$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: C5S4q74S27mfUXxaGUnG3thxyzyBhMMiZ3zIP9WWTOM= Subject key identifier: 55:B7:E2:0C:48:27:7C:32:FF:4A:80:F8:BE:F2:02:7D:54:A2:4D:35 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 5110245984B1E3699188AA0D354483FA28544730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 035B Signing time: Sun 29 Jun 2025 02:40:53 +0000 Manifest this update: Sun 29 Jun 2025 02:35:53 +0000 Manifest next update: Wed 02 Jul 2025 10:37:53 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: sy3Uhs0A/jG/bO8LEY7IYM3vd7nRBIVW9IJbV4dGNYI=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:10:24:59:84:b1:e3:69:91:88:aa:0d:35:44:83:fa:28:54:47:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Jun 29 02:35:53 2025 GMT Not After : Jul 2 10:37:53 2025 GMT Subject: CN=55B7E20C48277C32FF4A80F8BEF2027D54A24D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:58:62:07:96:34:b7:60:ef:7e:86:e9:b8: bb:d3:ac:20:e6:71:10:6a:01:db:80:d7:b7:55:d7: ea:f3:b2:5c:bc:1c:33:96:df:41:43:13:2d:8b:00: 2e:90:7e:26:f4:8e:60:84:dd:29:2c:4f:e9:50:4a: ff:2e:27:ee:e4:d4:7e:2f:8d:0d:2b:2a:63:80:fc: ba:12:de:1e:6e:f6:a5:76:11:bd:7d:34:06:e4:e7: 3c:52:cd:85:aa:8a:11:2b:9c:14:dd:44:3b:7c:06: 03:78:50:39:9f:97:ec:db:7a:bd:36:b4:6b:b4:6d: 0a:6e:d8:e5:94:f2:ef:09:ca:4e:a1:9d:ef:14:65: 92:c5:b5:af:9f:01:b3:d7:43:40:f8:ac:bc:44:55: 3d:bb:a7:75:df:56:a2:aa:e8:43:da:30:bd:45:c2: 68:7e:d7:fb:9f:22:a4:f2:a3:ba:60:47:38:1d:90: 88:2e:2e:12:79:ba:46:c0:d1:ec:e5:f9:ca:75:0e: 12:d4:f5:20:6e:67:68:22:ec:53:a5:36:91:d4:87: 08:3d:cc:ea:74:1f:aa:9c:8f:97:b9:3a:ce:41:ba: 64:28:db:fb:07:5f:bf:ef:32:d4:6c:ad:80:a1:f7: 7a:21:50:0a:1c:22:aa:4f:1c:ae:ed:7d:08:4d:25: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:E2:0C:48:27:7C:32:FF:4A:80:F8:BE:F2:02:7D:54:A2:4D:35 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e6:2a:b5:91:32:b5:d5:96:86:f7:fb:30:0f:c2:26:b7:0e: d4:57:8b:08:a4:e3:50:7c:d7:26:d9:db:95:6d:eb:2b:a4:12: 94:08:47:47:19:14:a1:3e:94:13:c1:34:f9:3e:81:a3:af:eb: 0f:51:54:0d:24:18:b9:3e:a4:0a:29:a2:e2:42:fd:aa:43:91: f4:57:d9:fe:e3:92:4d:3d:e1:e0:f9:22:72:0b:68:0a:3b:b1: 05:d0:b8:28:9e:42:5c:9a:19:d8:43:30:0a:6a:fa:2d:c9:5d: 64:d4:53:9a:93:77:1f:e2:2d:1a:8b:14:aa:b1:96:15:5c:a0: 2c:75:e2:f4:f7:00:a4:85:69:f7:a7:1f:8d:66:58:31:ee:20: 43:7a:ca:95:d2:18:f7:59:6e:5e:e4:72:90:78:a8:6d:37:f5: 93:9b:63:ef:5f:23:e5:0a:c7:37:db:b0:57:25:ec:ca:94:84: a3:75:0a:52:5c:69:3f:d0:d9:8f:a3:9c:01:83:89:d8:61:19: 83:d3:67:11:28:95:8a:ee:c1:f4:66:59:fb:8c:a6:9a:71:8f: c1:17:fb:51:de:8a:4b:0e:94:3d:e0:bf:71:76:29:38:c0:d5: d1:f1:70:49:56:6f:21:78:ac:eb:7c:0c:d4:d6:99:c1:b8:35: c6:4b:90:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURAkWYSx42mRiKoNNUSD+ihURzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA2MjkwMjM1NTNaFw0yNTA3MDIxMDM3NTNaMDMxMTAvBgNV BAMTKDU1QjdFMjBDNDgyNzdDMzJGRjRBODBGOEJFRjIwMjdENTRBMjREMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+VhiB5Y0t2DvfobpuLvTrCDm cRBqAduA17dV1+rzsly8HDOW30FDEy2LAC6Qfib0jmCE3SksT+lQSv8uJ+7k1H4v jQ0rKmOA/LoS3h5u9qV2Eb19NAbk5zxSzYWqihErnBTdRDt8BgN4UDmfl+zber02 tGu0bQpu2OWU8u8Jyk6hne8UZZLFta+fAbPXQ0D4rLxEVT27p3XfVqKq6EPaML1F wmh+1/ufIqTyo7pgRzgdkIguLhJ5ukbA0ezl+cp1DhLU9SBuZ2gi7FOlNpHUhwg9 zOp0H6qcj5e5Os5BumQo2/sHX7/vMtRsrYCh93ohUAocIqpPHK7tfQhNJVodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVbfiDEgnfDL/SoD4vvICfVSiTTUwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7mKrWRMrXVlob3+zAPwia3DtRXiwik41B8 1ybZ25Vt6yukEpQIR0cZFKE+lBPBNPk+gaOv6w9RVA0kGLk+pAopouJC/apDkfRX 2f7jkk094eD5InILaAo7sQXQuCieQlyaGdhDMApq+i3JXWTUU5qTdx/iLRqLFKqx lhVcoCx14vT3AKSFafenH41mWDHuIEN6ypXSGPdZbl7kcpB4qG039ZObY+9fI+UK xzfbsFcl7MqUhKN1ClJcaT/Q2Y+jnAGDidhhGYPTZxEolYruwfRmWfuMpppxj8EX +1HeiksOlD3gv3F2KTjA1dHxcElWbyF4rOt8DNTWmcG4NcZLkEs= -----END CERTIFICATE-----Generated at Mon Jun 30 13:29:59 2025 by rpki-client