$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: aVc6XYW3Z8reDtG/boDabA7ZYvJDQt6T34+Ov9Mf7XY= Subject key identifier: 52:09:4A:F6:6E:9D:D0:17:8A:6F:BD:74:A8:00:38:7A:39:5D:DA:A1 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 3F1927FE3D9BC710EBA6335CD6D38723AEC1071E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 0249 Signing time: Mon 02 Jun 2025 00:20:03 +0000 Manifest this update: Mon 02 Jun 2025 00:15:03 +0000 Manifest next update: Thu 05 Jun 2025 06:39:03 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: oZcoGoyP8gXN50PCZDJksMS2dXNtt9yc0y9VjE+AIGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:19:27:fe:3d:9b:c7:10:eb:a6:33:5c:d6:d3:87:23:ae:c1:07:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Jun 2 00:15:03 2025 GMT Not After : Jun 5 06:39:03 2025 GMT Subject: CN=52094AF66E9DD0178A6FBD74A800387A395DDAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:b0:12:e6:18:af:0b:79:fd:2a:b5:e7:30: e6:26:c8:01:24:07:ec:b9:da:af:2d:99:13:e9:5f: df:d0:14:d4:5e:fd:0b:57:bc:2f:b4:d1:3b:75:ba: 71:7e:6d:34:f7:40:9e:6e:eb:42:c2:7b:40:e3:0d: 15:aa:11:61:1e:41:e7:f1:5c:25:60:6d:9c:e8:82: d1:44:00:0d:ed:c3:c0:85:a8:00:ef:9a:cb:bc:f5: 2c:20:fc:8f:fc:d2:f2:8b:64:6b:3e:51:8a:b0:0f: b8:07:d1:fe:8f:c6:42:87:a6:7d:d0:15:90:b6:cf: 2f:a0:38:40:f0:87:77:91:6f:23:a9:06:50:18:49: 12:48:79:81:29:b0:ef:22:2f:2e:f8:d4:ad:7c:a1: a1:b5:16:9c:c3:2f:d5:5c:4d:81:f8:d2:f1:23:12: 98:3a:19:cf:00:88:17:c2:2e:9d:d9:54:ab:1e:f3: 5d:cc:cf:00:5f:61:e2:04:ad:ec:56:98:d8:07:07: 61:77:98:b4:42:08:41:85:ed:bb:9c:20:d9:c2:4f: 1a:bc:ed:79:a6:91:c0:3b:e0:1a:1e:24:77:7b:28: 94:bf:67:1b:90:40:a7:79:81:f2:f6:48:63:f0:d7: 2d:8c:f1:be:7f:3b:dd:e1:c3:e7:39:ee:07:42:b0: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:09:4A:F6:6E:9D:D0:17:8A:6F:BD:74:A8:00:38:7A:39:5D:DA:A1 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e6:bb:67:af:4f:db:32:31:ac:b5:27:41:ec:0d:d9:dd:39: 05:16:33:9c:17:55:db:fb:89:3a:ea:e1:ad:84:86:92:22:cd: a2:65:0c:ea:b6:3d:19:e5:e4:45:6a:da:1d:0b:43:65:8e:70: e4:ae:34:be:c2:d0:ab:ea:cd:7b:05:6c:64:35:73:aa:87:20: ef:d9:f2:9b:8d:5b:cc:57:02:37:db:b5:f2:fe:cc:56:a0:8c: d8:1b:2e:a2:ac:e2:aa:68:92:52:bf:e4:d0:12:2b:a4:18:41: 2f:3f:5b:73:43:ac:c0:4f:39:b0:e9:7d:29:c5:30:bc:b9:37: a4:d9:e6:4f:c1:83:34:d8:30:b5:27:47:4e:fe:b7:ee:95:a0: a0:25:d5:92:79:2c:e7:cc:4e:b2:7e:38:0a:97:40:a1:11:00: 42:81:73:5d:eb:90:4f:3e:7f:5b:c5:5a:26:57:f7:86:0c:90: da:c0:e8:3d:8c:8e:72:f0:9f:7c:77:bb:24:8a:d7:ea:94:98: 0b:98:3f:dc:ce:8e:e8:f3:68:16:bb:fc:34:f4:1f:21:c8:1e: b3:55:81:80:5e:82:e4:54:e5:17:66:5b:2a:70:96:fe:fe:e9: 68:71:97:d3:ec:39:e8:f2:10:38:7a:de:12:fa:ed:63:fc:ca: 7b:93:1c:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxkn/j2bxxDrpjNc1tOHI67BBx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA2MDIwMDE1MDNaFw0yNTA2MDUwNjM5MDNaMDMxMTAvBgNV BAMTKDUyMDk0QUY2NkU5REQwMTc4QTZGQkQ3NEE4MDAzODdBMzk1RERBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuerAS5hivC3n9KrXnMOYmyAEk B+y52q8tmRPpX9/QFNRe/QtXvC+00Tt1unF+bTT3QJ5u60LCe0DjDRWqEWEeQefx XCVgbZzogtFEAA3tw8CFqADvmsu89Swg/I/80vKLZGs+UYqwD7gH0f6PxkKHpn3Q FZC2zy+gOEDwh3eRbyOpBlAYSRJIeYEpsO8iLy741K18oaG1FpzDL9VcTYH40vEj Epg6Gc8AiBfCLp3ZVKse813MzwBfYeIErexWmNgHB2F3mLRCCEGF7bucINnCTxq8 7XmmkcA74BoeJHd7KJS/ZxuQQKd5gfL2SGPw1y2M8b5/O93hw+c57gdCsNINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUglK9m6d0BeKb710qAA4ejld2qEwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzmu2evT9syMay1J0HsDdndOQUWM5wXVdv7 iTrq4a2EhpIizaJlDOq2PRnl5EVq2h0LQ2WOcOSuNL7C0KvqzXsFbGQ1c6qHIO/Z 8puNW8xXAjfbtfL+zFagjNgbLqKs4qpoklK/5NASK6QYQS8/W3NDrMBPObDpfSnF MLy5N6TZ5k/BgzTYMLUnR07+t+6VoKAl1ZJ5LOfMTrJ+OAqXQKERAEKBc13rkE8+ f1vFWiZX94YMkNrA6D2MjnLwn3x3uySK1+qUmAuYP9zOjujzaBa7/DT0HyHIHrNV gYBeguRU5RdmWypwlv7+6Whxl9PsOejyEDh63hL67WP8ynuTHJ0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:31 2025 by rpki-client