$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: c0zJ382Jh8pDUTZazEZHPl10P0B7kpjgYLjk3S0GAC0= Subject key identifier: 26:A5:1D:05:13:1D:AA:77:AA:49:50:8C:47:28:0F:85:6F:04:6E:2A Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 5F89C984C10D6E3113496D7505208E5B57790E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: A6 Signing time: Sun 29 Jun 2025 10:40:36 +0000 Manifest this update: Sun 29 Jun 2025 10:35:36 +0000 Manifest next update: Wed 02 Jul 2025 16:30:36 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: bWIObwCykQUtW+zXMPyzujBfD33ZGKDJNiboYQSre58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 16:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:89:c9:84:c1:0d:6e:31:13:49:6d:75:05:20:8e:5b:57:79:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Jun 29 10:35:36 2025 GMT Not After : Jul 2 16:30:36 2025 GMT Subject: CN=26A51D05131DAA77AA49508C47280F856F046E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:fa:af:4e:a7:a0:37:35:e0:43:be:2e:43: 8e:53:89:91:1b:95:8b:6c:da:6d:65:b5:f1:99:eb: 4a:70:1c:47:f3:d9:a0:a4:cb:5d:be:34:95:26:f1: fc:d0:15:6e:60:af:cd:b3:f3:42:69:27:74:f1:15: 78:b1:67:74:0f:34:09:da:bd:66:e2:e8:32:cd:ba: f2:27:b7:05:26:f2:ec:1b:28:c1:67:23:c5:fb:db: d9:ab:38:56:fa:c0:d0:34:d1:62:bc:8d:48:3f:4c: 49:0b:b3:6f:dc:8c:cc:9c:24:4d:06:c9:9d:2d:76: 28:2d:11:ae:38:58:be:90:15:61:0a:69:0b:08:38: bd:21:28:26:6b:0d:69:0e:b7:fc:3c:07:d1:46:35: 7c:c8:9d:13:46:40:95:8f:22:a7:48:32:0d:2b:3e: 3a:91:9a:4e:86:3c:e0:83:c3:70:a1:6f:ae:6a:a2: c9:59:a5:e7:d5:2d:a2:4c:fd:af:04:78:fd:fe:8b: 18:7d:4c:db:99:6a:ef:eb:99:f1:60:cb:dc:80:8f: de:9b:3c:d7:8f:a2:9f:66:b1:33:97:bd:94:ca:bb: a8:da:7d:45:d2:bf:2d:ac:0e:5e:99:f6:c3:84:00: db:46:ac:c1:65:fe:c2:46:d6:a9:0d:59:4d:b9:5c: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:1D:05:13:1D:AA:77:AA:49:50:8C:47:28:0F:85:6F:04:6E:2A X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:68:43:17:cd:6f:86:60:52:bb:33:5c:58:f4:41:2a:be: c5:16:d5:e3:ca:b6:74:61:cd:ee:48:af:9e:ba:a2:20:87:8f: 13:3e:7c:b5:61:00:ff:3d:c3:42:53:63:ba:40:35:bb:2c:41: d2:9d:fc:7b:7c:0c:f8:01:73:5d:b0:df:ca:78:e3:6b:d1:4a: f3:2e:14:40:80:9e:a6:1f:ce:49:8d:53:ef:1e:58:45:07:77: e8:b9:01:b9:c4:65:82:2f:9d:a1:e5:65:f4:3a:ff:cf:4e:f3: 67:f7:51:27:f4:28:fa:8e:0c:a3:76:05:c5:2c:30:2b:74:a8: 16:26:ad:86:9f:0d:cd:13:26:3c:e1:11:4c:47:34:b3:ee:63: c1:b9:e3:04:ef:08:77:0f:f3:8c:13:c5:5c:cf:d8:b4:27:c8: f1:d3:5b:99:de:6f:ca:db:20:04:fd:26:89:c1:61:0b:b5:80: eb:3d:83:3e:9e:67:b5:a3:fd:9b:ab:a5:1d:bf:a4:0f:77:36: 36:e6:3d:6c:0e:a2:8f:c8:ca:a0:92:1a:fd:0d:16:b4:bc:de: 1c:b0:28:3e:31:ba:81:76:33:6c:cd:74:7b:9a:d0:65:1e:57: 94:18:f2:56:39:55:9f:f2:b5:bc:06:86:2c:07:3b:1c:b1:61: 54:c0:59:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4nJhMENbjETSW11BSCOW1d5Dg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA2MjkxMDM1MzZaFw0yNTA3MDIxNjMwMzZaMDMxMTAvBgNV BAMTKDI2QTUxRDA1MTMxREFBNzdBQTQ5NTA4QzQ3MjgwRjg1NkYwNDZFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmt/qvTqegNzXgQ74uQ45TiZEb lYts2m1ltfGZ60pwHEfz2aCky12+NJUm8fzQFW5gr82z80JpJ3TxFXixZ3QPNAna vWbi6DLNuvIntwUm8uwbKMFnI8X729mrOFb6wNA00WK8jUg/TEkLs2/cjMycJE0G yZ0tdigtEa44WL6QFWEKaQsIOL0hKCZrDWkOt/w8B9FGNXzInRNGQJWPIqdIMg0r PjqRmk6GPOCDw3Chb65qoslZpefVLaJM/a8EeP3+ixh9TNuZau/rmfFgy9yAj96b PNePop9msTOXvZTKu6jafUXSvy2sDl6Z9sOEANtGrMFl/sJG1qkNWU25XOcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqUdBRMdqneqSVCMRygPhW8EbiowHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH98aEMXzW+GYFK7M1xY9EEqvsUW1ePKtnRh ze5Ir566oiCHjxM+fLVhAP89w0JTY7pANbssQdKd/Ht8DPgBc12w38p442vRSvMu FECAnqYfzkmNU+8eWEUHd+i5AbnEZYIvnaHlZfQ6/89O82f3USf0KPqODKN2BcUs MCt0qBYmrYafDc0TJjzhEUxHNLPuY8G54wTvCHcP84wTxVzP2LQnyPHTW5neb8rb IAT9JonBYQu1gOs9gz6eZ7Wj/ZurpR2/pA93NjbmPWwOoo/IyqCSGv0NFrS83hyw KD4xuoF2M2zNdHua0GUeV5QY8lY5VZ/ytbwGhiwHOxyxYVTAWX4= -----END CERTIFICATE-----Generated at Tue Jul 1 12:05:17 2025 by rpki-client