$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: KGY95bX0BpEizY18sN097wpWJARKs/lPETwooQ9ZMI4= Subject key identifier: F8:9D:BB:E5:EE:40:B7:7C:17:66:EE:18:EA:B1:1B:1E:CF:66:C9:76 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 1B78A2C5759CF5E45F63E5FD68DE9F8219CAE24E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 91 Signing time: Tue 29 Apr 2025 06:32:21 +0000 Manifest this update: Tue 29 Apr 2025 06:27:21 +0000 Manifest next update: Fri 02 May 2025 13:13:21 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: J3T8X7ZJVcf+xL7seKPOkVeZWHPjQGRxd1iPkjH4nwA=) 2: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: iUQaNb+6v44lPmx0+tdfY6MCrE19L8h+MicWi1JqKRM=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: ctntkAXUI57UCQ3sU6b5QuN5R1MB/23qibMUlSwHY7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 13:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:78:a2:c5:75:9c:f5:e4:5f:63:e5:fd:68:de:9f:82:19:ca:e2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Apr 29 06:27:21 2025 GMT Not After : May 2 13:13:21 2025 GMT Subject: CN=F89DBBE5EE40B77C1766EE18EAB11B1ECF66C976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:65:26:a7:0c:fb:1a:b0:59:60:5b:15:5f: d4:f1:75:5a:da:e0:49:e3:c7:7d:2e:52:0b:ff:15: c6:07:4d:c1:e2:bf:88:79:92:8a:14:54:30:bc:78: 01:b8:39:fc:56:91:79:5e:5c:ac:c1:d5:2a:18:08: 78:8d:50:f4:4a:ff:ad:d0:9b:d3:a8:4e:ee:31:22: 3a:9b:6d:77:41:6a:97:54:26:2b:15:cb:2a:06:be: c5:f2:74:94:7a:64:49:ac:63:10:22:1e:11:fd:41: 08:d4:44:c7:dd:cc:a0:5b:64:07:e6:1c:0a:bd:ae: f3:42:1d:f3:4b:2c:90:d4:9e:a2:e9:bf:b6:df:80: 5f:11:30:02:79:0b:09:78:8e:26:8c:04:c9:51:9f: 98:28:4f:85:a1:35:e0:c4:7f:63:24:64:c7:14:8a: 88:50:fc:b2:82:c1:75:56:7e:9f:f0:86:1e:b1:2b: 0e:24:b8:5a:59:5c:f1:6c:ad:33:06:19:51:ed:5e: 0f:59:fd:4c:99:50:00:0b:4c:ba:dd:87:67:84:57: 61:64:c8:a2:69:5b:2c:8f:02:64:11:e0:8b:cc:ca: ff:51:65:7c:18:3a:d3:00:91:d9:3f:1d:bc:6d:55: f8:33:2f:a4:95:7d:ea:5d:54:bb:81:47:13:3e:a2: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9D:BB:E5:EE:40:B7:7C:17:66:EE:18:EA:B1:1B:1E:CF:66:C9:76 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:04:1a:cd:4c:4a:5e:5f:e7:70:d8:97:36:a4:ab:8b:68:fd: 0b:38:22:3d:6f:e2:01:4c:8b:f7:b0:90:b0:81:33:90:2a:7a: 57:a9:73:5b:5a:ff:be:7a:eb:a8:42:84:81:31:7b:9b:1a:45: 5f:e7:16:bd:6f:b4:2e:3f:8d:75:57:49:64:1d:40:c4:c7:2f: 4f:6e:e3:4f:30:bd:66:c5:6e:5f:ca:b3:3b:02:e8:a5:01:4f: f2:3c:ff:af:75:43:53:09:bf:88:e3:e7:4d:65:25:73:3f:5c: 37:b5:f9:65:93:40:33:aa:4e:8a:21:93:49:4c:b3:5d:c6:87: b1:62:d8:58:98:e7:f6:6d:b7:9a:16:16:b8:7f:7b:da:f7:da: 22:5c:aa:3b:f8:eb:94:ae:2c:bf:0d:6b:3a:2d:80:14:7f:db: e8:db:a0:98:c8:f2:1c:9a:4e:d6:c8:cb:15:50:25:90:13:c5: 65:8b:c5:81:f4:27:a0:9f:83:ec:44:5f:f4:13:26:2e:9b:d7: 93:aa:69:81:f4:fe:a5:77:2d:0e:47:15:c3:4b:01:12:1b:f0: a4:8e:24:71:e0:ca:ad:c4:b7:2c:5d:9f:03:69:b1:1e:c3:5e: 99:b5:e0:b7:21:e8:e1:ca:c9:86:53:53:39:ea:c3:15:5c:cd: d6:4d:48:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3iixXWc9eRfY+X9aN6fghnK4k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTA0MjkwNjI3MjFaFw0yNTA1MDIxMzEzMjFaMDMxMTAvBgNV BAMTKEY4OURCQkU1RUU0MEI3N0MxNzY2RUUxOEVBQjExQjFFQ0Y2NkM5NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMmUmpwz7GrBZYFsVX9TxdVra 4Enjx30uUgv/FcYHTcHiv4h5kooUVDC8eAG4OfxWkXleXKzB1SoYCHiNUPRK/63Q m9OoTu4xIjqbbXdBapdUJisVyyoGvsXydJR6ZEmsYxAiHhH9QQjURMfdzKBbZAfm HAq9rvNCHfNLLJDUnqLpv7bfgF8RMAJ5Cwl4jiaMBMlRn5goT4WhNeDEf2MkZMcU iohQ/LKCwXVWfp/whh6xKw4kuFpZXPFsrTMGGVHtXg9Z/UyZUAALTLrdh2eEV2Fk yKJpWyyPAmQR4IvMyv9RZXwYOtMAkdk/HbxtVfgzL6SVfepdVLuBRxM+oqvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+J275e5At3wXZu4Y6rEbHs9myXYwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0EGs1MSl5f53DYlzakq4to/Qs4Ij1v4gFM i/ewkLCBM5Aqelepc1ta/75666hChIExe5saRV/nFr1vtC4/jXVXSWQdQMTHL09u 408wvWbFbl/KszsC6KUBT/I8/691Q1MJv4jj501lJXM/XDe1+WWTQDOqToohk0lM s13Gh7Fi2FiY5/Ztt5oWFrh/e9r32iJcqjv465SuLL8NazotgBR/2+jboJjI8hya TtbIyxVQJZATxWWLxYH0J6Cfg+xEX/QTJi6b15OqaYH0/qV3LQ5HFcNLARIb8KSO JHHgyq3EtyxdnwNpsR7DXpm14Lch6OHKyYZTUznqwxVczdZNSA8= -----END CERTIFICATE-----Generated at Wed Apr 30 18:45:15 2025 by rpki-client