$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: YHfCidxPB1vVNy7sfHf4k2KeZbV2fShtyBWeFsMe4aU= Subject key identifier: 2E:EF:78:26:EB:B6:00:C6:C4:07:05:D9:93:94:7E:B1:FA:61:FA:BE Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 5F16BE43313CBF72048D62BE29292F4E6DE90E93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: 40 Signing time: Sun 27 Apr 2025 05:51:16 +0000 Manifest this update: Sun 27 Apr 2025 05:46:16 +0000 Manifest next update: Wed 30 Apr 2025 09:40:16 +0000 Files and hashes: 1: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=) 2: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: WtcRUzAT9xPcx05xmtOn1GacJnJm17TFsUx6HaoWEz0=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:be:43:31:3c:bf:72:04:8d:62:be:29:29:2f:4e:6d:e9:0e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Apr 27 05:46:16 2025 GMT Not After : Apr 30 09:40:16 2025 GMT Subject: CN=2EEF7826EBB600C6C40705D993947EB1FA61FABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:4e:96:b8:e7:3d:ae:35:6e:a1:6e:a5:91: be:51:71:2f:82:46:dc:8a:2b:f6:7c:a7:fa:e4:01: 34:44:78:c8:a2:4c:09:36:67:fc:26:e8:d1:54:80: f2:96:bc:30:75:5c:6c:f5:b6:ba:a9:a4:4f:0e:e0: 69:58:47:f7:a2:cb:e6:d5:9e:7c:d2:75:54:ee:35: 08:c3:6b:ff:55:c2:91:a3:28:f3:c5:4e:6b:5d:38: fd:62:90:54:7e:68:7b:f6:ec:85:32:8e:95:28:9e: 2f:e3:8a:24:49:0b:a4:5a:5a:d6:32:96:2c:96:f7: 48:db:a2:4b:81:47:6e:b4:d2:9e:67:ee:dd:b2:72: 64:45:b7:53:5a:5b:9a:a9:f1:f8:80:4d:23:94:1f: f6:a8:5e:86:a9:9d:b6:73:a3:17:99:7b:bf:a1:f5: 9b:3c:65:0a:d9:4f:cb:c8:17:68:7d:08:09:f9:b6: ee:7e:40:69:11:39:e1:31:ca:b9:43:9b:6d:83:5e: 32:c3:e9:71:2c:e1:9b:21:33:6b:87:5b:a8:2c:32: a5:1d:36:2d:dc:e4:c7:a8:30:c0:e8:62:4a:09:57: ed:cd:53:bf:2f:05:d0:c3:45:fb:03:48:f2:04:7d: 65:c3:27:a3:97:bb:6d:aa:1e:44:2f:50:8d:a3:81: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EF:78:26:EB:B6:00:C6:C4:07:05:D9:93:94:7E:B1:FA:61:FA:BE X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fd:aa:5f:9d:de:ed:12:76:2d:ec:50:2a:31:4f:4b:34:53: 9a:d1:b4:68:ba:36:96:f8:6e:95:f7:c0:30:e4:62:9a:df:44: ed:7a:76:38:d9:b9:3f:cf:f2:0d:91:3d:18:3b:26:76:83:da: 5f:24:05:65:68:3c:e2:4e:4b:95:ad:46:38:1f:47:08:6d:30: 78:fc:2e:73:c4:e2:88:5a:f3:39:45:74:c6:67:d6:52:c7:16: bc:72:4a:c1:78:cf:f1:6c:5d:a6:12:e5:fc:83:a7:35:0a:5b: 45:46:41:6e:53:5d:08:6b:3d:27:11:58:b4:9f:a2:43:6c:0d: 2a:35:d2:d4:de:3e:b5:12:9e:a4:0d:af:17:b0:4b:e4:db:6f: 78:c6:27:51:da:47:97:2e:a9:3c:29:dc:3a:76:bd:7b:62:67: 4b:c0:55:86:2f:4d:7f:07:4b:12:04:ab:84:b2:14:cd:08:30: 30:c1:78:98:f3:52:1e:c7:7f:d0:5b:5c:7d:4e:54:c7:48:44: 9f:3e:e7:69:86:59:a5:2f:2e:0d:63:d3:1b:a3:55:73:f2:95: ca:65:7c:05:e3:13:15:8a:24:f3:02:a7:9f:ba:e8:54:27:18: 62:18:14:ad:4f:1c:60:0e:d3:d3:0c:8b:5d:16:1d:82:97:c2: c7:2b:7a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxa+QzE8v3IEjWK+KSkvTm3pDpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTA0MjcwNTQ2MTZaFw0yNTA0MzAwOTQwMTZaMDMxMTAvBgNV BAMTKDJFRUY3ODI2RUJCNjAwQzZDNDA3MDVEOTkzOTQ3RUIxRkE2MUZBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdk6WuOc9rjVuoW6lkb5RcS+C RtyKK/Z8p/rkATREeMiiTAk2Z/wm6NFUgPKWvDB1XGz1trqppE8O4GlYR/eiy+bV nnzSdVTuNQjDa/9VwpGjKPPFTmtdOP1ikFR+aHv27IUyjpUoni/jiiRJC6RaWtYy liyW90jbokuBR2600p5n7t2ycmRFt1NaW5qp8fiATSOUH/aoXoapnbZzoxeZe7+h 9Zs8ZQrZT8vIF2h9CAn5tu5+QGkROeExyrlDm22DXjLD6XEs4ZshM2uHW6gsMqUd Ni3c5MeoMMDoYkoJV+3NU78vBdDDRfsDSPIEfWXDJ6OXu22qHkQvUI2jgWClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULu94Juu2AMbEBwXZk5R+sfph+r4wHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL9ql+d3u0Sdi3sUCoxT0s0U5rRtGi6Npb4 bpX3wDDkYprfRO16djjZuT/P8g2RPRg7JnaD2l8kBWVoPOJOS5WtRjgfRwhtMHj8 LnPE4oha8zlFdMZn1lLHFrxySsF4z/FsXaYS5fyDpzUKW0VGQW5TXQhrPScRWLSf okNsDSo10tTePrUSnqQNrxewS+Tbb3jGJ1HaR5cuqTwp3Dp2vXtiZ0vAVYYvTX8H SxIEq4SyFM0IMDDBeJjzUh7Hf9BbXH1OVMdIRJ8+52mGWaUvLg1j0xujVXPylcpl fAXjExWKJPMCp5+66FQnGGIYFK1PHGAO09MMi10WHYKXwscremM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:03:11 2025 by rpki-client