$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: 2NamJmQ9/ADfyyH/C9m55HLB1rgDGOJkzOgwFuETrAk= Subject key identifier: AD:0D:AC:73:9F:52:BD:73:78:83:7D:61:CE:4E:57:2E:8A:D7:A3:D7 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 48FD9D9A372DA1F001118CFE1278002287CB46C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 04D1 Signing time: Fri 04 Apr 2025 22:01:17 +0000 Manifest this update: Fri 04 Apr 2025 21:56:17 +0000 Manifest next update: Mon 07 Apr 2025 23:03:17 +0000 Files and hashes: 1: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: CwXU9VaKpcKaIL0+cwM5Fjr5bkAAawnd7hCNC9U00Bg=) 2: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: Rrqdw9OPSaMzJqqbJeil51yS0Dp8UexGZcFlKd3Gk5M=) 3: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: SrEtraPCpy+iaAaIsStLIt+00Wn7AVOuODvTVoqyPLg=) 4: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=) 5: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: e9uiS3KNGlZ+EQjSXY4m6NwJ9lRr8aifmafZU96mQ7k=) 6: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: 4JNXGbFSJKtM5CgL+QrVp+IPBcHdXzt9z515t4i/+vk=) 7: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: Gss2BFwCvkYMrYmTDPR8XZwGfdbzMzVTFBRvuPZp/uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fd:9d:9a:37:2d:a1:f0:01:11:8c:fe:12:78:00:22:87:cb:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Apr 4 21:56:17 2025 GMT Not After : Apr 7 23:03:17 2025 GMT Subject: CN=AD0DAC739F52BD7378837D61CE4E572E8AD7A3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:9a:ed:19:38:c5:82:2a:2f:d4:fb:82:43: d5:32:b3:be:56:62:04:92:a7:43:0c:ef:2a:71:a5: 28:9c:42:d0:82:9a:f5:31:e0:d3:c2:4e:36:3d:79: 95:7d:76:68:23:c3:47:12:ad:e0:d2:33:6b:0c:71: 10:d9:fd:1b:ce:94:e4:38:6b:2a:c2:06:5d:00:0c: 46:a6:2f:ab:0e:43:c1:de:bc:89:0d:d5:4e:40:b2: 0b:09:dd:df:03:43:36:07:ce:82:3e:e2:0e:cb:a8: b2:07:0b:ea:ec:88:ef:e6:d6:b7:bc:9b:81:cd:a7: 8c:46:99:74:0d:80:2e:70:93:7d:f2:39:c8:b2:03: d1:3a:a9:c6:3e:e3:93:cf:cf:59:fe:ab:18:67:31: 2f:52:84:31:f7:05:58:37:e5:00:c1:4d:f3:5b:8d: e9:a7:73:11:26:dd:06:2a:02:1f:01:84:e8:4a:b9: e8:89:f6:b2:35:5a:5a:50:55:cb:a0:c9:97:ea:05: d7:31:49:b8:d1:69:b6:d9:d4:b1:25:e0:3c:7b:5d: d5:7e:4b:04:02:39:1e:1f:44:ba:b4:01:ec:70:f9: 1a:46:39:01:60:48:1d:84:74:96:9d:f1:fd:83:2e: 90:64:6d:cf:a7:f3:7f:a9:d9:45:86:b7:1a:cc:9e: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:AC:73:9F:52:BD:73:78:83:7D:61:CE:4E:57:2E:8A:D7:A3:D7 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5a:d8:c6:0c:ca:c4:48:20:1f:a4:6e:5b:69:cc:00:de:c5: b0:a3:9d:4f:07:48:87:cc:65:63:1a:6c:cf:79:75:ea:97:ed: 13:8f:aa:55:27:26:7c:23:56:e7:6f:c3:51:9d:3f:71:33:a4: 50:04:cc:7a:1d:88:6b:c4:ea:7f:e9:be:ce:b4:18:67:7d:fd: 14:cd:12:71:45:5c:3b:8a:63:01:8a:8d:44:5c:c6:a7:3d:a9: e9:d8:1a:75:b0:1f:36:a1:69:26:8a:a2:d9:e3:73:21:10:55: 05:e0:90:89:8c:12:01:ff:42:ab:7f:77:d7:b6:0c:4d:88:b4: 95:1c:44:6f:56:5f:f2:84:a5:04:a9:64:44:5f:d8:66:cc:e1: 44:40:09:31:9e:fc:81:f9:71:25:e7:3e:fe:3c:1d:53:77:20: 05:d3:69:9e:9c:5c:8a:e5:c3:81:98:47:35:d3:5c:c6:96:98: 4b:5e:a1:52:e2:e9:e8:92:03:35:e4:e1:1b:e7:82:9e:8f:53: 22:92:50:06:2d:8f:ef:1b:55:c2:e1:12:8b:91:22:4f:d0:d5: c3:24:6f:a3:30:cc:68:44:07:af:c2:7c:f9:84:bd:e5:5f:93: f5:89:2d:87:fd:9a:21:15:9c:86:1a:c0:ff:b1:89:e5:4b:cf: 48:89:50:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSP2dmjctofABEYz+EngAIofLRsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTA0MDQyMTU2MTdaFw0yNTA0MDcyMzAzMTdaMDMxMTAvBgNV BAMTKEFEMERBQzczOUY1MkJENzM3ODgzN0Q2MUNFNEU1NzJFOEFEN0EzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxprtGTjFgiov1PuCQ9Uys75W YgSSp0MM7ypxpSicQtCCmvUx4NPCTjY9eZV9dmgjw0cSreDSM2sMcRDZ/RvOlOQ4 ayrCBl0ADEamL6sOQ8HevIkN1U5AsgsJ3d8DQzYHzoI+4g7LqLIHC+rsiO/m1re8 m4HNp4xGmXQNgC5wk33yOciyA9E6qcY+45PPz1n+qxhnMS9ShDH3BVg35QDBTfNb jemncxEm3QYqAh8BhOhKueiJ9rI1WlpQVcugyZfqBdcxSbjRabbZ1LEl4Dx7XdV+ SwQCOR4fRLq0Aexw+RpGOQFgSB2EdJad8f2DLpBkbc+n83+p2UWGtxrMnr6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQ2sc59SvXN4g31hzk5XLorXo9cwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFa2MYMysRIIB+kbltpzADexbCjnU8HSIfM ZWMabM95deqX7ROPqlUnJnwjVudvw1GdP3EzpFAEzHodiGvE6n/pvs60GGd9/RTN EnFFXDuKYwGKjURcxqc9qenYGnWwHzahaSaKotnjcyEQVQXgkImMEgH/Qqt/d9e2 DE2ItJUcRG9WX/KEpQSpZERf2GbM4URACTGe/IH5cSXnPv48HVN3IAXTaZ6cXIrl w4GYRzXTXMaWmEteoVLi6eiSAzXk4Rvngp6PUyKSUAYtj+8bVcLhEouRIk/Q1cMk b6MwzGhEB6/CfPmEveVfk/WJLYf9miEVnIYawP+xieVLz0iJUEY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:25 2025 by rpki-client