$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: U7aAge4gcxDMqpjcDIatSu4n34j5l9cZlGqGu5WQPlQ= Subject key identifier: 6C:A4:75:D9:F8:A2:7B:E1:A8:8E:DB:8C:FD:68:C7:0A:98:90:AF:4F Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 788FCDF263C9C8D7C3504DBFD6A57B51A96EC28B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 01AE Signing time: Sun 29 Jun 2025 11:31:51 +0000 Manifest this update: Sun 29 Jun 2025 11:26:51 +0000 Manifest next update: Wed 02 Jul 2025 11:38:51 +0000 Files and hashes: 1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: iDe5HDqY7pzJMS0F2E2gkjFVvkUFRIwzY2WMFd7dFiE=) 2: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) 3: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) 4: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:cd:f2:63:c9:c8:d7:c3:50:4d:bf:d6:a5:7b:51:a9:6e:c2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Jun 29 11:26:51 2025 GMT Not After : Jul 2 11:38:51 2025 GMT Subject: CN=6CA475D9F8A27BE1A88EDB8CFD68C70A9890AF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:54:86:08:48:cf:2f:c4:3a:9c:5d:63:70: 81:db:4b:b5:85:c2:eb:19:f2:4b:a7:be:c7:5e:7d: 54:a5:72:65:68:4d:01:55:94:2b:cd:7e:7b:8e:b8: 91:93:b9:0d:17:cf:1e:b9:65:ef:69:b9:d1:88:9a: f2:52:cd:5d:0d:81:59:d5:57:79:e3:b3:88:fb:4c: a5:7f:7a:12:b2:f0:b0:a5:92:a5:cd:29:40:cb:1a: 99:30:17:d3:6d:4b:e1:fc:27:90:6c:45:cb:0b:88: 02:10:e6:55:ee:81:70:60:6e:c6:f9:f1:15:de:2a: db:a1:14:5b:15:86:40:06:ba:6d:16:d5:f0:fd:66: 4f:63:67:59:de:0f:40:53:b2:3c:64:c1:e8:bc:54: 39:98:98:f9:77:e1:85:11:f7:c7:24:d3:b2:66:b2: c1:e1:f4:83:b7:5d:c3:16:1a:bf:56:c9:30:8d:f7: 88:01:93:3b:52:4b:da:07:74:fc:e3:0b:81:99:e9: a3:b1:70:9b:cb:3a:40:7e:94:a1:f0:83:3a:a7:80: f9:ff:69:8c:ba:95:1f:a6:c1:6c:73:40:15:28:e3: a2:d8:47:3c:a5:29:b2:02:db:4a:45:29:33:39:c9: d0:31:69:7e:99:ef:88:b2:a4:84:6a:f1:04:58:dd: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A4:75:D9:F8:A2:7B:E1:A8:8E:DB:8C:FD:68:C7:0A:98:90:AF:4F X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b9:80:38:6e:61:e8:b6:59:23:36:74:a6:95:07:6c:b8:6b: d8:07:33:20:a4:19:f0:d9:7a:85:cb:ae:3e:72:59:86:f0:7a: b0:c7:e2:2b:62:15:f3:73:fd:53:d8:74:13:90:1f:0f:31:b4: cf:94:6c:c6:4d:6f:00:ca:9b:9c:3d:b9:87:46:6a:fd:8c:80: d0:6b:55:7e:2d:62:65:b6:39:f0:43:e2:58:a0:bf:42:05:3c: 27:96:16:fd:b4:b5:f1:c0:75:35:b8:a0:5c:92:6e:21:d6:07: a5:16:70:ec:9b:62:59:a6:74:7b:b0:02:ba:a6:09:a9:53:7f: 5d:c3:61:83:bd:6b:be:2c:a8:d7:90:17:e6:8f:08:b1:32:0f: 30:bb:9b:12:42:d2:90:56:3f:6b:cf:f0:c2:c0:0b:42:d6:e4: a4:3f:85:c9:ae:1c:7a:9a:77:37:22:a6:1a:d8:70:4d:77:fb: ae:46:5f:50:a9:39:94:db:8c:04:a5:3e:4f:9d:d8:ae:4e:d5: 7d:dc:58:04:b9:8f:b6:ff:c6:54:8d:e5:6a:de:97:47:d0:72: 11:39:ab:fe:cd:1d:6b:33:46:53:43:95:88:b4:ad:3f:8e:3c: 2d:62:d2:96:13:51:1b:74:3f:de:bf:18:98:39:a2:f5:9a:c2: 30:34:ab:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeI/N8mPJyNfDUE2/1qV7UaluwoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA2MjkxMTI2NTFaFw0yNTA3MDIxMTM4NTFaMDMxMTAvBgNV BAMTKDZDQTQ3NUQ5RjhBMjdCRTFBODhFREI4Q0ZENjhDNzBBOTg5MEFGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftFSGCEjPL8Q6nF1jcIHbS7WF wusZ8kunvsdefVSlcmVoTQFVlCvNfnuOuJGTuQ0Xzx65Ze9pudGImvJSzV0NgVnV V3njs4j7TKV/ehKy8LClkqXNKUDLGpkwF9NtS+H8J5BsRcsLiAIQ5lXugXBgbsb5 8RXeKtuhFFsVhkAGum0W1fD9Zk9jZ1neD0BTsjxkwei8VDmYmPl34YUR98ck07Jm ssHh9IO3XcMWGr9WyTCN94gBkztSS9oHdPzjC4GZ6aOxcJvLOkB+lKHwgzqngPn/ aYy6lR+mwWxzQBUo46LYRzylKbIC20pFKTM5ydAxaX6Z74iypIRq8QRY3WiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKR12fiie+GojtuM/WjHCpiQr08wHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKi5gDhuYei2WSM2dKaVB2y4a9gHMyCkGfDZ eoXLrj5yWYbwerDH4itiFfNz/VPYdBOQHw8xtM+UbMZNbwDKm5w9uYdGav2MgNBr VX4tYmW2OfBD4ligv0IFPCeWFv20tfHAdTW4oFySbiHWB6UWcOybYlmmdHuwArqm CalTf13DYYO9a74sqNeQF+aPCLEyDzC7mxJC0pBWP2vP8MLAC0LW5KQ/hcmuHHqa dzciphrYcE13+65GX1CpOZTbjASlPk+d2K5O1X3cWAS5j7b/xlSN5Wrel0fQchE5 q/7NHWszRlNDlYi0rT+OPC1i0pYTURt0P96/GJg5ovWawjA0qyI= -----END CERTIFICATE-----Generated at Mon Jun 30 20:22:18 2025 by rpki-client