$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: BHQEKOqATlzza9tSwBzN+OLDG0vjgX/IK5Qx7hKw3d0= Subject key identifier: F9:8C:58:0D:E4:78:19:8F:01:58:6A:49:DA:E0:86:32:65:78:B6:07 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 52B223DE8592D8FA949530C3F8378B59214C77B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 10:21:04 +0000 Manifest this update: Sat 05 Apr 2025 10:16:04 +0000 Manifest next update: Tue 08 Apr 2025 14:54:04 +0000 Files and hashes: 1: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: YpXfCL82On8UTAObXpsp+TSzduNgz0G+wsNlyOIz0pA=) 3: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: BJgE43BTG20VmjmoDj0OiSc7Vi1arU8AaSzJQiiiGyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b2:23:de:85:92:d8:fa:94:95:30:c3:f8:37:8b:59:21:4c:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Apr 5 10:16:04 2025 GMT Not After : Apr 8 14:54:04 2025 GMT Subject: CN=F98C580DE478198F01586A49DAE086326578B607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:9b:c4:af:6d:1c:7f:dc:44:68:2b:80:c9: 44:03:8e:43:0c:88:ef:17:d5:46:8f:0b:61:0e:7d: 29:97:22:80:e9:6e:2a:72:0b:a0:36:e4:fb:7b:17: 9f:83:34:96:f8:9b:41:da:50:06:7e:a1:71:cb:7d: 7a:ff:8c:f5:a3:d4:e0:dd:47:a2:41:f2:0b:8a:c7: 9c:f5:bb:73:b2:9f:61:0d:b8:df:4e:7e:4d:ad:a3: 6d:42:6a:41:5e:66:01:1d:3d:c9:85:d8:15:95:c1: ac:96:e6:74:f1:46:0c:5a:74:d8:bc:a2:6d:d8:56: 87:72:76:72:76:80:4f:35:4c:10:96:2c:7a:6f:e1: 77:91:9e:d8:b5:64:a0:76:45:65:95:8b:2a:9f:b8: 83:7c:af:9d:76:1c:4c:36:ba:98:18:4e:09:32:72: 6f:75:ce:1c:60:02:40:d5:fe:eb:ea:13:bc:e4:19: 89:51:48:c6:8e:28:a1:41:35:48:31:10:e0:0c:49: f4:91:d4:6c:09:5b:74:a0:97:56:b9:70:03:09:18: 15:23:b7:0e:e6:3e:fa:d6:61:7b:d7:5e:f9:ec:b6: 4d:cb:aa:c3:b2:48:06:f0:df:ac:03:8b:ad:1c:d6: 9c:37:ed:d4:69:6a:33:83:35:d0:77:64:d5:f4:fd: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:58:0D:E4:78:19:8F:01:58:6A:49:DA:E0:86:32:65:78:B6:07 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6e:a9:7d:26:b7:9b:2f:33:6b:74:c7:f1:23:b3:4c:dd:5e: 65:ee:10:38:b8:64:4d:e2:9e:f3:7a:39:9b:b0:f0:0c:de:cf: cb:e2:32:e3:6b:b6:34:5b:3d:6b:5c:3a:11:0d:3f:24:c7:2d: 4f:47:19:d0:45:eb:a9:cb:d9:38:22:0f:0b:39:24:2b:d5:5f: 1e:c7:5b:06:65:f5:34:84:07:59:f8:b0:68:4f:79:36:2f:1f: 4b:76:9e:d8:4a:4d:e0:50:2f:81:01:30:28:7d:f5:ee:57:8b: 20:4d:20:23:3b:4e:e3:67:08:cb:30:ca:3c:b0:72:89:4f:ba: c0:b3:0d:87:d1:0f:c4:4a:ab:87:eb:91:52:c2:3e:ed:ae:90: d4:ad:85:71:fd:72:ec:44:b6:31:c1:fb:bf:04:6a:ef:ca:34: 70:9b:ef:c1:de:66:b6:9c:5c:c3:13:ab:1c:de:8c:a7:11:9a: 94:60:46:a4:10:bd:1e:c8:83:d4:6e:72:b2:3e:ca:7b:7a:d1: df:c8:f8:40:b4:02:2b:b4:65:ed:66:f2:25:f7:7c:35:d2:ae: ce:89:fc:d5:86:16:78:36:f1:22:1e:1a:da:14:f2:79:0a:97: aa:4e:db:46:12:25:bd:9b:f9:c8:7d:c4:04:c4:49:17:b1:9d: c6:d3:09:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrIj3oWS2PqUlTDD+DeLWSFMd7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTA0MDUxMDE2MDRaFw0yNTA0MDgxNDU0MDRaMDMxMTAvBgNV BAMTKEY5OEM1ODBERTQ3ODE5OEYwMTU4NkE0OURBRTA4NjMyNjU3OEI2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZJvEr20cf9xEaCuAyUQDjkMM iO8X1UaPC2EOfSmXIoDpbipyC6A25Pt7F5+DNJb4m0HaUAZ+oXHLfXr/jPWj1ODd R6JB8guKx5z1u3Oyn2ENuN9Ofk2to21CakFeZgEdPcmF2BWVwayW5nTxRgxadNi8 om3YVodydnJ2gE81TBCWLHpv4XeRnti1ZKB2RWWViyqfuIN8r512HEw2upgYTgky cm91zhxgAkDV/uvqE7zkGYlRSMaOKKFBNUgxEOAMSfSR1GwJW3Sgl1a5cAMJGBUj tw7mPvrWYXvXXvnstk3LqsOySAbw36wDi60c1pw37dRpajODNdB3ZNX0/WXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YxYDeR4GY8BWGpJ2uCGMmV4tgcwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9uqX0mt5svM2t0x/Ejs0zdXmXuEDi4ZE3i nvN6OZuw8Azez8viMuNrtjRbPWtcOhENPyTHLU9HGdBF66nL2TgiDws5JCvVXx7H WwZl9TSEB1n4sGhPeTYvH0t2nthKTeBQL4EBMCh99e5XiyBNICM7TuNnCMswyjyw colPusCzDYfRD8RKq4frkVLCPu2ukNSthXH9cuxEtjHB+78Eau/KNHCb78HeZrac XMMTqxzejKcRmpRgRqQQvR7Ig9RucrI+ynt60d/I+EC0Aiu0Ze1m8iX3fDXSrs6J /NWGFng28SIeGtoU8nkKl6pO20YSJb2b+ch9xATESRexncbTCVY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:24 2025 by rpki-client