$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: SJDY9SL2YS24B4Kf4GWGn6nzn/PKyu3a7TJkmFGWDEQ= Subject key identifier: 67:B7:EC:78:A7:5C:3F:06:2E:BA:DB:C8:F2:07:86:34:7A:A3:F9:FB Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 10D3696B07CF9343FA46C43DC6C4ECAD055BDA74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 04C9 Signing time: Tue 29 Apr 2025 15:50:48 +0000 Manifest this update: Tue 29 Apr 2025 15:45:48 +0000 Manifest next update: Fri 02 May 2025 20:33:48 +0000 Files and hashes: 1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: STfLEKupyrLdfwec04UUOZk+NXKX3/j5Qjc3GmJDYn4=) 2: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: NS6D8pxcdIbK0C2/YaoPVQbrcZ6ZrW+O1PKrOhO0xWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 20:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d3:69:6b:07:cf:93:43:fa:46:c4:3d:c6:c4:ec:ad:05:5b:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Apr 29 15:45:48 2025 GMT Not After : May 2 20:33:48 2025 GMT Subject: CN=67B7EC78A75C3F062EBADBC8F20786347AA3F9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:d2:4d:db:45:6e:49:b2:73:0e:a5:7c:7e: 6b:76:04:09:f5:8b:f3:6d:23:c3:8a:18:29:f6:4e: 1d:1c:bb:d6:aa:87:02:da:0a:bc:61:40:71:75:51: 69:1e:80:0f:7b:07:54:f8:5e:72:05:23:e0:5f:92: 01:43:a4:5c:c0:89:00:80:5c:34:86:20:f9:1c:4b: 7e:25:5e:83:af:ea:c0:4f:25:c0:75:58:97:f4:85: 01:8b:c2:ea:d9:ec:cc:12:10:d8:c7:8c:c0:d9:a6: 85:99:75:5e:15:d8:7e:af:74:5f:6a:90:05:13:27: 1d:86:b8:47:ef:e6:18:a8:f9:7d:ad:b9:3e:28:d2: 01:9c:9e:9e:aa:c3:80:12:6c:2b:2d:34:d4:f2:dd: 2f:02:ef:9c:eb:c8:12:17:53:f7:6e:84:aa:64:82: 34:5b:1a:6f:1f:83:7d:cb:f6:34:2c:3a:59:a9:19: 0c:e9:c5:16:db:dd:5c:db:d8:55:d9:7f:c8:8a:76: 58:e0:c0:88:64:69:52:a9:c7:15:d0:81:c4:27:52: fe:a4:96:77:42:08:c8:2e:f6:83:cf:f0:c0:80:24: 3a:73:dd:f6:6a:9a:60:23:11:ff:9f:91:e7:cf:14: 11:8b:eb:04:39:e7:59:24:90:c6:4e:06:5a:03:d9: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:EC:78:A7:5C:3F:06:2E:BA:DB:C8:F2:07:86:34:7A:A3:F9:FB X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4f:ab:50:ff:8e:96:c6:83:a8:25:fd:2d:c9:cf:65:90:fe: 6a:d1:99:98:1d:7c:c7:d8:f8:ed:8c:17:d3:a2:38:27:2a:d0: cf:c4:59:ef:96:78:4a:ba:25:a2:d6:b8:0c:15:11:68:e4:40: 7c:7e:0d:d3:2b:22:0a:96:bb:cb:85:1c:5d:bb:59:f4:ea:6d: 24:7d:41:09:bd:14:d7:44:a5:cd:ae:86:9f:b6:ec:80:1b:c2: b7:d6:f7:79:b0:70:3f:e7:8b:1f:55:58:9e:e8:99:cc:0e:19: 6f:20:9e:79:1c:55:90:db:47:59:e9:79:c2:90:7b:77:3d:16: 6c:ba:bb:ab:c1:85:2c:0e:85:e6:26:22:13:b5:f0:a4:77:b2: ac:c2:2e:4f:c3:4e:d3:21:22:cf:48:23:a6:18:7e:1d:26:34: a5:f9:0e:4b:61:0b:65:82:b3:8e:db:5c:ca:e6:fb:ad:7c:e9: 50:1c:6e:fa:00:06:fd:1c:a3:29:f3:43:94:46:f7:30:1e:4b: f6:9b:57:3f:f5:22:00:90:22:7e:fe:46:c0:04:65:25:38:23: 73:15:24:ec:06:bd:3a:c5:50:2e:e2:50:06:d8:3e:3d:91:47: 1d:8e:ce:13:e0:b7:ea:95:e7:a9:7b:1c:60:ee:d5:07:7b:15: f6:f8:8e:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENNpawfPk0P6RsQ9xsTsrQVb2nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNTA0MjkxNTQ1NDhaFw0yNTA1MDIyMDMzNDhaMDMxMTAvBgNV BAMTKDY3QjdFQzc4QTc1QzNGMDYyRUJBREJDOEYyMDc4NjM0N0FBM0Y5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcStJN20VuSbJzDqV8fmt2BAn1 i/NtI8OKGCn2Th0cu9aqhwLaCrxhQHF1UWkegA97B1T4XnIFI+BfkgFDpFzAiQCA XDSGIPkcS34lXoOv6sBPJcB1WJf0hQGLwurZ7MwSENjHjMDZpoWZdV4V2H6vdF9q kAUTJx2GuEfv5hio+X2tuT4o0gGcnp6qw4ASbCstNNTy3S8C75zryBIXU/duhKpk gjRbGm8fg33L9jQsOlmpGQzpxRbb3Vzb2FXZf8iKdljgwIhkaVKpxxXQgcQnUv6k lndCCMgu9oPP8MCAJDpz3fZqmmAjEf+fkefPFBGL6wQ551kkkMZOBloD2eUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7fseKdcPwYuutvI8geGNHqj+fswHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNPq1D/jpbGg6gl/S3Jz2WQ/mrRmZgdfMfY +O2MF9OiOCcq0M/EWe+WeEq6JaLWuAwVEWjkQHx+DdMrIgqWu8uFHF27WfTqbSR9 QQm9FNdEpc2uhp+27IAbwrfW93mwcD/nix9VWJ7omcwOGW8gnnkcVZDbR1npecKQ e3c9Fmy6u6vBhSwOheYmIhO18KR3sqzCLk/DTtMhIs9II6YYfh0mNKX5DkthC2WC s47bXMrm+6186VAcbvoABv0coynzQ5RG9zAeS/abVz/1IgCQIn7+RsAEZSU4I3MV JOwGvTrFUC7iUAbYPj2RRx2OzhPgt+qV56l7HGDu1Qd7Ffb4juY= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:13 2025 by rpki-client