$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: TEBOS4fZDSoQ1n/aY1cUFMQ47VniT20JpONBh3CQETE= Subject key identifier: 91:86:E1:F0:A0:E1:03:F9:10:6C:07:18:6C:8F:61:B1:61:95:B0:04 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 313F2429502536A53F6EA210FC060063C6A5E78E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 0144 Signing time: Fri 04 Apr 2025 15:01:42 +0000 Manifest this update: Fri 04 Apr 2025 14:56:42 +0000 Manifest next update: Mon 07 Apr 2025 19:05:42 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 2: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: AMos+HGUWq7+9k6TWm79QP/toP7b7xzYAcoRm64h7r4=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3f:24:29:50:25:36:a5:3f:6e:a2:10:fc:06:00:63:c6:a5:e7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Apr 4 14:56:42 2025 GMT Not After : Apr 7 19:05:42 2025 GMT Subject: CN=9186E1F0A0E103F9106C07186C8F61B16195B004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:a9:79:05:48:91:c3:e8:cf:9c:50:4e:79: 89:00:6c:83:70:41:87:ff:4f:50:19:a9:08:96:05: 7d:d3:c1:68:73:a0:5d:62:35:2f:9a:e9:df:30:0d: b5:05:53:f4:36:7e:9b:73:47:39:d6:99:7c:7a:3a: 20:85:a0:1b:06:27:fa:4c:9f:dc:cf:ca:ce:3f:51: c6:2c:4d:2d:9b:9f:de:67:68:0e:c0:64:8e:37:3d: 54:78:27:da:f8:04:53:25:65:65:79:1b:93:f1:f8: 28:38:b7:28:34:c8:53:c0:0d:c1:19:c0:0a:b5:ff: e0:5e:69:bf:81:30:e2:33:80:7c:01:23:8e:44:58: bf:bf:3b:d7:96:63:0d:f4:f9:35:85:b9:5b:94:66: 52:52:45:76:34:bc:02:42:e1:6b:2d:b4:8f:57:ca: fa:d5:70:f7:68:a6:92:07:f8:f9:50:fa:e5:3a:1b: 50:c9:af:f2:a8:b8:7d:66:e4:5c:27:08:0e:ec:23: 68:84:a6:7a:90:1e:8a:a0:6f:12:a8:78:50:60:ce: 42:ef:40:a1:8e:a8:5c:05:a5:37:5c:f7:0a:ba:67: ed:f1:cf:fb:cc:36:37:8c:de:ce:be:7b:42:bd:b8: 6e:42:06:1b:30:96:da:e0:a1:3f:00:e7:5b:4a:84: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:E1:F0:A0:E1:03:F9:10:6C:07:18:6C:8F:61:B1:61:95:B0:04 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:ac:73:95:3a:39:ec:39:f9:c1:fc:8d:3b:ef:4a:15:d7: 0b:46:e8:25:81:63:a5:28:9a:27:22:f9:13:79:64:5a:f8:84: e1:1e:b4:1a:ac:99:89:48:56:e3:fa:e4:47:7f:13:81:82:5d: 31:8e:2f:c7:3d:31:a3:1c:a6:39:ae:fa:23:af:24:f1:ad:41: f3:09:d4:88:65:56:cf:e3:71:47:8e:9b:50:b7:3e:9c:47:62: bb:06:ed:57:0a:0f:9a:36:14:77:42:4d:b1:62:e2:56:18:ac: 2a:c1:a3:69:16:e3:78:cd:9b:57:b8:a6:5e:f2:db:96:3a:21: 02:31:76:ac:ec:f3:99:d4:2f:66:b2:87:57:d1:46:35:10:05: de:50:61:e2:5d:b3:f6:77:ee:bc:2d:e0:ba:59:ce:32:92:5d: 15:00:f9:26:17:a3:16:e2:c2:6c:f3:d9:11:16:01:58:2e:8c: 9f:39:14:48:72:73:f9:c9:d4:7a:3f:6a:5a:cc:c2:d8:27:8a: 48:92:cf:14:51:34:e1:ef:b4:94:6a:92:84:9e:59:6e:cf:36: 0d:4d:59:bb:86:f7:2a:52:d4:47:53:48:49:6f:a7:6c:fd:9b: 31:91:fc:7c:0c:b0:4a:43:41:59:7b:0f:6b:bc:1a:6e:d0:67: 31:d2:ee:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMT8kKVAlNqU/bqIQ/AYAY8al544wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA0MDQxNDU2NDJaFw0yNTA0MDcxOTA1NDJaMDMxMTAvBgNV BAMTKDkxODZFMUYwQTBFMTAzRjkxMDZDMDcxODZDOEY2MUIxNjE5NUIwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFql5BUiRw+jPnFBOeYkAbINw QYf/T1AZqQiWBX3TwWhzoF1iNS+a6d8wDbUFU/Q2fptzRznWmXx6OiCFoBsGJ/pM n9zPys4/UcYsTS2bn95naA7AZI43PVR4J9r4BFMlZWV5G5Px+Cg4tyg0yFPADcEZ wAq1/+Beab+BMOIzgHwBI45EWL+/O9eWYw30+TWFuVuUZlJSRXY0vAJC4WsttI9X yvrVcPdoppIH+PlQ+uU6G1DJr/KouH1m5FwnCA7sI2iEpnqQHoqgbxKoeFBgzkLv QKGOqFwFpTdc9wq6Z+3xz/vMNjeM3s6+e0K9uG5CBhswltrgoT8A51tKhPQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYbh8KDhA/kQbAcYbI9hsWGVsAQwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCHrHOVOjnsOfnB/I0770oV1wtG6CWBY6Uo mici+RN5ZFr4hOEetBqsmYlIVuP65Ed/E4GCXTGOL8c9MaMcpjmu+iOvJPGtQfMJ 1IhlVs/jcUeOm1C3PpxHYrsG7VcKD5o2FHdCTbFi4lYYrCrBo2kW43jNm1e4pl7y 25Y6IQIxdqzs85nUL2ayh1fRRjUQBd5QYeJds/Z37rwt4LpZzjKSXRUA+SYXoxbi wmzz2REWAVgujJ85FEhyc/nJ1Ho/alrMwtgnikiSzxRRNOHvtJRqkoSeWW7PNg1N WbuG9ypS1EdTSElvp2z9mzGR/HwMsEpDQVl7D2u8Gm7QZzHS7p4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:17 2025 by rpki-client