$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: raCmO5LWPUt3gGhlJFGI7eh11cwYTCnfqNheSVSUjzI= Subject key identifier: 9F:C0:2D:76:D4:67:40:47:3B:74:63:E0:AD:46:5C:D3:98:0D:75:8C Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 33C509DB910695B85F3FB5D93995E87D012826E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: 84 Signing time: Mon 28 Apr 2025 21:21:33 +0000 Manifest this update: Mon 28 Apr 2025 21:16:33 +0000 Manifest next update: Fri 02 May 2025 04:49:33 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: E61916hqXvGee+Yg2Iig1LvjVXyfJW4QWMMobP98tTo=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: 8g3xpmivFCkMM+35rK/Ufc/dzyXuCsYY9zwLfPimwco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:09:db:91:06:95:b8:5f:3f:b5:d9:39:95:e8:7d:01:28:26:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Apr 28 21:16:33 2025 GMT Not After : May 2 04:49:33 2025 GMT Subject: CN=9FC02D76D46740473B7463E0AD465CD3980D758C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:0f:4f:5f:ac:65:30:88:d7:54:29:81:9d: 49:61:0a:d6:2b:04:41:22:4a:57:04:fb:75:e4:65: de:0f:b3:e0:09:c3:ef:c8:b0:d8:8f:89:5e:57:97: 7e:fc:8a:d2:d5:a5:a8:89:bb:e3:06:cc:d5:e9:99: 28:b5:eb:a4:83:7c:78:61:f5:32:5d:e9:4f:3e:d9: fd:4a:85:ef:40:38:e4:f9:4e:ef:ad:4d:85:10:51: e9:c9:97:42:20:00:2b:88:73:16:18:6c:b8:07:4e: a1:7d:8b:44:c8:64:c5:83:50:4e:a5:68:f7:cc:61: 0a:66:d9:0c:40:d2:58:6b:5f:ff:04:63:66:8e:75: 05:b2:6a:0e:42:a2:23:5d:e8:f3:3e:07:1b:71:48: f5:cf:8c:89:6a:4c:bc:61:6f:1e:3a:a4:cd:28:3d: 3e:8a:67:30:03:f7:d9:2d:e7:e5:e2:48:03:52:e3: 8f:eb:da:c9:6d:6b:b7:31:e7:10:85:48:8c:4e:fd: 7e:1b:69:3e:87:a0:7b:88:5c:23:37:94:05:77:3d: de:5f:cc:54:ef:fc:d8:cf:cf:04:f8:45:a4:b7:e5: a9:e1:4c:1c:a7:53:cd:d6:a1:65:f5:a5:1e:64:d6: 31:11:f6:85:f9:05:32:a9:fb:fe:6a:34:58:82:6a: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:2D:76:D4:67:40:47:3B:74:63:E0:AD:46:5C:D3:98:0D:75:8C X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:26:2c:5a:3c:10:0a:69:4c:5b:8f:72:42:7a:41:5b:73:b9: c1:01:3b:3f:b3:c0:01:58:b7:fe:ea:d5:aa:5c:1d:6f:3a:a9: e8:4f:1e:c9:18:42:fc:ea:76:5c:60:cc:da:98:7f:99:69:99: c1:1c:ef:7e:7c:bc:30:96:7a:be:bf:32:7b:7c:6b:fc:af:96: 1a:03:10:a0:b3:19:2d:a4:5c:7f:de:7c:9c:db:55:5d:06:a5: 64:ff:84:86:04:3d:94:c1:04:8f:47:d8:4e:27:c4:95:4a:5c: 98:d9:db:29:ad:22:cf:5e:ad:7f:fb:2a:a8:fb:12:aa:d6:0c: 17:cd:ac:fa:3d:e5:c4:00:8f:71:82:f3:c8:cc:c2:1e:8f:e9: 96:13:9a:38:41:0b:7d:07:1b:ce:a3:82:39:80:aa:d8:a5:cc: 79:6b:27:46:cd:dd:07:f1:4d:a8:ad:26:c0:a3:5b:53:eb:71: e7:af:57:2f:60:0e:86:0f:07:2c:21:b2:27:e9:05:94:68:bc: 34:75:e8:66:80:fe:74:f0:2b:10:3b:90:d5:52:8a:a1:4a:a1: 05:40:ae:12:0f:39:05:32:7f:f1:3b:86:b4:f3:eb:9a:a7:90: 24:7c:ea:54:04:2e:2c:97:f4:36:b6:b4:be:46:6c:22:5e:a9: 8d:2c:d6:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8UJ25EGlbhfP7XZOZXofQEoJuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA0MjgyMTE2MzNaFw0yNTA1MDIwNDQ5MzNaMDMxMTAvBgNV BAMTKDlGQzAyRDc2RDQ2NzQwNDczQjc0NjNFMEFENDY1Q0QzOTgwRDc1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmw9PX6xlMIjXVCmBnUlhCtYr BEEiSlcE+3XkZd4Ps+AJw+/IsNiPiV5Xl378itLVpaiJu+MGzNXpmSi166SDfHhh 9TJd6U8+2f1Khe9AOOT5Tu+tTYUQUenJl0IgACuIcxYYbLgHTqF9i0TIZMWDUE6l aPfMYQpm2QxA0lhrX/8EY2aOdQWyag5CoiNd6PM+BxtxSPXPjIlqTLxhbx46pM0o PT6KZzAD99kt5+XiSANS44/r2slta7cx5xCFSIxO/X4baT6HoHuIXCM3lAV3Pd5f zFTv/NjPzwT4RaS35anhTBynU83WoWX1pR5k1jER9oX5BTKp+/5qNFiCaiCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8AtdtRnQEc7dGPgrUZc05gNdYwwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkmLFo8EAppTFuPckJ6QVtzucEBOz+zwAFY t/7q1apcHW86qehPHskYQvzqdlxgzNqYf5lpmcEc7358vDCWer6/Mnt8a/yvlhoD EKCzGS2kXH/efJzbVV0GpWT/hIYEPZTBBI9H2E4nxJVKXJjZ2ymtIs9erX/7Kqj7 EqrWDBfNrPo95cQAj3GC88jMwh6P6ZYTmjhBC30HG86jgjmAqtilzHlrJ0bN3Qfx TaitJsCjW1PrceevVy9gDoYPBywhsifpBZRovDR16GaA/nTwKxA7kNVSiqFKoQVA rhIPOQUyf/E7hrTz65qnkCR86lQELiyX9Da2tL5GbCJeqY0s1i8= -----END CERTIFICATE-----Generated at Tue Apr 29 16:33:04 2025 by rpki-client