$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: a3uO0w4Mwe3h22/0vFyeyqqlJnTIpwBEtkgyMep84nE= Subject key identifier: 90:9B:3F:42:63:34:2C:F1:45:0F:4B:18:36:83:B0:39:01:62:C2:74 Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 03BF584F83786A73044E608310FE7F7E4C37BF6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: E1 Signing time: Sat 28 Jun 2025 15:40:40 +0000 Manifest this update: Sat 28 Jun 2025 15:35:40 +0000 Manifest next update: Tue 01 Jul 2025 16:43:40 +0000 Files and hashes: 1: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: IgVoycKP5/mx7bgYUiplGIVv/fIKosSF5j4o1IpUqEA=) 2: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: WVxYy/UMXleCs3W0OZGq+vSbczVE49tu7VV7NNqRqq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bf:58:4f:83:78:6a:73:04:4e:60:83:10:fe:7f:7e:4c:37:bf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: Jun 28 15:35:40 2025 GMT Not After : Jul 1 16:43:40 2025 GMT Subject: CN=909B3F4263342CF1450F4B183683B0390162C274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:d4:97:24:9e:dd:b6:51:9d:ca:db:78:ec: 8d:60:e2:7e:e5:ee:b6:a1:ff:41:93:d7:77:2d:a1: 27:23:c4:f9:58:5f:1f:78:b1:ed:43:6d:20:82:b9: e0:da:16:9f:57:22:08:e3:3b:35:99:19:5d:51:ef: 00:ad:8e:ad:c0:f9:5a:fb:3a:4e:d5:21:ed:c4:6b: 2c:e3:a6:c5:2a:c2:b3:63:19:17:e3:3b:4a:84:d5: 4f:b5:72:ec:d5:27:34:a2:92:a4:9b:71:c2:e5:a2: 3b:64:fb:e0:d0:dc:4e:b5:2e:07:17:77:31:f1:c4: a1:c2:90:48:29:f9:e8:2e:12:16:12:6b:8b:3c:e2: 02:cf:8a:b2:4d:74:36:4b:07:53:ff:c4:8e:f9:e9: 1c:40:a8:89:e7:e0:7b:e5:74:4d:b0:a4:1d:91:5e: de:e0:42:fb:81:4b:2c:22:9c:7c:4f:e4:a4:d7:28: 1d:35:5f:12:da:7d:ba:0d:ff:8f:ae:ce:ab:11:a7: 99:61:41:d4:8b:ee:be:87:56:ff:50:20:c9:14:cb: 07:37:7e:98:e0:4f:4d:d3:45:f0:ef:9e:4e:b6:ec: bd:a4:99:c1:f5:6b:92:4e:3a:45:12:a0:9c:d7:43: 96:95:87:13:b2:ff:57:fb:a6:a4:76:2b:4b:32:16: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9B:3F:42:63:34:2C:F1:45:0F:4B:18:36:83:B0:39:01:62:C2:74 X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:90:03:60:53:ef:b6:36:ea:a2:eb:e2:4f:1c:e0:d9:6c:73: 05:64:36:1d:9c:96:54:04:bb:04:97:09:53:b0:5c:5c:c4:73: 9d:ce:a5:32:d6:65:4a:5a:ff:0f:26:cf:61:1f:6d:95:50:84: b4:35:70:d8:0d:1f:f0:25:e7:3c:5b:9a:ae:db:e6:de:7c:0c: 72:74:2f:52:32:a1:a5:da:23:3a:54:d9:2e:0d:5d:09:c2:be: 07:4e:84:72:b0:43:44:87:b9:81:da:da:96:90:2f:1a:a1:ee: 1f:8d:df:32:bc:42:f3:92:d1:42:45:f4:15:6e:9e:a6:d4:70: eb:e1:58:4c:d3:53:9c:7b:ce:d5:02:88:47:a7:02:d2:26:84: d4:31:bb:00:2f:a1:70:f0:5f:a2:3c:41:67:d9:81:94:4f:62: da:61:ed:0d:e4:38:b2:30:32:7e:ac:f1:a2:06:bb:db:5a:c6: 00:a7:21:0b:b1:d0:6c:00:d3:ce:49:55:35:35:9c:eb:71:c2: 55:56:50:06:44:4b:e8:57:81:13:f2:0c:1c:e5:36:7b:18:94: 84:f6:2c:9d:7b:56:4f:3f:8a:7e:1e:f2:88:69:c7:6b:51:3c: 20:28:1c:da:9d:19:a8:28:84:55:b0:88:60:b0:18:81:39:17: 5a:22:7a:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA79YT4N4anMETmCDEP5/fkw3v2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNTA2MjgxNTM1NDBaFw0yNTA3MDExNjQzNDBaMDMxMTAvBgNV BAMTKDkwOUIzRjQyNjMzNDJDRjE0NTBGNEIxODM2ODNCMDM5MDE2MkMyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMtSXJJ7dtlGdytt47I1g4n7l 7rah/0GT13ctoScjxPlYXx94se1DbSCCueDaFp9XIgjjOzWZGV1R7wCtjq3A+Vr7 Ok7VIe3EayzjpsUqwrNjGRfjO0qE1U+1cuzVJzSikqSbccLlojtk++DQ3E61LgcX dzHxxKHCkEgp+eguEhYSa4s84gLPirJNdDZLB1P/xI756RxAqInn4HvldE2wpB2R Xt7gQvuBSywinHxP5KTXKB01XxLafboN/4+uzqsRp5lhQdSL7r6HVv9QIMkUywc3 fpjgT03TRfDvnk627L2kmcH1a5JOOkUSoJzXQ5aVhxOy/1f7pqR2K0syFg7JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJs/QmM0LPFFD0sYNoOwOQFiwnQwHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6QA2BT77Y26qLr4k8c4NlscwVkNh2cllQE uwSXCVOwXFzEc53OpTLWZUpa/w8mz2EfbZVQhLQ1cNgNH/Al5zxbmq7b5t58DHJ0 L1IyoaXaIzpU2S4NXQnCvgdOhHKwQ0SHuYHa2paQLxqh7h+N3zK8QvOS0UJF9BVu nqbUcOvhWEzTU5x7ztUCiEenAtImhNQxuwAvoXDwX6I8QWfZgZRPYtph7Q3kOLIw Mn6s8aIGu9taxgCnIQux0GwA085JVTU1nOtxwlVWUAZES+hXgRPyDBzlNnsYlIT2 LJ17Vk8/in4e8ohpx2tRPCAoHNqdGagohFWwiGCwGIE5F1oiesY= -----END CERTIFICATE-----Generated at Sun Jun 29 22:50:14 2025 by rpki-client