$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: 9TcnJi44GSgBVENyyWA81ZD2PrzIXHnyHyTcAslazZ4= Subject key identifier: D3:79:B9:CB:39:F1:8B:58:B6:D7:0A:CB:A1:2F:39:EF:12:35:54:B1 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 095DA24F4CE03EBF87D8758D250210EE5D188AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 01CA Signing time: Sat 26 Apr 2025 12:01:57 +0000 Manifest this update: Sat 26 Apr 2025 11:56:57 +0000 Manifest next update: Tue 29 Apr 2025 15:02:57 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: UZJGRzZKkVB/K4lD1yRKScQ+jSrTmsieVQyYpXH1XWo=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: 50Xjv2UcasLJGlU9PlK5ge1QyQo9mbc3HFCY/i/3e8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5d:a2:4f:4c:e0:3e:bf:87:d8:75:8d:25:02:10:ee:5d:18:8a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Apr 26 11:56:57 2025 GMT Not After : Apr 29 15:02:57 2025 GMT Subject: CN=D379B9CB39F18B58B6D70ACBA12F39EF123554B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:4f:03:86:2e:0e:55:e3:3a:6f:52:b9:c9: 7d:a9:fe:0d:2b:17:e3:f4:e1:93:38:3c:c3:ba:fa: 4d:4e:40:67:fc:92:bf:f1:bf:a1:10:1c:d8:4a:48: 51:5c:05:38:8a:3f:f2:82:ad:33:5c:a3:c6:7e:56: 32:75:d0:1b:83:dd:6a:ec:08:55:30:25:34:12:ef: c2:25:a5:96:1a:e6:57:51:d0:39:9e:65:e5:2d:ce: fc:08:0b:7a:97:d2:74:3b:fc:3b:bc:db:25:15:28: 89:98:13:36:f5:67:cb:10:22:5f:ef:b8:9f:75:9f: 1a:13:e8:1c:35:9a:79:f3:a2:12:4f:f5:70:e7:b5: 3a:b4:cd:e0:15:f3:a3:4e:94:70:1a:f7:e4:56:08: 8a:4b:db:db:fa:c2:d7:78:a0:51:af:9d:49:12:50: 49:4b:7a:07:9b:84:66:cf:54:44:ed:45:73:36:7c: b5:82:38:02:c7:62:69:4b:63:8c:a3:b3:bb:e8:18: ea:1e:ca:7e:54:a3:89:e9:94:f7:aa:5b:0d:98:71: 05:25:21:2d:9e:e1:6c:03:a1:a6:63:cb:c4:eb:8a: 98:79:ec:f1:62:9e:ea:14:f5:c6:9f:67:9b:93:f2: e8:04:37:04:a8:e7:d2:59:51:2b:9a:69:26:97:0d: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:79:B9:CB:39:F1:8B:58:B6:D7:0A:CB:A1:2F:39:EF:12:35:54:B1 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b2:d4:3d:d8:39:23:14:03:0a:45:5e:a2:4d:9a:ef:fa:e2: 5f:30:e5:df:60:f9:ba:97:76:05:2a:e9:ab:d5:bd:dc:e7:80: 0d:33:51:ff:e1:61:cd:14:c6:6c:60:10:08:5c:59:2d:b5:28: 8a:b4:05:74:e8:3a:23:9b:0a:a3:ee:00:00:4c:da:a9:8f:82: 21:8f:01:82:3b:df:db:7a:4c:63:8f:f5:de:22:cc:2b:de:32: 43:93:ba:43:09:46:1e:ce:4a:c2:d3:75:ca:b2:d9:21:99:32: dc:03:90:8f:ed:4c:21:39:a2:ca:43:b6:df:88:cb:c4:99:e2: 28:ff:b7:8f:2a:38:19:94:75:71:8a:94:b0:40:5a:32:71:cd: 4e:5e:64:6e:7c:d8:c8:ac:ac:44:1b:ec:f0:11:2c:46:3e:dd: ef:f4:01:12:c4:dc:2f:92:70:74:74:c8:11:74:3d:51:16:3a: 6c:d9:40:d1:dc:0a:b7:a9:e8:84:0f:43:d2:ea:e8:8b:b0:85: b1:f1:45:f4:36:b6:c8:d4:9f:59:db:94:a5:fa:15:11:70:de: 1a:b2:04:4d:be:71:4a:6f:d6:bc:ff:6a:a6:d0:b6:62:fb:fc: 15:13:08:53:a1:3a:16:06:c3:ac:45:81:96:ca:76:7a:ac:f0: 74:e5:ef:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCV2iT0zgPr+H2HWNJQIQ7l0YirgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTA0MjYxMTU2NTdaFw0yNTA0MjkxNTAyNTdaMDMxMTAvBgNV BAMTKEQzNzlCOUNCMzlGMThCNThCNkQ3MEFDQkExMkYzOUVGMTIzNTU0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymU8Dhi4OVeM6b1K5yX2p/g0r F+P04ZM4PMO6+k1OQGf8kr/xv6EQHNhKSFFcBTiKP/KCrTNco8Z+VjJ10BuD3Wrs CFUwJTQS78IlpZYa5ldR0DmeZeUtzvwIC3qX0nQ7/Du82yUVKImYEzb1Z8sQIl/v uJ91nxoT6Bw1mnnzohJP9XDntTq0zeAV86NOlHAa9+RWCIpL29v6wtd4oFGvnUkS UElLegebhGbPVETtRXM2fLWCOALHYmlLY4yjs7voGOoeyn5Uo4nplPeqWw2YcQUl IS2e4WwDoaZjy8Triph57PFinuoU9cafZ5uT8ugENwSo59JZUSuaaSaXDaJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03m5yznxi1i21wrLoS857xI1VLEwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuy1D3YOSMUAwpFXqJNmu/64l8w5d9g+bqX dgUq6avVvdzngA0zUf/hYc0UxmxgEAhcWS21KIq0BXToOiObCqPuAABM2qmPgiGP AYI739t6TGOP9d4izCveMkOTukMJRh7OSsLTdcqy2SGZMtwDkI/tTCE5ospDtt+I y8SZ4ij/t48qOBmUdXGKlLBAWjJxzU5eZG582MisrEQb7PARLEY+3e/0ARLE3C+S cHR0yBF0PVEWOmzZQNHcCrep6IQPQ9Lq6IuwhbHxRfQ2tsjUn1nblKX6FRFw3hqy BE2+cUpv1rz/aqbQtmL7/BUTCFOhOhYGw6xFgZbKdnqs8HTl7+k= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:31 2025 by rpki-client