$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: k7ChmvNpEtSjx39aBm5i+kFaKZo2aQ8AyyjUrGBnB0s= Subject key identifier: CF:69:3F:F8:6F:C2:EA:F3:98:89:EF:D8:86:46:D6:CF:1B:23:97:03 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 3FC28C722440FABDA3FBFF8CA86058B325B00AB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 91 Signing time: Thu 03 Apr 2025 21:30:58 +0000 Manifest this update: Thu 03 Apr 2025 21:25:58 +0000 Manifest next update: Mon 07 Apr 2025 05:47:58 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: whinsidsdxsSgCBMYvrJxjDBuF1SRhP4hY2yGv3CA8I=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: X8Qmi+rZmoMMOgx/pmYhJCvz8V6uohIBbxYT/rjE3nM=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: QhFbGyf+fzMJepq9dcRUucI/sl2BiLaqJjOJSPUDFZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c2:8c:72:24:40:fa:bd:a3:fb:ff:8c:a8:60:58:b3:25:b0:0a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Apr 3 21:25:58 2025 GMT Not After : Apr 7 05:47:58 2025 GMT Subject: CN=CF693FF86FC2EAF39889EFD88646D6CF1B239703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:54:60:ab:6a:01:1d:9e:90:09:cd:3e:b0: f3:8c:62:86:74:9d:e9:3a:fd:56:74:4a:c6:99:62: f8:35:9b:37:8a:13:12:61:fe:97:fe:99:4e:60:3c: 11:f3:f5:b8:c6:5a:41:a7:c3:24:96:5e:c8:39:b7: f9:08:15:4e:24:f1:99:22:51:e4:0f:33:c0:9d:1d: 0c:24:05:4d:b3:ce:b5:5d:2b:0a:63:6c:69:cc:da: 0f:c0:b7:54:f0:70:69:7f:49:0b:28:30:ef:8b:f7: 19:1c:0f:08:a8:00:1d:86:2a:23:47:a6:f9:e8:e1: 17:4b:10:25:96:f1:5b:20:de:88:a0:56:d9:bc:6a: 29:d7:f4:b4:01:1c:c9:e4:f7:17:f2:39:ef:d3:81: 2a:57:94:4e:af:d3:88:f0:8e:31:dd:0c:91:37:26: fb:3e:0e:e6:32:fb:a4:f4:51:60:40:51:51:fe:5f: 8a:7f:56:18:09:00:3d:2d:94:fd:4a:bb:5d:f0:a0: 01:57:ba:a5:59:76:a5:53:b9:ca:c3:59:50:67:9e: 28:cb:88:ab:c6:90:cf:e9:c3:b9:e3:9f:9a:5f:66: b8:fa:c7:45:a2:80:f5:dc:e6:cb:24:c7:fa:32:81: da:3d:0f:76:b2:37:6e:5e:65:6e:ec:2f:74:46:09: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:69:3F:F8:6F:C2:EA:F3:98:89:EF:D8:86:46:D6:CF:1B:23:97:03 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:df:9b:76:77:6b:92:34:37:f3:af:50:26:ac:03:43:ff: e3:1b:3f:58:d9:3c:6e:45:9c:23:a2:56:00:39:b2:38:e6:b2: 06:aa:d6:fc:f7:49:6b:be:43:fa:5c:87:31:12:e1:94:34:70: 9f:64:6e:dc:e3:54:5e:64:5d:7a:1b:32:b2:5e:ac:3a:90:b9: 85:3d:9d:5e:22:2e:7e:16:54:1f:9f:ff:03:d2:53:cf:87:f3: 6b:d4:86:e7:8b:68:0b:35:ed:28:56:7e:99:33:59:dd:a4:a0: 25:06:52:6f:ee:88:33:58:91:97:43:d5:3d:f1:78:e1:7b:c3: 39:b5:bf:ae:d5:18:9e:83:fe:f1:4e:3e:df:52:d5:41:6d:95: 54:5d:5b:70:ae:24:8b:2b:b5:78:65:b7:e8:b7:04:08:6f:5c: f3:30:29:a3:bc:c0:89:d5:65:f6:d9:17:d8:90:0a:af:05:95: e9:8c:df:86:bc:b4:ac:c0:55:64:aa:bd:1e:08:20:2b:25:a4: d1:40:04:19:65:39:9f:27:34:fe:98:c0:a8:9b:ee:21:84:ca: a4:fe:ea:46:89:46:e9:8b:d0:87:9a:cc:3c:b6:e7:d5:78:55: 88:18:07:07:04:29:b0:c8:42:5d:00:c7:75:14:4d:d9:38:b1: ba:74:ea:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8KMciRA+r2j+/+MqGBYsyWwCrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA0MDMyMTI1NThaFw0yNTA0MDcwNTQ3NThaMDMxMTAvBgNV BAMTKENGNjkzRkY4NkZDMkVBRjM5ODg5RUZEODg2NDZENkNGMUIyMzk3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXlRgq2oBHZ6QCc0+sPOMYoZ0 nek6/VZ0SsaZYvg1mzeKExJh/pf+mU5gPBHz9bjGWkGnwySWXsg5t/kIFU4k8Zki UeQPM8CdHQwkBU2zzrVdKwpjbGnM2g/At1TwcGl/SQsoMO+L9xkcDwioAB2GKiNH pvno4RdLECWW8Vsg3oigVtm8ainX9LQBHMnk9xfyOe/TgSpXlE6v04jwjjHdDJE3 Jvs+DuYy+6T0UWBAUVH+X4p/VhgJAD0tlP1Ku13woAFXuqVZdqVTucrDWVBnnijL iKvGkM/pw7njn5pfZrj6x0WigPXc5sskx/oygdo9D3ayN25eZW7sL3RGCbuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz2k/+G/C6vOYie/YhkbWzxsjlwMwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvr35t2d2uSNDfzr1AmrAND/+MbP1jZPG5F nCOiVgA5sjjmsgaq1vz3SWu+Q/pchzES4ZQ0cJ9kbtzjVF5kXXobMrJerDqQuYU9 nV4iLn4WVB+f/wPSU8+H82vUhueLaAs17ShWfpkzWd2koCUGUm/uiDNYkZdD1T3x eOF7wzm1v67VGJ6D/vFOPt9S1UFtlVRdW3CuJIsrtXhlt+i3BAhvXPMwKaO8wInV ZfbZF9iQCq8FlemM34a8tKzAVWSqvR4IICslpNFABBllOZ8nNP6YwKib7iGEyqT+ 6kaJRumL0IeazDy259V4VYgYBwcEKbDIQl0Ax3UUTdk4sbp06sE= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:02 2025 by rpki-client