$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: 0Pk26VBS27x46XaaTMA1utnnZdTlphkAZ10xBeGaaNA= Subject key identifier: B4:45:96:66:81:03:71:3C:88:04:88:C7:96:C3:2B:02:8D:A6:A4:19 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 4BBE20D986444C16990C0C84852C21D2F6A77BAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: 79 Signing time: Sat 05 Apr 2025 13:10:05 +0000 Manifest this update: Sat 05 Apr 2025 13:05:05 +0000 Manifest next update: Tue 08 Apr 2025 13:22:05 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: LDrGtcJTq4OgY5/UX37tOI+FxWVDVhlk7fAC/6U0Evc=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: 8iP8j8kXIXuniJt/plXc4ksYsf9JhdNCT6XjDa+vtA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:20:d9:86:44:4c:16:99:0c:0c:84:85:2c:21:d2:f6:a7:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Apr 5 13:05:05 2025 GMT Not After : Apr 8 13:22:05 2025 GMT Subject: CN=B44596668103713C880488C796C32B028DA6A419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:bc:22:b8:09:29:a8:dc:be:07:14:16:cc: c0:42:df:c3:a4:ad:dc:a5:20:83:9c:f7:c2:69:19: af:95:53:b2:3f:fd:50:16:1a:2a:df:83:7c:41:db: a7:65:0d:66:fc:ca:56:60:cb:ed:74:f0:e5:5f:0a: 47:53:e5:ec:6e:63:02:a8:38:d4:4a:2f:dc:ee:c6: 81:25:cc:d7:05:3e:9a:18:27:76:de:a6:cf:db:2e: 3e:7f:7e:05:56:cd:40:25:e9:58:7c:fc:7e:a0:e5: 56:aa:21:4b:d1:5b:f9:46:b6:a3:b5:ee:f2:85:e3: f5:aa:81:98:46:fc:19:7e:c6:e2:62:26:06:6d:6d: ce:69:72:e9:41:30:9e:cd:26:ef:dc:5f:fc:e7:3d: 03:e9:09:4b:60:47:77:77:79:31:7f:59:2a:10:9f: 0c:91:6b:75:77:30:ad:7a:71:a1:d8:d8:59:12:c0: 89:bf:c8:07:a0:32:b1:cc:98:af:7b:32:02:f6:0d: dc:08:f4:4e:c4:b6:de:1b:4d:0c:ca:de:ce:c0:eb: 98:c2:dd:b5:5d:97:a1:1e:dc:af:ed:78:ef:fa:39: 09:4d:c3:fe:8a:e0:57:2b:05:5f:76:97:5d:97:72: 26:9c:e3:91:8f:0f:db:6b:04:22:a8:06:ca:99:4f: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:45:96:66:81:03:71:3C:88:04:88:C7:96:C3:2B:02:8D:A6:A4:19 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d9:13:61:63:44:eb:2b:02:12:69:d5:0b:44:79:ae:14:1b: 87:2d:4e:80:ce:a2:c0:99:53:a4:c6:e9:03:1a:61:eb:3b:99: ec:98:61:83:ec:7f:26:a8:eb:1c:99:32:5e:c1:ae:0a:f3:b4: ff:23:c1:3e:bb:32:86:9e:e9:05:16:5f:22:a6:d0:9d:1b:c3: f0:db:15:ff:bc:46:25:d4:08:c3:5f:45:33:b0:3d:94:e9:02: 89:72:95:91:1d:2c:ef:04:56:15:35:c0:7a:74:41:8e:a5:a4: 39:13:15:61:da:a4:cc:39:94:e0:5a:43:e0:0c:b8:7f:b7:7d: 69:a6:6a:bb:05:9d:17:8a:c2:65:bb:44:ed:22:37:e2:23:bb: c7:a0:e8:1b:62:c6:20:7a:a0:87:a7:0c:00:9e:68:ba:e4:b8: e5:4a:9f:cb:83:42:8b:0b:0e:65:ce:82:8c:8f:0a:43:21:66: 4e:83:2a:f3:33:e0:ce:3e:7c:d6:98:92:01:25:fa:ae:16:52: 22:94:9e:01:a8:89:b6:87:db:ea:57:a1:c5:9e:de:6a:6a:31: b6:46:54:29:cf:7f:45:7a:9d:aa:48:26:01:59:5b:c0:1a:b0: 68:0e:f9:51:33:a4:65:a3:c5:08:d2:f0:8c:89:1d:3a:ae:ca: 96:38:01:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS74g2YZETBaZDAyEhSwh0vane60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTA0MDUxMzA1MDVaFw0yNTA0MDgxMzIyMDVaMDMxMTAvBgNV BAMTKEI0NDU5NjY2ODEwMzcxM0M4ODA0ODhDNzk2QzMyQjAyOERBNkE0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X7wiuAkpqNy+BxQWzMBC38Ok rdylIIOc98JpGa+VU7I//VAWGirfg3xB26dlDWb8ylZgy+108OVfCkdT5exuYwKo ONRKL9zuxoElzNcFPpoYJ3beps/bLj5/fgVWzUAl6Vh8/H6g5VaqIUvRW/lGtqO1 7vKF4/WqgZhG/Bl+xuJiJgZtbc5pculBMJ7NJu/cX/znPQPpCUtgR3d3eTF/WSoQ nwyRa3V3MK16caHY2FkSwIm/yAegMrHMmK97MgL2DdwI9E7Ett4bTQzK3s7A65jC 3bVdl6Ee3K/teO/6OQlNw/6K4FcrBV92l12Xciac45GPD9trBCKoBsqZT0fJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEWWZoEDcTyIBIjHlsMrAo2mpBkwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDZE2FjROsrAhJp1QtEea4UG4ctToDOosCZ U6TG6QMaYes7meyYYYPsfyao6xyZMl7BrgrztP8jwT67Moae6QUWXyKm0J0bw/Db Ff+8RiXUCMNfRTOwPZTpAolylZEdLO8EVhU1wHp0QY6lpDkTFWHapMw5lOBaQ+AM uH+3fWmmarsFnReKwmW7RO0iN+Iju8eg6BtixiB6oIenDACeaLrkuOVKn8uDQosL DmXOgoyPCkMhZk6DKvMz4M4+fNaYkgEl+q4WUiKUngGoibaH2+pXocWe3mpqMbZG VCnPf0V6napIJgFZW8AasGgO+VEzpGWjxQjS8IyJHTquypY4Aew= -----END CERTIFICATE-----Generated at Sat Apr 5 21:17:42 2025 by rpki-client