$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: /7G4cXeyctzl3dT8vV79sX/BXdfEdOFJKfcMCAI+HTc= Subject key identifier: CD:AC:12:49:43:E6:45:9F:3F:44:41:11:21:17:34:9F:DC:64:66:D1 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 05E9E29DAA7FC27CCC457B345F5A5B46B573A56D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 04DF Signing time: Mon 28 Apr 2025 12:00:48 +0000 Manifest this update: Mon 28 Apr 2025 11:55:48 +0000 Manifest next update: Thu 01 May 2025 13:50:48 +0000 Files and hashes: 1: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: K2wpal5DoH3ThETyxGt7caHFByvQGnuNYlEhgrYQkIs=) 2: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 3: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) 4: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 5: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) 6: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) 7: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 8: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e9:e2:9d:aa:7f:c2:7c:cc:45:7b:34:5f:5a:5b:46:b5:73:a5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Apr 28 11:55:48 2025 GMT Not After : May 1 13:50:48 2025 GMT Subject: CN=CDAC124943E6459F3F4441112117349FDC6466D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:57:1c:a8:c3:bc:6e:56:aa:cc:f2:d4:2c: b4:be:0d:7a:3b:78:2c:f0:f8:4e:fa:9c:fe:b0:c8: 27:a1:93:8a:8c:66:d2:61:a4:1b:2c:48:a9:b5:47: 78:b2:85:11:af:67:57:d5:33:fe:90:f4:6c:6e:7a: 1f:90:b7:06:ea:73:8f:04:42:74:d0:6a:6b:ab:ba: 5e:8a:86:d9:dc:94:e0:9e:af:75:e0:c7:e2:57:12: fe:b6:f0:26:8d:21:ae:ea:d1:9b:7b:19:fa:82:bf: a8:0a:98:6f:2d:b9:11:c8:ec:f3:1d:03:6d:ed:09: 59:e2:5c:e3:d7:1a:9f:6f:19:cb:b3:c5:b8:14:b9: 6e:10:e4:4c:c0:df:0e:91:47:10:58:c0:5e:9e:dc: e2:c3:42:f1:7f:12:dd:60:23:7f:c2:39:81:fc:4e: 35:c6:1e:8b:f5:22:cf:e2:17:e8:e3:ab:d9:7e:4c: 44:66:45:1f:02:97:2d:33:d6:f3:7d:93:66:45:43: 9b:a9:67:26:85:eb:63:9c:99:ee:f1:49:b2:31:ce: cc:66:e5:bd:c6:26:53:13:72:99:04:71:d1:46:dc: 0f:f3:3c:2c:fa:bc:07:a8:bd:e6:4f:60:74:a1:76: e3:df:d8:15:8e:24:f3:fa:f6:39:e2:c3:94:19:6d: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:12:49:43:E6:45:9F:3F:44:41:11:21:17:34:9F:DC:64:66:D1 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:98:cf:ca:28:da:8d:88:0a:c7:4c:8a:42:28:58:8b:7b:52: 19:0f:ac:c9:57:ac:d1:3d:5a:7b:50:4d:30:c3:94:5e:af:30: 2f:65:39:1f:81:15:18:ae:ac:30:46:6f:1d:a6:4d:8e:e9:d4: ec:78:d7:39:aa:79:1a:43:4e:af:69:7e:a1:8b:9b:7d:51:cb: 6a:80:5f:74:5e:4d:76:68:0a:1f:4b:6b:80:16:c3:1d:8e:cf: ba:d5:6e:3c:7e:1a:38:bc:57:8d:f5:9a:dc:4c:c1:16:6d:af: 1d:77:28:80:0b:8b:87:c7:a3:36:14:f5:01:e7:93:fa:b3:9c: 32:df:3e:66:77:9e:31:e0:bb:7b:59:71:ce:b0:59:a3:a1:48: 56:ac:ad:b8:93:05:f4:57:7c:5a:be:0b:53:33:56:49:01:bf: 02:06:28:e6:3b:0f:1b:db:75:18:da:0d:93:d8:50:0b:04:f4: c3:dd:ed:54:1e:1f:65:d4:d1:bb:8b:97:42:6a:40:7f:07:0a: 19:31:7a:82:e4:02:b8:b9:50:49:a4:7b:63:89:44:4a:23:04: 19:36:70:cf:86:df:2e:2f:70:f5:cd:96:10:87:6f:b6:b8:23: a7:fd:b2:e1:3a:0b:34:60:32:98:81:3d:cb:05:f2:50:79:6b: 66:84:73:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeninap/wnzMRXs0X1pbRrVzpW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA0MjgxMTU1NDhaFw0yNTA1MDExMzUwNDhaMDMxMTAvBgNV BAMTKENEQUMxMjQ5NDNFNjQ1OUYzRjQ0NDExMTIxMTczNDlGREM2NDY2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVlccqMO8blaqzPLULLS+DXo7 eCzw+E76nP6wyCehk4qMZtJhpBssSKm1R3iyhRGvZ1fVM/6Q9Gxueh+Qtwbqc48E QnTQamurul6KhtnclOCer3Xgx+JXEv628CaNIa7q0Zt7GfqCv6gKmG8tuRHI7PMd A23tCVniXOPXGp9vGcuzxbgUuW4Q5EzA3w6RRxBYwF6e3OLDQvF/Et1gI3/COYH8 TjXGHov1Is/iF+jjq9l+TERmRR8Cly0z1vN9k2ZFQ5upZyaF62Ocme7xSbIxzsxm 5b3GJlMTcpkEcdFG3A/zPCz6vAeoveZPYHShduPf2BWOJPP69jniw5QZbeQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzawSSUPmRZ8/REERIRc0n9xkZtEwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Yz8oo2o2ICsdMikIoWIt7UhkPrMlXrNE9 WntQTTDDlF6vMC9lOR+BFRiurDBGbx2mTY7p1Ox41zmqeRpDTq9pfqGLm31Ry2qA X3ReTXZoCh9La4AWwx2Oz7rVbjx+Gji8V431mtxMwRZtrx13KIALi4fHozYU9QHn k/qznDLfPmZ3njHgu3tZcc6wWaOhSFasrbiTBfRXfFq+C1MzVkkBvwIGKOY7Dxvb dRjaDZPYUAsE9MPd7VQeH2XU0buLl0JqQH8HChkxeoLkAri5UEmke2OJREojBBk2 cM+G3y4vcPXNlhCHb7a4I6f9suE6CzRgMpiBPcsF8lB5a2aEcxs= -----END CERTIFICATE-----Generated at Tue Apr 29 06:29:30 2025 by rpki-client