$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: pMAk8fyjnS3iIKpKc/5sqhF7cuyScOscMSHdUuVQcTU= Subject key identifier: B5:A9:F2:B9:50:F7:BB:5A:ED:73:BD:8D:12:05:3D:D4:84:36:A7:0E Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 0D5560CA2BE6787180900ED0F18FFB72548F6CA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 74 Signing time: Tue 01 Jul 2025 16:30:05 +0000 Manifest this update: Tue 01 Jul 2025 16:25:05 +0000 Manifest next update: Fri 04 Jul 2025 19:51:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 4: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: qxUwQWZrnSHcbHNTzL12kWJGegqXHCADeRelRUnjvHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:55:60:ca:2b:e6:78:71:80:90:0e:d0:f1:8f:fb:72:54:8f:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Jul 1 16:25:05 2025 GMT Not After : Jul 4 19:51:05 2025 GMT Subject: CN=B5A9F2B950F7BB5AED73BD8D12053DD48436A70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:3a:3a:7e:80:8f:e6:82:75:17:e7:00:16: f5:c4:81:90:9a:92:7a:fe:e6:04:b4:e5:b2:4a:ec: 3a:5b:a1:c2:4c:a7:2d:b6:a1:db:c1:24:3d:7a:6f: 23:67:18:65:93:c4:20:90:11:30:1a:b9:b3:1a:07: d1:1a:64:62:ce:1f:64:ac:11:41:66:c3:b7:66:47: b5:74:b2:3c:29:b8:13:84:16:91:2a:82:30:cb:82: 59:11:74:1d:4e:d9:5d:3c:08:ed:b8:96:7e:f2:c0: 5b:95:03:8a:27:fd:3a:6a:02:b1:d9:90:05:33:85: f1:85:f3:f8:c0:76:86:29:31:48:5f:0e:76:cd:94: 3c:56:c5:b8:2e:d4:66:b5:06:7e:89:ff:c8:98:35: 76:34:21:d9:82:49:5f:30:ef:96:34:7f:5b:a6:e1: fc:cd:29:29:c0:42:64:3c:e2:5c:e3:da:9f:eb:ae: db:99:72:b1:d9:82:3a:38:7f:d0:61:c7:77:da:a7: df:39:e0:56:12:23:50:fc:59:44:b8:6f:1e:7d:74: a0:d0:50:99:2e:b4:57:7e:96:da:e6:06:be:06:5f: 1b:d7:88:de:18:7a:a6:72:a1:e3:4e:6f:59:bc:53: 1a:55:1b:8a:c7:a1:76:96:78:d3:2a:11:b6:f6:fa: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A9:F2:B9:50:F7:BB:5A:ED:73:BD:8D:12:05:3D:D4:84:36:A7:0E X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:33:6b:4c:26:a7:78:66:31:d2:34:a7:eb:2c:67:8c:c2:7a: 3c:c5:eb:32:9c:d7:3d:58:75:df:6b:07:69:b0:46:f5:78:34: 2d:89:2c:0d:ad:86:3f:cf:87:e9:b6:ce:d1:78:3c:5b:bd:e8: e9:b6:51:21:8c:c8:d6:73:e3:a6:6b:47:f5:c1:8e:02:83:f4: ef:34:db:b6:39:ff:5d:0f:5c:e4:5e:70:63:02:d3:ff:b9:80: 25:cd:d8:3a:7a:64:cf:c7:26:1e:b1:41:81:c0:8b:04:cd:8b: be:0f:df:ed:ab:53:2c:e8:af:32:28:fd:ae:32:30:61:18:cf: f1:65:ff:cd:c0:dc:0a:d2:ef:4e:2d:63:4f:dc:11:1f:d5:56: db:4b:7c:d5:df:47:4c:c7:14:02:2f:7f:a8:9c:6b:0e:0b:96: 3d:49:41:01:85:96:11:29:b7:f2:d8:fc:95:a6:ef:95:dd:40: 2f:d3:49:e6:f1:b7:c2:71:64:78:75:51:c6:2f:ff:58:bb:e0: 7c:79:aa:b9:47:f2:ab:d3:b5:57:be:c3:17:44:e0:96:6d:2b: a2:b7:c7:4f:c0:a0:36:da:e5:c2:b2:a9:ac:8b:74:01:56:47: d1:a7:f6:26:13:eb:05:bf:a4:fd:85:5f:0e:c4:d4:ba:3b:c9: 74:e6:03:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVVgyivmeHGAkA7Q8Y/7clSPbKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA3MDExNjI1MDVaFw0yNTA3MDQxOTUxMDVaMDMxMTAvBgNV BAMTKEI1QTlGMkI5NTBGN0JCNUFFRDczQkQ4RDEyMDUzREQ0ODQzNkE3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/zo6foCP5oJ1F+cAFvXEgZCa knr+5gS05bJK7DpbocJMpy22odvBJD16byNnGGWTxCCQETAaubMaB9EaZGLOH2Ss EUFmw7dmR7V0sjwpuBOEFpEqgjDLglkRdB1O2V08CO24ln7ywFuVA4on/TpqArHZ kAUzhfGF8/jAdoYpMUhfDnbNlDxWxbgu1Ga1Bn6J/8iYNXY0IdmCSV8w75Y0f1um 4fzNKSnAQmQ84lzj2p/rrtuZcrHZgjo4f9Bhx3fap9854FYSI1D8WUS4bx59dKDQ UJkutFd+ltrmBr4GXxvXiN4YeqZyoeNOb1m8UxpVG4rHoXaWeNMqEbb2+lAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtanyuVD3u1rtc72NEgU91IQ2pw4wHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEza0wmp3hmMdI0p+ssZ4zCejzF6zKc1z1Y dd9rB2mwRvV4NC2JLA2thj/Ph+m2ztF4PFu96Om2USGMyNZz46ZrR/XBjgKD9O80 27Y5/10PXORecGMC0/+5gCXN2Dp6ZM/HJh6xQYHAiwTNi74P3+2rUyzorzIo/a4y MGEYz/Fl/83A3ArS704tY0/cER/VVttLfNXfR0zHFAIvf6icaw4Llj1JQQGFlhEp t/LY/JWm75XdQC/TSebxt8JxZHh1UcYv/1i74Hx5qrlH8qvTtVe+wxdE4JZtK6K3 x0/AoDba5cKyqayLdAFWR9Gn9iYT6wW/pP2FXw7E1Lo7yXTmA5A= -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:09 2025 by rpki-client