$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: FzP2BoyXCEfpWBYkw4pI0wHgoH7l3cQVLrY5/4WGIpc= Subject key identifier: FF:CE:61:13:98:EF:46:6F:A5:9C:92:46:5F:11:0D:A4:71:18:3A:90 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 4B1622B50A6B21A3516BF30AC8B02EE48735F095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 04CE Signing time: Tue 29 Apr 2025 05:11:59 +0000 Manifest this update: Tue 29 Apr 2025 05:06:59 +0000 Manifest next update: Fri 02 May 2025 07:36:59 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: Yd01J5hPcZQ8iNNroa+Nv/YFeQyu4ZExz0qlMlvbB+U=) 4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: Vre7op7JdYQ3REruQfSWQ7k/kGMR0/Q6nVr+8X4eqqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:22:b5:0a:6b:21:a3:51:6b:f3:0a:c8:b0:2e:e4:87:35:f0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Apr 29 05:06:59 2025 GMT Not After : May 2 07:36:59 2025 GMT Subject: CN=FFCE611398EF466FA59C92465F110DA471183A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:47:7a:0e:ab:fa:09:9a:8d:ce:d8:69:35: 33:bc:a5:de:15:4d:c9:4c:76:dc:84:4e:5e:e6:d5: d3:bb:9a:0d:43:de:0a:07:a1:75:3e:c0:85:6d:ea: 2d:95:0e:26:19:41:77:a7:6d:a9:8d:06:d6:c7:f6: 49:ea:e5:19:ad:12:78:fd:31:c5:c9:fe:45:fe:ea: 9f:27:e9:c6:6b:f6:a9:37:a8:9c:c0:1f:af:23:fd: 4d:1a:21:ca:5e:ba:7b:4d:cf:4d:56:90:c9:59:51: 06:79:37:dd:b4:42:4b:08:bf:b5:49:3f:9a:d5:29: 17:98:96:61:5f:1a:54:61:9e:75:58:46:e9:ea:17: 0a:1d:2a:2c:47:59:91:93:ef:b8:36:08:ff:8f:1e: 9f:f6:b2:ad:33:c8:36:9e:0b:4a:b5:98:63:5b:bf: ef:22:40:32:26:da:11:db:a9:50:e1:d6:05:24:37: 02:26:ab:2f:4c:49:dc:50:c4:8a:c6:21:9a:fe:d0: bf:60:9f:e8:49:58:4d:50:27:ea:a9:3d:51:15:e7: 52:57:44:cd:d5:93:78:b8:d7:7e:7e:86:2e:df:fd: ed:c9:71:1c:44:e4:a6:54:e2:a2:15:ca:ee:18:18: cd:c7:92:00:ba:de:0b:bf:ec:18:3b:c6:84:f2:43: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CE:61:13:98:EF:46:6F:A5:9C:92:46:5F:11:0D:A4:71:18:3A:90 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:55:02:3c:83:f2:ff:62:b4:14:22:61:83:78:3b:23:a7:f5: 13:5f:d8:cd:3a:1a:e8:0d:be:8c:3e:5f:54:8c:d8:02:13:f9: 7f:73:94:18:90:86:b6:23:4d:a8:38:68:a1:1e:f3:5f:9e:cd: bd:d1:b0:d6:06:25:a3:9f:b0:f2:5c:76:c5:18:e3:c7:2b:4a: 1e:1e:c0:f7:51:cc:3b:8f:d8:56:64:ca:b1:20:0f:89:e8:d3: ff:ce:a8:48:cf:31:fe:b6:e2:a9:2b:26:2f:1d:23:d6:ba:c1: 64:79:68:6f:f0:d6:f2:a2:61:8b:3e:b0:f6:ba:d1:18:20:5f: 79:1e:9b:b3:8b:17:d1:88:50:bb:ad:fa:ca:05:a2:b3:52:e4: 13:0e:0f:cf:10:73:4e:70:30:8b:9a:83:12:a2:54:c9:01:c4: 6c:48:e5:0f:72:9e:b2:b2:e3:8d:9e:a4:fb:a3:33:9d:de:ad: aa:79:8c:26:06:ba:e0:73:6c:dd:76:ab:b9:64:3f:ce:a4:7e: bf:cb:fb:4e:47:31:70:81:6d:16:49:e6:db:5d:49:3b:54:f8: d6:fb:9e:68:ef:b1:05:d0:86:e5:94:bc:ef:2d:43:a8:04:6e: e7:95:0f:8d:bf:25:da:53:22:9b:20:7f:6f:a4:b0:13:cc:b2: ab:74:35:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxYitQprIaNRa/MKyLAu5Ic18JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA0MjkwNTA2NTlaFw0yNTA1MDIwNzM2NTlaMDMxMTAvBgNV BAMTKEZGQ0U2MTEzOThFRjQ2NkZBNTlDOTI0NjVGMTEwREE0NzExODNBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAEd6Dqv6CZqNzthpNTO8pd4V TclMdtyETl7m1dO7mg1D3goHoXU+wIVt6i2VDiYZQXenbamNBtbH9knq5RmtEnj9 McXJ/kX+6p8n6cZr9qk3qJzAH68j/U0aIcpeuntNz01WkMlZUQZ5N920QksIv7VJ P5rVKReYlmFfGlRhnnVYRunqFwodKixHWZGT77g2CP+PHp/2sq0zyDaeC0q1mGNb v+8iQDIm2hHbqVDh1gUkNwImqy9MSdxQxIrGIZr+0L9gn+hJWE1QJ+qpPVEV51JX RM3Vk3i4135+hi7f/e3JcRxE5KZU4qIVyu4YGM3HkgC63gu/7Bg7xoTyQ+blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/85hE5jvRm+lnJJGXxENpHEYOpAwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxVAjyD8v9itBQiYYN4OyOn9RNf2M06GugN vow+X1SM2AIT+X9zlBiQhrYjTag4aKEe81+ezb3RsNYGJaOfsPJcdsUY48crSh4e wPdRzDuP2FZkyrEgD4no0//OqEjPMf624qkrJi8dI9a6wWR5aG/w1vKiYYs+sPa6 0RggX3kem7OLF9GIULut+soForNS5BMOD88Qc05wMIuagxKiVMkBxGxI5Q9ynrKy 442epPujM53erap5jCYGuuBzbN12q7lkP86kfr/L+05HMXCBbRZJ5ttdSTtU+Nb7 nmjvsQXQhuWUvO8tQ6gEbueVD42/JdpTIpsgf2+ksBPMsqt0NY8= -----END CERTIFICATE-----Generated at Wed Apr 30 03:28:38 2025 by rpki-client