$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: 5pfvtxXJjYzOnVL1uwG8uHknZj1Yi77X4BzVHKj0Kyc= Subject key identifier: 41:F9:64:2A:15:21:79:30:41:A1:0F:A8:94:EC:D0:8D:77:37:FF:E6 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 44C26AC15CD69ADB847235CFCAF973A8A38A267C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: AC Signing time: Tue 01 Jul 2025 17:21:24 +0000 Manifest this update: Tue 01 Jul 2025 17:16:24 +0000 Manifest next update: Fri 04 Jul 2025 20:54:24 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 73+EbQxq0P96V0HNeOVIZtCOxVIjROjBGYNHrHVcPxo=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c2:6a:c1:5c:d6:9a:db:84:72:35:cf:ca:f9:73:a8:a3:8a:26:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Jul 1 17:16:24 2025 GMT Not After : Jul 4 20:54:24 2025 GMT Subject: CN=41F9642A1521793041A10FA894ECD08D7737FFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:95:c5:84:e7:0e:8c:ec:bd:2e:eb:56:bd: a6:35:31:7c:b3:f5:34:8b:5d:62:94:b6:d4:c1:0d: ac:85:d4:8d:a0:9a:ea:3e:ce:d1:99:3f:bc:90:54: 72:8d:d3:5d:37:9f:20:e2:7d:5e:48:08:e0:c3:9a: 0a:d6:2c:1a:df:ea:30:10:e9:19:6a:79:08:df:af: 9d:81:6a:a7:0c:28:a6:03:cf:1d:db:ed:b3:07:3e: 60:94:4f:08:3b:82:8b:3b:47:6c:1b:b0:a0:51:4f: ef:2d:e9:32:9c:27:7e:19:82:10:3a:b7:88:c8:e8: 16:ae:7e:9c:82:14:ba:42:71:0e:57:40:e4:bc:b8: c4:4e:93:af:71:d3:a0:1f:a7:01:da:4f:ef:53:50: 89:dd:52:1f:cd:32:1b:c7:7b:84:74:9d:19:a3:1b: 77:a6:c5:40:b4:1c:16:62:6b:c2:06:03:70:c9:01: 3e:0f:b5:cb:b2:82:7e:6e:e2:de:e9:f2:c9:46:49: bd:c7:26:36:e5:3f:3f:91:98:1c:52:40:39:16:48: 0e:8c:95:b5:0c:e6:46:58:0b:b8:e2:42:15:81:80: 08:7e:f6:61:ca:83:e4:bd:63:5e:da:63:2c:57:3b: 80:8d:7f:4d:9c:1a:14:e1:29:73:6f:e7:77:be:9a: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:64:2A:15:21:79:30:41:A1:0F:A8:94:EC:D0:8D:77:37:FF:E6 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:24:83:c8:b3:27:25:a8:0c:12:d8:37:e9:8e:d9:f3:75:a9: 9d:8f:32:68:16:14:6e:49:c7:d8:8e:8d:b3:a6:fe:cd:bb:77: 7c:fc:f7:42:f1:65:9c:aa:37:00:ab:86:ac:9e:fe:da:f5:85: df:3a:63:e2:2e:c5:19:0b:71:46:08:58:4a:95:db:6c:33:6f: f7:50:05:c0:1d:b0:e2:f2:f4:ed:d0:4a:b0:71:af:29:e4:24: c5:60:19:2a:30:66:8a:62:47:b0:25:2f:e3:1f:d6:82:7a:55: 46:2b:cb:ea:af:85:34:23:46:fd:f7:61:f6:bf:29:6d:3b:a7: d1:ac:34:56:34:a4:ac:cd:d9:b4:b5:c8:a9:b3:bd:7f:ad:51: 1a:d0:1c:e6:f0:97:c2:ff:f0:f3:3f:39:d6:ae:4b:12:7a:2a: 76:3d:21:44:ba:5e:32:b6:ed:93:da:bc:5a:81:1b:c2:88:2b: f3:cf:a4:50:00:ab:ef:16:00:8c:65:be:90:ae:fe:66:04:53: 41:3b:9e:f3:76:38:85:13:1a:15:18:d6:1f:2a:54:0f:06:e3: ec:2d:f8:cb:09:e8:6d:50:ca:a8:1e:92:31:96:a7:37:aa:f4: a6:04:a7:cb:6c:f1:a6:b0:4e:f7:5c:9f:7e:a9:66:28:71:b5: de:1a:fc:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMJqwVzWmtuEcjXPyvlzqKOKJnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA3MDExNzE2MjRaFw0yNTA3MDQyMDU0MjRaMDMxMTAvBgNV BAMTKDQxRjk2NDJBMTUyMTc5MzA0MUExMEZBODk0RUNEMDhENzczN0ZGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkZXFhOcOjOy9LutWvaY1MXyz 9TSLXWKUttTBDayF1I2gmuo+ztGZP7yQVHKN0103nyDifV5ICODDmgrWLBrf6jAQ 6RlqeQjfr52BaqcMKKYDzx3b7bMHPmCUTwg7gos7R2wbsKBRT+8t6TKcJ34ZghA6 t4jI6BaufpyCFLpCcQ5XQOS8uMROk69x06AfpwHaT+9TUIndUh/NMhvHe4R0nRmj G3emxUC0HBZia8IGA3DJAT4Ptcuygn5u4t7p8slGSb3HJjblPz+RmBxSQDkWSA6M lbUM5kZYC7jiQhWBgAh+9mHKg+S9Y17aYyxXO4CNf02cGhThKXNv53e+mjpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQflkKhUheTBBoQ+olOzQjXc3/+YwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkkg8izJyWoDBLYN+mO2fN1qZ2PMmgWFG5J x9iOjbOm/s27d3z890LxZZyqNwCrhqye/tr1hd86Y+IuxRkLcUYIWEqV22wzb/dQ BcAdsOLy9O3QSrBxrynkJMVgGSowZopiR7AlL+Mf1oJ6VUYry+qvhTQjRv33Yfa/ KW07p9GsNFY0pKzN2bS1yKmzvX+tURrQHObwl8L/8PM/OdauSxJ6KnY9IUS6XjK2 7ZPavFqBG8KIK/PPpFAAq+8WAIxlvpCu/mYEU0E7nvN2OIUTGhUY1h8qVA8G4+wt +MsJ6G1QyqgekjGWpzeq9KYEp8ts8aawTvdcn36pZihxtd4a/NM= -----END CERTIFICATE-----Generated at Thu Jul 3 17:05:43 2025 by rpki-client