$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: qCdJJ+7JShR5/liPQtaEYWbsFv+MP28tKEerc7VB6+8= Subject key identifier: A9:0A:6F:83:19:7C:F5:82:F6:05:2B:9D:6B:51:2B:72:7B:D4:56:5C Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 3FAEEB3D48BC261B4667D0CFE1AA3055534839F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 034B Signing time: Tue 01 Jul 2025 05:21:37 +0000 Manifest this update: Tue 01 Jul 2025 05:16:37 +0000 Manifest next update: Fri 04 Jul 2025 05:39:37 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: GVVtP7Anuo37oUYPP1gaQMbkqfNdhKmbG9+skBE0Isg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ae:eb:3d:48:bc:26:1b:46:67:d0:cf:e1:aa:30:55:53:48:39:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jul 1 05:16:37 2025 GMT Not After : Jul 4 05:39:37 2025 GMT Subject: CN=A90A6F83197CF582F6052B9D6B512B727BD4565C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:c3:14:75:11:48:db:bd:c4:a6:45:ae:e8: 25:b5:dc:9b:5a:7f:cd:46:5d:7f:1e:4c:11:f7:cc: 0e:5e:ae:9b:65:37:8f:ad:2a:fe:3c:44:9f:dd:bc: c4:c7:30:37:29:cf:93:e3:22:a7:23:be:02:9c:b5: 9f:8c:e5:55:d0:a7:9e:f1:b8:f4:ee:aa:bd:e5:43: 97:7f:60:20:cd:a0:5a:40:d5:d3:40:ba:ae:f7:18: 6b:ff:d8:7f:db:e4:30:05:2e:6e:16:0b:95:2e:22: 53:67:ec:54:91:3a:3c:5b:4d:ed:1b:8b:33:b6:40: 32:8f:a7:54:32:5d:ad:36:27:14:99:4d:ce:85:f3: 33:c5:78:00:ec:ae:82:3b:40:9b:80:52:4f:a6:f6: e5:7c:9b:17:81:06:c2:57:9e:2f:5f:d9:8c:36:c6: 05:f3:58:47:6d:1b:23:3e:71:96:dd:d6:0f:95:fd: 31:ad:cb:e2:41:26:4c:f9:87:8d:25:9d:85:ce:f8: ff:f7:d4:e6:26:25:f8:a0:40:0f:db:28:05:3e:6d: f1:f4:eb:b6:97:8e:98:76:56:06:0a:d6:62:41:32: be:08:bc:5f:36:c9:96:c8:c3:3f:09:f0:6d:67:63: e5:01:82:06:b9:9c:b6:9b:3d:24:2f:d1:da:65:e9: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:6F:83:19:7C:F5:82:F6:05:2B:9D:6B:51:2B:72:7B:D4:56:5C X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a6:82:28:15:b5:38:a7:f9:a7:20:3f:cc:28:b7:d0:b3:66: 0e:07:75:ed:78:dc:b6:b2:1a:9a:7d:83:2f:55:b1:77:f2:59: 85:7e:19:46:8f:b5:a8:d4:22:65:67:61:c7:e3:74:c9:ff:ba: 87:74:26:09:44:73:68:4c:fb:a6:83:96:6d:ec:dd:34:b8:e9: 91:3e:83:35:be:6e:49:11:ea:ff:35:ed:92:cc:70:8f:2c:0c: ae:31:3f:4f:7c:b7:55:86:1d:de:ba:df:fe:9c:69:7b:46:15: e7:ac:0c:af:04:7d:19:58:d7:f5:2e:63:b6:23:07:a1:53:8f: 00:5c:15:a0:56:68:3b:b9:01:45:f2:4c:20:72:5a:7f:5f:9f: 19:6f:77:49:bc:17:c4:f0:2c:e6:ac:91:db:88:18:16:87:2e: c1:d7:8f:6b:2e:35:d3:76:96:9e:5d:ee:8d:e9:be:26:c3:7c: ca:a2:58:dc:1d:5c:ee:a0:a0:9f:93:7d:87:96:2b:92:21:e9: e6:dc:5b:bd:3d:cc:78:70:88:1d:57:c9:1a:64:2a:6c:8c:99: 21:d8:a1:52:cd:cd:5a:c0:d4:d6:65:f4:6a:f3:35:0a:2b:48: d3:4c:58:54:d3:5e:f6:3c:8e:0f:48:15:51:0c:b2:4f:d5:6e: 2f:d4:68:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP67rPUi8JhtGZ9DP4aowVVNIOfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA3MDEwNTE2MzdaFw0yNTA3MDQwNTM5MzdaMDMxMTAvBgNV BAMTKEE5MEE2RjgzMTk3Q0Y1ODJGNjA1MkI5RDZCNTEyQjcyN0JENDU2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDMMUdRFI273EpkWu6CW13Jta f81GXX8eTBH3zA5erptlN4+tKv48RJ/dvMTHMDcpz5PjIqcjvgKctZ+M5VXQp57x uPTuqr3lQ5d/YCDNoFpA1dNAuq73GGv/2H/b5DAFLm4WC5UuIlNn7FSROjxbTe0b izO2QDKPp1QyXa02JxSZTc6F8zPFeADsroI7QJuAUk+m9uV8mxeBBsJXni9f2Yw2 xgXzWEdtGyM+cZbd1g+V/TGty+JBJkz5h40lnYXO+P/31OYmJfigQA/bKAU+bfH0 67aXjph2VgYK1mJBMr4IvF82yZbIwz8J8G1nY+UBgga5nLabPSQv0dpl6fmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQpvgxl89YL2BSuda1ErcnvUVlwwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGmgigVtTin+acgP8wot9CzZg4Hde143Lay Gpp9gy9VsXfyWYV+GUaPtajUImVnYcfjdMn/uod0JglEc2hM+6aDlm3s3TS46ZE+ gzW+bkkR6v817ZLMcI8sDK4xP098t1WGHd663/6caXtGFeesDK8EfRlY1/UuY7Yj B6FTjwBcFaBWaDu5AUXyTCByWn9fnxlvd0m8F8TwLOaskduIGBaHLsHXj2suNdN2 lp5d7o3pvibDfMqiWNwdXO6goJ+TfYeWK5Ih6ebcW709zHhwiB1XyRpkKmyMmSHY oVLNzVrA1NZl9GrzNQorSNNMWFTTXvY8jg9IFVEMsk/Vbi/UaAI= -----END CERTIFICATE-----Generated at Tue Jul 1 17:08:10 2025 by rpki-client