3r oCKSpEJX7+NdgtQ/XJcKe8Luxqxt8C3fSq1fuzb+/wBgM11kiCppeOKHih4bjE8I 2dfodAO2ZNwcgkrjm5EyTjA8cgmDQav98WKJWzQcUT2cylXGYk/GXmwuzKYMPlp3 iim3/V1EXgZ3GvAyYOGCRzuzcdoMrXlVD6lHuBDhhaDz9univXtvi3iETr8gU8ba yy9V4vH6gbNM1MUh5UyC6X0d/kkOIv6kvb4x2D1Z3cXqibtAlFg8Yiy5dZ3XZzN5 awhQkBz0J1MZuAb5SQITANvH/hC2bH6rep/wrKQf62Vm56L6eTga4sxvDzbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAUkrkoepVKJYyaZlr4R5RMgPwRowHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjppbwRINZMbY3rrNGP0tFxb3RQ3mPFkFoH 4ugkXbPFtnKTge8FvTChMN1QSqPIl9o3m+fRiAAKb7+8TDaTgdysEv1fh2F7nNf1 Zd6l7Qx11jrccAZIjU5MocY90v8D/MvASUyOArHb9qwgHaYPSC16I9Vok4RUQ8eq un+2JAeQibU2BlTx6SGxxwR6AV0R4j4o4NZ2gd0uVjLU1jzLLcEbfmzg1mTjcQvV AHNgjIXvoCD9Lb7TbWks6hIoqxXZqdupsld8cSFz/q1PG/IfVp6kQfPIKw9IpJ// jVoTlEbEpslq38Wxq+bZLt/7SA2EidsSHy5lv5/hP5h3wMmdJmQ= -----END CERTIFICATE-----Generated at Sat Apr 5 22:47:15 2025 by rpki-client