$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: m7GPUkq5qErIZdJCwx2f39+Ml7KHwRkfXnX7KGGsVN0= Subject key identifier: 2F:91:D7:3F:92:ED:AE:1C:0A:FA:7B:83:BF:3C:E9:82:BC:29:08:F3 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 2CE3F794E61004A50571FC75876ACFC4224F0946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01D9 Signing time: Tue 29 Apr 2025 03:32:21 +0000 Manifest this update: Tue 29 Apr 2025 03:27:21 +0000 Manifest next update: Fri 02 May 2025 04:26:21 +0000 Files and hashes: 1: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: DaUpEn5t36qXoN8I9p0QvbIi1gWvGGFqpuL1hN0ldU8=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e3:f7:94:e6:10:04:a5:05:71:fc:75:87:6a:cf:c4:22:4f:09:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Apr 29 03:27:21 2025 GMT Not After : May 2 04:26:21 2025 GMT Subject: CN=2F91D73F92EDAE1C0AFA7B83BF3CE982BC2908F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:86:f6:ee:e5:2a:ca:d2:6f:24:b9:4f:25: b4:39:09:23:27:c6:5a:72:df:9b:cd:c3:f2:5c:40: a8:3f:c9:62:31:23:fd:22:a0:5d:c9:1a:c4:5c:0c: 41:5f:70:57:46:99:3a:61:c8:ea:8b:3a:6e:93:09: 8f:f6:10:60:74:5e:12:29:c1:fa:06:12:53:89:6a: ef:9e:98:4c:14:d0:6b:79:85:51:f6:a0:1e:5b:18: 07:c6:c9:6e:be:9f:f3:a0:5d:0a:01:4d:49:f4:17: e7:57:33:18:51:55:35:0e:bf:00:d2:11:b4:35:cb: 3a:a2:a2:de:8c:fa:13:10:05:72:00:3a:21:86:fd: 5b:b7:34:02:86:39:23:40:d4:e3:f5:7a:ea:ad:0b: f1:e5:fe:ea:2e:a8:54:4c:eb:72:75:79:23:a0:be: 80:ac:58:b0:6f:47:0d:15:ee:bf:e2:92:39:33:da: 02:ab:92:cc:4a:58:de:16:74:a2:34:0b:1a:72:8f: 3f:60:80:af:e7:76:3e:ef:37:af:05:5d:af:54:c4: a8:40:d4:61:4c:d2:d4:73:97:67:1d:c3:cf:ea:03: a5:40:e9:86:95:c3:7c:af:fe:38:b0:ef:2f:d6:c6: 64:88:d3:9d:87:21:1e:15:9a:29:81:d8:8d:ae:3f: 9b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:D7:3F:92:ED:AE:1C:0A:FA:7B:83:BF:3C:E9:82:BC:29:08:F3 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0b:09:b4:72:c5:d3:7a:0c:46:d6:84:10:a8:5c:88:9f:88: 11:29:81:ba:4c:41:af:85:13:03:6e:a3:4d:7d:46:a2:3b:e7: 83:7e:f7:e3:f6:3f:bd:49:8c:a0:8e:d2:5c:cf:c7:7d:1a:62: 7e:21:a4:f0:7f:b4:59:5d:8a:85:9c:20:ff:0d:9a:15:66:fb: be:ac:bd:20:b6:22:79:ec:08:fd:4f:71:e7:db:e7:81:3a:a0: 27:15:2b:01:f1:26:cf:e2:c6:e2:0e:c0:4c:a9:fe:ad:9d:1c: 28:f7:3e:29:e4:ad:a0:c2:1f:04:e9:4e:ac:a7:ed:79:e9:9f: 37:f9:35:83:60:9d:50:23:8e:b9:3d:e0:90:13:48:b6:56:66: 6c:e5:54:b4:a5:e0:a6:9e:d1:77:c6:d6:a4:82:16:d0:32:d2: 51:0f:5e:60:c0:f7:a6:7c:a2:dd:ac:6e:dc:32:6c:e6:2a:22: 20:93:e5:53:a5:0d:3b:64:34:5d:4c:50:b5:da:17:ff:80:f1: 11:ae:77:52:0c:38:50:c5:27:c4:76:ef:72:e7:22:a7:dd:be: d5:d2:93:17:51:b8:49:47:e5:cf:19:8f:83:a1:8e:b5:b3:05: f2:31:54:2d:51:85:0b:34:32:b8:35:85:8f:92:dc:14:05:61: a9:94:84:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOP3lOYQBKUFcfx1h2rPxCJPCUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA0MjkwMzI3MjFaFw0yNTA1MDIwNDI2MjFaMDMxMTAvBgNV BAMTKDJGOTFENzNGOTJFREFFMUMwQUZBN0I4M0JGM0NFOTgyQkMyOTA4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//ob27uUqytJvJLlPJbQ5CSMn xlpy35vNw/JcQKg/yWIxI/0ioF3JGsRcDEFfcFdGmTphyOqLOm6TCY/2EGB0XhIp wfoGElOJau+emEwU0Gt5hVH2oB5bGAfGyW6+n/OgXQoBTUn0F+dXMxhRVTUOvwDS EbQ1yzqiot6M+hMQBXIAOiGG/Vu3NAKGOSNA1OP1euqtC/Hl/uouqFRM63J1eSOg voCsWLBvRw0V7r/ikjkz2gKrksxKWN4WdKI0Cxpyjz9ggK/ndj7vN68FXa9UxKhA 1GFM0tRzl2cdw8/qA6VA6YaVw3yv/jiw7y/WxmSI052HIR4VmimB2I2uP5vvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5HXP5LtrhwK+nuDvzzpgrwpCPMwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMLCbRyxdN6DEbWhBCoXIifiBEpgbpMQa+F EwNuo019RqI754N+9+P2P71JjKCO0lzPx30aYn4hpPB/tFldioWcIP8NmhVm+76s vSC2InnsCP1Pcefb54E6oCcVKwHxJs/ixuIOwEyp/q2dHCj3PinkraDCHwTpTqyn 7Xnpnzf5NYNgnVAjjrk94JATSLZWZmzlVLSl4Kae0XfG1qSCFtAy0lEPXmDA96Z8 ot2sbtwybOYqIiCT5VOlDTtkNF1MULXaF/+A8RGud1IMOFDFJ8R273LnIqfdvtXS kxdRuElH5c8Zj4OhjrWzBfIxVC1RhQs0Mrg1hY+S3BQFYamUhKg= -----END CERTIFICATE-----Generated at Wed Apr 30 08:18:16 2025 by rpki-client