$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: YlGdRwlCcC1JlRsGYLhEVkdFkLo9Mrvvs/fqjlBY3PY= Subject key identifier: 5B:2E:B0:1A:AA:8A:51:02:1F:EF:9C:07:7C:D5:D0:85:89:57:9A:09 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 343C230D4C4508784A091DE78CE210502CF17AB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 053C Signing time: Tue 29 Apr 2025 11:31:33 +0000 Manifest this update: Tue 29 Apr 2025 11:26:33 +0000 Manifest next update: Fri 02 May 2025 16:18:33 +0000 Files and hashes: 1: AS38511.roa (hash: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=) 2: AS137342.roa (hash: CMk60fE5UdVZv/MxL6/n0+3Rya8vaHN7xLAuSG2v4iA=) 3: AS59281.roa (hash: 3OoTAmlO4zWNGL/bSRhl8jP1S0EccRMZ9zeQlEN9DAw=) 4: AS56242.roa (hash: tSzKKpcbE6bo3w9bV3TVhMwcF8jKEriX5Wm0rnvAgIg=) 5: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: 7I+LgFh5F2zS2r3MeZCSnIy5SGBRIWB3sWbOCbqJ5J8=) 6: AS137379.roa (hash: Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3c:23:0d:4c:45:08:78:4a:09:1d:e7:8c:e2:10:50:2c:f1:7a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Apr 29 11:26:33 2025 GMT Not After : May 2 16:18:33 2025 GMT Subject: CN=5B2EB01AAA8A51021FEF9C077CD5D08589579A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:45:9b:4f:4c:33:f2:94:4d:4e:63:91:5b: 5a:71:49:8d:b5:08:68:89:1e:11:84:bb:ec:1b:fa: fc:97:c3:6c:09:10:ec:88:b6:aa:7e:71:5d:75:5c: 44:a0:5e:0a:ca:9d:fd:e2:6e:e9:fd:e0:bc:38:7f: 45:91:e4:a3:47:35:7f:ce:89:c9:1d:02:24:09:6f: 02:b8:04:30:cc:ca:07:ba:64:31:89:79:bf:cf:39: 87:d0:7b:18:21:8e:2d:5b:7b:ef:8a:09:20:19:a1: 42:69:04:f1:e3:e1:15:25:2c:44:aa:14:8c:b2:9c: 9c:a3:81:65:6a:e3:0d:67:61:c6:4d:4f:7b:1d:3a: 36:51:3a:68:c4:b1:2e:ab:c6:39:2e:44:79:c9:4b: e6:5e:46:96:a0:8a:93:38:c5:92:41:08:0a:2c:c1: 0b:a2:27:68:24:a0:22:cd:3b:23:24:3c:50:f6:4a: e4:e9:e6:03:29:8a:99:12:dd:bf:b8:44:75:a8:10: 63:4d:a1:ee:a1:5e:0b:e1:bb:c9:ca:ff:c7:65:1f: 7a:d1:c6:1b:23:9f:68:70:fb:97:33:1d:ec:eb:a9: 2c:4e:92:cc:bc:65:61:b5:f3:11:ae:f2:ce:69:02: 91:6d:70:d6:07:65:40:a2:02:1f:ce:a3:21:5a:8d: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:B0:1A:AA:8A:51:02:1F:EF:9C:07:7C:D5:D0:85:89:57:9A:09 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:f4:df:d4:aa:06:7a:1f:11:f2:d9:4b:cb:96:f3:40:6f: 69:9f:6a:da:fb:69:a3:77:b5:e2:27:5d:37:ca:69:83:91:38: 15:3a:da:97:ec:29:cf:c3:11:dd:cb:40:39:12:7c:66:fb:3f: cb:54:ea:8b:b3:1c:a7:c6:5d:d1:cb:0e:9f:a4:a2:36:5d:96: f3:54:b2:ad:5b:3b:61:25:de:dd:f4:65:f6:a0:a4:db:26:b9: e2:e8:34:f4:f7:7b:03:f1:45:1f:e3:1a:38:df:66:fd:b3:20: 4e:8a:4b:2b:c3:fe:52:2d:02:c0:10:10:d3:b5:ad:b5:15:37: e1:b6:12:2a:b4:cc:62:ad:1b:86:83:90:a0:a1:37:7f:c8:07: b3:bc:04:ce:1d:04:b8:fb:e4:12:f9:2e:bc:69:dd:12:cf:ba: 42:cc:e1:98:dc:76:2f:97:7f:04:b1:68:fd:88:e9:1d:33:6e: a6:5b:91:18:66:88:3f:00:b6:e0:8d:75:9a:9f:4c:8b:f8:7f: e8:15:ff:d4:54:94:46:43:48:f3:ed:c7:3e:39:18:3f:ea:5a: 97:ee:b8:99:0d:7f:a7:e6:15:ce:de:4d:63:5a:4c:d0:7c:fa: 50:bb:0b:31:70:48:d6:63:f3:32:92:c0:19:56:bb:6d:ce:79: 4d:2d:23:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDwjDUxFCHhKCR3njOIQUCzxerIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNTA0MjkxMTI2MzNaFw0yNTA1MDIxNjE4MzNaMDMxMTAvBgNV BAMTKDVCMkVCMDFBQUE4QTUxMDIxRkVGOUMwNzdDRDVEMDg1ODk1NzlBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/0WbT0wz8pRNTmORW1pxSY21 CGiJHhGEu+wb+vyXw2wJEOyItqp+cV11XESgXgrKnf3ibun94Lw4f0WR5KNHNX/O ickdAiQJbwK4BDDMyge6ZDGJeb/POYfQexghji1be++KCSAZoUJpBPHj4RUlLESq FIyynJyjgWVq4w1nYcZNT3sdOjZROmjEsS6rxjkuRHnJS+ZeRpagipM4xZJBCAos wQuiJ2gkoCLNOyMkPFD2SuTp5gMpipkS3b+4RHWoEGNNoe6hXgvhu8nK/8dlH3rR xhsjn2hw+5czHezrqSxOksy8ZWG18xGu8s5pApFtcNYHZUCiAh/OoyFajXTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWy6wGqqKUQIf75wHfNXQhYlXmgkwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE639N/UqgZ6HxHy2UvLlvNAb2mfatr7aaN3 teInXTfKaYOROBU62pfsKc/DEd3LQDkSfGb7P8tU6ouzHKfGXdHLDp+kojZdlvNU sq1bO2El3t30ZfagpNsmueLoNPT3ewPxRR/jGjjfZv2zIE6KSyvD/lItAsAQENO1 rbUVN+G2Eiq0zGKtG4aDkKChN3/IB7O8BM4dBLj75BL5Lrxp3RLPukLM4Zjcdi+X fwSxaP2I6R0zbqZbkRhmiD8AtuCNdZqfTIv4f+gV/9RUlEZDSPPtxz45GD/qWpfu uJkNf6fmFc7eTWNaTNB8+lC7CzFwSNZj8zKSwBlWu23OeU0tI1U= -----END CERTIFICATE-----Generated at Wed Apr 30 05:29:21 2025 by rpki-client