$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: hWK8OpltUBquOsloe5JmSBBKUIy5kG6k4MRpAaXlD/A= Subject key identifier: 84:6D:36:BE:48:05:CD:CE:AD:88:AC:5D:26:5A:13:18:E5:E3:E9:95 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 1693714228D60371E664716C46FD4FCAED81BFCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 01FC Signing time: Tue 01 Jul 2025 08:30:02 +0000 Manifest this update: Tue 01 Jul 2025 08:25:02 +0000 Manifest next update: Fri 04 Jul 2025 11:49:02 +0000 Files and hashes: 1: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 3: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 4: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: dvIWSXHF70gtSE36O/WulXEJYiL1Fizlg+DitWUj7fM=) 5: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 6: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:93:71:42:28:d6:03:71:e6:64:71:6c:46:fd:4f:ca:ed:81:bf:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Jul 1 08:25:02 2025 GMT Not After : Jul 4 11:49:02 2025 GMT Subject: CN=846D36BE4805CDCEAD88AC5D265A1318E5E3E995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:2d:30:e9:5a:bf:b9:ca:08:22:fc:b2:e5: c4:29:d3:36:37:d1:81:00:ab:2d:75:4e:c5:63:66: 7b:61:52:c7:13:93:6d:37:f6:16:a8:f0:22:50:ea: b8:fb:c7:c7:7f:20:c9:92:dd:01:a5:79:00:ce:19: d7:46:fe:5b:f1:ac:67:49:da:90:6b:ce:ca:38:d0: d4:5a:15:28:b2:9e:52:ea:d0:92:1d:5f:e4:b5:39: 00:e9:14:77:2e:77:d8:38:a2:5c:33:c6:df:ad:0d: 28:37:f4:97:35:02:3b:9f:34:02:e6:2e:f2:b7:a8: 42:67:e5:53:f8:33:4e:da:06:3b:fe:e3:32:76:fb: fd:85:64:92:08:75:b4:2d:74:43:82:b9:20:f2:02: f5:8e:3b:20:b8:73:1c:f7:4a:98:7e:74:42:b5:4a: 20:ab:b0:74:9e:2d:77:0a:00:1e:ab:89:13:2f:6a: 6a:9d:3e:ff:c8:a2:a0:76:b4:83:f9:5f:20:60:6e: 91:6e:16:5a:24:ed:3b:9c:b0:68:40:21:04:3a:92: cb:98:2c:69:23:75:de:89:f7:a1:93:27:cb:47:b1: d9:a6:ab:47:20:42:e1:e1:37:d6:e5:0d:fd:8b:53: ad:04:99:d7:53:d9:99:ce:ae:d1:7e:c1:0f:f9:9e: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:36:BE:48:05:CD:CE:AD:88:AC:5D:26:5A:13:18:E5:E3:E9:95 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c8:3c:a6:b7:67:12:27:70:34:e6:19:b6:63:25:96:87:e4: d1:ab:95:d9:ce:9d:69:c5:e7:0b:09:f8:60:95:ee:75:84:5c: 4c:92:e0:0c:4f:bd:85:08:92:9d:b3:2c:b0:58:89:b5:3a:30: 79:4f:64:42:c1:bc:01:40:77:4f:c8:2f:47:bc:39:b8:90:61: 2e:80:25:ee:f9:ac:ef:d8:a9:01:09:9d:de:72:ee:38:d9:13: 48:75:a5:c1:7f:08:53:c8:4e:fe:9c:74:84:40:f2:60:ea:9e: c1:04:ec:0b:20:2c:4a:38:54:62:d4:37:05:21:69:9b:cc:bb: e8:6b:34:c2:5d:7f:87:34:d0:ff:c4:28:18:ab:56:f8:84:ad: ad:39:21:20:62:1a:6a:59:70:78:59:ea:22:2d:c0:18:e8:c5: d0:e9:d0:0c:83:3e:f3:38:77:27:55:13:da:c9:ba:f3:97:6e: 75:01:63:2b:2d:82:26:cd:37:5e:2f:67:52:37:f5:d3:5e:8d: 0d:56:2e:c3:ae:b1:de:ce:6b:a2:ad:a2:6e:bb:38:e2:8c:1e: 33:ac:36:9b:d8:3c:fb:d9:a0:6d:26:39:d8:b8:21:02:47:0b: 03:07:c4:6c:4b:2b:b6:36:55:64:f5:6c:c6:c8:27:db:2d:c7: d1:d2:d3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpNxQijWA3HmZHFsRv1Pyu2Bv8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA3MDEwODI1MDJaFw0yNTA3MDQxMTQ5MDJaMDMxMTAvBgNV BAMTKDg0NkQzNkJFNDgwNUNEQ0VBRDg4QUM1RDI2NUExMzE4RTVFM0U5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDivy0w6Vq/ucoIIvyy5cQp0zY3 0YEAqy11TsVjZnthUscTk2039hao8CJQ6rj7x8d/IMmS3QGleQDOGddG/lvxrGdJ 2pBrzso40NRaFSiynlLq0JIdX+S1OQDpFHcud9g4olwzxt+tDSg39Jc1AjufNALm LvK3qEJn5VP4M07aBjv+4zJ2+/2FZJIIdbQtdEOCuSDyAvWOOyC4cxz3Sph+dEK1 SiCrsHSeLXcKAB6riRMvamqdPv/IoqB2tIP5XyBgbpFuFlok7TucsGhAIQQ6ksuY LGkjdd6J96GTJ8tHsdmmq0cgQuHhN9blDf2LU60EmddT2ZnOrtF+wQ/5nuQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhG02vkgFzc6tiKxdJloTGOXj6ZUwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3IPKa3ZxIncDTmGbZjJZaH5NGrldnOnWnF 5wsJ+GCV7nWEXEyS4AxPvYUIkp2zLLBYibU6MHlPZELBvAFAd0/IL0e8ObiQYS6A Je75rO/YqQEJnd5y7jjZE0h1pcF/CFPITv6cdIRA8mDqnsEE7AsgLEo4VGLUNwUh aZvMu+hrNMJdf4c00P/EKBirVviEra05ISBiGmpZcHhZ6iItwBjoxdDp0AyDPvM4 dydVE9rJuvOXbnUBYystgibNN14vZ1I39dNejQ1WLsOusd7Oa6Ktom67OOKMHjOs NpvYPPvZoG0mOdi4IQJHCwMHxGxLK7Y2VWT1bMbIJ9stx9HS0xQ= -----END CERTIFICATE-----Generated at Tue Jul 1 10:49:46 2025 by rpki-client