$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: h5jv48WvG7dM/rNHBIZEYPUpbh9gWT5KKXpnWusAgoQ= Subject key identifier: 06:59:2F:03:3E:DE:C7:25:0E:92:5E:F3:90:05:DD:10:BE:2D:F5:A9 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 2B5069EFEB4E0176F32EAE27D728CE9AEF9DA131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04CD Signing time: Tue 29 Apr 2025 01:22:10 +0000 Manifest this update: Tue 29 Apr 2025 01:17:10 +0000 Manifest next update: Fri 02 May 2025 05:16:10 +0000 Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: T8SjuQTkQIPs0a51Yh8cqaQWVFCn+i0mijWQsWwl7IQ=) 2: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: diSJtF4pncDv3TYDAQkVNDujeOW0TndNL50eRWU9t2k=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:50:69:ef:eb:4e:01:76:f3:2e:ae:27:d7:28:ce:9a:ef:9d:a1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Apr 29 01:17:10 2025 GMT Not After : May 2 05:16:10 2025 GMT Subject: CN=06592F033EDEC7250E925EF39005DD10BE2DF5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:2c:cb:c8:77:2a:f8:85:9a:b8:c5:c2:a7: b8:b2:b5:39:90:55:bc:9c:ff:91:1d:da:82:3c:6a: 73:c4:32:54:cc:9e:52:3d:34:46:64:9b:b8:b5:17: a5:3d:b7:44:dc:f5:21:92:64:0a:5e:b1:5a:42:83: f0:e4:f6:72:ad:0b:6c:ea:92:51:a7:04:50:10:01: 8b:b5:3f:ce:f1:f9:88:03:dc:f2:f4:42:52:7a:c8: eb:4c:d2:14:66:a9:03:13:83:b7:1c:bf:07:3d:db: ad:7f:4f:33:f6:d4:3b:fb:cf:a6:2d:02:d5:06:6c: 45:72:f0:aa:41:e5:10:86:cf:54:f0:4b:ef:80:bd: a3:e8:a5:9f:87:d7:6f:85:85:57:7d:2c:1f:88:58: c9:f7:76:16:8a:e1:c1:56:1f:f0:7e:29:56:a6:e7: ab:1e:99:e9:de:42:e5:14:59:2e:9d:1a:91:43:61: 38:49:aa:23:95:4f:0c:29:8a:a6:78:d4:f1:ea:a5: ea:32:4a:d4:84:1c:87:5e:d2:62:11:3a:53:ff:07: 35:2e:8c:85:d9:79:76:5b:37:de:0d:54:a1:d3:22: 53:4d:f6:1e:07:c8:eb:cd:03:72:08:25:20:a4:72: 79:0f:fc:dd:26:e8:5d:eb:99:5f:75:df:88:6c:90: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:2F:03:3E:DE:C7:25:0E:92:5E:F3:90:05:DD:10:BE:2D:F5:A9 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cc:a7:37:ee:f4:0c:d7:6d:50:c8:c5:fa:1b:72:ee:2a:40: a3:83:d5:10:cb:cb:66:e3:12:c3:b4:8e:5a:32:10:6d:c0:6e: b6:7a:6a:22:57:7b:0c:32:93:78:14:82:8a:54:eb:35:9a:13: fb:a8:e6:28:48:df:9f:e2:56:cb:89:da:ba:db:09:04:35:81: b4:72:17:a6:a6:0d:0e:39:f2:b7:0c:39:59:7b:58:f7:ea:bd: b2:a5:1f:be:2a:79:57:da:a7:35:7b:82:7c:57:3d:e0:74:c3: 75:64:0e:40:87:18:7d:9b:f1:7a:a1:da:cf:a8:60:f9:f3:70: 9d:bc:aa:dc:cf:74:62:7f:0d:d5:f2:ae:d0:60:01:10:97:28: 01:02:94:72:be:d0:7f:3d:13:04:0c:82:04:b9:1b:ac:9b:9f: 36:5b:d1:ad:42:75:af:80:7d:45:e5:03:8c:4d:cf:70:43:d2: 6e:62:ec:83:b3:b1:ca:20:ff:d2:ed:52:18:f5:f6:18:64:9b: cc:06:f8:51:3c:39:ee:77:5a:46:cb:3d:84:63:70:ee:cb:b4: c5:51:51:18:89:c3:9b:b2:d7:40:43:fe:b6:e9:59:60:0e:94: 8d:e8:86:29:6c:b7:c5:0b:6e:38:45:f5:09:f2:d8:f3:a0:bb: 4f:3c:c4:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1Bp7+tOAXbzLq4n1yjOmu+doTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA0MjkwMTE3MTBaFw0yNTA1MDIwNTE2MTBaMDMxMTAvBgNV BAMTKDA2NTkyRjAzM0VERUM3MjUwRTkyNUVGMzkwMDVERDEwQkUyREY1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2byzLyHcq+IWauMXCp7iytTmQ Vbyc/5Ed2oI8anPEMlTMnlI9NEZkm7i1F6U9t0Tc9SGSZApesVpCg/Dk9nKtC2zq klGnBFAQAYu1P87x+YgD3PL0QlJ6yOtM0hRmqQMTg7ccvwc9261/TzP21Dv7z6Yt AtUGbEVy8KpB5RCGz1TwS++AvaPopZ+H12+FhVd9LB+IWMn3dhaK4cFWH/B+KVam 56semeneQuUUWS6dGpFDYThJqiOVTwwpiqZ41PHqpeoyStSEHIde0mIROlP/BzUu jIXZeXZbN94NVKHTIlNN9h4HyOvNA3IIJSCkcnkP/N0m6F3rmV9134hskOWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlkvAz7exyUOkl7zkAXdEL4t9akwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArMpzfu9AzXbVDIxfobcu4qQKOD1RDLy2bj EsO0jloyEG3AbrZ6aiJXewwyk3gUgopU6zWaE/uo5ihI35/iVsuJ2rrbCQQ1gbRy F6amDQ458rcMOVl7WPfqvbKlH74qeVfapzV7gnxXPeB0w3VkDkCHGH2b8Xqh2s+o YPnzcJ28qtzPdGJ/DdXyrtBgARCXKAEClHK+0H89EwQMggS5G6ybnzZb0a1Cda+A fUXlA4xNz3BD0m5i7IOzscog/9LtUhj19hhkm8wG+FE8Oe53WkbLPYRjcO7LtMVR URiJw5uy10BD/rbpWWAOlI3ohilst8ULbjhF9Qny2POgu088xF4= -----END CERTIFICATE-----Generated at Wed Apr 30 08:28:19 2025 by rpki-client