$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: Hvixficvun0Kpncqjk+Usx6Vls5D9NJ1KytQj5lL9Ao= Subject key identifier: 1E:D8:3F:DA:CC:00:AA:94:3F:AB:6E:58:9F:1C:37:01:60:C6:27:2B Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 2D626B536B8182E7AFB2486B11021B80D7FBA853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 0339 Signing time: Thu 01 May 2025 14:31:32 +0000 Manifest this update: Thu 01 May 2025 14:26:32 +0000 Manifest next update: Sun 04 May 2025 22:26:32 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: E9l22nMZeDN6bgkmfpRxsflbINjXy8h4hPYclTEGqso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 22:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:62:6b:53:6b:81:82:e7:af:b2:48:6b:11:02:1b:80:d7:fb:a8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: May 1 14:26:32 2025 GMT Not After : May 4 22:26:32 2025 GMT Subject: CN=1ED83FDACC00AA943FAB6E589F1C370160C6272B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:00:fd:94:57:de:e9:4b:41:e9:f4:56:de: 11:de:79:91:74:47:20:24:8b:8c:1a:5f:5e:65:21: c7:93:8b:d1:6f:cf:6b:8e:47:06:6b:f4:2b:5a:4a: 6b:fe:6a:39:d1:c0:5d:4f:b8:9d:9a:a3:d6:8e:09: a3:5b:62:1b:39:39:e5:80:eb:f0:88:ba:d0:a2:5e: 83:79:b9:f2:4f:ea:13:7d:5e:b1:b1:51:7a:8e:02: 29:19:b6:c8:a6:12:24:b9:5e:be:2f:bd:c5:55:c0: cc:95:ee:ff:4d:f2:92:75:c4:dd:b5:ec:33:84:d9: b1:f2:33:53:a4:3c:a7:5c:c7:02:2f:09:a2:ba:d0: 85:83:96:64:b5:27:33:da:e9:ce:80:b0:bf:7a:6f: 97:a2:87:eb:cc:93:83:e0:58:3b:9e:ee:ca:5a:f5: 88:7e:aa:b9:b5:a8:64:0e:1a:3b:b9:9d:ea:c5:39: 45:a0:86:2f:44:4e:ce:94:78:5c:13:dd:94:3d:5d: 43:e7:7b:aa:15:12:16:64:0d:2c:f4:1b:40:81:50: db:c2:e6:3b:ae:fd:90:75:b0:f5:67:fd:82:f7:c5: 6b:f6:34:de:c1:d4:bc:f0:54:72:0e:de:a2:8a:b0: 1a:15:c4:4f:f4:60:53:cf:16:0c:cd:71:a5:a2:16: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D8:3F:DA:CC:00:AA:94:3F:AB:6E:58:9F:1C:37:01:60:C6:27:2B X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:60:13:c9:1b:c6:51:11:77:7e:79:48:ef:89:e4:9c:03:1c: 05:29:38:a1:f7:b9:ea:3f:bb:2e:a1:16:51:ce:d5:1a:c5:29: e6:c4:31:a0:dc:59:04:d9:7b:da:c6:5c:48:8a:63:aa:68:4a: 59:f1:58:9a:ee:1a:f0:39:57:2c:85:d8:4e:ba:65:c7:ef:99: a9:b0:9b:5b:f0:36:84:28:d1:fd:03:83:ed:96:17:f3:00:d1: 19:83:ab:b0:24:51:59:de:ef:aa:c9:5e:16:52:02:d1:97:18: fa:d7:0e:86:7a:15:3d:ce:16:a9:b6:ed:e3:01:27:5c:5a:ed: 64:67:be:9c:d4:f5:f1:60:9b:50:d2:6f:ea:2d:15:d3:d7:83: 02:4c:e1:0b:4a:df:a0:0a:ae:75:dc:9d:4a:89:17:7f:af:9b: 69:31:47:bd:db:02:fa:c2:bd:ee:ef:8d:f9:75:8a:8e:e7:cd: b6:10:a3:2c:f2:be:a4:61:fa:c3:c4:1e:e5:1b:9d:6c:34:65: 05:b1:16:89:0f:da:60:2e:a7:31:41:2c:73:ed:06:92:e0:83: 9b:33:a2:b1:2a:73:76:3d:db:ef:b2:a8:04:32:04:55:93:2b: 1e:2b:c2:6b:4b:01:3a:7e:9a:e6:9c:50:ac:a7:fa:4e:a8:81: cd:8a:6f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWJrU2uBguevskhrEQIbgNf7qFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA1MDExNDI2MzJaFw0yNTA1MDQyMjI2MzJaMDMxMTAvBgNV BAMTKDFFRDgzRkRBQ0MwMEFBOTQzRkFCNkU1ODlGMUMzNzAxNjBDNjI3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuAD9lFfe6UtB6fRW3hHeeZF0 RyAki4waX15lIceTi9Fvz2uORwZr9CtaSmv+ajnRwF1PuJ2ao9aOCaNbYhs5OeWA 6/CIutCiXoN5ufJP6hN9XrGxUXqOAikZtsimEiS5Xr4vvcVVwMyV7v9N8pJ1xN21 7DOE2bHyM1OkPKdcxwIvCaK60IWDlmS1JzPa6c6AsL96b5eih+vMk4PgWDue7spa 9Yh+qrm1qGQOGju5nerFOUWghi9ETs6UeFwT3ZQ9XUPne6oVEhZkDSz0G0CBUNvC 5juu/ZB1sPVn/YL3xWv2NN7B1LzwVHIO3qKKsBoVxE/0YFPPFgzNcaWiFhJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHtg/2swAqpQ/q25Ynxw3AWDGJyswHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9gE8kbxlERd355SO+J5JwDHAUpOKH3ueo/ uy6hFlHO1RrFKebEMaDcWQTZe9rGXEiKY6poSlnxWJruGvA5VyyF2E66Zcfvmamw m1vwNoQo0f0Dg+2WF/MA0RmDq7AkUVne76rJXhZSAtGXGPrXDoZ6FT3OFqm27eMB J1xa7WRnvpzU9fFgm1DSb+otFdPXgwJM4QtK36AKrnXcnUqJF3+vm2kxR73bAvrC ve7vjfl1io7nzbYQoyzyvqRh+sPEHuUbnWw0ZQWxFokP2mAupzFBLHPtBpLgg5sz orEqc3Y92++yqAQyBFWTKx4rwmtLATp+muacUKyn+k6ogc2Kb30= -----END CERTIFICATE-----Generated at Fri May 2 13:21:05 2025 by rpki-client