$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: bE+KhTrlM0pvrnry0TNL1HRtw42EWcVraOD5A7LguUM= Subject key identifier: 66:A5:A6:5A:92:F5:76:8F:C4:C5:B5:09:A7:BD:AA:04:15:28:32:2A Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 162AA5361EEA0755744CD84285D701970CA0BCF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: A5 Signing time: Sun 29 Jun 2025 03:12:08 +0000 Manifest this update: Sun 29 Jun 2025 03:07:08 +0000 Manifest next update: Wed 02 Jul 2025 09:08:08 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: 4ofoXRlrJFueHmDjQJaM6jFgS98Cf4BAjPSYUZoqlvo=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2a:a5:36:1e:ea:07:55:74:4c:d8:42:85:d7:01:97:0c:a0:bc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Jun 29 03:07:08 2025 GMT Not After : Jul 2 09:08:08 2025 GMT Subject: CN=66A5A65A92F5768FC4C5B509A7BDAA041528322A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:69:fe:b6:6b:d5:7e:39:a0:0e:3a:b7:ab: 1b:cc:9a:8b:2c:dc:97:af:7c:c5:77:95:e5:d2:a7: d0:f9:c7:d5:3a:1a:03:d2:47:16:2d:6e:ae:7b:0b: 29:3b:a9:2f:b8:80:c9:4a:fd:33:d8:47:5a:79:00: f2:f0:0e:ed:08:99:b6:d6:c1:3b:97:12:fd:a1:ea: ce:7f:d7:ae:bb:cb:c1:2c:fb:68:31:b5:c8:53:44: 21:b7:54:92:4d:72:2d:f0:1e:a4:5e:32:c1:3e:95: d2:3a:af:8e:c6:79:ca:8a:67:a5:3e:2e:a3:e1:2e: 8a:04:4a:ac:38:04:08:b3:fd:8f:ed:ea:c4:fb:f4: 2b:e4:f4:03:77:38:42:61:4d:da:49:79:67:28:fd: d4:41:9e:d4:b0:b8:58:03:dd:25:ac:52:e3:d7:2f: 16:19:1d:1a:a0:4b:d3:43:30:07:c6:24:7f:d6:16: 82:5e:1e:7b:a5:9f:25:e4:a6:44:55:a3:03:96:b1: dc:20:4d:24:92:17:89:e0:19:71:ff:c3:0d:5a:6e: 23:40:87:02:65:1d:71:ee:59:41:60:d7:08:ad:ad: ff:6d:27:ac:27:38:a8:75:1d:24:e3:4f:92:1d:98: 2a:8d:8d:c8:68:cf:fb:df:12:0d:5b:13:6f:e1:18: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A5:A6:5A:92:F5:76:8F:C4:C5:B5:09:A7:BD:AA:04:15:28:32:2A X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:e3:97:3a:0d:ba:ca:34:18:fa:0d:be:e1:53:2b:fd:d3: ec:3f:16:22:4e:6b:53:7e:c1:36:ff:ea:cf:53:28:1f:49:c5: 2b:81:fd:d5:9e:76:7f:1d:72:6c:a1:fd:ba:b7:73:15:88:f0: e5:1d:74:14:05:f6:de:05:db:22:e1:04:94:7b:8c:d0:af:35: 1c:f3:53:7e:fd:e2:10:4d:96:68:92:3a:7b:36:2c:0c:21:d7: be:64:b6:09:80:ad:99:ef:ba:a8:a6:44:04:e6:9b:49:f3:82: ad:1a:ff:ed:b6:d3:05:26:e5:09:c4:1e:2c:d4:3e:27:fa:11: 37:54:7f:45:3b:49:c2:b4:4b:ad:36:9b:a7:21:cb:4c:70:b5: 7a:42:09:72:9c:e1:e4:b1:3f:b8:05:48:b7:7a:e5:f1:4e:11: f1:93:54:40:3e:13:29:10:eb:05:94:1d:29:b1:fb:fb:fc:2d: be:18:88:d2:cb:be:02:7d:60:b2:be:be:f7:a4:dc:40:93:b7: d9:6a:3c:81:16:06:d0:bb:83:84:a7:c7:98:50:f1:a3:4f:60: 71:ec:ba:7f:fa:87:df:c5:83:3b:b2:0d:a9:79:3e:ba:8b:28: 36:f2:2a:51:3c:99:f8:2a:2d:5e:09:09:93:ee:65:f6:5b:b2: f4:78:9d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiqlNh7qB1V0TNhChdcBlwygvPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA2MjkwMzA3MDhaFw0yNTA3MDIwOTA4MDhaMDMxMTAvBgNV BAMTKDY2QTVBNjVBOTJGNTc2OEZDNEM1QjUwOUE3QkRBQTA0MTUyODMyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPmn+tmvVfjmgDjq3qxvMmoss 3JevfMV3leXSp9D5x9U6GgPSRxYtbq57Cyk7qS+4gMlK/TPYR1p5APLwDu0ImbbW wTuXEv2h6s5/1667y8Es+2gxtchTRCG3VJJNci3wHqReMsE+ldI6r47GecqKZ6U+ LqPhLooESqw4BAiz/Y/t6sT79Cvk9AN3OEJhTdpJeWco/dRBntSwuFgD3SWsUuPX LxYZHRqgS9NDMAfGJH/WFoJeHnulnyXkpkRVowOWsdwgTSSSF4ngGXH/ww1abiNA hwJlHXHuWUFg1witrf9tJ6wnOKh1HSTjT5IdmCqNjchoz/vfEg1bE2/hGGevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqWmWpL1do/ExbUJp72qBBUoMiowHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOe45c6DbrKNBj6Db7hUyv90+w/FiJOa1N+ wTb/6s9TKB9JxSuB/dWedn8dcmyh/bq3cxWI8OUddBQF9t4F2yLhBJR7jNCvNRzz U3794hBNlmiSOns2LAwh175ktgmArZnvuqimRATmm0nzgq0a/+220wUm5QnEHizU Pif6ETdUf0U7ScK0S602m6chy0xwtXpCCXKc4eSxP7gFSLd65fFOEfGTVEA+EykQ 6wWUHSmx+/v8Lb4YiNLLvgJ9YLK+vvek3ECTt9lqPIEWBtC7g4Snx5hQ8aNPYHHs un/6h9/FgzuyDal5PrqLKDbyKlE8mfgqLV4JCZPuZfZbsvR4nRM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:26 2025 by rpki-client