$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: SMnya8Iz5T7Rg5m80cr9+KbR2Vkp0elTdVExgsZSvEo= Subject key identifier: 70:F5:5F:EE:78:D1:82:43:09:C0:6E:6F:E5:EA:76:FC:F2:77:E0:44 Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 7EAF8E998EA5CE5127E4463F2EAAAD708F828711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 0488 Signing time: Fri 27 Jun 2025 10:10:33 +0000 Manifest this update: Fri 27 Jun 2025 10:05:33 +0000 Manifest next update: Mon 30 Jun 2025 21:32:33 +0000 Files and hashes: 1: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: +/Jmvsa2K/AMonkj/zZZ+FVKgboZN0alCdHie0IYCgw=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: XBcMKvqKnHxV1D5bbi11pDPW6SLy98RnzJVn5qbJXc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:af:8e:99:8e:a5:ce:51:27:e4:46:3f:2e:aa:ad:70:8f:82:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Jun 27 10:05:33 2025 GMT Not After : Jun 30 21:32:33 2025 GMT Subject: CN=70F55FEE78D1824309C06E6FE5EA76FCF277E044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:3e:45:d1:95:37:be:9e:ac:e9:a1:72:0e: 8f:37:45:af:40:dc:5e:84:15:87:27:74:9e:90:63: 5f:21:f9:bc:3a:6b:3c:dc:87:97:d5:e3:48:ea:cb: 48:de:22:7f:18:36:bf:ad:53:cd:59:91:1a:0b:b4: 42:d5:c3:e7:99:11:b6:60:b2:39:5e:b4:3e:dd:e9: 70:75:67:64:f5:5b:fa:d5:6b:f8:5d:eb:75:29:39: 3a:f6:c6:8c:4e:d7:b1:c0:e1:b7:ec:62:fe:41:53: a2:c6:a3:8a:ab:5e:52:ea:6f:41:68:c6:f0:41:03: 54:80:72:88:06:ac:79:17:49:75:61:f8:6f:7c:96: b1:ce:d2:87:0d:3d:99:31:2d:e3:3e:9f:f1:65:dd: 73:6a:4b:b8:79:72:05:6e:96:e8:9e:e9:82:b0:f4: a1:8f:10:5f:7d:86:e5:e8:04:33:b3:ae:47:17:89: 45:43:a4:f4:6a:6a:3c:ec:87:95:5a:bb:a5:74:0e: be:51:f2:0d:34:e8:35:ae:18:0b:7d:ce:1f:43:85: 5b:e0:c7:bf:ef:ce:c8:0d:25:0b:81:04:3f:61:de: 7c:31:6a:64:e1:13:d6:f6:ab:b0:f6:a0:f0:0b:5a: a0:38:ba:ea:30:4a:87:e4:aa:20:6b:88:8e:4f:5a: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:5F:EE:78:D1:82:43:09:C0:6E:6F:E5:EA:76:FC:F2:77:E0:44 X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e2:61:93:e3:cb:6c:ac:78:78:c2:d8:3d:80:81:b5:34:41: 30:1f:d2:0b:81:a1:b2:d8:a5:71:e3:6d:6c:4e:d7:09:8f:98: f7:7c:b6:38:ea:c5:4a:aa:77:62:7c:30:06:6c:3e:6e:44:f3: db:e7:46:f9:db:7d:a7:e7:27:7f:93:16:3c:36:17:7e:cc:76: 4e:75:6f:3d:e1:64:6e:34:97:fe:63:ee:f5:d3:f8:94:60:0e: 88:69:a2:a0:cf:a4:eb:2c:1b:33:7e:11:8f:64:ae:3d:84:4c: 91:31:d3:bd:08:11:27:39:3a:b0:44:73:04:e9:13:b2:e6:eb: 7e:6d:a9:0b:d0:1b:1e:7d:88:01:6e:86:bb:b6:4d:ed:e4:77: 0f:34:bf:eb:1a:6a:29:24:85:8e:e1:17:be:48:48:ce:2d:a8: 86:78:ed:56:47:cb:7f:77:a9:4b:0b:e1:67:22:2c:5b:92:7f: 85:48:f0:91:9e:03:f8:77:3c:07:32:78:50:b4:ba:78:71:df: 55:cd:58:59:b3:19:81:dc:95:99:15:95:ad:b1:a7:5c:ea:72: d2:e7:4c:b5:74:fc:97:db:7c:59:09:38:2b:db:2a:3f:c4:b3: f5:a8:57:16:ce:25:8e:99:3f:c9:50:ae:13:8f:ac:00:10:79: 18:17:8c:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfq+OmY6lzlEn5EY/LqqtcI+ChxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNTA2MjcxMDA1MzNaFw0yNTA2MzAyMTMyMzNaMDMxMTAvBgNV BAMTKDcwRjU1RkVFNzhEMTgyNDMwOUMwNkU2RkU1RUE3NkZDRjI3N0UwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpj5F0ZU3vp6s6aFyDo83Ra9A 3F6EFYcndJ6QY18h+bw6azzch5fV40jqy0jeIn8YNr+tU81ZkRoLtELVw+eZEbZg sjletD7d6XB1Z2T1W/rVa/hd63UpOTr2xoxO17HA4bfsYv5BU6LGo4qrXlLqb0Fo xvBBA1SAcogGrHkXSXVh+G98lrHO0ocNPZkxLeM+n/Fl3XNqS7h5cgVuluie6YKw 9KGPEF99huXoBDOzrkcXiUVDpPRqajzsh5Vau6V0Dr5R8g006DWuGAt9zh9DhVvg x7/vzsgNJQuBBD9h3nwxamThE9b2q7D2oPALWqA4uuowSofkqiBriI5PWiPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPVf7njRgkMJwG5v5ep2/PJ34EQwHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfiYZPjy2yseHjC2D2AgbU0QTAf0guBobLY pXHjbWxO1wmPmPd8tjjqxUqqd2J8MAZsPm5E89vnRvnbfafnJ3+TFjw2F37Mdk51 bz3hZG40l/5j7vXT+JRgDohpoqDPpOssGzN+EY9krj2ETJEx070IESc5OrBEcwTp E7Lm635tqQvQGx59iAFuhru2Te3kdw80v+saaikkhY7hF75ISM4tqIZ47VZHy393 qUsL4WciLFuSf4VI8JGeA/h3PAcyeFC0unhx31XNWFmzGYHclZkVla2xp1zqctLn TLV0/JfbfFkJOCvbKj/Es/WoVxbOJY6ZP8lQrhOPrAAQeRgXjAA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:49 2025 by rpki-client