$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: D6RU/UaXf4q0kheejRPJPjYCqWLsHgRkoD4oYZBg5Cs= Subject key identifier: 3B:27:3A:93:2D:F9:9A:B6:60:AD:AA:EC:87:32:F3:6A:3E:0E:1F:07 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 2E257CC99A70DB2F4FE1BD8E5398A9BB961E5502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01F4 Signing time: Sat 28 Jun 2025 23:22:18 +0000 Manifest this update: Sat 28 Jun 2025 23:17:18 +0000 Manifest next update: Wed 02 Jul 2025 10:38:18 +0000 Files and hashes: 1: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: b/ne6Izo4Vx7gW24uVQ8jrbM00osxv5q3rqEGSxcwuE=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:7c:c9:9a:70:db:2f:4f:e1:bd:8e:53:98:a9:bb:96:1e:55:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Jun 28 23:17:18 2025 GMT Not After : Jul 2 10:38:18 2025 GMT Subject: CN=3B273A932DF99AB660ADAAEC8732F36A3E0E1F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:7c:d9:6f:c3:ee:2b:e4:04:53:3e:2b:cc: d9:91:c9:dc:37:74:a0:d7:57:57:af:69:a5:cd:99: f9:1c:f7:75:82:41:93:f6:79:e6:98:b0:e3:96:df: e4:b3:ed:00:84:75:89:52:8d:f8:5c:13:c2:39:f2: ba:74:ef:fc:09:69:08:66:2c:4b:c1:95:fe:f1:87: c5:04:dc:4e:15:46:be:5a:18:51:c9:0f:90:b3:0d: cb:9e:68:83:6a:02:84:75:c1:b3:6c:25:80:c3:20: eb:cd:d1:51:b9:d6:81:cd:a5:3e:12:4f:10:7a:8a: ed:04:04:9b:6a:88:82:22:99:54:9e:79:13:86:c4: 0e:ba:41:f0:64:bc:f1:2b:35:ae:53:b3:a6:67:32: 49:0d:fb:db:c5:cf:1c:b4:a1:48:73:56:ed:f7:e1: 8b:2b:45:1b:dd:5f:54:01:b6:7e:b1:50:96:4f:78: d8:85:92:b3:40:eb:af:6f:88:e6:ee:12:c6:ba:ee: aa:ad:25:7b:9d:05:10:7a:c3:5c:57:5d:d0:e5:f3: c3:82:f5:36:7c:9e:ef:67:33:63:aa:ea:c0:81:aa: 50:be:dc:a7:b2:05:3b:63:70:6f:e3:bf:88:5d:a4: 5c:3b:d8:1e:df:b4:9e:62:81:ee:57:80:5a:48:19: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:3A:93:2D:F9:9A:B6:60:AD:AA:EC:87:32:F3:6A:3E:0E:1F:07 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:00:7c:3b:04:c7:03:0e:82:1b:db:cd:5d:36:d2:e0:85:9d: e9:8d:01:1a:9f:aa:70:7c:20:f4:db:da:3e:69:ab:1f:ae:55: 75:20:5b:40:8b:a5:d1:d0:fe:5d:54:ef:94:f3:2d:78:dd:7f: e7:90:74:22:c3:a4:35:1c:f7:66:e4:4a:41:e7:95:95:21:7d: fb:db:79:53:c0:29:93:91:8b:b0:87:3d:39:ba:4b:7e:07:49: e8:44:9d:ca:cd:c9:5a:4c:cc:33:5a:68:35:1e:6e:69:b5:78: bb:ce:99:0a:26:1d:53:16:2c:80:e1:26:06:a6:a4:ba:a3:79: 63:b8:5f:a5:ad:07:d2:c9:33:32:25:e5:4e:af:fa:08:81:4e: a9:78:25:ca:f9:62:30:0b:3f:53:10:1b:a3:24:b5:77:8b:34: 53:c6:00:57:6d:65:46:3e:dd:2d:48:06:24:84:46:d0:ae:04: 69:80:a9:79:04:e1:09:17:69:9f:f1:9e:84:2d:00:42:87:b3: e6:b7:6b:a0:4e:9b:ae:29:4d:fe:11:31:96:af:2d:d4:c9:9d: ec:a9:f9:fd:11:88:40:78:5f:04:37:e8:b4:cd:02:f6:e8:75: c0:66:00:2d:69:93:7d:71:ae:e2:88:83:3c:15:3d:58:ea:6a: eb:77:8a:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiV8yZpw2y9P4b2OU5ipu5YeVQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA2MjgyMzE3MThaFw0yNTA3MDIxMDM4MThaMDMxMTAvBgNV BAMTKDNCMjczQTkzMkRGOTlBQjY2MEFEQUFFQzg3MzJGMzZBM0UwRTFGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTE3zZb8PuK+QEUz4rzNmRydw3 dKDXV1evaaXNmfkc93WCQZP2eeaYsOOW3+Sz7QCEdYlSjfhcE8I58rp07/wJaQhm LEvBlf7xh8UE3E4VRr5aGFHJD5CzDcueaINqAoR1wbNsJYDDIOvN0VG51oHNpT4S TxB6iu0EBJtqiIIimVSeeROGxA66QfBkvPErNa5Ts6ZnMkkN+9vFzxy0oUhzVu33 4YsrRRvdX1QBtn6xUJZPeNiFkrNA669viObuEsa67qqtJXudBRB6w1xXXdDl88OC 9TZ8nu9nM2Oq6sCBqlC+3KeyBTtjcG/jv4hdpFw72B7ftJ5ige5XgFpIGV/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyc6ky35mrZgrarshzLzaj4OHwcwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcAfDsExwMOghvbzV020uCFnemNARqfqnB8 IPTb2j5pqx+uVXUgW0CLpdHQ/l1U75TzLXjdf+eQdCLDpDUc92bkSkHnlZUhffvb eVPAKZORi7CHPTm6S34HSehEncrNyVpMzDNaaDUebmm1eLvOmQomHVMWLIDhJgam pLqjeWO4X6WtB9LJMzIl5U6v+giBTql4Jcr5YjALP1MQG6MktXeLNFPGAFdtZUY+ 3S1IBiSERtCuBGmAqXkE4QkXaZ/xnoQtAEKHs+a3a6BOm64pTf4RMZavLdTJneyp +f0RiEB4XwQ36LTNAvbodcBmAC1pk31xruKIgzwVPVjqaut3ivc= -----END CERTIFICATE-----Generated at Sun Jun 29 22:19:12 2025 by rpki-client