$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft (raw, json) Hash identifier: zEOu0n+uev+nfTpuWyK3jdzQUUIxtW6eLjxYV/PPhgk= Subject key identifier: 97:05:E4:C4:8F:C0:E9:61:0E:5F:7A:B5:C6:D3:13:B9:7D:E6:19:A5 Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Certificate serial: 7236EC105F9D51252130C6D1749D852033EB6FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft Manifest number: 45 Signing time: Mon 30 Jun 2025 06:21:32 +0000 Manifest this update: Mon 30 Jun 2025 06:16:32 +0000 Manifest next update: Thu 03 Jul 2025 13:31:32 +0000 Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: T1bNMqpFqTtICxGhMHAhYrL0Kp4CT+jehuuEyOzBKtM=) 2: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: 2lqHIcW8uza9u4jtUcnwE3CjODtgM8N4fzaUyg/1vks=) 3: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl (hash: yIZhMhwsTJ08N1MhNsQ8AcWDP1g51noupsARWj17Ymw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:ec:10:5f:9d:51:25:21:30:c6:d1:74:9d:85:20:33:eb:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Validity Not Before: Jun 30 06:16:32 2025 GMT Not After : Jul 3 13:31:32 2025 GMT Subject: CN=9705E4C48FC0E9610E5F7AB5C6D313B97DE619A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:93:e5:79:40:20:eb:28:3e:5c:66:df:ff: 96:c4:bd:e7:5d:04:fa:bb:52:ff:1d:9a:0a:0a:51: 2e:eb:6a:83:86:e9:be:0a:c0:f3:b7:0f:79:71:c9: a9:ac:b2:d3:42:77:37:da:39:27:60:bd:f1:5f:fd: 53:4c:43:ca:88:46:f7:3b:9c:8e:86:2b:77:c3:2f: 51:b2:ca:81:04:88:78:fc:5b:2f:6c:6b:e8:36:c1: 3d:8e:05:c0:68:33:dd:81:66:79:e7:0b:f1:4c:da: b6:1d:dd:36:a2:43:de:29:3b:aa:2e:0d:b1:15:2d: 6a:e7:6d:85:59:90:e4:05:7a:b9:9c:6d:8b:36:00: a2:14:65:95:76:3c:ce:27:a0:74:3d:8d:c7:0a:62: 61:9a:09:ed:f9:05:00:a5:0f:0d:79:fb:2a:aa:dd: 33:75:50:4c:c5:b0:3a:2e:73:f5:f7:23:eb:2a:b9: ba:73:0d:52:73:9f:5e:10:dc:11:b3:b6:4f:c6:14: 3d:fe:9b:4d:8a:21:14:9b:0e:e7:a7:04:6d:ee:e8: c4:48:8e:8b:d4:91:48:6e:63:3a:50:ab:da:9e:a5: 0e:c1:20:d5:9e:bf:9b:ae:58:38:c4:72:f4:7a:fd: 19:73:e8:9c:f8:bc:47:e3:7e:4a:db:da:98:62:2a: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:05:E4:C4:8F:C0:E9:61:0E:5F:7A:B5:C6:D3:13:B9:7D:E6:19:A5 X509v3 Authority Key Identifier: keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:05:f9:b7:b3:32:3b:0a:da:4e:49:60:b0:41:a7:c2:d6:1c: dc:b8:33:0c:c6:b2:78:be:41:f7:af:88:ca:90:b0:d0:b3:00: ee:e1:a7:a1:3e:db:ed:aa:67:89:02:73:2f:43:ca:1c:2a:a1: e0:fe:02:17:21:aa:26:2f:37:14:10:2e:47:e4:cb:fa:38:d1: 80:3a:38:e1:b0:e0:37:f8:c0:14:4c:53:d1:c7:4e:48:14:51: 32:f4:27:d7:52:6e:2b:79:22:3e:2e:b6:66:e6:46:ff:7a:b7: bf:c6:e0:c4:3b:19:66:14:ea:7f:e5:dc:25:b0:f3:c7:78:e7: e1:74:2d:40:56:06:09:3b:b3:57:67:03:1e:6f:b3:37:61:64: 86:3a:43:28:7d:d3:fb:79:7f:1a:9c:4d:42:c6:49:fc:79:66: af:d0:03:c8:9a:e7:5c:d1:45:c0:01:e9:20:7d:11:e6:a8:a8: b7:9b:1a:e1:ba:00:84:00:62:84:5f:e7:70:b2:54:8d:ff:46: d6:cc:d4:77:0b:00:7b:5b:f1:03:47:13:c8:c6:c0:c9:38:b4: 6f:65:33:26:61:da:a4:56:1d:bf:92:aa:b8:13:0b:ef:67:21: fd:5b:88:cc:dd:8b:70:55:4e:e9:ec:48:fc:26:82:fc:3a:bd: fb:32:be:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjbsEF+dUSUhMMbRdJ2FIDPrb6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkz NzJENTVBNTAeFw0yNTA2MzAwNjE2MzJaFw0yNTA3MDMxMzMxMzJaMDMxMTAvBgNV BAMTKDk3MDVFNEM0OEZDMEU5NjEwRTVGN0FCNUM2RDMxM0I5N0RFNjE5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpl5PleUAg6yg+XGbf/5bEvedd BPq7Uv8dmgoKUS7raoOG6b4KwPO3D3lxyamsstNCdzfaOSdgvfFf/VNMQ8qIRvc7 nI6GK3fDL1GyyoEEiHj8Wy9sa+g2wT2OBcBoM92BZnnnC/FM2rYd3TaiQ94pO6ou DbEVLWrnbYVZkOQFermcbYs2AKIUZZV2PM4noHQ9jccKYmGaCe35BQClDw15+yqq 3TN1UEzFsDouc/X3I+squbpzDVJzn14Q3BGztk/GFD3+m02KIRSbDuenBG3u6MRI jovUkUhuYzpQq9qepQ7BINWev5uuWDjEcvR6/Rlz6Jz4vEfjfkrb2phiKuAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwXkxI/A6WEOX3q1xtMTuX3mGaUwHwYDVR0j BBgwFoAUkxDEc+wSGd3JkRgn8rituTctVaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODE5Y2RkZi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMC85MzEwQzQ3M0VD MTIxOUREQzk5MTE4MjdGMkI4QURCOTM3MkQ1NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkzNzJE NTVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFE QjkzNzJENTVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMF+bezMjsK2k5JYLBBp8LWHNy4MwzGsni+ QfeviMqQsNCzAO7hp6E+2+2qZ4kCcy9DyhwqoeD+AhchqiYvNxQQLkfky/o40YA6 OOGw4Df4wBRMU9HHTkgUUTL0J9dSbit5Ij4utmbmRv96t7/G4MQ7GWYU6n/l3CWw 88d45+F0LUBWBgk7s1dnAx5vszdhZIY6Qyh90/t5fxqcTULGSfx5Zq/QA8ia51zR RcAB6SB9EeaoqLebGuG6AIQAYoRf53CyVI3/RtbM1HcLAHtb8QNHE8jGwMk4tG9l MyZh2qRWHb+SqrgTC+9nIf1biMzdi3BVTunsSPwmgvw6vfsyvio= -----END CERTIFICATE-----Generated at Tue Jul 1 05:04:08 2025 by rpki-client