$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: I2/0PoKH3GwAT2RfS73kcbsg6oWpre3FHAUDoityGMc= Subject key identifier: 79:81:71:D7:C0:AC:FC:53:EF:29:E1:1A:A1:01:BD:8D:78:DA:25:D7 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 099433D07357CC96058B0E91A7D7525ACF6F86D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 024F Signing time: Sat 19 Apr 2025 06:21:06 +0000 Manifest this update: Sat 19 Apr 2025 06:16:06 +0000 Manifest next update: Tue 22 Apr 2025 12:59:06 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) 2: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) 3: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) 4: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: l18d3FENo2FTb9HTEenZC63VdELo9R2zDw1Anay7IEs=) 5: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 6: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 7: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:94:33:d0:73:57:cc:96:05:8b:0e:91:a7:d7:52:5a:cf:6f:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Apr 19 06:16:06 2025 GMT Not After : Apr 22 12:59:06 2025 GMT Subject: CN=798171D7C0ACFC53EF29E11AA101BD8D78DA25D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:33:8b:96:58:98:1c:5f:42:be:07:df:bf: ce:5a:aa:b5:6f:36:de:fd:75:69:71:26:4a:43:de: 7f:9f:60:bb:a6:c6:c8:87:97:b8:d2:78:26:91:e3: 12:bc:75:e0:5f:29:70:b0:fd:a7:a3:d0:21:cb:f3: 59:ac:5c:7e:e3:84:8c:f9:25:a4:2a:45:35:4c:02: c0:ae:aa:7f:c8:b8:9f:89:01:55:e9:10:3c:e1:e3: 73:94:f9:cf:63:37:ee:18:4c:90:66:c0:ac:22:71: e8:97:34:fc:df:e4:b3:f3:ac:23:45:ba:49:29:d7: 26:dd:ee:a9:de:d3:d2:a1:a9:53:a2:7f:e3:62:2a: cf:85:a8:a8:91:a0:80:5a:97:f0:ff:3d:82:34:7b: 97:96:9a:97:14:1b:22:91:7e:ff:31:cd:54:9c:70: da:b2:c1:46:8b:61:54:80:5c:5c:68:28:c6:d7:48: 03:d5:2d:b3:e0:3f:55:47:54:ad:64:40:55:d1:49: a6:9e:a8:8e:95:e7:47:94:07:8e:97:f7:04:c2:ed: e9:ef:13:0a:de:e7:20:71:e9:73:e4:ce:b9:d0:86: 50:6e:de:e7:85:3d:4b:f1:df:f7:ca:b4:46:85:d8: bb:2b:6d:41:02:e3:9c:03:f4:c5:bf:e6:d3:0f:f1: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:81:71:D7:C0:AC:FC:53:EF:29:E1:1A:A1:01:BD:8D:78:DA:25:D7 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d8:fb:1d:eb:f0:a5:51:7d:c6:13:68:38:aa:de:66:e5:db: ae:57:61:65:3f:a3:54:ce:31:27:9e:27:f8:12:43:d7:2f:06: 31:15:af:ff:10:03:df:25:d5:dd:7e:6b:16:25:09:b9:f1:4c: 3f:d9:bd:58:7c:a7:e7:ea:f2:0d:3b:f4:c6:9c:df:77:0a:44: 84:71:7b:50:d5:21:c6:2c:50:24:7c:29:47:0f:f3:29:72:a1: 47:46:21:e6:99:24:0a:6f:d0:a0:66:ee:94:8c:55:62:6c:27: ca:b6:16:25:a4:56:e2:0a:b4:0e:cc:9a:1d:6f:7f:e9:10:18: 07:d5:a2:f6:87:71:89:73:d1:78:0a:bc:6e:9e:7e:cc:3a:7e: e3:2d:f5:4d:81:12:4a:d9:c0:9c:f2:09:7d:3e:83:dc:f0:01: d6:c3:13:80:cc:40:13:36:c8:b3:8c:3d:2c:43:0a:f9:65:47: 97:4b:81:fb:87:2f:db:6e:f5:4f:ef:f6:d4:00:52:70:f1:c2: bb:1a:4a:a7:c3:a9:21:ca:7f:3b:51:91:64:21:de:c8:17:6d: 6d:69:9c:c5:63:2d:d8:39:ba:c9:5d:5c:0d:24:ef:f1:3e:45: 90:ac:1d:81:71:01:b6:0f:e9:ab:32:80:e4:a9:05:af:a0:13: 3e:76:fc:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZQz0HNXzJYFiw6Rp9dSWs9vhtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA0MTkwNjE2MDZaFw0yNTA0MjIxMjU5MDZaMDMxMTAvBgNV BAMTKDc5ODE3MUQ3QzBBQ0ZDNTNFRjI5RTExQUExMDFCRDhENzhEQTI1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhzOLlliYHF9Cvgffv85aqrVv Nt79dWlxJkpD3n+fYLumxsiHl7jSeCaR4xK8deBfKXCw/aej0CHL81msXH7jhIz5 JaQqRTVMAsCuqn/IuJ+JAVXpEDzh43OU+c9jN+4YTJBmwKwiceiXNPzf5LPzrCNF ukkp1ybd7qne09KhqVOif+NiKs+FqKiRoIBal/D/PYI0e5eWmpcUGyKRfv8xzVSc cNqywUaLYVSAXFxoKMbXSAPVLbPgP1VHVK1kQFXRSaaeqI6V50eUB46X9wTC7env Ewre5yBx6XPkzrnQhlBu3ueFPUvx3/fKtEaF2LsrbUEC45wD9MW/5tMP8YH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYFx18Cs/FPvKeEaoQG9jXjaJdcwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjY+x3r8KVRfcYTaDiq3mbl265XYWU/o1TO MSeeJ/gSQ9cvBjEVr/8QA98l1d1+axYlCbnxTD/ZvVh8p+fq8g079Mac33cKRIRx e1DVIcYsUCR8KUcP8ylyoUdGIeaZJApv0KBm7pSMVWJsJ8q2FiWkVuIKtA7Mmh1v f+kQGAfVovaHcYlz0XgKvG6efsw6fuMt9U2BEkrZwJzyCX0+g9zwAdbDE4DMQBM2 yLOMPSxDCvllR5dLgfuHL9tu9U/v9tQAUnDxwrsaSqfDqSHKfztRkWQh3sgXbW1p nMVjLdg5usldXA0k7/E+RZCsHYFxAbYP6asygOSpBa+gEz52/Bc= -----END CERTIFICATE-----Generated at Sat Apr 19 12:26:07 2025 by rpki-client