$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: IZqQKHlOkQinLmhpDkoMWsVBsg2QoQZAx5dsxKL+COA= Subject key identifier: 08:45:05:3B:3F:F3:33:9B:E1:34:35:82:32:94:23:35:31:A1:80:3C Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 1674F60D015AF200C62BD483CF2877B7D87E83C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 77 Signing time: Tue 08 Apr 2025 04:11:22 +0000 Manifest this update: Tue 08 Apr 2025 04:06:22 +0000 Manifest next update: Fri 11 Apr 2025 04:45:22 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 2: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) 3: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 4: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: Thn76ZXYNadqkVjZ7CK2uFjILf3TVCpcRdmoD2S4zpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 04:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:f6:0d:01:5a:f2:00:c6:2b:d4:83:cf:28:77:b7:d8:7e:83:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Apr 8 04:06:22 2025 GMT Not After : Apr 11 04:45:22 2025 GMT Subject: CN=0845053B3FF3339BE13435823294233531A1803C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:39:33:c5:59:97:ee:7e:fa:fa:ee:34:d0:33: 6b:a4:60:63:d4:61:44:51:c0:54:f7:c0:4d:74:96: c0:5f:7d:e1:98:90:28:63:32:7b:44:94:7a:f2:9b: a9:1c:d5:ba:d6:9c:8d:58:69:01:81:a2:96:91:9c: 26:53:91:fd:19:40:f5:d3:80:f6:49:21:5f:a5:38: 58:78:2c:67:d9:29:fa:c5:96:8a:f6:31:81:2e:f0: f7:78:ee:f1:35:f6:07:bb:1e:f1:48:27:17:38:bd: b2:83:cb:92:92:ef:40:3a:5c:9a:4d:52:60:f5:9d: 3f:c8:a8:cb:7c:db:39:ca:71:ae:72:f0:ed:35:87: 9e:7c:1f:9f:ce:8e:c7:74:e2:52:f6:b0:ff:41:48: c6:b7:e0:18:d8:0b:88:84:c9:b0:81:79:80:f7:74: 5e:7b:8c:9c:d6:85:33:d1:9e:34:fb:c7:85:6f:ef: 72:16:8e:fd:15:a2:15:d7:06:ce:0c:67:6e:37:6d: 81:03:65:35:46:de:82:d0:3e:10:77:fa:9d:d5:dd: a8:3c:b6:89:48:fb:19:a7:7a:9b:d8:9e:4e:96:c3: b0:26:47:6c:a4:32:c5:7c:b9:3a:c1:43:fa:a7:78: 91:e8:b2:ac:09:e1:63:f6:63:bf:59:01:85:1d:5d: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:45:05:3B:3F:F3:33:9B:E1:34:35:82:32:94:23:35:31:A1:80:3C X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:48:18:9b:f9:f3:da:7d:a3:55:4d:0f:75:17:f7:e4:25:69: 8c:fa:09:e8:5e:da:d6:7d:d3:ec:00:0b:d5:2f:2e:10:61:0e: c5:4a:16:27:55:76:2a:7d:ef:0e:a5:40:fd:4d:1b:a6:f5:05: 98:bc:96:40:24:5b:37:52:65:03:52:84:fc:89:8b:c8:a4:88: ee:74:29:2c:29:dc:7d:3e:fa:2b:f1:21:06:24:23:58:4d:0e: 2b:f7:38:19:e5:9a:c7:cc:f8:42:d5:84:7d:0f:d2:de:00:8c: 7a:56:0e:1a:78:aa:0f:bd:40:7d:8c:d0:fa:a1:4a:43:f7:c9: f4:53:c1:cc:b7:ad:1a:46:e0:95:15:8f:f6:15:22:6a:a4:84: 9c:dc:81:00:c1:ab:5f:fa:cd:9b:72:78:53:36:66:d4:81:9f: 7d:1a:6f:e5:8d:1c:49:d6:66:dc:a0:cd:6b:ad:3a:d1:7f:d3: 7f:44:3d:d3:4c:7e:5f:93:52:a5:44:e0:08:59:81:47:e1:92: 0e:ff:0b:fa:a1:9e:09:81:22:28:fb:4a:8a:4e:d9:e1:5f:31: 1a:08:c3:4d:ab:c9:e9:cc:11:0f:c9:24:da:3b:d5:41:e4:e8: 7c:7e:f5:00:48:9a:fe:62:0d:46:5c:3a:7c:3c:92:79:6e:d8: d5:17:9b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnT2DQFa8gDGK9SDzyh3t9h+g8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA0MDgwNDA2MjJaFw0yNTA0MTEwNDQ1MjJaMDMxMTAvBgNV BAMTKDA4NDUwNTNCM0ZGMzMzOUJFMTM0MzU4MjMyOTQyMzM1MzFBMTgwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOTPFWZfufvr67jTQM2ukYGPU YURRwFT3wE10lsBffeGYkChjMntElHrym6kc1brWnI1YaQGBopaRnCZTkf0ZQPXT gPZJIV+lOFh4LGfZKfrFlor2MYEu8Pd47vE19ge7HvFIJxc4vbKDy5KS70A6XJpN UmD1nT/IqMt82znKca5y8O01h558H5/Ojsd04lL2sP9BSMa34BjYC4iEybCBeYD3 dF57jJzWhTPRnjT7x4Vv73IWjv0VohXXBs4MZ243bYEDZTVG3oLQPhB3+p3V3ag8 tolI+xmnepvYnk6Ww7AmR2ykMsV8uTrBQ/qneJHosqwJ4WP2Y79ZAYUdXfQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCEUFOz/zM5vhNDWCMpQjNTGhgDwwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9IGJv589p9o1VND3UX9+QlaYz6Cehe2tZ9 0+wAC9UvLhBhDsVKFidVdip97w6lQP1NG6b1BZi8lkAkWzdSZQNShPyJi8ikiO50 KSwp3H0++ivxIQYkI1hNDiv3OBnlmsfM+ELVhH0P0t4AjHpWDhp4qg+9QH2M0Pqh SkP3yfRTwcy3rRpG4JUVj/YVImqkhJzcgQDBq1/6zZtyeFM2ZtSBn30ab+WNHEnW ZtygzWutOtF/039EPdNMfl+TUqVE4AhZgUfhkg7/C/qhngmBIij7SopO2eFfMRoI w02ryenMEQ/JJNo71UHk6Hx+9QBImv5iDUZcOnw8knlu2NUXm1Q= -----END CERTIFICATE-----Generated at Thu Apr 10 00:11:12 2025 by rpki-client