$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: WmrYNaAsUSyYbLsXdwBQMpz+shK9C1KbsRia098mzM4= Subject key identifier: 18:07:6B:73:C6:63:F5:CD:C2:45:42:37:74:E1:A2:81:8D:93:27:9B Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 74DD9A895D319FCC26A22CBEF7951BC9A80E16DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 023A Signing time: Tue 29 Apr 2025 21:20:03 +0000 Manifest this update: Tue 29 Apr 2025 21:15:03 +0000 Manifest next update: Sat 03 May 2025 04:02:03 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: xdzoZuqYtzoXgkqJ4Kn8nANjMYZ9WoDZlpiwbd/4MEI=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:9a:89:5d:31:9f:cc:26:a2:2c:be:f7:95:1b:c9:a8:0e:16:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Apr 29 21:15:03 2025 GMT Not After : May 3 04:02:03 2025 GMT Subject: CN=18076B73C663F5CDC245423774E1A2818D93279B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:a0:e2:71:d4:12:13:60:44:bd:7b:85:ef: 16:7d:0a:e4:ca:68:e9:b4:6a:91:fc:56:e8:f9:d8: ce:a6:12:63:ca:8f:26:28:4c:2f:7d:8d:f7:3b:c4: 2f:ce:a7:e4:0e:aa:da:5b:8a:60:bb:ee:31:6f:1b: 3e:ab:fe:84:1a:81:50:fc:7e:f3:35:c3:d0:d7:3a: fa:9f:41:ff:ce:00:70:19:a8:70:59:9b:bb:9e:5f: 3d:cb:89:8e:c7:4a:b5:2a:67:49:89:95:a5:1e:5e: 0f:2d:2e:47:65:5d:2e:bf:c6:e3:12:fe:4f:b4:4d: ff:5f:47:07:f5:9f:8f:3d:55:01:cb:b0:e7:e5:c7: 72:b9:4c:78:53:62:3e:d4:a5:a3:4e:64:43:91:bc: 33:4f:1c:e6:7a:80:54:15:8e:56:0f:e4:3b:40:c5: 5c:ee:7a:da:59:85:10:1c:38:79:46:19:cb:3b:37: bd:2d:24:25:c5:ed:7e:13:31:b4:73:5b:ad:ac:8c: 72:8a:47:8a:ee:22:c5:48:a6:a3:7c:7b:3a:09:b6: e6:c5:83:02:8c:a7:48:5d:71:a2:d0:66:5b:19:23: 03:c4:8a:fb:d2:30:d6:32:74:f0:f6:01:e1:db:31: d7:53:23:f8:4a:f5:4f:06:4f:60:05:cc:22:01:5e: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:6B:73:C6:63:F5:CD:C2:45:42:37:74:E1:A2:81:8D:93:27:9B X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6b:e5:2a:81:8c:a6:b0:fc:63:2d:5d:5b:09:eb:bd:8a:62: e2:64:d0:be:df:29:b5:55:3a:aa:70:51:e3:e0:60:cb:bb:f6: 74:e0:d1:34:bd:99:5f:41:24:da:8a:c2:e6:fc:90:00:da:06: 46:54:db:04:d6:ce:40:5f:55:96:10:16:7d:24:ca:a9:f0:d2: 5b:55:55:52:85:c0:a3:6f:70:d7:16:ee:c4:d3:ea:d2:d2:a2: 86:92:68:ce:dc:6c:9b:1f:96:8a:ba:1d:1b:38:ed:24:43:52: ec:b7:1b:f1:cf:29:31:7e:8c:5f:54:dc:b5:59:db:31:33:15: 7f:b3:0a:d5:23:34:d3:38:16:ec:a9:21:86:b8:e2:d3:fc:55: 6e:54:53:72:2f:82:17:ce:3f:16:83:ea:fe:a0:2a:8c:26:a1: 60:25:15:3e:9b:3c:9a:c8:43:bd:68:86:37:42:75:d2:d0:30: a5:e6:aa:fc:da:f1:98:bc:9b:26:4b:fb:be:98:47:b1:3b:b9: 02:19:81:18:dc:41:8b:e5:77:bb:01:3e:b4:5a:59:3f:30:7f: de:16:9e:75:26:be:f2:07:85:43:4f:3b:5a:4f:a8:7a:f6:f5: 94:b0:f6:d4:63:82:58:8c:18:f2:fe:e0:c0:3f:03:cb:f0:c4: de:37:da:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN2aiV0xn8wmoiy+95UbyagOFt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA0MjkyMTE1MDNaFw0yNTA1MDMwNDAyMDNaMDMxMTAvBgNV BAMTKDE4MDc2QjczQzY2M0Y1Q0RDMjQ1NDIzNzc0RTFBMjgxOEQ5MzI3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNKDicdQSE2BEvXuF7xZ9CuTK aOm0apH8Vuj52M6mEmPKjyYoTC99jfc7xC/Op+QOqtpbimC77jFvGz6r/oQagVD8 fvM1w9DXOvqfQf/OAHAZqHBZm7ueXz3LiY7HSrUqZ0mJlaUeXg8tLkdlXS6/xuMS /k+0Tf9fRwf1n489VQHLsOflx3K5THhTYj7UpaNOZEORvDNPHOZ6gFQVjlYP5DtA xVzuetpZhRAcOHlGGcs7N70tJCXF7X4TMbRzW62sjHKKR4ruIsVIpqN8ezoJtubF gwKMp0hdcaLQZlsZIwPEivvSMNYydPD2AeHbMddTI/hK9U8GT2AFzCIBXjMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGAdrc8Zj9c3CRUI3dOGigY2TJ5swHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVr5SqBjKaw/GMtXVsJ672KYuJk0L7fKbVV OqpwUePgYMu79nTg0TS9mV9BJNqKwub8kADaBkZU2wTWzkBfVZYQFn0kyqnw0ltV VVKFwKNvcNcW7sTT6tLSooaSaM7cbJsfloq6HRs47SRDUuy3G/HPKTF+jF9U3LVZ 2zEzFX+zCtUjNNM4FuypIYa44tP8VW5UU3IvghfOPxaD6v6gKowmoWAlFT6bPJrI Q71ohjdCddLQMKXmqvza8Zi8myZL+76YR7E7uQIZgRjcQYvld7sBPrRaWT8wf94W nnUmvvIHhUNPO1pPqHr29ZSw9tRjgliMGPL+4MA/A8vwxN432os= -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:09 2025 by rpki-client