$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: MJaUUIsWTMBz+bJSydFiNLsaeokKNkygiseAHlAsSyI= Subject key identifier: 22:53:52:46:8F:02:A7:D7:C3:80:C5:5D:86:83:EC:32:0D:6C:16:72 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 1DA44F53B7BE465ED5DD372EDC955041BD77134F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02BF Signing time: Sat 28 Jun 2025 13:51:07 +0000 Manifest this update: Sat 28 Jun 2025 13:46:07 +0000 Manifest next update: Tue 01 Jul 2025 19:57:07 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: llzLzXY8l8ancBzaA7ETfLpoSSS8f6j7/X78wko6jSQ=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a4:4f:53:b7:be:46:5e:d5:dd:37:2e:dc:95:50:41:bd:77:13:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Jun 28 13:46:07 2025 GMT Not After : Jul 1 19:57:07 2025 GMT Subject: CN=225352468F02A7D7C380C55D8683EC320D6C1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:34:5c:54:01:c7:20:28:6a:5a:d5:f4:f8:a5: 7c:4e:d5:8d:8e:ce:32:c1:d9:49:bc:09:0d:ad:f5: 92:0a:5f:1b:92:be:83:57:49:3e:27:51:02:92:ca: 10:b3:e9:3a:e9:1c:8e:48:9a:bf:1c:53:3f:f8:13: 2f:01:ad:4b:f5:17:a0:70:c5:46:45:3f:8a:57:28: b8:39:3a:de:24:c8:c8:5f:07:ae:f2:20:27:58:a1: 69:70:fe:0e:b0:d2:c1:66:b3:9f:b3:f2:71:c3:9f: 03:03:94:b1:ab:c6:bd:61:6a:20:31:c3:6b:9e:72: e7:29:ed:fe:8d:29:72:04:72:0e:41:e4:16:64:d5: c4:48:68:81:6f:4c:a3:f9:22:d9:72:24:5d:2e:0c: 1a:a3:0f:90:e4:9d:00:1c:d7:00:6a:62:ee:c2:2a: 2c:0a:b6:19:60:49:d5:3a:6d:48:a5:5c:99:7d:65: 1a:2f:b2:53:cc:23:62:78:43:bf:a8:c5:7e:fb:78: 42:d1:96:e1:9e:85:75:b7:db:b6:9e:22:a0:de:02: 56:93:77:33:0c:16:b5:e2:e6:a5:31:08:2d:67:65: f8:08:85:8f:04:bf:8e:27:e2:10:eb:68:15:75:19: 05:b7:1f:6f:06:77:12:95:de:e1:5d:27:70:20:2e: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:53:52:46:8F:02:A7:D7:C3:80:C5:5D:86:83:EC:32:0D:6C:16:72 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5c:ae:1d:eb:77:27:6b:d7:f9:f3:1b:26:52:39:c8:2f:7e: d2:50:23:dc:17:42:aa:13:c7:b0:d2:6e:71:4a:12:11:a8:1b: db:e4:6d:dc:2d:52:c5:f6:cf:fb:7b:39:ab:9b:24:03:02:57: 6d:79:37:cb:e3:42:e0:de:5a:b7:89:97:d3:a5:10:5c:b0:28: 89:97:36:ac:96:55:b1:ad:de:65:54:d8:3f:eb:73:09:ff:c9: 4e:fc:db:01:d0:33:be:88:b5:77:10:39:bd:b6:07:ce:fc:2e: df:be:56:c3:62:bc:9d:92:8d:9a:4a:9b:2b:1f:77:91:98:fe: 2c:6a:cf:8a:71:b8:4f:ef:0b:bc:c4:a6:db:07:f0:83:94:79: 2f:04:01:18:4d:f8:f2:f5:50:5e:d5:65:b1:af:27:68:fc:d5: f8:d4:f7:0d:03:83:d0:3d:31:a3:72:eb:7f:d4:17:c5:33:a8: d9:0b:11:b1:26:10:e1:13:1a:f9:83:a4:80:22:74:90:e8:b3: b4:2f:0f:de:9f:77:15:49:aa:98:74:70:64:c8:80:af:cb:b3: fc:73:86:8e:ef:80:f9:25:4d:a7:bc:93:d8:fd:72:46:24:0c: 35:e5:c5:f8:a7:1c:02:e1:de:31:32:fd:a7:d1:f2:04:3f:d4: 45:5c:2e:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaRPU7e+Rl7V3Tcu3JVQQb13E08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA2MjgxMzQ2MDdaFw0yNTA3MDExOTU3MDdaMDMxMTAvBgNV BAMTKDIyNTM1MjQ2OEYwMkE3RDdDMzgwQzU1RDg2ODNFQzMyMEQ2QzE2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0NFxUAccgKGpa1fT4pXxO1Y2O zjLB2Um8CQ2t9ZIKXxuSvoNXST4nUQKSyhCz6TrpHI5Imr8cUz/4Ey8BrUv1F6Bw xUZFP4pXKLg5Ot4kyMhfB67yICdYoWlw/g6w0sFms5+z8nHDnwMDlLGrxr1haiAx w2uecucp7f6NKXIEcg5B5BZk1cRIaIFvTKP5ItlyJF0uDBqjD5DknQAc1wBqYu7C KiwKthlgSdU6bUilXJl9ZRovslPMI2J4Q7+oxX77eELRluGehXW327aeIqDeAlaT dzMMFrXi5qUxCC1nZfgIhY8Ev44n4hDraBV1GQW3H28GdxKV3uFdJ3AgLp6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlNSRo8Cp9fDgMVdhoPsMg1sFnIwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdcrh3rdydr1/nzGyZSOcgvftJQI9wXQqoT x7DSbnFKEhGoG9vkbdwtUsX2z/t7OaubJAMCV215N8vjQuDeWreJl9OlEFywKImX NqyWVbGt3mVU2D/rcwn/yU782wHQM76ItXcQOb22B878Lt++VsNivJ2SjZpKmysf d5GY/ixqz4pxuE/vC7zEptsH8IOUeS8EARhN+PL1UF7VZbGvJ2j81fjU9w0Dg9A9 MaNy63/UF8UzqNkLEbEmEOETGvmDpIAidJDos7QvD96fdxVJqph0cGTIgK/Ls/xz ho7vgPklTae8k9j9ckYkDDXlxfinHALh3jEy/afR8gQ/1EVcLhA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:22:07 2025 by rpki-client