$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: Yb4SE5sdMh3/A5ZxbCL0vN5XprkgUkAAfWig8SwiLm0= Subject key identifier: 4B:32:5B:8C:D7:57:FD:03:B0:D0:E8:F8:45:5D:D3:66:A3:A8:0D:93 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 1078D91BF0DBC97DEF878039460F6D76AE274AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 024A Signing time: Thu 17 Apr 2025 01:30:36 +0000 Manifest this update: Thu 17 Apr 2025 01:25:36 +0000 Manifest next update: Sun 20 Apr 2025 12:46:36 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: Tha7kuEQT/OT86HC7GcU0SGdgokUXsPxFkUelGU4Xog=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: L7LqVXyoSRg8DgNZpOS04vg4NVwWiWJGcA0KRd2HUBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 12:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:78:d9:1b:f0:db:c9:7d:ef:87:80:39:46:0f:6d:76:ae:27:4a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Apr 17 01:25:36 2025 GMT Not After : Apr 20 12:46:36 2025 GMT Subject: CN=4B325B8CD757FD03B0D0E8F8455DD366A3A80D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:19:6c:32:30:21:41:20:2a:f6:ef:35:f6:6b: d6:d5:64:01:c7:a5:d1:4b:76:5e:9f:c0:8b:bc:95: 06:cd:89:36:e3:b5:f4:26:16:ce:01:10:d7:79:22: 1a:47:06:6d:e0:32:23:85:d3:15:d9:61:52:24:6e: f1:44:74:58:a7:64:5e:3b:ad:48:3a:0a:92:02:b1: ca:10:03:25:b6:a5:1d:c8:ab:77:d8:22:84:18:d3: cc:5f:11:05:86:b7:ba:3e:1d:0d:bb:78:28:2e:3f: 86:39:ed:d6:ca:e6:72:57:c3:da:1a:ef:3a:13:de: b2:1c:cc:53:68:1f:75:e2:9b:fb:dc:27:35:d6:25: e0:bb:3f:57:9f:0e:17:e4:c0:5a:81:11:c4:97:9f: 08:d0:96:14:8c:fe:ab:ec:26:15:93:7f:8a:92:98: 79:21:a9:f1:39:2c:21:e9:8d:cf:de:04:79:4b:5e: b2:3f:36:a7:1b:03:78:3b:ea:dc:fc:28:b5:82:20: 3e:a0:e1:6c:d3:da:e4:5f:75:3a:6e:ce:2d:6f:47: ec:cb:2b:28:82:ad:06:a6:48:54:c6:6f:74:f9:03: 3b:26:55:6f:e5:e1:61:47:bc:3a:f0:55:76:94:78: 12:51:7b:c8:c4:c5:2a:aa:10:43:81:17:70:8d:74: 59:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:5B:8C:D7:57:FD:03:B0:D0:E8:F8:45:5D:D3:66:A3:A8:0D:93 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b2:da:02:e6:3f:d8:9a:ba:c7:82:bf:5f:0b:85:22:14:ba: 4a:81:3d:bb:0e:29:40:a6:2e:7f:fb:5a:b3:b0:b2:54:14:ed: af:02:d3:f2:8b:e6:92:6e:c5:47:6c:66:4c:6a:01:06:73:6f: db:55:ab:d0:11:69:3b:35:d4:1e:2f:4f:4c:55:fa:84:49:d7: c9:7f:52:12:a1:86:a2:de:9c:c0:55:4b:69:d6:66:b1:cb:e2: 96:c3:f1:a4:c3:e0:e5:34:11:1b:12:42:43:12:3f:c5:f2:3c: 36:f8:d3:d5:71:37:d8:6e:ef:cf:12:5c:a7:a0:22:d3:76:44: 28:ee:8a:9b:76:2a:f7:dc:68:9f:0a:7c:09:63:bf:59:b8:b5: 11:7f:34:02:f5:4e:af:ee:76:b7:8f:fe:76:2b:d5:3a:69:ef: fa:f9:06:f8:c4:0f:c5:96:a7:73:97:a6:45:e2:2b:fd:fa:2b: da:dd:c0:29:95:fc:6b:73:86:2f:11:2b:b6:82:54:e1:00:00: 4d:de:fb:d0:cf:8b:9f:c2:98:5f:35:0a:0a:c2:ee:d3:b8:a7: b4:8c:f5:35:bd:c3:35:75:56:ea:09:44:be:e5:ef:df:f1:ef: 1a:40:68:34:3e:e3:3f:f2:4e:ee:af:fc:12:f4:8a:ae:dd:63: be:40:8c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHjZG/DbyX3vh4A5Rg9tdq4nSsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTA0MTcwMTI1MzZaFw0yNTA0MjAxMjQ2MzZaMDMxMTAvBgNV BAMTKDRCMzI1QjhDRDc1N0ZEMDNCMEQwRThGODQ1NUREMzY2QTNBODBEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5GWwyMCFBICr27zX2a9bVZAHH pdFLdl6fwIu8lQbNiTbjtfQmFs4BENd5IhpHBm3gMiOF0xXZYVIkbvFEdFinZF47 rUg6CpICscoQAyW2pR3Iq3fYIoQY08xfEQWGt7o+HQ27eCguP4Y57dbK5nJXw9oa 7zoT3rIczFNoH3Xim/vcJzXWJeC7P1efDhfkwFqBEcSXnwjQlhSM/qvsJhWTf4qS mHkhqfE5LCHpjc/eBHlLXrI/NqcbA3g76tz8KLWCID6g4WzT2uRfdTpuzi1vR+zL KyiCrQamSFTGb3T5AzsmVW/l4WFHvDrwVXaUeBJRe8jExSqqEEOBF3CNdFlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzJbjNdX/QOw0Oj4RV3TZqOoDZMwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKy2gLmP9iauseCv18LhSIUukqBPbsOKUCm Ln/7WrOwslQU7a8C0/KL5pJuxUdsZkxqAQZzb9tVq9ARaTs11B4vT0xV+oRJ18l/ UhKhhqLenMBVS2nWZrHL4pbD8aTD4OU0ERsSQkMSP8XyPDb409VxN9hu788SXKeg ItN2RCjuipt2KvfcaJ8KfAljv1m4tRF/NAL1Tq/udreP/nYr1Tpp7/r5BvjED8WW p3OXpkXiK/36K9rdwCmV/Gtzhi8RK7aCVOEAAE3e+9DPi5/CmF81CgrC7tO4p7SM 9TW9wzV1VuoJRL7l79/x7xpAaDQ+4z/yTu6v/BL0iq7dY75AjMI= -----END CERTIFICATE-----Generated at Fri Apr 18 16:25:57 2025 by rpki-client