$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: oV/dO3di5yVF7MVnSPvnAkQRHNytwrs66TU8LxmEXNo= Subject key identifier: 6E:31:3E:E3:6F:0F:93:C8:F4:7F:CC:6D:B4:DD:4D:58:1E:24:E5:10 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 7F9915045C4B32DC8950D6B8BF2472418675E950 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 012B Signing time: Mon 28 Apr 2025 19:00:35 +0000 Manifest this update: Mon 28 Apr 2025 18:55:35 +0000 Manifest next update: Fri 02 May 2025 02:36:35 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: l0TJHYfvCsBSyumjN2S0X991pNekgsA8Y/GAWoC9wkY=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: n4clkKv/SOU90V5TxuH94mWY1smtgcsAQKkiUQvHG/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:99:15:04:5c:4b:32:dc:89:50:d6:b8:bf:24:72:41:86:75:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Apr 28 18:55:35 2025 GMT Not After : May 2 02:36:35 2025 GMT Subject: CN=6E313EE36F0F93C8F47FCC6DB4DD4D581E24E510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:a6:80:ad:6e:b4:95:9e:62:d3:c6:ca:62: c7:ed:61:8f:9d:9b:fc:59:ac:b8:d1:06:51:86:96: 3b:ea:09:db:90:46:55:d9:b2:69:b1:3f:cf:85:42: eb:e9:2d:2e:42:6e:d0:1e:16:f2:7a:92:0c:12:de: ff:46:dc:bd:8d:13:f5:0b:75:3a:14:9a:01:c0:a7: 1a:67:25:e5:70:77:ca:59:15:5c:df:14:75:50:2d: 88:99:75:2d:6d:05:70:ff:34:87:a0:a3:0c:54:b0: cf:42:49:c0:2f:6d:3f:dd:b6:4f:c2:32:5d:f0:f5: 5f:6f:eb:79:0b:bb:6e:ae:50:91:be:12:06:55:11: a2:fe:39:07:b0:02:e1:28:59:4d:9d:24:a6:2e:f7: cd:2d:6b:b2:43:bc:b0:eb:09:80:dc:77:a8:db:48: f7:e7:ca:61:61:01:6e:3b:7f:9b:70:e9:80:0c:3e: 8d:0b:74:68:eb:69:0e:f8:44:27:9a:60:2b:fb:d5: b4:f7:fd:36:2c:d3:e4:b4:70:e8:05:74:22:be:25: d8:78:fc:4d:06:9f:be:9f:26:9a:18:3f:29:bb:d0: 23:c6:3f:34:8e:4e:2a:b0:79:30:90:7f:01:d8:50: ab:d0:f4:14:23:bf:47:29:d2:39:82:71:db:36:dc: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:3E:E3:6F:0F:93:C8:F4:7F:CC:6D:B4:DD:4D:58:1E:24:E5:10 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:da:6c:db:1e:93:70:a7:78:73:b6:b8:52:d6:77:12:30:6b: e7:91:15:2a:9b:57:a2:66:63:71:f1:1e:de:2d:73:bf:9f:c5: ee:9e:4b:b4:cd:7a:4e:fb:e2:6f:1a:e0:77:62:77:03:41:9c: 71:da:74:3e:ba:0b:e2:87:fe:17:23:e6:40:cd:bc:50:49:f6: f0:4e:58:d2:90:ee:64:81:65:89:59:88:5e:5d:51:a6:e8:82: d9:59:c8:3b:d2:f3:77:59:bd:85:f6:65:bd:aa:03:74:44:bc: 71:86:aa:f8:e1:53:71:25:e9:e3:d0:99:b5:ff:d6:74:4d:ae: b9:5d:97:d8:dd:82:10:8a:9b:0b:46:d3:4b:75:3b:ef:2d:07: 11:dc:01:3d:08:09:04:15:ba:8d:85:8e:5b:65:1e:f4:35:c1: 2b:4e:34:40:df:4f:5f:b5:ae:a2:a3:a3:ce:5e:6f:49:80:d8: 38:fc:44:9b:e1:80:5a:58:b1:b4:56:7a:fe:8f:93:c4:27:88: 40:de:3a:c2:fc:e8:99:37:84:14:77:56:39:88:d4:0b:99:c8: 3e:fc:5a:36:8b:46:0b:90:ca:06:96:d4:40:7c:37:89:f2:15: b3:e5:e3:66:48:54:1d:ad:c5:a8:35:f3:18:d5:9c:5d:2c:03: bc:9f:d4:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5kVBFxLMtyJUNa4vyRyQYZ16VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA0MjgxODU1MzVaFw0yNTA1MDIwMjM2MzVaMDMxMTAvBgNV BAMTKDZFMzEzRUUzNkYwRjkzQzhGNDdGQ0M2REI0REQ0RDU4MUUyNEU1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJqaArW60lZ5i08bKYsftYY+d m/xZrLjRBlGGljvqCduQRlXZsmmxP8+FQuvpLS5CbtAeFvJ6kgwS3v9G3L2NE/UL dToUmgHApxpnJeVwd8pZFVzfFHVQLYiZdS1tBXD/NIegowxUsM9CScAvbT/dtk/C Ml3w9V9v63kLu26uUJG+EgZVEaL+OQewAuEoWU2dJKYu980ta7JDvLDrCYDcd6jb SPfnymFhAW47f5tw6YAMPo0LdGjraQ74RCeaYCv71bT3/TYs0+S0cOgFdCK+Jdh4 /E0Gn76fJpoYPym70CPGPzSOTiqweTCQfwHYUKvQ9BQjv0cp0jmCcds23D8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbjE+428Pk8j0f8xttN1NWB4k5RAwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3abNsek3CneHO2uFLWdxIwa+eRFSqbV6Jm Y3HxHt4tc7+fxe6eS7TNek774m8a4HdidwNBnHHadD66C+KH/hcj5kDNvFBJ9vBO WNKQ7mSBZYlZiF5dUabogtlZyDvS83dZvYX2Zb2qA3REvHGGqvjhU3El6ePQmbX/ 1nRNrrldl9jdghCKmwtG00t1O+8tBxHcAT0ICQQVuo2FjltlHvQ1wStONEDfT1+1 rqKjo85eb0mA2Dj8RJvhgFpYsbRWev6Pk8QniEDeOsL86Jk3hBR3VjmI1AuZyD78 WjaLRguQygaW1EB8N4nyFbPl42ZIVB2txag18xjVnF0sA7yf1Ok= -----END CERTIFICATE-----Generated at Wed Apr 30 05:46:26 2025 by rpki-client