$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json) Hash identifier: AEJMRScBGQVJ7WKMonBk8W84vFxc2gAJcf4EsPNF9KM= Subject key identifier: 1E:F8:C3:B7:F3:09:54:2F:B2:51:09:2D:F5:5C:A2:A9:0F:65:0C:FE Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 583A9176C103B477F1516EBCD2026A3B75D80D1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft Manifest number: 78 Signing time: Tue 29 Apr 2025 11:42:48 +0000 Manifest this update: Tue 29 Apr 2025 11:37:48 +0000 Manifest next update: Fri 02 May 2025 21:00:48 +0000 Files and hashes: 1: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: Y4gt2119IHkN49XcZ9xU6TgP1DNCf7f/WsYyM5c4UyY=) 2: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2T3B+WlxteLj6OogHAOLwZBUdlPJwilxf6sGLSkZU2M=) 3: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: BmedSLLZ/Ar+kKVmJ8+lQwWqOCXWS7bTElyxdgv4frU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3a:91:76:c1:03:b4:77:f1:51:6e:bc:d2:02:6a:3b:75:d8:0d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Apr 29 11:37:48 2025 GMT Not After : May 2 21:00:48 2025 GMT Subject: CN=1EF8C3B7F309542FB251092DF55CA2A90F650CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:34:c3:df:fb:e3:6f:c4:2d:fc:62:65:ab: 10:92:b3:40:6f:cf:52:ab:3b:e1:0e:7c:d3:de:7b: fb:36:da:b7:a2:98:3c:5e:63:a0:e9:34:6f:12:5b: 70:f5:5f:c2:81:38:35:e9:0d:f9:00:bc:b2:1c:9f: 9d:00:7d:90:f9:f6:71:ef:51:31:ec:40:0f:23:2f: 39:f7:0f:b6:56:53:d0:aa:16:e4:3a:df:09:f3:47: e7:6e:bb:17:94:dd:4e:92:63:fa:60:9b:51:a2:50: f6:ea:fa:f0:91:64:f1:26:78:89:32:33:b1:1f:ac: a1:c9:04:15:25:bf:3c:88:d3:b3:5b:b9:61:f2:0f: dc:c6:7d:6f:75:98:10:5e:cc:14:2a:d9:7c:a0:22: 89:c5:de:5a:a2:68:57:c3:5f:46:6e:d3:46:9b:55: a3:1b:30:82:8a:f2:49:0a:7a:37:f6:a0:5b:5a:9c: 95:39:34:10:6c:2f:85:80:bd:ab:10:3a:bf:39:c0: 03:09:c1:e9:df:f9:8e:22:84:1f:c3:a0:7c:3f:3a: 64:be:a1:3d:19:ad:65:04:b3:e8:b2:7f:06:4f:72: d0:d0:37:58:2a:a5:a4:bc:b9:99:39:5f:64:be:09: 54:f8:1d:8b:4b:7c:13:0e:4f:79:8a:d2:35:e1:53: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F8:C3:B7:F3:09:54:2F:B2:51:09:2D:F5:5C:A2:A9:0F:65:0C:FE X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8b:51:53:ea:ff:f5:73:b7:4a:96:d5:f5:e5:61:45:fc:38: f4:23:be:41:5f:2c:92:c6:4d:90:22:2a:96:c0:99:95:74:0d: 73:88:ec:a7:e3:73:0a:8e:1e:61:6c:a7:23:48:e7:c3:4a:11: f5:2b:2e:06:d7:44:ce:86:9a:d3:b0:f4:39:c8:f6:84:d9:f8: 47:fb:49:a8:ba:1b:0e:21:f7:0c:85:a4:09:30:ff:53:6d:46: 41:3c:26:7f:75:da:8d:af:b8:e0:a0:74:0d:c0:2d:c8:54:d5: ab:98:43:1b:b9:24:21:47:94:57:7e:d7:bc:05:19:9f:14:3b: d2:ef:47:58:06:99:66:03:8c:93:38:7e:13:9c:40:4d:a8:33: a0:c4:a1:53:f1:c9:c4:a8:4c:30:f9:10:5f:56:e7:a6:65:9a: 7d:f7:ef:3a:4f:93:4e:b2:70:4b:a2:5b:f5:df:9b:56:db:48: fd:7b:77:b9:4b:43:79:a8:44:6a:3b:ef:03:01:62:a9:c6:59: a6:bd:49:af:a9:d1:ae:81:3b:ec:d3:4c:a6:53:31:24:05:ff: 4e:a4:d3:9d:64:0f:d3:9d:7b:bd:cd:2f:dd:55:cd:30:89:8e: b0:c1:38:e7:a8:b2:db:a8:9d:67:61:04:1a:a7:e4:6c:59:7f: 8d:28:e4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDqRdsEDtHfxUW680gJqO3XYDRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTA0MjkxMTM3NDhaFw0yNTA1MDIyMTAwNDhaMDMxMTAvBgNV BAMTKDFFRjhDM0I3RjMwOTU0MkZCMjUxMDkyREY1NUNBMkE5MEY2NTBDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+TTD3/vjb8Qt/GJlqxCSs0Bv z1KrO+EOfNPee/s22reimDxeY6DpNG8SW3D1X8KBODXpDfkAvLIcn50AfZD59nHv UTHsQA8jLzn3D7ZWU9CqFuQ63wnzR+duuxeU3U6SY/pgm1GiUPbq+vCRZPEmeIky M7EfrKHJBBUlvzyI07NbuWHyD9zGfW91mBBezBQq2XygIonF3lqiaFfDX0Zu00ab VaMbMIKK8kkKejf2oFtanJU5NBBsL4WAvasQOr85wAMJwenf+Y4ihB/DoHw/OmS+ oT0ZrWUEs+iyfwZPctDQN1gqpaS8uZk5X2S+CVT4HYtLfBMOT3mK0jXhU8uFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvjDt/MJVC+yUQkt9VyiqQ9lDP4wHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMy RjYzMUM4RDc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOLUVPq//Vzt0qW1fXlYUX8OPQjvkFfLJLG TZAiKpbAmZV0DXOI7KfjcwqOHmFspyNI58NKEfUrLgbXRM6GmtOw9DnI9oTZ+Ef7 Sai6Gw4h9wyFpAkw/1NtRkE8Jn912o2vuOCgdA3ALchU1auYQxu5JCFHlFd+17wF GZ8UO9LvR1gGmWYDjJM4fhOcQE2oM6DEoVPxycSoTDD5EF9W56Zlmn337zpPk06y cEuiW/Xfm1bbSP17d7lLQ3moRGo77wMBYqnGWaa9Sa+p0a6BO+zTTKZTMSQF/06k 051kD9Ode73NL91VzTCJjrDBOOeostuonWdhBBqn5GxZf40o5Os= -----END CERTIFICATE-----Generated at Wed Apr 30 01:34:29 2025 by rpki-client