$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: Js9kVjQS0ffLg/LdlEKC48ekZSjxLe+zj9G+iLA9uVI= Subject key identifier: 9A:FD:E6:6F:05:90:2F:6B:4B:4B:D8:1B:62:4E:49:96:98:D5:9D:9C Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 3EA8751539A18E8BDB1234FC89BADE05C11776E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04CB Signing time: Tue 29 Apr 2025 01:11:05 +0000 Manifest this update: Tue 29 Apr 2025 01:06:05 +0000 Manifest next update: Fri 02 May 2025 08:30:05 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: VBjnAMg9u2TKnBgFn4K2IBzwEkZXLtWwNXy1pRLQ96Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a8:75:15:39:a1:8e:8b:db:12:34:fc:89:ba:de:05:c1:17:76:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Apr 29 01:06:05 2025 GMT Not After : May 2 08:30:05 2025 GMT Subject: CN=9AFDE66F05902F6B4B4BD81B624E499698D59D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:72:d6:a6:74:19:97:9b:af:0e:e8:a4:95: c0:91:b5:70:aa:dd:19:37:52:72:a1:07:eb:ff:40: d7:fc:c7:b2:72:ee:7f:b0:3d:8b:b6:ec:21:fe:e3: 11:e2:29:77:0e:18:0b:51:50:c3:8e:35:f5:0e:42: fb:3b:c7:64:b9:16:81:a8:17:9c:9e:d4:26:51:f4: 3b:4b:bf:79:73:12:ed:55:5a:49:27:f0:fb:33:61: ce:48:80:ae:70:5f:63:91:c2:94:ba:8e:3e:28:38: aa:7b:5d:bb:f0:00:02:e5:03:19:64:e7:b3:27:9b: e7:6f:bd:d6:e7:af:1e:1d:2f:c2:fc:f4:1b:ef:c2: 85:bf:91:d1:56:7a:02:5d:dd:27:34:74:2d:1c:fa: 7a:4c:2a:9d:ef:a7:b4:69:12:a8:c2:fe:ac:76:f3: 7f:98:c3:d3:a0:10:ae:1a:3d:8e:69:00:c3:c3:9c: 1a:99:13:03:87:4f:89:4c:7e:bc:12:0b:2e:73:d5: f4:9f:32:86:94:83:8b:80:41:c6:9b:31:d9:55:1c: 0c:55:b7:ef:45:05:e2:ca:c6:ff:c4:62:55:d6:0e: bb:ec:b3:81:c5:93:d7:0d:5e:c9:3f:4e:a6:44:53: e6:ae:90:35:c2:eb:f2:29:98:17:01:62:04:21:3e: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FD:E6:6F:05:90:2F:6B:4B:4B:D8:1B:62:4E:49:96:98:D5:9D:9C X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8d:71:87:06:1d:fc:c8:39:fd:2c:43:9a:79:59:4a:12:55: 56:01:dc:1c:86:64:c0:10:f5:a0:06:01:6b:f6:f4:ea:16:da: 6e:c8:b7:22:ff:07:3f:df:32:a8:e8:33:28:3b:9d:1d:1f:e4: 0e:b7:55:d6:0d:1d:12:26:4b:de:6c:33:2f:22:ab:87:ab:5e: dd:ed:48:aa:9d:3c:9c:7c:55:9c:78:2d:da:a7:70:3a:13:e3: 49:54:c2:41:8b:05:13:38:d7:3f:aa:b3:43:45:e4:e3:90:0d: de:eb:f5:a3:4e:25:a9:a0:ae:dc:da:1f:13:9e:74:70:bb:c0: d7:ee:33:25:27:61:8b:5e:15:ee:7e:01:e9:e8:37:cd:84:d5: 94:63:85:cd:57:dd:66:c5:75:f5:25:49:b6:72:d5:04:79:eb: 61:e5:9f:94:90:b6:f4:7c:e4:4d:f0:c6:82:3f:95:7d:2a:50: 99:d8:14:ec:17:1c:38:ad:4c:e6:da:22:48:43:3e:3b:1f:85: 9e:ea:38:b0:97:91:cc:f0:8d:fe:05:de:36:81:cc:c5:bc:e4: 63:ab:a6:f5:85:06:ae:41:f8:6b:d3:b8:0f:ce:af:60:96:71: 23:b7:57:68:a3:9a:0e:56:2c:59:32:c1:14:49:19:05:4c:b1: 8f:39:f0:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqh1FTmhjovbEjT8ibreBcEXdukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA0MjkwMTA2MDVaFw0yNTA1MDIwODMwMDVaMDMxMTAvBgNV BAMTKDlBRkRFNjZGMDU5MDJGNkI0QjRCRDgxQjYyNEU0OTk2OThENTlEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+nLWpnQZl5uvDuiklcCRtXCq 3Rk3UnKhB+v/QNf8x7Jy7n+wPYu27CH+4xHiKXcOGAtRUMOONfUOQvs7x2S5FoGo F5ye1CZR9DtLv3lzEu1VWkkn8PszYc5IgK5wX2ORwpS6jj4oOKp7XbvwAALlAxlk 57Mnm+dvvdbnrx4dL8L89BvvwoW/kdFWegJd3Sc0dC0c+npMKp3vp7RpEqjC/qx2 83+Yw9OgEK4aPY5pAMPDnBqZEwOHT4lMfrwSCy5z1fSfMoaUg4uAQcabMdlVHAxV t+9FBeLKxv/EYlXWDrvss4HFk9cNXsk/TqZEU+aukDXC6/IpmBcBYgQhPmFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmv3mbwWQL2tLS9gbYk5JlpjVnZwwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqNcYcGHfzIOf0sQ5p5WUoSVVYB3ByGZMAQ 9aAGAWv29OoW2m7ItyL/Bz/fMqjoMyg7nR0f5A63VdYNHRImS95sMy8iq4erXt3t SKqdPJx8VZx4LdqncDoT40lUwkGLBRM41z+qs0NF5OOQDd7r9aNOJamgrtzaHxOe dHC7wNfuMyUnYYteFe5+AenoN82E1ZRjhc1X3WbFdfUlSbZy1QR562Hln5SQtvR8 5E3wxoI/lX0qUJnYFOwXHDitTObaIkhDPjsfhZ7qOLCXkczwjf4F3jaBzMW85GOr pvWFBq5B+GvTuA/Or2CWcSO3V2ijmg5WLFkywRRJGQVMsY858M0= -----END CERTIFICATE-----Generated at Thu May 1 05:04:21 2025 by rpki-client