$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: DAX6wQQFpm0bbB2rMgTrRG2wP5u5wIUX3QxrJOKQ9B8= Subject key identifier: FA:E7:65:2F:92:3D:31:72:03:02:C3:CB:68:81:A6:7A:65:4E:DA:F9 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 5E714A26D0081C4E93B98A5A03111BDC57C710C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 0354 Signing time: Tue 01 Jul 2025 18:41:33 +0000 Manifest this update: Tue 01 Jul 2025 18:36:33 +0000 Manifest next update: Fri 04 Jul 2025 21:09:33 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: bcBTlnPgPRiEz2oshJv9oSO4rXsaxSPVMf49cuBqD8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:71:4a:26:d0:08:1c:4e:93:b9:8a:5a:03:11:1b:dc:57:c7:10:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Jul 1 18:36:33 2025 GMT Not After : Jul 4 21:09:33 2025 GMT Subject: CN=FAE7652F923D31720302C3CB6881A67A654EDAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:b9:49:d0:b9:60:1c:fe:1e:ac:66:29:2a: b5:1e:e4:e1:75:75:0f:44:8b:ed:40:15:8c:20:fa: 7a:0c:c3:32:39:fe:dc:36:73:8d:2e:2e:91:88:49: fb:b7:a2:8a:db:8d:25:e7:2e:a1:e2:6d:e9:50:18: 84:20:35:29:2d:e4:8d:20:64:90:7b:6e:ca:00:b8: 97:44:a0:56:44:5e:1c:ca:1f:5c:38:77:ff:37:9f: fc:f7:fb:76:94:2e:dd:49:8b:63:6c:1d:69:59:3d: 01:9a:22:db:f1:f9:51:f3:ed:5f:6a:7c:1d:49:58: a1:bd:2b:8f:0b:de:dd:7c:59:ef:9f:2b:70:b4:fe: 79:73:d6:f3:89:b0:f0:1a:42:cd:47:e2:f8:02:79: 37:6f:ac:e7:e4:40:dc:d2:29:c6:d9:31:a7:9d:43: cd:e0:9f:1a:7b:35:c6:c6:a3:d6:ac:0d:37:6d:34: 15:2e:c8:23:1e:94:fe:50:b9:82:25:8f:17:5f:86: da:c4:60:38:eb:63:cb:05:63:d4:49:7f:77:09:26: 0c:63:6a:a0:cf:68:f8:26:4c:be:83:27:ec:70:6f: 07:7a:1e:78:a2:c6:b8:0b:c2:db:85:5b:0b:2b:fe: 23:41:bd:c7:14:66:65:19:99:84:ae:01:0c:e5:74: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E7:65:2F:92:3D:31:72:03:02:C3:CB:68:81:A6:7A:65:4E:DA:F9 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4e:a7:30:ba:e0:71:16:a6:c1:28:f7:c6:33:b1:e5:34:ee: 89:8c:58:ce:f8:be:b7:48:c9:c6:5d:50:a5:fa:2b:d0:d9:33: d3:83:4e:a0:b3:f6:37:9f:04:41:d2:77:a4:2a:d6:8a:4a:db: 3b:24:5b:97:6f:ba:da:66:f9:f7:e0:70:7c:1d:28:65:77:d9: a7:52:e3:d1:39:a5:b5:d2:e4:80:d3:9d:8a:cf:82:77:23:fe: 1b:fd:db:f0:e9:78:11:ae:4e:83:96:41:ec:82:e6:af:bb:fe: e2:45:c1:97:69:20:8b:d1:bc:40:36:fc:75:dd:42:0b:45:f4: 01:c2:b7:14:a5:8e:c1:ee:68:f1:60:1e:8e:f9:5f:eb:40:f9: 99:d3:a0:00:39:08:01:16:e9:a9:9c:b4:a6:52:b9:67:89:14: 71:dc:af:54:60:c1:94:bb:ea:75:34:bf:69:ee:4e:24:39:9d: 59:94:99:81:d5:a7:58:b6:e8:c9:0e:75:d3:9b:6d:c0:46:0b: 6b:af:85:47:36:df:79:52:b8:fa:bc:17:c3:35:d9:b2:20:74: 1c:92:ad:60:85:10:1f:d3:09:fb:cb:9f:f6:7f:57:59:fb:65: 0c:96:85:eb:19:1d:96:51:01:6c:5b:e4:bb:03:e7:23:9e:91: 85:f2:c6:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnFKJtAIHE6TuYpaAxEb3FfHEMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA3MDExODM2MzNaFw0yNTA3MDQyMTA5MzNaMDMxMTAvBgNV BAMTKEZBRTc2NTJGOTIzRDMxNzIwMzAyQzNDQjY4ODFBNjdBNjU0RURBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5LlJ0LlgHP4erGYpKrUe5OF1 dQ9Ei+1AFYwg+noMwzI5/tw2c40uLpGISfu3oorbjSXnLqHibelQGIQgNSkt5I0g ZJB7bsoAuJdEoFZEXhzKH1w4d/83n/z3+3aULt1Ji2NsHWlZPQGaItvx+VHz7V9q fB1JWKG9K48L3t18We+fK3C0/nlz1vOJsPAaQs1H4vgCeTdvrOfkQNzSKcbZMaed Q83gnxp7NcbGo9asDTdtNBUuyCMelP5QuYIljxdfhtrEYDjrY8sFY9RJf3cJJgxj aqDPaPgmTL6DJ+xwbwd6HniixrgLwtuFWwsr/iNBvccUZmUZmYSuAQzldB6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+udlL5I9MXIDAsPLaIGmemVO2vkwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpOpzC64HEWpsEo98YzseU07omMWM74vrdI ycZdUKX6K9DZM9ODTqCz9jefBEHSd6Qq1opK2zskW5dvutpm+ffgcHwdKGV32adS 49E5pbXS5IDTnYrPgncj/hv92/DpeBGuToOWQeyC5q+7/uJFwZdpIIvRvEA2/HXd QgtF9AHCtxSljsHuaPFgHo75X+tA+ZnToAA5CAEW6amctKZSuWeJFHHcr1RgwZS7 6nU0v2nuTiQ5nVmUmYHVp1i26MkOddObbcBGC2uvhUc233lSuPq8F8M12bIgdByS rWCFEB/TCfvLn/Z/V1n7ZQyWhesZHZZRAWxb5LsD5yOekYXyxnI= -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:14 2025 by rpki-client