$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: myXTybKOj+f+5sMKcA1kCiY+iP3630yILjgsFoi7yLw= Subject key identifier: 7B:B7:F3:4C:2C:EC:F8:66:FB:1D:99:BD:32:AE:04:FA:7C:49:AD:F8 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 2CD35E1E9DA5958222EED57358F1B038EBB8CDAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 02ED Signing time: Sun 29 Jun 2025 12:41:39 +0000 Manifest this update: Sun 29 Jun 2025 12:36:39 +0000 Manifest next update: Wed 02 Jul 2025 18:02:39 +0000 Files and hashes: 1: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: e4rhED5ZMKmdqbmLcJ+D6ZALa20SzA3DB0ujjhdi45c=) 2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 3: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 4: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d3:5e:1e:9d:a5:95:82:22:ee:d5:73:58:f1:b0:38:eb:b8:cd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Jun 29 12:36:39 2025 GMT Not After : Jul 2 18:02:39 2025 GMT Subject: CN=7BB7F34C2CECF866FB1D99BD32AE04FA7C49ADF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:e4:f2:02:73:11:cf:9d:d7:b2:75:8b:e1: d9:e3:47:99:3b:82:51:d9:4a:83:12:b8:41:20:51: 55:2c:6a:5c:2f:85:28:70:22:a5:ab:a0:a4:fc:5f: 53:dc:b5:8d:af:f4:f4:ba:0f:d3:44:78:ba:e1:6d: 66:3f:69:43:ea:60:5d:82:e0:76:b4:34:36:a1:ad: ea:5b:fa:b6:fe:20:2d:2d:5f:1d:9c:64:de:91:b3: 9f:7b:a1:2b:d5:4f:46:08:44:3d:64:21:2a:eb:19: 99:0c:55:8e:e8:8e:ae:d0:c6:e0:28:62:b6:e1:ad: 7a:b1:86:96:e4:c7:f6:b1:39:a6:5a:56:09:22:80: cf:3e:40:d1:0d:d0:13:f7:7a:4a:59:d5:ff:60:4d: 69:08:86:36:17:e2:83:70:8d:3e:0b:34:50:33:2c: b2:58:3b:74:ff:c4:20:c8:95:6e:bb:6c:fa:67:ae: 79:61:49:fb:d6:81:10:39:fc:f2:d0:d9:92:d3:c5: 2d:8b:ea:9b:9a:21:a5:db:7b:ea:cc:3e:4a:9d:99: b9:bd:bf:fe:94:39:7f:dc:ff:5f:ce:b8:a7:75:3e: 79:b4:18:7c:c1:6d:b9:bf:f7:fb:a6:f1:ac:e6:14: 94:ba:51:8b:2f:21:6c:40:7c:f9:07:15:76:ca:9a: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B7:F3:4C:2C:EC:F8:66:FB:1D:99:BD:32:AE:04:FA:7C:49:AD:F8 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:97:62:1b:40:d2:50:30:5b:94:42:ee:9b:66:3f:95:75: 89:e2:e7:41:04:06:9c:c1:a6:5e:ae:d4:12:3b:cf:5b:1b:71: fe:00:c0:05:1d:4d:72:b4:c6:de:a2:13:70:d0:c0:d1:39:8a: 49:03:42:00:db:c0:14:1b:bd:6c:d6:74:aa:80:7e:a5:9c:76: d8:5b:99:51:8d:4c:76:e1:45:34:ec:0e:e9:2c:41:bb:d1:ca: 6d:9a:9f:48:aa:20:69:c9:a3:8d:66:73:9b:06:2e:33:6e:e7: 84:0f:72:bf:ab:7f:56:47:aa:17:cb:92:49:78:47:18:f1:a2: c8:aa:55:62:ce:c9:2f:f1:0d:8d:6c:4f:e5:d9:a6:03:11:30: 9d:8e:e9:92:c0:c3:5e:1f:26:c8:a9:52:30:b5:49:f7:54:02: 03:71:08:10:73:f8:31:37:35:30:9a:2c:eb:2c:6f:69:2a:6b: db:12:8f:13:d5:77:7b:07:0d:fb:b4:23:62:6b:8c:0f:86:56: a7:89:ce:99:a0:e3:88:2f:18:de:f9:a3:1a:b8:1e:d8:3f:62: 54:46:bf:42:c5:de:e3:fb:da:73:ad:69:91:d5:fd:2e:88:54: 48:87:2d:18:2d:9c:f6:ed:c3:40:6a:3b:a1:60:04:79:3e:4d: 83:66:8d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNNeHp2llYIi7tVzWPGwOOu4zaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTA2MjkxMjM2MzlaFw0yNTA3MDIxODAyMzlaMDMxMTAvBgNV BAMTKDdCQjdGMzRDMkNFQ0Y4NjZGQjFEOTlCRDMyQUUwNEZBN0M0OUFERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEuTyAnMRz53XsnWL4dnjR5k7 glHZSoMSuEEgUVUsalwvhShwIqWroKT8X1PctY2v9PS6D9NEeLrhbWY/aUPqYF2C 4Ha0NDahrepb+rb+IC0tXx2cZN6Rs597oSvVT0YIRD1kISrrGZkMVY7ojq7QxuAo YrbhrXqxhpbkx/axOaZaVgkigM8+QNEN0BP3ekpZ1f9gTWkIhjYX4oNwjT4LNFAz LLJYO3T/xCDIlW67bPpnrnlhSfvWgRA5/PLQ2ZLTxS2L6puaIaXbe+rMPkqdmbm9 v/6UOX/c/1/OuKd1Pnm0GHzBbbm/9/um8azmFJS6UYsvIWxAfPkHFXbKmgL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7fzTCzs+Gb7HZm9Mq4E+nxJrfgwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu1l2IbQNJQMFuUQu6bZj+VdYni50EEBpzB pl6u1BI7z1sbcf4AwAUdTXK0xt6iE3DQwNE5ikkDQgDbwBQbvWzWdKqAfqWcdthb mVGNTHbhRTTsDuksQbvRym2an0iqIGnJo41mc5sGLjNu54QPcr+rf1ZHqhfLkkl4 RxjxosiqVWLOyS/xDY1sT+XZpgMRMJ2O6ZLAw14fJsipUjC1SfdUAgNxCBBz+DE3 NTCaLOssb2kqa9sSjxPVd3sHDfu0I2JrjA+GVqeJzpmg44gvGN75oxq4Htg/YlRG v0LF3uP72nOtaZHV/S6IVEiHLRgtnPbtw0BqO6FgBHk+TYNmjRE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:35:56 2025 by rpki-client