$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: EoxD3Lb4H9D3foY+5ToTFcj2uv2JBIeAiOIwLsD0tC8= Subject key identifier: F9:E1:B6:44:34:36:CA:F9:2D:B5:B2:72:15:23:A3:28:E0:88:11:2E Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 3DD9702DC72CF922ECC7805321D34B9DB151483A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 97 Signing time: Wed 30 Apr 2025 09:20:34 +0000 Manifest this update: Wed 30 Apr 2025 09:15:34 +0000 Manifest next update: Sat 03 May 2025 16:55:34 +0000 Files and hashes: 1: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: g4ZAmq2uWo3xKtM6K0TUSaAET0TaatNft2ZxNxC21Nc=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: K5oquwrLK66NgAAxhssyU9cE1S+99n3MDQtPouQSzd0=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: SCqKZWrRiy8nw8cakY/jAbd2qy6+t2kss9DaTtS0TyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d9:70:2d:c7:2c:f9:22:ec:c7:80:53:21:d3:4b:9d:b1:51:48:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Apr 30 09:15:34 2025 GMT Not After : May 3 16:55:34 2025 GMT Subject: CN=F9E1B6443436CAF92DB5B2721523A328E088112E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:46:a9:8f:35:37:37:1e:1c:28:a8:bf:bf: a7:b3:92:28:8b:97:56:1d:7d:f6:67:53:63:9b:80: 12:bd:44:d0:e1:d0:cf:55:83:30:b7:e9:0f:90:1d: 50:29:39:77:f6:02:9c:7a:99:d1:a6:05:20:0c:78: 3f:80:b1:3e:04:4e:53:c0:ca:98:df:29:96:c4:af: 0c:1a:df:e3:61:21:77:80:29:b6:93:1e:16:3c:4c: 89:42:8f:2a:9b:c5:ab:4d:a2:e3:a6:71:bd:dc:fd: 4a:fd:da:23:5d:7b:50:c4:90:66:6c:1f:f2:cb:36: a4:e6:3c:3d:01:f8:f6:bb:13:46:f3:dc:93:c6:40: e2:1b:d8:59:c6:31:47:b3:b0:69:74:4f:b7:94:b1: d5:46:01:e1:e2:cc:10:70:0a:d3:74:cd:db:32:e7: 49:a6:c4:9b:c0:51:67:e6:bc:12:53:6a:a2:60:7e: 82:5e:06:b8:f8:93:a9:80:1b:35:51:f6:09:57:a2: e2:fd:ae:2a:72:5f:c2:03:b6:c4:fb:d1:ce:f9:49: 06:55:a5:50:2a:ac:d3:9f:77:dd:1c:44:0c:86:98: 0c:08:18:e8:a3:7a:44:41:ed:a3:e5:1c:f8:d0:81: c7:e4:2d:af:85:9c:7a:5b:64:92:4b:66:6f:41:ee: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E1:B6:44:34:36:CA:F9:2D:B5:B2:72:15:23:A3:28:E0:88:11:2E X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:fa:d8:6e:88:36:ce:98:98:43:f7:c4:3d:ad:0b:75:d4: 2a:f1:87:12:9a:49:aa:e6:c2:1a:9c:67:14:9d:6e:24:0a:50: d1:e0:dd:44:8d:a7:69:fc:5b:ba:f1:87:c8:8b:b9:79:b7:8e: 17:2a:eb:e1:21:ed:a9:34:80:a1:36:c2:d1:d7:e8:42:92:6a: c1:5d:a3:f0:61:b0:6a:f7:6e:ab:4e:d1:70:a4:1a:53:05:a1: 80:ac:e4:d8:dd:37:be:b6:a8:1d:80:33:37:6f:e7:db:49:ec: fc:7f:11:bf:d9:9e:58:51:ff:b0:a6:75:80:8a:0a:4e:37:e4: 45:c1:ae:25:10:72:c7:cc:58:8c:3a:49:48:8a:ab:a4:eb:31: d9:69:79:55:c3:8a:29:1e:d0:ea:e0:7a:9a:fa:8c:03:16:e1: 4e:da:ec:df:4f:49:a8:f9:57:42:f0:32:1f:02:a1:39:30:ce: 9a:73:45:7c:80:a1:ae:b5:26:5f:19:26:9a:2c:23:2e:4b:f3: 1a:b8:6a:76:7c:6c:25:e6:cd:23:69:cb:35:d2:d8:74:dd:88: 9c:28:09:a9:67:48:3e:b6:48:be:e0:aa:90:80:b7:f6:da:41: 47:37:50:ae:ff:bc:50:65:d3:88:b4:1a:a0:9f:09:5a:49:4b: e8:84:0a:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdlwLccs+SLsx4BTIdNLnbFRSDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTA0MzAwOTE1MzRaFw0yNTA1MDMxNjU1MzRaMDMxMTAvBgNV BAMTKEY5RTFCNjQ0MzQzNkNBRjkyREI1QjI3MjE1MjNBMzI4RTA4ODExMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsYUapjzU3Nx4cKKi/v6ezkiiL l1YdffZnU2ObgBK9RNDh0M9VgzC36Q+QHVApOXf2Apx6mdGmBSAMeD+AsT4ETlPA ypjfKZbErwwa3+NhIXeAKbaTHhY8TIlCjyqbxatNouOmcb3c/Ur92iNde1DEkGZs H/LLNqTmPD0B+Pa7E0bz3JPGQOIb2FnGMUezsGl0T7eUsdVGAeHizBBwCtN0zdsy 50mmxJvAUWfmvBJTaqJgfoJeBrj4k6mAGzVR9glXouL9ripyX8IDtsT70c75SQZV pVAqrNOfd90cRAyGmAwIGOijekRB7aPlHPjQgcfkLa+FnHpbZJJLZm9B7ktbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+eG2RDQ2yvkttbJyFSOjKOCIES4wHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXX+thuiDbOmJhD98Q9rQt11CrxhxKaSarm whqcZxSdbiQKUNHg3USNp2n8W7rxh8iLuXm3jhcq6+Eh7ak0gKE2wtHX6EKSasFd o/BhsGr3bqtO0XCkGlMFoYCs5NjdN762qB2AMzdv59tJ7Px/Eb/ZnlhR/7CmdYCK Ck435EXBriUQcsfMWIw6SUiKq6TrMdlpeVXDiike0Orgepr6jAMW4U7a7N9PSaj5 V0LwMh8CoTkwzppzRXyAoa61Jl8ZJposIy5L8xq4anZ8bCXmzSNpyzXS2HTdiJwo CalnSD62SL7gqpCAt/baQUc3UK7/vFBl04i0GqCfCVpJS+iECsw= -----END CERTIFICATE-----Generated at Wed Apr 30 11:26:33 2025 by rpki-client