$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: v3yXCzmwhiRHiLoIJgvjMIjcro2ti33mH/E6BGfbgok= Subject key identifier: D0:9B:C6:1A:FB:FA:73:5E:6E:22:8E:B4:C4:74:5B:F1:11:2F:BB:2D Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 518B4A1958FC8CC594AE0B3D2A696970D5DEE38D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: B0 Signing time: Fri 25 Apr 2025 08:11:42 +0000 Manifest this update: Fri 25 Apr 2025 08:06:42 +0000 Manifest next update: Mon 28 Apr 2025 17:35:42 +0000 Files and hashes: 1: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) 2: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: YDDOwywdsenkKTrWUr/U+M/lSacSDcqL+icHi2XPmZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 17:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8b:4a:19:58:fc:8c:c5:94:ae:0b:3d:2a:69:69:70:d5:de:e3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Apr 25 08:06:42 2025 GMT Not After : Apr 28 17:35:42 2025 GMT Subject: CN=D09BC61AFBFA735E6E228EB4C4745BF1112FBB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:a9:fe:37:6d:96:80:67:9c:94:77:45:ce: f0:a9:13:06:7b:2a:93:e7:5c:4a:26:d1:5a:33:19: 9d:0f:63:5e:ea:b3:58:d4:cb:06:ed:85:22:2d:c5: 09:db:57:a3:70:57:d1:a1:6e:35:71:59:b7:ae:1c: e2:fb:44:55:d7:73:ca:6d:43:f1:8e:5b:4c:8d:69: 85:3c:33:d4:03:19:03:c5:0f:39:4a:ad:9d:8f:70: 6f:04:1d:7f:e2:d0:da:f9:e9:b6:b4:be:47:0c:f1: ac:48:97:b9:24:11:ae:00:3f:d0:02:63:6b:81:d7: 87:6c:2a:60:96:ef:05:ff:b3:ce:b7:f9:bc:84:96: 6a:4c:8e:1d:8b:9e:c1:70:b1:d9:fe:6d:b8:f2:99: 3c:df:3d:9c:7f:2d:2f:0a:fa:4c:25:bf:09:d0:e2: 92:2b:f8:dd:94:a2:45:7f:3e:2c:77:bd:a4:2c:25: 70:20:74:db:f0:9b:f2:6f:d7:0e:7c:3b:e0:b5:98: 92:53:5e:dc:d2:4a:22:45:4b:be:a7:6d:83:fe:94: 68:b6:8e:75:cc:50:bf:00:ea:4d:9b:71:6b:73:34: 08:9c:4d:61:86:cc:eb:eb:4b:8b:28:14:46:01:1d: 2e:3d:f3:71:1e:5c:86:f3:a0:72:ba:3a:d7:50:de: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:C6:1A:FB:FA:73:5E:6E:22:8E:B4:C4:74:5B:F1:11:2F:BB:2D X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:bb:e0:26:3a:5d:7b:be:0d:8e:42:d9:fd:48:51:2a:93:d6: 1e:ae:05:68:06:17:2c:09:2d:ca:4b:e5:fb:30:52:a8:35:02: 36:6a:17:b2:78:c9:99:c4:34:f6:b9:a0:09:e4:6f:af:a4:b5: ea:bd:96:50:24:f1:84:c7:a5:72:26:4b:fa:9f:12:c1:f2:06: 62:61:b3:3b:81:32:ff:11:bf:68:95:47:4c:31:56:d5:26:e2: 3a:1b:d8:a5:aa:b9:89:d6:32:4f:2a:56:d3:b2:f6:54:26:bc: 05:a2:61:1f:bd:e5:c3:78:00:9b:fa:55:88:87:fc:3a:66:36: d3:35:d7:3b:4e:de:62:25:1b:82:50:9c:c1:a1:26:d8:b1:75: 57:45:e1:a3:f0:54:b9:98:18:8c:b8:9f:be:54:fb:87:17:c8: 89:cc:f6:16:3c:45:97:e7:9c:62:4b:4d:27:97:5f:22:07:e0: 7e:d1:53:38:af:0f:44:3d:93:d6:e8:ca:63:08:48:d0:f6:17: 48:a5:c2:a9:0a:9f:d5:70:c8:b6:c7:a5:b2:d6:f8:72:e8:6f: be:29:1b:7f:a1:48:43:3c:82:14:47:a1:7d:71:5a:53:86:6d: 53:e2:e9:8d:c1:92:35:38:39:3a:d2:38:da:6e:7e:73:e3:5f: 82:00:11:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYtKGVj8jMWUrgs9KmlpcNXe440wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTA0MjUwODA2NDJaFw0yNTA0MjgxNzM1NDJaMDMxMTAvBgNV BAMTKEQwOUJDNjFBRkJGQTczNUU2RTIyOEVCNEM0NzQ1QkYxMTEyRkJCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wqn+N22WgGeclHdFzvCpEwZ7 KpPnXEom0VozGZ0PY17qs1jUywbthSItxQnbV6NwV9GhbjVxWbeuHOL7RFXXc8pt Q/GOW0yNaYU8M9QDGQPFDzlKrZ2PcG8EHX/i0Nr56ba0vkcM8axIl7kkEa4AP9AC Y2uB14dsKmCW7wX/s863+byElmpMjh2LnsFwsdn+bbjymTzfPZx/LS8K+kwlvwnQ 4pIr+N2UokV/Pix3vaQsJXAgdNvwm/Jv1w58O+C1mJJTXtzSSiJFS76nbYP+lGi2 jnXMUL8A6k2bcWtzNAicTWGGzOvrS4soFEYBHS4983EeXIbzoHK6OtdQ3rJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JvGGvv6c15uIo60xHRb8REvuy0wHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANa74CY6XXu+DY5C2f1IUSqT1h6uBWgGFywJ LcpL5fswUqg1AjZqF7J4yZnENPa5oAnkb6+kteq9llAk8YTHpXImS/qfEsHyBmJh szuBMv8Rv2iVR0wxVtUm4job2KWquYnWMk8qVtOy9lQmvAWiYR+95cN4AJv6VYiH /DpmNtM11ztO3mIlG4JQnMGhJtixdVdF4aPwVLmYGIy4n75U+4cXyInM9hY8RZfn nGJLTSeXXyIH4H7RUzivD0Q9k9boymMISND2F0ilwqkKn9VwyLbHpbLW+HLob74p G3+hSEM8ghRHoX1xWlOGbVPi6Y3BkjU4OTrSONpufnPjX4IAETU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:46:15 2025 by rpki-client