$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: qDzlfco3kCsLHBntjxW8T9tDr59H/3Ua8YFbuzNjqHE= Subject key identifier: F3:65:AE:8B:97:D8:4E:73:F6:B5:09:51:43:95:E2:F1:4A:86:24:04 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 4A0BB8B53DB4A467D31BC0CC1F33FF53D1AFAC7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: D2 Signing time: Mon 14 Apr 2025 23:02:13 +0000 Manifest this update: Mon 14 Apr 2025 22:57:13 +0000 Manifest next update: Fri 18 Apr 2025 09:32:13 +0000 Files and hashes: 1: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: KAuzPqdmTRFfYkl9vTw9HhggIKX5p0bBgbpXdG5sLOw=) 2: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 09:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0b:b8:b5:3d:b4:a4:67:d3:1b:c0:cc:1f:33:ff:53:d1:af:ac:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Apr 14 22:57:13 2025 GMT Not After : Apr 18 09:32:13 2025 GMT Subject: CN=F365AE8B97D84E73F6B509514395E2F14A862404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:65:07:e2:ac:97:c0:ea:70:84:78:81:46:ae: 2e:05:36:b8:ac:e6:67:57:fe:7c:66:0b:46:4d:ba: 35:af:40:92:2e:24:fb:a1:bd:0b:56:cd:56:93:db: a7:2b:f7:0f:26:ee:c0:7c:a6:f1:47:bb:c2:6f:d6: c6:e1:eb:03:45:8a:26:5f:c9:38:20:10:a6:05:25: 76:67:f7:76:3a:a8:89:d6:33:9f:64:cc:f9:25:6d: 59:0b:91:cb:54:8c:72:da:4f:ff:b3:2f:63:ae:88: 16:7f:99:9b:70:09:a7:37:f0:67:7a:65:4a:f4:8e: 35:58:77:96:0d:fd:41:0a:b2:af:5c:2e:06:1d:36: 15:8f:9e:1d:1b:19:9a:2f:9a:01:b1:0c:c5:58:fd: cc:bd:8b:48:be:29:70:2e:18:1a:2a:94:a3:0c:44: 56:0f:f5:b9:b8:67:20:12:34:7e:25:fe:4f:ca:5a: a3:a3:f4:e0:7e:d1:74:09:01:bc:97:f7:05:94:5d: b3:88:c4:5f:15:76:64:49:ed:88:7e:6b:98:d2:8b: 3f:6f:12:81:8c:c9:a2:29:e0:9b:12:f9:44:81:77: 17:70:ee:47:01:eb:71:cd:30:ed:7d:c1:54:68:d6: be:72:8d:6b:93:70:8e:a4:c2:ad:fd:5b:9c:4e:11: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:65:AE:8B:97:D8:4E:73:F6:B5:09:51:43:95:E2:F1:4A:86:24:04 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:49:61:48:f4:e1:5e:53:58:ba:3b:f2:e0:a3:6d:e5:5a:67: ac:63:c0:ce:ec:c1:70:fc:b9:74:99:40:de:9d:79:0b:64:4f: dc:82:b4:dc:01:d8:62:00:22:22:f3:3e:8a:34:d7:f7:b4:eb: 16:af:f8:c4:7f:cb:39:8b:cf:9d:72:54:e8:90:cb:b7:77:cf: 2f:a4:c4:97:90:20:bf:bb:af:51:ff:f3:7c:36:4a:19:9b:6b: 5d:84:8b:db:d3:32:53:cb:db:35:35:5c:2d:38:7d:b4:88:f5: f1:ac:d7:8f:1c:2c:cf:ed:15:b9:a3:f5:ab:8c:f8:7e:6d:39: 85:61:34:09:f2:5a:f4:83:f3:cb:e1:85:7a:bd:07:a7:15:1f: 84:9d:58:49:2e:7d:5e:55:6b:a7:d8:87:73:30:b3:f9:20:fa: fc:49:06:04:bb:ea:4c:4a:6d:2f:11:96:53:6e:ab:fd:34:19: 10:8b:25:32:72:60:b5:33:37:ae:04:a1:50:df:c9:29:88:14: af:49:84:1a:d3:2a:e4:44:cc:65:d2:73:2f:99:70:b5:de:27: eb:15:98:29:c8:88:19:6a:c0:da:d4:06:72:f0:03:4a:c0:09: d7:7d:bd:01:13:b1:66:ab:06:12:7d:fc:b9:55:13:24:38:25: 56:8d:8e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgu4tT20pGfTG8DMHzP/U9GvrH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTA0MTQyMjU3MTNaFw0yNTA0MTgwOTMyMTNaMDMxMTAvBgNV BAMTKEYzNjVBRThCOTdEODRFNzNGNkI1MDk1MTQzOTVFMkYxNEE4NjI0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqZQfirJfA6nCEeIFGri4FNris 5mdX/nxmC0ZNujWvQJIuJPuhvQtWzVaT26cr9w8m7sB8pvFHu8Jv1sbh6wNFiiZf yTggEKYFJXZn93Y6qInWM59kzPklbVkLkctUjHLaT/+zL2OuiBZ/mZtwCac38Gd6 ZUr0jjVYd5YN/UEKsq9cLgYdNhWPnh0bGZovmgGxDMVY/cy9i0i+KXAuGBoqlKMM RFYP9bm4ZyASNH4l/k/KWqOj9OB+0XQJAbyX9wWUXbOIxF8VdmRJ7Yh+a5jSiz9v EoGMyaIp4JsS+USBdxdw7kcB63HNMO19wVRo1r5yjWuTcI6kwq39W5xOEZZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU82Wui5fYTnP2tQlRQ5Xi8UqGJAQwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJJYUj04V5TWLo78uCjbeVaZ6xjwM7swXD8 uXSZQN6deQtkT9yCtNwB2GIAIiLzPoo01/e06xav+MR/yzmLz51yVOiQy7d3zy+k xJeQIL+7r1H/83w2Shmba12Ei9vTMlPL2zU1XC04fbSI9fGs148cLM/tFbmj9auM +H5tOYVhNAnyWvSD88vhhXq9B6cVH4SdWEkufV5Va6fYh3Mws/kg+vxJBgS76kxK bS8RllNuq/00GRCLJTJyYLUzN64EoVDfySmIFK9JhBrTKuREzGXScy+ZcLXeJ+sV mCnIiBlqwNrUBnLwA0rACdd9vQETsWarBhJ9/LlVEyQ4JVaNjoU= -----END CERTIFICATE-----Generated at Thu Apr 17 08:53:48 2025 by rpki-client