$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: bwWguIl7O9kr1RrVRIG2yjBbUMvJpurvHfdztVD3YQA= Subject key identifier: 27:94:0F:64:2C:ED:96:14:A3:AC:B7:AB:C0:C7:BD:06:C3:4E:F8:36 Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 5E73B168828BE887D9F37AE5ED6429F986BD8EDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: F4 Signing time: Sat 28 Jun 2025 18:11:02 +0000 Manifest this update: Sat 28 Jun 2025 18:06:02 +0000 Manifest next update: Wed 02 Jul 2025 05:02:02 +0000 Files and hashes: 1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=) 2: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: 5n4G0bw+pfT27YqlV35L85B3EhQlC20L60yut4JzySs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:73:b1:68:82:8b:e8:87:d9:f3:7a:e5:ed:64:29:f9:86:bd:8e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Jun 28 18:06:02 2025 GMT Not After : Jul 2 05:02:02 2025 GMT Subject: CN=27940F642CED9614A3ACB7ABC0C7BD06C34EF836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:c3:5b:c7:27:c6:59:78:af:84:21:8a:49: 19:57:ed:22:cd:b6:64:1c:75:8a:b3:8c:62:73:33: 97:6d:5e:65:46:2c:dd:5c:d9:19:85:18:2b:4f:7f: f6:80:43:bc:0d:6f:97:a0:c0:61:ea:fb:fb:52:57: e1:55:9e:69:5a:ee:45:41:14:a8:ce:ad:e7:4f:0f: 45:be:c3:87:95:d6:30:cc:81:1a:4a:66:90:25:27: 71:6a:f2:cf:22:d5:19:57:9d:0b:c4:4c:43:62:91: bc:d5:4a:ca:14:0a:d5:7f:d1:8b:e4:7e:0e:d5:97: 23:f5:6b:8c:67:9b:5f:53:3b:8b:b4:30:a4:f8:2e: 01:c6:e8:82:28:7a:4d:e9:95:9e:7f:43:9b:45:43: 91:33:e2:bd:76:cc:2d:d1:29:03:9c:df:e9:ba:a9: ad:3a:cb:89:4f:ff:de:a7:98:80:b5:c9:7a:30:95: 05:12:f2:af:df:3a:d1:89:e4:d4:e5:1e:88:80:25: a7:d2:10:17:e4:b1:37:1e:fc:81:a0:f1:f2:1a:16: 35:75:57:fe:54:ee:f4:66:7e:db:a8:a2:62:9e:63: f4:dc:e2:c9:42:5c:bb:61:a3:49:42:57:4d:42:6c: d4:c2:f1:ae:dd:41:dd:da:fe:ee:46:d8:de:3f:d5: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:0F:64:2C:ED:96:14:A3:AC:B7:AB:C0:C7:BD:06:C3:4E:F8:36 X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:df:d9:67:ca:29:27:1c:b1:49:66:0d:1b:c6:91:de:ec:c1: ea:f3:bc:6d:38:b2:8f:e8:0d:35:53:ed:1c:e5:bf:8e:31:7e: 6c:85:5f:66:60:17:5b:1a:4c:06:ad:cd:c1:eb:aa:4e:72:53: c3:1c:6a:cd:93:82:32:6a:3b:4c:3b:57:59:9e:cc:1d:41:4f: 12:1d:32:bb:8a:c9:b8:06:68:10:f5:7e:26:6c:84:d4:d3:dc: de:15:c9:d8:7e:e6:1c:8f:ee:c3:c8:6a:94:c9:0e:57:69:d4: 04:59:b2:9b:f7:38:b6:a6:60:a2:2d:c5:b5:fe:74:d1:e6:ac: b0:4d:67:ee:2e:4f:ef:6e:e5:03:75:8f:05:c2:04:76:ed:75: 15:3b:c8:2e:27:01:db:f5:e3:b4:c5:6a:f6:29:f3:6a:e1:00: a8:a0:10:0e:3b:c4:e2:61:05:4f:79:eb:bc:cf:36:d2:85:e0: 61:de:35:86:62:c3:fd:1c:64:98:d2:f1:08:78:8f:56:78:bb: c3:46:b5:01:39:17:e9:33:8f:53:ed:af:c0:05:9e:58:f1:3a: 1f:ff:19:46:c9:a2:65:a4:3f:ea:26:c3:92:60:8d:7a:db:82: e3:25:5f:c5:cd:82:06:25:23:da:fd:2a:5c:e0:4c:11:78:9e: c5:bf:98:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnOxaIKL6IfZ83rl7WQp+Ya9jtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNTA2MjgxODA2MDJaFw0yNTA3MDIwNTAyMDJaMDMxMTAvBgNV BAMTKDI3OTQwRjY0MkNFRDk2MTRBM0FDQjdBQkMwQzdCRDA2QzM0RUY4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTiMNbxyfGWXivhCGKSRlX7SLN tmQcdYqzjGJzM5dtXmVGLN1c2RmFGCtPf/aAQ7wNb5egwGHq+/tSV+FVnmla7kVB FKjOredPD0W+w4eV1jDMgRpKZpAlJ3Fq8s8i1RlXnQvETENikbzVSsoUCtV/0Yvk fg7VlyP1a4xnm19TO4u0MKT4LgHG6IIoek3plZ5/Q5tFQ5Ez4r12zC3RKQOc3+m6 qa06y4lP/96nmIC1yXowlQUS8q/fOtGJ5NTlHoiAJafSEBfksTce/IGg8fIaFjV1 V/5U7vRmftuoomKeY/Tc4slCXLtho0lCV01CbNTC8a7dQd3a/u5G2N4/1bEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5QPZCztlhSjrLerwMe9BsNO+DYwHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELf2WfKKSccsUlmDRvGkd7swerzvG04so/o DTVT7Rzlv44xfmyFX2ZgF1saTAatzcHrqk5yU8Mcas2TgjJqO0w7V1mezB1BTxId MruKybgGaBD1fiZshNTT3N4Vydh+5hyP7sPIapTJDldp1ARZspv3OLamYKItxbX+ dNHmrLBNZ+4uT+9u5QN1jwXCBHbtdRU7yC4nAdv147TFavYp82rhAKigEA47xOJh BU9567zPNtKF4GHeNYZiw/0cZJjS8Qh4j1Z4u8NGtQE5F+kzj1Ptr8AFnljxOh// GUbJomWkP+omw5JgjXrbguMlX8XNggYlI9r9KlzgTBF4nsW/mGc= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:25 2025 by rpki-client