$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: pWG5dKqRKTXzWHMbcduWzu6XEy7pvy4cSJ58gmYy0Yo= Subject key identifier: 76:C0:7C:93:E3:84:44:CE:52:51:0F:65:09:FF:4D:4C:C6:00:7B:28 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 2A3DB10B359F48336A642BF973EE0D4A59D3517B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 99 Signing time: Sat 26 Apr 2025 04:30:58 +0000 Manifest this update: Sat 26 Apr 2025 04:25:58 +0000 Manifest next update: Tue 29 Apr 2025 08:06:58 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: ry60gtm4Bt3dm2xVC2mZa5lrIvGvZK5OpFBuS0wyePc=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: ruDlvZxwzH98WABBPfx4jUikFQHB1Z32f5yF+Dmn3Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 08:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3d:b1:0b:35:9f:48:33:6a:64:2b:f9:73:ee:0d:4a:59:d3:51:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 26 04:25:58 2025 GMT Not After : Apr 29 08:06:58 2025 GMT Subject: CN=76C07C93E38444CE52510F6509FF4D4CC6007B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:bd:45:30:95:8e:a0:ef:20:c2:f5:e2:0f: 80:d6:71:fb:dd:56:11:c8:27:5b:f9:26:f2:53:97: c9:1b:0c:1b:cb:a8:49:11:6c:0f:65:84:3d:d2:53: ac:e8:d0:56:86:03:ec:9b:31:e4:94:82:ae:9f:78: a2:e0:b3:94:c7:df:ae:24:e6:e4:61:4b:f3:52:3d: a2:71:b5:c0:ec:34:1e:2a:58:06:ef:4f:0b:dd:53: d8:ec:49:94:f6:76:e5:19:ba:48:59:d4:46:16:e4: f1:f5:41:da:e5:f0:c7:4e:f7:0d:3b:06:ff:8b:c0: e2:2b:bf:af:79:78:8e:8e:a1:73:c3:9e:11:5c:b1: 8d:47:25:b4:a7:a7:c5:7a:d8:cd:4d:0b:50:6a:77: be:a0:b1:23:7a:a4:b6:81:7e:a6:b9:8a:98:d8:6d: c7:67:1b:d0:14:a2:43:bd:a5:df:72:f6:c0:32:8e: 04:62:1e:2e:fd:bd:c3:f4:0f:5a:06:1a:24:07:e1: fd:8e:ea:28:b0:bf:5b:32:f3:bf:1f:af:53:7e:ec: f1:f5:44:ae:8e:e2:88:30:26:29:25:48:7a:5f:e0: a8:95:23:e8:3b:4e:77:00:0d:6f:5c:04:2c:8b:c3: c8:a5:2d:d8:84:93:80:37:52:55:36:be:7f:1b:83: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:7C:93:E3:84:44:CE:52:51:0F:65:09:FF:4D:4C:C6:00:7B:28 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:bc:dc:2c:14:55:dd:9e:2c:93:49:17:ba:b2:71:36:40:01: 45:c8:c3:b4:da:1e:4d:af:24:49:a5:58:4b:e9:01:87:4d:84: a6:41:9e:71:de:90:e4:7c:9e:d8:e2:26:27:39:2d:b0:f6:bd: e6:5a:64:a3:fd:fd:45:cb:8a:56:80:a0:3a:9d:9a:87:8c:f5: 64:9e:60:e1:6b:5b:5d:86:e8:80:57:f6:eb:d9:bd:1f:e8:d9: 6b:41:6c:2e:67:90:07:2f:be:82:df:92:12:77:3b:86:76:03: 22:ea:b3:43:4a:46:55:2c:69:e7:7e:7a:48:bb:80:8f:b0:06: 04:04:30:c4:e1:95:b3:c1:22:47:01:73:a0:94:11:d4:20:0b: 7e:6d:ac:d9:e8:0f:fb:aa:76:f4:dd:71:98:c9:60:e1:61:b3: 69:78:2b:44:c1:47:89:da:39:2a:6e:46:57:85:25:05:27:5c: 65:c9:58:d4:97:ec:f0:51:d9:65:53:71:27:57:5c:f3:b7:4c: 9c:a6:27:54:e6:9f:ea:07:3e:a8:cc:aa:89:74:e5:1b:ca:82: 75:22:c1:46:7f:c1:00:99:83:d2:09:d5:b7:5f:0b:b2:72:ae: c6:63:05:9a:68:90:74:b0:c9:f8:b3:6c:1f:37:58:bf:3e:87: 5a:a1:e4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKj2xCzWfSDNqZCv5c+4NSlnTUXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA0MjYwNDI1NThaFw0yNTA0MjkwODA2NThaMDMxMTAvBgNV BAMTKDc2QzA3QzkzRTM4NDQ0Q0U1MjUxMEY2NTA5RkY0RDRDQzYwMDdCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaab1FMJWOoO8gwvXiD4DWcfvd VhHIJ1v5JvJTl8kbDBvLqEkRbA9lhD3SU6zo0FaGA+ybMeSUgq6feKLgs5TH364k 5uRhS/NSPaJxtcDsNB4qWAbvTwvdU9jsSZT2duUZukhZ1EYW5PH1Qdrl8MdO9w07 Bv+LwOIrv695eI6OoXPDnhFcsY1HJbSnp8V62M1NC1Bqd76gsSN6pLaBfqa5ipjY bcdnG9AUokO9pd9y9sAyjgRiHi79vcP0D1oGGiQH4f2O6iiwv1sy878fr1N+7PH1 RK6O4ogwJiklSHpf4KiVI+g7TncADW9cBCyLw8ilLdiEk4A3UlU2vn8bgznXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsB8k+OERM5SUQ9lCf9NTMYAeygwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW83CwUVd2eLJNJF7qycTZAAUXIw7TaHk2v JEmlWEvpAYdNhKZBnnHekOR8ntjiJic5LbD2veZaZKP9/UXLilaAoDqdmoeM9WSe YOFrW12G6IBX9uvZvR/o2WtBbC5nkAcvvoLfkhJ3O4Z2AyLqs0NKRlUsaed+eki7 gI+wBgQEMMThlbPBIkcBc6CUEdQgC35trNnoD/uqdvTdcZjJYOFhs2l4K0TBR4na OSpuRleFJQUnXGXJWNSX7PBR2WVTcSdXXPO3TJymJ1Tmn+oHPqjMqol05RvKgnUi wUZ/wQCZg9IJ1bdfC7JyrsZjBZpokHSwyfizbB83WL8+h1qh5F8= -----END CERTIFICATE-----Generated at Sun Apr 27 22:58:15 2025 by rpki-client