$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: v9TzU+0I1wzVIEqWIxYuAdJXElEiqWzi/R+BHX7MUBg= Subject key identifier: AA:3F:AA:03:9B:70:5E:B3:EA:5C:ED:95:8A:4B:07:AB:2E:F5:2C:86 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 3BE3EC0C8B92E334FA5E3A3D162026D262C7B60E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 01DF Signing time: Sun 29 Jun 2025 05:31:49 +0000 Manifest this update: Sun 29 Jun 2025 05:26:49 +0000 Manifest next update: Wed 02 Jul 2025 09:29:49 +0000 Files and hashes: 1: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 2: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 3: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 4: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 5: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 6: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 7: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 8: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 9: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 10: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 11: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 12: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 13: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 14: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 15: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: S65mKn5k8jcxuuUh/lvXHCNkLH+mOkaf9gnMFRJVLys=) 16: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 17: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e3:ec:0c:8b:92:e3:34:fa:5e:3a:3d:16:20:26:d2:62:c7:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jun 29 05:26:49 2025 GMT Not After : Jul 2 09:29:49 2025 GMT Subject: CN=AA3FAA039B705EB3EA5CED958A4B07AB2EF52C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:0a:c7:d4:cd:56:9d:12:d0:d1:1d:0f:37: aa:f6:23:5a:77:63:0d:ac:de:67:f3:b5:4c:7a:3f: 4e:4c:88:5d:07:fc:d6:c3:d1:aa:fb:4e:68:4d:82: 34:ce:22:21:5d:c5:88:5c:7e:58:c1:5b:ee:d3:56: f1:20:59:28:25:72:9a:b3:2b:de:82:bc:a5:30:b3: 6d:1a:de:f6:f4:af:19:a3:ac:bb:36:ed:29:ed:4a: b1:1c:50:47:08:a1:57:e4:12:95:da:46:78:ed:4d: db:53:75:ca:23:df:ee:f6:db:52:67:ca:f0:e1:48: 70:01:69:21:dc:ff:71:40:46:c9:5f:11:15:75:e7: b3:b6:a7:4f:24:a9:a9:91:f1:34:fc:fe:13:5c:7f: eb:cb:c7:78:f0:48:5a:a4:98:7e:8e:bd:f9:30:1a: ac:17:78:a0:6d:b4:86:43:47:56:90:06:e9:2d:c0: 2b:93:8f:4d:1e:39:a3:6c:b7:7a:0c:b7:a1:21:fc: 1b:ae:ee:e7:63:04:73:a3:08:4d:5a:c4:73:02:30: 08:9c:eb:11:0b:92:4a:7c:0f:f0:39:47:01:75:ea: 7a:58:3f:f3:1d:10:37:46:c9:31:01:0b:e2:8a:c5: dc:ac:dc:74:7f:d2:3a:44:c2:97:aa:81:26:e1:3e: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:AA:03:9B:70:5E:B3:EA:5C:ED:95:8A:4B:07:AB:2E:F5:2C:86 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:48:0f:5f:e4:75:54:c2:a5:08:17:a3:00:5b:14:39:31: 49:35:46:39:80:cc:e7:77:4c:c4:21:bd:54:2b:7c:7f:77:49: 8f:a0:03:97:aa:9d:8f:32:db:fc:15:89:11:e4:82:4a:b8:18: 92:30:72:16:f7:6b:3b:4f:db:c3:fe:69:fd:f4:89:50:53:5f: 2d:aa:ce:cd:ce:88:37:0a:62:84:6f:8e:49:c7:d4:70:9d:db: d7:3f:f7:bc:2b:cd:72:87:22:85:3f:30:43:d4:5e:c6:a7:7a: bc:5d:02:bf:0c:b5:5a:5b:92:39:5d:22:73:70:0c:64:8b:5b: 7a:8f:98:f5:88:01:10:c3:7b:87:23:82:9d:74:47:27:6f:ba: 64:fd:b4:de:25:9a:26:d1:72:f5:f4:c3:b8:dc:58:37:2e:3c: b3:f4:54:96:bc:8b:a8:e5:04:b4:1e:31:63:8e:54:dc:87:d5: d8:74:1f:3d:63:5e:f2:a1:96:c3:ca:be:22:ef:31:63:f4:55: c1:d2:f5:ef:04:c9:f1:35:be:93:f5:24:fe:e5:f9:d5:17:29: 40:41:42:5e:da:71:f9:3e:30:5a:1a:74:f6:ec:1d:31:a6:43: 5c:e5:57:8b:1c:3c:e5:36:79:a7:86:b9:a0:bb:5b:56:4c:59: ce:35:26:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+PsDIuS4zT6Xjo9FiAm0mLHtg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA2MjkwNTI2NDlaFw0yNTA3MDIwOTI5NDlaMDMxMTAvBgNV BAMTKEFBM0ZBQTAzOUI3MDVFQjNFQTVDRUQ5NThBNEIwN0FCMkVGNTJDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygQrH1M1WnRLQ0R0PN6r2I1p3 Yw2s3mfztUx6P05MiF0H/NbD0ar7TmhNgjTOIiFdxYhcfljBW+7TVvEgWSglcpqz K96CvKUws20a3vb0rxmjrLs27SntSrEcUEcIoVfkEpXaRnjtTdtTdcoj3+7221Jn yvDhSHABaSHc/3FARslfERV157O2p08kqamR8TT8/hNcf+vLx3jwSFqkmH6Ovfkw GqwXeKBttIZDR1aQBuktwCuTj00eOaNst3oMt6Eh/Buu7udjBHOjCE1axHMCMAic 6xELkkp8D/A5RwF16npYP/MdEDdGyTEBC+KKxdys3HR/0jpEwpeqgSbhPojdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj+qA5twXrPqXO2ViksHqy71LIYwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzrSA9f5HVUwqUIF6MAWxQ5MUk1RjmAzOd3 TMQhvVQrfH93SY+gA5eqnY8y2/wViRHkgkq4GJIwchb3aztP28P+af30iVBTXy2q zs3OiDcKYoRvjknH1HCd29c/97wrzXKHIoU/MEPUXsanerxdAr8MtVpbkjldInNw DGSLW3qPmPWIARDDe4cjgp10RydvumT9tN4lmibRcvX0w7jcWDcuPLP0VJa8i6jl BLQeMWOOVNyH1dh0Hz1jXvKhlsPKviLvMWP0VcHS9e8EyfE1vpP1JP7l+dUXKUBB Ql7acfk+MFoadPbsHTGmQ1zlV4scPOU2eaeGuaC7W1ZMWc41Jms= -----END CERTIFICATE-----Generated at Mon Jun 30 13:44:08 2025 by rpki-client