$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: EsflSSachvgQpK4l9UDoZwIOwWvy3lmj7SPfO8y3hO8= Subject key identifier: 0E:00:1D:4E:6F:A4:78:B6:F0:AD:9C:1B:3E:F1:0F:84:30:8E:DE:43 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 04741832B0F712DB7754ECBD53CBE02C9551EEA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 015D Signing time: Sat 05 Apr 2025 08:41:15 +0000 Manifest this update: Sat 05 Apr 2025 08:36:15 +0000 Manifest next update: Tue 08 Apr 2025 15:16:15 +0000 Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: cQ53DrJ8r9/2thuIl7NLrcyp/V1OCQfGIQQCaLi4Wkg=) 3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:74:18:32:b0:f7:12:db:77:54:ec:bd:53:cb:e0:2c:95:51:ee:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Apr 5 08:36:15 2025 GMT Not After : Apr 8 15:16:15 2025 GMT Subject: CN=0E001D4E6FA478B6F0AD9C1B3EF10F84308EDE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:e9:5a:f3:2e:a0:ad:e5:34:12:31:bf:70: 48:fb:be:a1:4f:8e:e9:df:72:bc:63:1c:8a:4e:1b: 6e:1a:2e:8b:9d:77:9d:16:0d:15:b7:13:3b:7e:42: bd:eb:92:29:01:f7:2f:99:33:63:b2:d8:e1:d7:24: 4a:1e:33:7e:1b:62:08:16:64:d9:d2:31:8e:6e:f7: 7b:98:71:0a:d9:6a:bc:55:0d:58:20:1b:da:17:b6: 74:e1:68:9e:c1:58:bc:df:5f:dc:97:9b:2e:72:02: 6c:15:28:74:57:19:5e:e7:b5:2a:f7:2c:eb:a6:62: 18:96:c8:65:8e:ad:05:7e:fb:ef:04:62:8c:a6:e1: 06:09:53:fc:ee:42:5e:6c:37:a9:e0:ee:36:24:8f: 8e:ca:84:45:13:fa:5d:dd:62:07:24:18:ea:f0:4a: b7:7f:97:7c:9f:61:b5:68:16:fc:e9:0d:33:ae:f1: 1f:67:79:54:e9:f0:d7:67:b9:1f:97:88:af:d3:29: f6:2b:7c:67:66:03:71:ca:1b:6e:0c:fb:32:34:09: 8b:c6:ed:28:2f:bf:dc:ea:d0:e3:68:6e:bb:ec:9b: 51:19:5d:f0:08:cf:0d:72:13:5a:27:4e:12:79:51: e6:f9:ed:35:24:d1:a7:c7:d5:e6:2a:ee:1d:91:4d: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:00:1D:4E:6F:A4:78:B6:F0:AD:9C:1B:3E:F1:0F:84:30:8E:DE:43 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:44:da:f5:53:0a:5a:fc:b5:cc:44:99:c0:25:a5:36:21:f5: 74:af:b6:77:73:ad:7b:a3:aa:13:d0:ab:29:0e:32:df:b3:77: 85:77:bf:71:0b:bc:aa:ee:24:2d:a0:85:f4:45:f9:34:49:be: f8:e5:b6:97:03:0f:e0:49:a8:46:ac:1e:c6:ea:24:7b:28:6a: 56:cb:44:47:01:f4:9b:ed:20:d2:ed:3b:30:35:79:b2:f9:79: 35:4a:e7:a9:ef:c3:b6:9d:fd:66:82:11:98:54:74:03:b5:c7: e8:88:8d:4a:32:5a:65:a1:49:13:20:b8:05:3e:be:26:7a:87: 1c:e6:b0:5b:55:69:08:c7:ff:10:fe:30:33:a3:62:4c:74:b0: f2:cc:fa:38:6f:14:bd:69:9f:9b:1d:35:a1:36:ab:38:b4:2b: e4:90:a8:fc:18:98:c1:78:0e:f4:83:31:8b:44:f0:01:9e:9f: b8:c2:b5:af:92:dc:9c:a3:ba:6a:4d:bb:47:89:a3:4a:59:6a: e7:4b:14:a9:a2:dc:c3:e4:a3:04:44:a0:fe:7e:ad:61:37:88: 2b:12:67:a5:35:e6:73:cf:e0:22:b3:68:f0:73:0a:54:a1:9e: c3:d3:ed:02:71:ee:f5:cc:db:95:17:a6:ff:77:0a:f6:cb:58: 4c:c4:86:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHQYMrD3Ett3VOy9U8vgLJVR7qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA0MDUwODM2MTVaFw0yNTA0MDgxNTE2MTVaMDMxMTAvBgNV BAMTKDBFMDAxRDRFNkZBNDc4QjZGMEFEOUMxQjNFRjEwRjg0MzA4RURFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDneOla8y6greU0EjG/cEj7vqFP junfcrxjHIpOG24aLoudd50WDRW3Ezt+Qr3rkikB9y+ZM2Oy2OHXJEoeM34bYggW ZNnSMY5u93uYcQrZarxVDVggG9oXtnThaJ7BWLzfX9yXmy5yAmwVKHRXGV7ntSr3 LOumYhiWyGWOrQV+++8EYoym4QYJU/zuQl5sN6ng7jYkj47KhEUT+l3dYgckGOrw Srd/l3yfYbVoFvzpDTOu8R9neVTp8NdnuR+XiK/TKfYrfGdmA3HKG24M+zI0CYvG 7Sgvv9zq0ONobrvsm1EZXfAIzw1yE1onThJ5Ueb57TUk0afH1eYq7h2RTcr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgAdTm+keLbwrZwbPvEPhDCO3kMwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNE2vVTClr8tcxEmcAlpTYh9XSvtndzrXuj qhPQqykOMt+zd4V3v3ELvKruJC2ghfRF+TRJvvjltpcDD+BJqEasHsbqJHsoalbL REcB9JvtINLtOzA1ebL5eTVK56nvw7ad/WaCEZhUdAO1x+iIjUoyWmWhSRMguAU+ viZ6hxzmsFtVaQjH/xD+MDOjYkx0sPLM+jhvFL1pn5sdNaE2qzi0K+SQqPwYmMF4 DvSDMYtE8AGen7jCta+S3JyjumpNu0eJo0pZaudLFKmi3MPkowREoP5+rWE3iCsS Z6U15nPP4CKzaPBzClShnsPT7QJx7vXM25UXpv93CvbLWEzEhrc= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:11 2025 by rpki-client