$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: cBniiNAFW1BnPX4/a9YLJ305wTn2SsXoeKYHNv6ra38= Subject key identifier: 84:62:4D:97:F1:69:11:0E:61:BA:AD:54:84:53:CE:CB:6F:11:9B:69 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 0F6A01511D95D89DA6ABF8FE7A8507E3BF56E21A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: E6 Signing time: Sun 29 Jun 2025 11:30:35 +0000 Manifest this update: Sun 29 Jun 2025 11:25:35 +0000 Manifest next update: Wed 02 Jul 2025 20:12:35 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: PsPNKTR7m7Mu0gAbZyhfy9h6jwKR+Ly1oKShArgt/kM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6a:01:51:1d:95:d8:9d:a6:ab:f8:fe:7a:85:07:e3:bf:56:e2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Jun 29 11:25:35 2025 GMT Not After : Jul 2 20:12:35 2025 GMT Subject: CN=84624D97F169110E61BAAD548453CECB6F119B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:fa:d8:46:77:5e:9c:81:b5:db:ab:82:87: d2:35:8e:48:56:40:8e:4c:85:a3:1f:81:1b:df:ee: 9c:f3:f1:25:77:f9:98:10:45:e2:23:57:34:21:8a: fb:bd:fc:d3:57:bd:05:03:55:ae:79:77:3b:b7:d8: 07:11:30:d4:3b:1c:ac:dd:7a:fc:8a:f8:f5:6a:4d: 4f:73:59:57:4f:7b:5a:a5:cf:a7:b1:75:90:71:48: cc:fc:d7:cd:a5:a4:8b:e3:4b:dd:f0:eb:26:34:1b: 54:65:63:ca:3c:dc:dd:3d:28:e8:cc:56:2f:b3:a3: e9:7d:c3:34:0a:58:b0:4b:dd:de:bd:5d:33:2f:0f: 2f:f7:91:54:df:64:b8:fc:d5:55:4f:4d:11:ea:71: 9b:2b:f6:b2:87:11:cd:f0:83:55:c5:2f:cc:ec:68: e8:7c:90:39:bf:70:65:de:21:ab:02:05:72:03:b9: 0b:1a:3e:14:2d:84:08:82:0e:6c:7c:56:45:5d:2d: af:71:f2:2b:e8:ad:e3:e8:fd:33:6c:86:7d:d8:3a: e1:93:de:52:41:00:74:94:4f:a6:ed:56:05:92:9c: 9a:d9:7d:ea:81:ca:32:d0:72:25:34:aa:86:d4:b2: 69:ee:93:4b:ec:c1:cb:cc:a0:8d:ef:10:d4:cc:2e: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:4D:97:F1:69:11:0E:61:BA:AD:54:84:53:CE:CB:6F:11:9B:69 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ee:b5:f6:1a:fd:41:72:e8:43:d2:b4:f2:45:6e:e9:81:7c: 30:54:cc:67:77:7d:74:34:5f:44:f7:50:a6:48:c8:c6:7d:7d: 7c:06:ef:56:e0:63:ec:4d:ca:ae:37:9a:5f:ff:1b:ac:58:5a: 86:10:e2:6f:25:15:76:db:69:b6:4e:68:e5:25:94:7a:b9:20: 71:1c:5a:f1:ec:dd:14:d1:0b:a0:cc:78:7e:fc:df:9e:c5:4f: 50:2d:7e:6b:d8:30:9f:9b:aa:f4:52:18:cc:a6:b1:54:fa:47: 72:a4:bf:60:da:e8:d3:89:2f:92:bf:4c:5a:13:e8:e7:07:b2: 97:e7:18:f5:bb:75:f6:62:09:73:17:cb:8e:7f:cc:c7:a2:fb: 21:b1:5d:11:60:ee:71:00:26:d9:e9:2f:6a:de:b1:a2:25:1d: 01:65:b7:89:a0:47:18:16:a9:ef:c3:1f:f7:10:1b:26:f6:0f: 90:10:07:b1:0f:1b:73:d6:68:41:da:17:70:06:59:e3:d2:e3: ba:da:c9:9c:8a:2c:73:32:3d:19:7a:b9:77:6e:dd:dc:d0:ba: bb:6f:2f:90:e9:32:4d:e5:a6:11:c7:38:ad:84:e9:71:b3:2b: f0:b2:0e:6e:f2:3e:fe:dc:65:f7:9d:d2:d5:40:8a:8e:21:9d: 1c:de:ca:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2oBUR2V2J2mq/j+eoUH479W4howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA2MjkxMTI1MzVaFw0yNTA3MDIyMDEyMzVaMDMxMTAvBgNV BAMTKDg0NjI0RDk3RjE2OTExMEU2MUJBQUQ1NDg0NTNDRUNCNkYxMTlCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4frYRndenIG126uCh9I1jkhW QI5MhaMfgRvf7pzz8SV3+ZgQReIjVzQhivu9/NNXvQUDVa55dzu32AcRMNQ7HKzd evyK+PVqTU9zWVdPe1qlz6exdZBxSMz8182lpIvjS93w6yY0G1RlY8o83N09KOjM Vi+zo+l9wzQKWLBL3d69XTMvDy/3kVTfZLj81VVPTRHqcZsr9rKHEc3wg1XFL8zs aOh8kDm/cGXeIasCBXIDuQsaPhQthAiCDmx8VkVdLa9x8ivorePo/TNshn3YOuGT 3lJBAHSUT6btVgWSnJrZfeqByjLQciU0qobUsmnuk0vswcvMoI3vENTMLoEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGJNl/FpEQ5huq1UhFPOy28Rm2kwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTutfYa/UFy6EPStPJFbumBfDBUzGd3fXQ0 X0T3UKZIyMZ9fXwG71bgY+xNyq43ml//G6xYWoYQ4m8lFXbbabZOaOUllHq5IHEc WvHs3RTRC6DMeH78357FT1AtfmvYMJ+bqvRSGMymsVT6R3Kkv2Da6NOJL5K/TFoT 6OcHspfnGPW7dfZiCXMXy45/zMei+yGxXRFg7nEAJtnpL2resaIlHQFlt4mgRxgW qe/DH/cQGyb2D5AQB7EPG3PWaEHaF3AGWePS47rayZyKLHMyPRl6uXdu3dzQurtv L5DpMk3lphHHOK2E6XGzK/CyDm7yPv7cZfed0tVAio4hnRzeyqE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:28:02 2025 by rpki-client