$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: LFOcIEkew5q/9QPtiJqJhzXXYIgPqtm81LRMgFX8a/A= Subject key identifier: 24:C7:70:77:E3:6C:78:21:69:17:4D:8D:91:1B:6E:C8:39:A6:67:01 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 0BA04805A895085BCECC7244FB0D18AC0E2D7C87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03D6 Signing time: Sun 29 Jun 2025 05:41:26 +0000 Manifest this update: Sun 29 Jun 2025 05:36:26 +0000 Manifest next update: Wed 02 Jul 2025 15:26:26 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 2: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: QBfBGwip1jWlw3DptPfcJQJvUlLq+Js/bWxzdnFpuZI=) 3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a0:48:05:a8:95:08:5b:ce:cc:72:44:fb:0d:18:ac:0e:2d:7c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Jun 29 05:36:26 2025 GMT Not After : Jul 2 15:26:26 2025 GMT Subject: CN=24C77077E36C782169174D8D911B6EC839A66701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:a8:be:79:c9:79:4c:ef:43:33:5b:6b:15: c3:37:e3:3d:fc:65:61:0a:34:f0:c3:1d:d4:33:02: ee:86:e5:d3:88:63:be:77:54:c4:92:29:be:f5:21: 3b:c5:ac:94:7a:47:a6:2a:69:74:51:cb:39:03:3f: c8:a7:7c:e2:e8:72:56:d4:04:0f:0a:dc:f9:fe:17: 96:64:e2:f2:28:2e:7f:27:64:47:16:3c:ea:65:5b: d3:4d:59:79:e3:a4:39:94:74:e6:9b:15:6b:04:44: 67:a5:1e:f4:ff:7f:76:6c:16:54:a8:d3:a5:9e:05: ba:5a:46:b4:46:f9:b8:01:51:8d:d1:f5:4d:9b:f1: e1:58:bb:65:02:20:8b:3b:47:88:b5:af:f1:d0:40: 28:3e:cb:e7:dd:1f:cc:50:92:c8:eb:c0:7a:92:a1: 71:d8:33:cf:fd:5b:31:63:e5:7d:67:f9:4c:67:6a: cc:40:e8:21:c6:05:89:00:a2:15:b3:43:3c:66:7d: 78:cb:b3:ee:e0:17:f9:d2:c2:12:a9:b8:ac:02:27: 31:43:58:fb:74:2d:f2:09:37:81:13:f8:9f:39:50: 84:59:31:f2:80:1a:15:79:b8:c1:5a:ed:71:20:60: bb:db:90:30:e6:46:dd:13:19:e6:69:94:ae:c9:a7: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C7:70:77:E3:6C:78:21:69:17:4D:8D:91:1B:6E:C8:39:A6:67:01 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:16:16:9c:87:2a:77:32:94:47:9d:93:01:14:69:1f:1c:e8: 27:cd:ec:90:eb:79:8d:a2:26:de:a0:d0:c2:c5:c9:f1:d9:d5: 66:fe:9c:87:4b:62:5e:4f:8d:74:3b:a2:cf:98:8e:9e:c2:ac: 2e:5e:3c:24:22:81:e2:9a:fe:ab:41:03:de:98:d0:4c:8e:9f: c3:60:0e:e2:59:34:20:3f:a6:45:be:9d:de:09:35:d3:98:c8: 61:f3:bf:0d:fc:c6:bf:52:ab:2d:7e:e3:3d:36:7a:40:9c:98: a8:a0:9f:96:c2:89:38:6a:d8:93:8b:c6:48:84:37:31:a5:39: 13:eb:4a:4b:a8:1b:c7:5c:5c:ce:63:74:f2:0c:7b:fd:ef:bd: 88:7a:1e:d4:99:fb:cc:87:56:20:e3:3b:ae:86:cc:49:be:14: e5:20:97:6b:0d:39:57:ae:a6:93:4a:43:af:ca:41:37:7b:65: 7e:f5:64:3f:28:c9:5a:e3:ec:04:99:22:43:e0:d4:4f:c3:27: 67:c9:f9:e3:37:c8:6a:50:30:4f:ac:28:68:94:bc:5c:99:20: e5:5c:7f:23:1d:63:67:73:40:33:45:d3:d3:45:59:6d:d7:1b: 72:1a:03:f2:7b:3a:ac:22:90:55:0d:0a:e9:23:32:56:5f:e4: 38:e9:e4:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6BIBaiVCFvOzHJE+w0YrA4tfIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA2MjkwNTM2MjZaFw0yNTA3MDIxNTI2MjZaMDMxMTAvBgNV BAMTKDI0Qzc3MDc3RTM2Qzc4MjE2OTE3NEQ4RDkxMUI2RUM4MzlBNjY3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhqi+ecl5TO9DM1trFcM34z38 ZWEKNPDDHdQzAu6G5dOIY753VMSSKb71ITvFrJR6R6YqaXRRyzkDP8infOLoclbU BA8K3Pn+F5Zk4vIoLn8nZEcWPOplW9NNWXnjpDmUdOabFWsERGelHvT/f3ZsFlSo 06WeBbpaRrRG+bgBUY3R9U2b8eFYu2UCIIs7R4i1r/HQQCg+y+fdH8xQksjrwHqS oXHYM8/9WzFj5X1n+UxnasxA6CHGBYkAohWzQzxmfXjLs+7gF/nSwhKpuKwCJzFD WPt0LfIJN4ET+J85UIRZMfKAGhV5uMFa7XEgYLvbkDDmRt0TGeZplK7Jp0DZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMdwd+NseCFpF02NkRtuyDmmZwEwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMWFpyHKncylEedkwEUaR8c6CfN7JDreY2i Jt6g0MLFyfHZ1Wb+nIdLYl5PjXQ7os+Yjp7CrC5ePCQigeKa/qtBA96Y0EyOn8Ng DuJZNCA/pkW+nd4JNdOYyGHzvw38xr9Sqy1+4z02ekCcmKign5bCiThq2JOLxkiE NzGlORPrSkuoG8dcXM5jdPIMe/3vvYh6HtSZ+8yHViDjO66GzEm+FOUgl2sNOVeu ppNKQ6/KQTd7ZX71ZD8oyVrj7ASZIkPg1E/DJ2fJ+eM3yGpQME+sKGiUvFyZIOVc fyMdY2dzQDNF09NFWW3XG3IaA/J7OqwikFUNCukjMlZf5Djp5Fk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:47 2025 by rpki-client