$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json) Hash identifier: S3aRqkpkEVxsnNNXRL0G0V5sL3O+2sFqz7K0XNkT0FQ= Subject key identifier: 77:D4:4F:3D:20:2A:2B:37:48:66:69:C5:D4:04:84:7F:E0:87:60:C6 Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB Certificate serial: 1AFC8250FA9162E714933A3FD353917064AB629C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft Manifest number: B1 Signing time: Sun 27 Apr 2025 17:41:41 +0000 Manifest this update: Sun 27 Apr 2025 17:36:41 +0000 Manifest next update: Wed 30 Apr 2025 23:53:41 +0000 Files and hashes: 1: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: ZKThCEoaXLgbZRpBc8YDgH0cGzoycc/bYZWYz6iT07g=) 2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: W4T3x6W6F80SSirpXVn9D/iy5Cn3YHJGBUQbdlxcTEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fc:82:50:fa:91:62:e7:14:93:3a:3f:d3:53:91:70:64:ab:62:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB Validity Not Before: Apr 27 17:36:41 2025 GMT Not After : Apr 30 23:53:41 2025 GMT Subject: CN=77D44F3D202A2B37486669C5D404847FE08760C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:38:bd:73:b3:c7:56:e4:60:b1:87:ed:66: d9:3f:4e:f2:b3:ba:df:4d:e4:56:95:54:81:25:db: 55:98:cd:e5:d0:3b:b0:c1:ad:71:2d:e3:b3:bc:c0: 3d:f6:8b:a3:8f:67:00:48:cf:9d:2d:44:9a:c1:5b: 3a:cf:a7:6c:d9:1b:f3:4a:40:b5:50:1b:d4:a6:19: 54:e2:96:6e:c4:aa:1c:14:c6:0f:7d:d4:54:60:25: f3:23:c3:2e:47:eb:d5:d3:84:ee:8f:14:2a:94:d6: d5:1e:54:58:13:9f:50:e6:2e:a5:4e:ef:57:92:5e: 79:04:bb:3e:45:da:b9:94:64:ef:3e:ce:66:57:b1: 56:36:a6:9c:b5:17:7a:7c:e9:c7:98:b9:80:fa:0e: af:6a:10:d7:29:14:56:f6:ec:a3:8b:7d:84:f2:46: 3c:9e:49:66:89:36:b6:e5:91:40:63:52:0f:d3:80: 7e:cf:fc:ea:3a:a3:2c:c3:56:1e:ae:8c:dd:19:24: c6:05:b3:d1:f8:c1:41:c5:dd:32:5e:53:84:68:44: 77:de:40:07:7a:8f:36:a9:ca:28:e0:cd:ef:59:35: 17:a9:18:b1:09:0e:c9:7e:58:4d:46:7f:d2:61:9b: d5:46:a1:6a:f6:2e:8d:d6:a0:ab:36:91:37:e4:b9: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:4F:3D:20:2A:2B:37:48:66:69:C5:D4:04:84:7F:E0:87:60:C6 X509v3 Authority Key Identifier: keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:80:11:de:56:fb:6d:2e:73:4d:8f:a8:63:88:37:22:37:02: 7e:6b:c1:ed:44:aa:d7:1e:22:79:c2:c9:e5:e3:f3:29:12:6e: 52:39:44:d7:36:40:bf:10:cf:24:cc:8f:f9:10:6a:2d:db:4a: a8:be:c3:72:48:ff:77:15:28:c6:fb:33:26:4f:00:a9:fb:f5: 38:f6:54:d7:bc:a3:4c:87:e3:e3:b5:54:8e:a8:63:21:0c:32: 59:08:e0:f4:0e:56:33:81:41:df:ed:d5:6c:34:47:ff:70:c8: 37:79:00:17:ff:b8:47:e2:10:b2:99:85:38:18:02:76:00:9e: 9a:ca:e0:be:ab:ec:ce:9a:78:6f:b9:cb:93:c6:e7:0a:90:94: b1:78:a6:a9:4f:6d:2f:a1:d9:b0:c4:99:1a:79:19:55:f5:45: d9:4b:c0:55:db:6f:f8:8f:d8:72:e3:39:37:16:4d:20:20:08: 7b:ee:f2:3d:01:ed:a4:9b:15:03:56:a3:64:bd:4d:53:95:f7: 9d:82:93:47:71:da:23:17:26:51:fd:84:95:09:0b:b5:77:e6: 31:42:86:b8:c0:e1:e3:1e:c6:3f:7a:0c:43:1a:41:99:91:e9: 71:3e:f5:2d:2b:cf:2b:89:97:5c:ef:da:01:81:27:52:0e:4d: 70:48:df:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvyCUPqRYucUkzo/01ORcGSrYpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5 MUQ5MTVFQjAeFw0yNTA0MjcxNzM2NDFaFw0yNTA0MzAyMzUzNDFaMDMxMTAvBgNV BAMTKDc3RDQ0RjNEMjAyQTJCMzc0ODY2NjlDNUQ0MDQ4NDdGRTA4NzYwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YTi9c7PHVuRgsYftZtk/TvKz ut9N5FaVVIEl21WYzeXQO7DBrXEt47O8wD32i6OPZwBIz50tRJrBWzrPp2zZG/NK QLVQG9SmGVTilm7EqhwUxg991FRgJfMjwy5H69XThO6PFCqU1tUeVFgTn1DmLqVO 71eSXnkEuz5F2rmUZO8+zmZXsVY2ppy1F3p86ceYuYD6Dq9qENcpFFb27KOLfYTy RjyeSWaJNrblkUBjUg/TgH7P/Oo6oyzDVh6ujN0ZJMYFs9H4wUHF3TJeU4RoRHfe QAd6jzapyijgze9ZNRepGLEJDsl+WE1Gf9Jhm9VGoWr2Lo3WoKs2kTfkue95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd9RPPSAqKzdIZmnF1ASEf+CHYMYwHwYDVR0j BBgwFoAUmaFzJWIKJDaJ4y5gdNXPypHZFeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDU5YjgyMi01YzA4LTQ2ZjEtYjI1ZS03NThkYzE4ZTk5MDUvMC85OUExNzMyNTYy MEEyNDM2ODlFMzJFNjA3NEQ1Q0ZDQTkxRDkxNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNGQ0E5MUQ5 MTVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1OWI4MjItNWMwOC00NmYxLWIy NWUtNzU4ZGMxOGU5OTA1LzAvOTlBMTczMjU2MjBBMjQzNjg5RTMyRTYwNzRENUNG Q0E5MUQ5MTVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKAEd5W+20uc02PqGOINyI3An5rwe1Eqtce InnCyeXj8ykSblI5RNc2QL8QzyTMj/kQai3bSqi+w3JI/3cVKMb7MyZPAKn79Tj2 VNe8o0yH4+O1VI6oYyEMMlkI4PQOVjOBQd/t1Ww0R/9wyDd5ABf/uEfiELKZhTgY AnYAnprK4L6r7M6aeG+5y5PG5wqQlLF4pqlPbS+h2bDEmRp5GVX1RdlLwFXbb/iP 2HLjOTcWTSAgCHvu8j0B7aSbFQNWo2S9TVOV952Ck0dx2iMXJlH9hJUJC7V35jFC hrjA4eMexj96DEMaQZmR6XE+9S0rzyuJl1zv2gGBJ1IOTXBI33A= -----END CERTIFICATE-----Generated at Sun Apr 27 19:11:47 2025 by rpki-client on console.sobornost.net