$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: DBs7HIXo0ujEbXDalBGphYrF1VbQzxiblEYDT7JQ0pg= Subject key identifier: 22:CF:64:8E:5F:30:5F:5F:13:61:B7:DA:C2:FF:F9:39:FF:5D:3B:46 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 60A13C6ABAB4FA19FB8A042B0160FC4449EA1AED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 01CF Signing time: Tue 29 Apr 2025 02:02:23 +0000 Manifest this update: Tue 29 Apr 2025 01:57:23 +0000 Manifest next update: Fri 02 May 2025 05:16:23 +0000 Files and hashes: 1: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 2: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 3: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 5: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 6: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 7: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 8: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 9: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: kTFG54LEG3W1UBYYAdXOrg0vWjtNp5X+vqQzPAO5GkE=) 10: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a1:3c:6a:ba:b4:fa:19:fb:8a:04:2b:01:60:fc:44:49:ea:1a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Apr 29 01:57:23 2025 GMT Not After : May 2 05:16:23 2025 GMT Subject: CN=22CF648E5F305F5F1361B7DAC2FFF939FF5D3B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:c6:be:b7:b1:53:d1:7b:bb:de:77:a7:bc: c7:2d:a9:b8:fd:1a:95:d3:67:3e:ee:9c:e6:cc:6c: 16:e0:97:53:fe:cd:f2:c8:26:45:6f:ff:26:79:41: 4e:be:bd:96:80:01:4e:97:53:1d:cc:ce:b2:b2:8a: 08:85:65:c3:32:9d:95:6c:a3:f9:ee:14:66:ef:52: 23:ad:8c:14:09:8b:ec:2b:c8:aa:df:0e:f2:78:f1: 70:7e:4c:be:f4:bd:a8:ff:68:1a:9a:89:48:56:1b: 51:54:10:eb:4c:c5:f3:11:21:9d:02:7c:55:ba:e1: d0:b3:16:d8:53:e3:50:8b:fd:10:16:88:07:62:34: 2f:70:90:66:c5:31:95:4e:2e:c6:21:49:c1:22:05: 9c:68:e7:8a:df:09:f5:7e:c4:e6:2f:9c:5b:26:8e: 96:8a:f4:33:12:ae:30:cf:50:b9:fb:ff:9c:3e:06: 4b:ce:1f:34:26:3b:14:65:67:2c:6e:bc:a2:a0:ff: 5c:c3:12:14:c6:0c:ea:13:34:b2:7b:ab:e8:b1:99: 53:92:c2:3e:96:03:73:7b:d0:3a:ad:94:4c:96:b6: c6:31:bd:a8:52:cc:98:3b:d7:6b:b7:c7:41:55:c0: 0f:36:0c:d5:1c:aa:5f:7a:70:1f:70:ae:50:84:bf: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CF:64:8E:5F:30:5F:5F:13:61:B7:DA:C2:FF:F9:39:FF:5D:3B:46 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d9:ca:ee:75:d0:6b:62:58:8a:54:01:66:54:4a:18:59:df: 7f:08:68:e4:24:5c:b9:8d:bf:ee:e1:a0:7f:aa:f2:51:a2:89: 3e:c2:77:24:03:93:9f:d2:36:d0:1a:ca:71:0a:e3:21:e4:7a: 80:c1:f6:f0:16:50:82:ea:3b:b1:67:e3:a7:76:43:a3:e6:c3: 1c:e2:91:44:c0:9f:0d:4b:01:38:64:2d:05:66:09:24:85:84: 65:d6:ec:c3:bc:bc:8c:c8:33:12:8a:bd:f9:72:04:53:d2:73: d5:5d:a4:90:32:4a:79:17:4d:a4:84:36:3f:15:0a:45:a1:e4: 80:22:33:a6:61:d9:e1:02:66:e3:c9:35:d5:aa:be:32:25:38: 69:c6:5d:87:15:90:a1:7c:7a:46:cc:ac:17:9a:a1:aa:50:87: 9e:3b:21:c0:04:38:52:b6:3c:13:2b:ec:46:0b:2f:e7:19:67: d8:b7:02:e8:15:22:88:8f:49:ed:0b:e0:e8:0a:30:28:70:05: bd:b4:4c:b0:81:e6:d6:75:c9:16:0f:31:34:24:e2:3a:b1:9f: 47:b5:15:b2:83:d4:d8:fb:ea:be:7c:94:d8:d2:5e:0d:d8:02: 0f:17:a2:58:5b:4f:21:8d:83:b1:08:55:c6:05:1b:ea:87:37: 5e:c3:e9:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKE8arq0+hn7igQrAWD8REnqGu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA0MjkwMTU3MjNaFw0yNTA1MDIwNTE2MjNaMDMxMTAvBgNV BAMTKDIyQ0Y2NDhFNUYzMDVGNUYxMzYxQjdEQUMyRkZGOTM5RkY1RDNCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9Ma+t7FT0Xu73nenvMctqbj9 GpXTZz7unObMbBbgl1P+zfLIJkVv/yZ5QU6+vZaAAU6XUx3MzrKyigiFZcMynZVs o/nuFGbvUiOtjBQJi+wryKrfDvJ48XB+TL70vaj/aBqaiUhWG1FUEOtMxfMRIZ0C fFW64dCzFthT41CL/RAWiAdiNC9wkGbFMZVOLsYhScEiBZxo54rfCfV+xOYvnFsm jpaK9DMSrjDPULn7/5w+BkvOHzQmOxRlZyxuvKKg/1zDEhTGDOoTNLJ7q+ixmVOS wj6WA3N70DqtlEyWtsYxvahSzJg712u3x0FVwA82DNUcql96cB9wrlCEv3XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIs9kjl8wX18TYbfawv/5Of9dO0YwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbZyu510GtiWIpUAWZUShhZ338IaOQkXLmN v+7hoH+q8lGiiT7CdyQDk5/SNtAaynEK4yHkeoDB9vAWUILqO7Fn46d2Q6Pmwxzi kUTAnw1LAThkLQVmCSSFhGXW7MO8vIzIMxKKvflyBFPSc9VdpJAySnkXTaSENj8V CkWh5IAiM6Zh2eECZuPJNdWqvjIlOGnGXYcVkKF8ekbMrBeaoapQh547IcAEOFK2 PBMr7EYLL+cZZ9i3AugVIoiPSe0L4OgKMChwBb20TLCB5tZ1yRYPMTQk4jqxn0e1 FbKD1Nj76r58lNjSXg3YAg8XolhbTyGNg7EIVcYFG+qHN17D6ew= -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:38 2025 by rpki-client