$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: dBIKW0YMscxpbyaBdOs5JqQ9JqJLI6KZAESi4ExtGz0= Subject key identifier: 9A:3E:10:8E:33:69:A1:12:2F:5B:5B:BC:B3:B7:65:41:5F:B4:C8:34 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 54A67D71509BE35842015E36B249052C55DAC09B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: 92 Signing time: Sat 28 Jun 2025 20:51:13 +0000 Manifest this update: Sat 28 Jun 2025 20:46:13 +0000 Manifest next update: Wed 02 Jul 2025 07:00:13 +0000 Files and hashes: 1: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 3: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: 89bTaJ2vGJbjjkxMwYCcKFEiKd3GaKgi5eogjtDp/HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a6:7d:71:50:9b:e3:58:42:01:5e:36:b2:49:05:2c:55:da:c0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Jun 28 20:46:13 2025 GMT Not After : Jul 2 07:00:13 2025 GMT Subject: CN=9A3E108E3369A1122F5B5BBCB3B765415FB4C834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:7c:73:d8:58:de:46:88:2f:4a:59:af:9a: 72:48:5e:69:b4:b6:68:f2:29:09:bb:d9:9a:32:99: 56:ff:7b:26:84:85:e4:f7:42:e4:aa:f5:12:3f:e1: 10:2e:a1:4b:8e:68:47:28:09:b3:85:62:33:ff:e7: 39:76:aa:25:f9:fa:fd:92:76:91:43:85:20:ca:37: 37:bb:85:e3:1c:af:98:e4:75:eb:2a:59:9c:6b:9c: 22:db:97:d6:76:1b:b4:b6:4d:de:a3:dd:c6:d9:89: b0:ec:02:7d:6f:7b:c4:8e:eb:b4:ff:e3:d3:e4:ba: 56:c4:21:ae:0d:74:55:f6:47:c4:5a:e5:83:66:7e: bb:55:7a:4a:70:22:49:25:53:60:90:b3:15:43:bb: 9d:72:ee:e6:8b:bc:3c:b8:a0:39:a1:2c:f6:62:a9: bf:f9:e3:53:86:c5:57:d8:0a:39:4c:b4:b9:73:6b: 01:58:7e:f0:7b:40:a4:0c:ed:40:a8:41:de:53:86: 3a:89:7c:85:0c:5c:11:b2:2b:d3:fb:98:2a:99:55: c4:32:c6:50:32:d9:01:49:c3:41:c0:5d:67:82:d8: 6e:c4:7c:04:0c:47:7b:70:e5:5f:02:f2:7a:4d:3f: 29:3a:cb:68:93:55:09:39:4b:30:c4:fb:ed:b4:11: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3E:10:8E:33:69:A1:12:2F:5B:5B:BC:B3:B7:65:41:5F:B4:C8:34 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:36:ff:e1:7c:73:63:69:8d:44:9c:b7:5d:2d:a9:d4:23:4d: 41:a5:71:dd:73:32:27:33:b3:64:44:ea:eb:aa:1d:15:31:30: 22:dd:d6:fd:a2:1b:a4:1f:00:e9:33:c8:85:e8:74:38:8f:a8: b1:81:9b:5d:f9:93:90:bf:e8:92:fd:3c:b0:45:b1:c4:44:2c: d9:23:75:b1:95:10:d0:90:25:6c:e5:d9:5c:a5:12:83:3d:1b: 6a:01:a9:71:48:7c:ea:e2:be:28:92:dd:28:b7:74:f1:a3:43: 5a:3f:11:3a:ae:d4:6d:49:55:07:d1:a7:c8:32:60:db:94:f9: ea:20:0a:fb:7f:a4:10:65:ce:fe:2d:ee:3e:1c:86:4e:a1:66: 3f:db:42:3b:43:38:ca:cd:fa:e3:ec:58:02:5e:3d:4b:e8:ec: 7b:bb:79:4f:0c:28:8e:2f:d1:a5:44:31:aa:fe:86:12:66:8e: bb:84:9d:10:67:42:a1:fd:a7:f1:ea:18:18:bb:2a:e5:21:4d: 6b:cf:c6:1b:71:49:2c:9e:81:a8:a0:3b:af:51:ea:eb:79:0d: ec:fc:4a:2d:5c:c8:0b:37:d2:85:16:e3:01:56:6d:cf:55:8c: 67:c6:b6:cd:36:3b:f5:e4:5a:c0:09:d4:50:7a:8e:21:ca:9a: 15:66:86:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKZ9cVCb41hCAV42skkFLFXawJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTA2MjgyMDQ2MTNaFw0yNTA3MDIwNzAwMTNaMDMxMTAvBgNV BAMTKDlBM0UxMDhFMzM2OUExMTIyRjVCNUJCQ0IzQjc2NTQxNUZCNEM4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5Xxz2FjeRogvSlmvmnJIXmm0 tmjyKQm72ZoymVb/eyaEheT3QuSq9RI/4RAuoUuOaEcoCbOFYjP/5zl2qiX5+v2S dpFDhSDKNze7heMcr5jkdesqWZxrnCLbl9Z2G7S2Td6j3cbZibDsAn1ve8SO67T/ 49PkulbEIa4NdFX2R8Ra5YNmfrtVekpwIkklU2CQsxVDu51y7uaLvDy4oDmhLPZi qb/541OGxVfYCjlMtLlzawFYfvB7QKQM7UCoQd5ThjqJfIUMXBGyK9P7mCqZVcQy xlAy2QFJw0HAXWeC2G7EfAQMR3tw5V8C8npNPyk6y2iTVQk5SzDE++20EanRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmj4QjjNpoRIvW1u8s7dlQV+0yDQwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB42/+F8c2NpjUSct10tqdQjTUGlcd1zMicz s2RE6uuqHRUxMCLd1v2iG6QfAOkzyIXodDiPqLGBm135k5C/6JL9PLBFscRELNkj dbGVENCQJWzl2VylEoM9G2oBqXFIfOriviiS3Si3dPGjQ1o/ETqu1G1JVQfRp8gy YNuU+eogCvt/pBBlzv4t7j4chk6hZj/bQjtDOMrN+uPsWAJePUvo7Hu7eU8MKI4v 0aVEMar+hhJmjruEnRBnQqH9p/HqGBi7KuUhTWvPxhtxSSyegaigO69R6ut5Dez8 Si1cyAs30oUW4wFWbc9VjGfGts02O/XkWsAJ1FB6jiHKmhVmhvQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:43 2025 by rpki-client