$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: LTApDoK2oZoVe9gmD3Lg3ZpbPJLFCl3d0xWYL1L4nao= Subject key identifier: 45:01:9D:8B:79:04:A0:D3:55:29:DC:E1:C0:E0:D6:C7:10:0F:3D:E9 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 26140CCE7B0AE0F76B7ED1A85ECCFF05DF0FA879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 66 Signing time: Tue 29 Apr 2025 08:21:24 +0000 Manifest this update: Tue 29 Apr 2025 08:16:24 +0000 Manifest next update: Fri 02 May 2025 13:00:24 +0000 Files and hashes: 1: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 2: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 3: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 4: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: zGZS31Ps4MjjwqudWvebLLjD/uiOrjuhcFWWEz2+KrA=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:14:0c:ce:7b:0a:e0:f7:6b:7e:d1:a8:5e:cc:ff:05:df:0f:a8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Apr 29 08:16:24 2025 GMT Not After : May 2 13:00:24 2025 GMT Subject: CN=45019D8B7904A0D35529DCE1C0E0D6C7100F3DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:90:ed:a5:6d:99:da:bc:f2:54:86:80:8a: 5d:25:a3:48:4a:c2:ed:1e:a9:23:23:10:23:ad:86: eb:b3:f4:41:6b:a5:d6:b2:f8:52:43:4d:e2:d0:26: 46:e0:d9:01:5a:b6:7a:5b:e5:db:0a:cb:fc:0d:d9: 70:d5:c0:15:2a:af:8d:8d:b3:67:ef:d4:08:8d:72: bd:7e:d9:f4:8c:14:c1:94:21:10:a1:56:25:03:50: 67:c2:57:75:fa:9b:46:23:83:7d:77:77:d6:33:61: d1:09:22:cf:17:48:56:c4:ad:53:77:a8:40:2a:81: e3:4f:af:bb:ec:62:4e:02:77:51:76:46:8b:fe:10: 18:37:29:00:a3:2e:b9:c0:b7:31:a3:54:6a:ae:91: b2:64:fa:2a:91:7d:b4:48:fe:62:ca:78:ac:ae:ca: 95:a7:df:cb:7a:47:00:f8:b2:a6:d5:0f:82:1c:02: 16:96:88:d3:90:f3:a3:46:52:26:73:29:50:f2:ce: f1:1f:be:84:f2:60:3d:3d:10:20:2d:c3:1f:05:09: 2b:88:4a:1e:d9:b2:a6:e4:e6:95:44:9c:e3:c5:3f: ee:da:44:24:91:ea:a2:6d:62:5e:a1:2d:eb:30:78: 34:43:81:af:28:e4:14:ff:ed:5c:d7:b3:ba:06:52: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:01:9D:8B:79:04:A0:D3:55:29:DC:E1:C0:E0:D6:C7:10:0F:3D:E9 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:26:6f:5d:7c:54:f4:b3:91:cb:b3:bd:95:e9:2e:1c:0d:d3: 64:b3:2a:e6:97:14:d0:dd:7c:6d:01:f8:9b:b9:13:3c:39:b0: d9:2f:be:be:dd:b2:3e:dd:5b:69:b0:5f:14:21:77:cc:dd:a2: 71:59:64:d2:44:58:31:db:5b:cb:cc:04:d8:32:e5:43:d2:eb: 4b:8b:04:97:7d:e4:ff:5f:2d:8d:d8:31:17:e9:82:40:43:75: 18:8e:02:ee:5f:88:f3:0a:49:4d:9f:83:53:4b:37:86:cd:3c: 87:95:cf:2c:31:9b:e9:5b:a1:91:e1:6f:e1:1c:72:1f:fd:8e: 26:9a:6d:12:12:ef:ea:00:4e:62:4b:02:da:6c:68:0c:a3:37: 75:91:8e:e6:8f:b8:a9:eb:e4:c6:66:18:a7:82:ec:fe:f7:78: 02:1f:57:fe:e8:11:91:0d:57:55:c5:ff:45:43:9d:5c:d4:09: dc:fc:e3:82:21:c8:0b:9d:02:30:31:ae:1a:46:ad:0d:f1:85: 7c:ba:3e:8f:0f:32:21:91:65:2a:be:b9:c4:dd:0b:9c:e9:76: 0d:80:0a:0b:f9:6b:4b:45:25:65:3c:b1:ff:25:83:c4:ce:a4: 77:4f:18:35:10:0d:aa:96:9b:f1:75:8f:37:81:24:87:1c:48: 3b:b0:d4:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhQMznsK4PdrftGoXsz/Bd8PqHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA0MjkwODE2MjRaFw0yNTA1MDIxMzAwMjRaMDMxMTAvBgNV BAMTKDQ1MDE5RDhCNzkwNEEwRDM1NTI5RENFMUMwRTBENkM3MTAwRjNERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PJDtpW2Z2rzyVIaAil0lo0hK wu0eqSMjECOthuuz9EFrpday+FJDTeLQJkbg2QFatnpb5dsKy/wN2XDVwBUqr42N s2fv1AiNcr1+2fSMFMGUIRChViUDUGfCV3X6m0Yjg313d9YzYdEJIs8XSFbErVN3 qEAqgeNPr7vsYk4Cd1F2Rov+EBg3KQCjLrnAtzGjVGqukbJk+iqRfbRI/mLKeKyu ypWn38t6RwD4sqbVD4IcAhaWiNOQ86NGUiZzKVDyzvEfvoTyYD09ECAtwx8FCSuI Sh7Zsqbk5pVEnOPFP+7aRCSR6qJtYl6hLesweDRDga8o5BT/7VzXs7oGUgIDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQGdi3kEoNNVKdzhwODWxxAPPekwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0mb118VPSzkcuzvZXpLhwN02SzKuaXFNDd fG0B+Ju5Ezw5sNkvvr7dsj7dW2mwXxQhd8zdonFZZNJEWDHbW8vMBNgy5UPS60uL BJd95P9fLY3YMRfpgkBDdRiOAu5fiPMKSU2fg1NLN4bNPIeVzywxm+lboZHhb+Ec ch/9jiaabRIS7+oATmJLAtpsaAyjN3WRjuaPuKnr5MZmGKeC7P73eAIfV/7oEZEN V1XF/0VDnVzUCdz844IhyAudAjAxrhpGrQ3xhXy6Po8PMiGRZSq+ucTdC5zpdg2A Cgv5a0tFJWU8sf8lg8TOpHdPGDUQDaqWm/F1jzeBJIccSDuw1OY= -----END CERTIFICATE-----Generated at Tue Apr 29 11:26:26 2025 by rpki-client