$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: 6S1JRKen/bPXbAXmYopU9GItwy30rN4viEkIGz7wvJU= Subject key identifier: AF:21:E7:10:65:A9:E3:8A:9C:4B:4E:D9:AA:90:43:DA:DD:15:A0:0A Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 7A36C8185ABE00E478A46233A6D4B8018559A506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: 9F Signing time: Mon 28 Apr 2025 12:51:01 +0000 Manifest this update: Mon 28 Apr 2025 12:46:01 +0000 Manifest next update: Thu 01 May 2025 12:59:01 +0000 Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: dfH9Ts/fKf7ACmjCFHlq5pV4hsWkhp//mhYFhakASgE=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: Fiz4Tyf+qP1UuxeJL1gcY0cDpOcEJpXsc04i8PalSAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:36:c8:18:5a:be:00:e4:78:a4:62:33:a6:d4:b8:01:85:59:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Apr 28 12:46:01 2025 GMT Not After : May 1 12:59:01 2025 GMT Subject: CN=AF21E71065A9E38A9C4B4ED9AA9043DADD15A00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:c8:00:c5:0b:11:be:9c:20:11:84:ef:1a: 5e:cb:4d:87:03:4b:d9:ea:80:3b:ef:bf:47:3f:26: bc:41:1e:89:16:f2:db:22:9a:63:bd:c0:4f:7b:20: 63:05:e9:dd:97:01:ba:2e:ad:15:8a:c5:77:d9:98: 30:8c:f1:4e:10:32:71:7c:e6:39:8e:eb:f6:4a:e5: 60:15:e9:cc:97:ba:37:5e:79:8e:79:0d:55:3a:41: b6:9e:76:39:e0:d4:d5:47:a4:57:94:f3:82:61:28: b0:06:15:8e:86:a3:82:e8:68:5d:42:5b:10:ad:24: 30:75:95:31:08:4d:b5:f1:0d:a3:e0:46:2d:dc:29: ed:b8:7e:5f:45:b2:5f:4f:c1:cc:79:8c:b4:30:2e: 7d:22:76:56:90:0f:e8:b9:08:fa:da:a2:42:b5:4a: bd:9d:09:db:26:36:79:bd:49:6d:f3:c9:47:eb:94: 25:9f:01:9b:b1:33:32:29:39:b8:ad:91:2b:d4:70: b8:c9:b6:26:11:92:68:f4:82:4d:ac:45:44:b1:19: e8:37:11:03:52:b6:cd:3c:e3:3e:b8:b8:66:07:89: 33:73:4a:90:14:98:82:c2:2d:94:08:d9:c1:a0:bf: f3:a9:35:31:bf:39:61:7e:32:0f:45:84:98:41:f7: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:E7:10:65:A9:E3:8A:9C:4B:4E:D9:AA:90:43:DA:DD:15:A0:0A X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:95:66:c1:01:3d:03:49:cb:a6:cb:83:c9:8f:95:08:d5:c9: ca:43:2a:e9:f2:1d:fb:28:1a:0b:3a:15:20:4f:bc:b3:e4:10: df:f9:9f:ba:e5:07:bf:b6:b6:02:6f:fe:40:b7:d0:f0:53:f6: c7:ed:e1:07:5e:ee:3c:28:4b:e4:ab:57:e2:58:a9:9a:7a:0b: a8:6a:c9:f3:64:71:ca:bd:c0:49:b5:42:17:d5:da:16:f3:51: 6d:98:7e:6b:16:f9:8a:4d:52:3d:97:47:27:59:7c:32:18:f7: 66:bb:40:d8:ab:3a:4d:3f:25:ab:a0:ae:13:a1:d3:6f:c1:13: 1d:d9:e4:ac:74:f3:42:ea:fb:99:d2:18:90:b9:a3:c4:b3:c8: d6:28:7b:f1:68:22:fa:cb:4f:a2:9b:38:37:18:fa:62:92:00: 50:fe:65:c9:9a:bd:51:b9:69:16:60:68:94:0d:a4:35:fc:ff: 14:a8:0f:e4:36:0e:d7:8a:e6:18:93:c3:4b:6d:f2:1e:5b:88: 2f:7f:f3:59:2c:b0:fc:f8:ca:5e:0b:a4:3d:b8:dc:23:7e:36: 1f:68:41:c8:30:ec:eb:db:44:91:7e:33:77:9b:85:05:cf:0c: 77:2a:f3:29:fb:e6:b0:1c:07:77:63:25:53:e6:c2:99:4e:f0: 4f:14:7b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejbIGFq+AOR4pGIzptS4AYVZpQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTA0MjgxMjQ2MDFaFw0yNTA1MDExMjU5MDFaMDMxMTAvBgNV BAMTKEFGMjFFNzEwNjVBOUUzOEE5QzRCNEVEOUFBOTA0M0RBREQxNUEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWMgAxQsRvpwgEYTvGl7LTYcD S9nqgDvvv0c/JrxBHokW8tsimmO9wE97IGMF6d2XAbourRWKxXfZmDCM8U4QMnF8 5jmO6/ZK5WAV6cyXujdeeY55DVU6Qbaedjng1NVHpFeU84JhKLAGFY6Go4LoaF1C WxCtJDB1lTEITbXxDaPgRi3cKe24fl9Fsl9Pwcx5jLQwLn0idlaQD+i5CPraokK1 Sr2dCdsmNnm9SW3zyUfrlCWfAZuxMzIpObitkSvUcLjJtiYRkmj0gk2sRUSxGeg3 EQNSts084z64uGYHiTNzSpAUmILCLZQI2cGgv/OpNTG/OWF+Mg9FhJhB92KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUryHnEGWp44qcS07ZqpBD2t0VoAowHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCVZsEBPQNJy6bLg8mPlQjVycpDKunyHfso Ggs6FSBPvLPkEN/5n7rlB7+2tgJv/kC30PBT9sft4Qde7jwoS+SrV+JYqZp6C6hq yfNkccq9wEm1QhfV2hbzUW2YfmsW+YpNUj2XRydZfDIY92a7QNirOk0/JaugrhOh 02/BEx3Z5Kx080Lq+5nSGJC5o8SzyNYoe/FoIvrLT6KbODcY+mKSAFD+ZcmavVG5 aRZgaJQNpDX8/xSoD+Q2DteK5hiTw0tt8h5biC9/81kssPz4yl4LpD243CN+Nh9o Qcgw7OvbRJF+M3ebhQXPDHcq8yn75rAcB3djJVPmwplO8E8Ue0k= -----END CERTIFICATE-----Generated at Tue Apr 29 08:34:20 2025 by rpki-client