$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: +FlpGvSQysjwcnNLNoQg2VdBdceJ8bWrZDWdFCnsTFE= Subject key identifier: 78:FD:EC:C2:51:EE:FD:CD:25:D6:42:10:AA:2C:85:64:C8:EE:EB:F5 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 1F8E07AB1BBFC2D3FA7CDE7562A97D5EA082B645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: A6 Signing time: Sun 29 Jun 2025 04:20:50 +0000 Manifest this update: Sun 29 Jun 2025 04:15:50 +0000 Manifest next update: Wed 02 Jul 2025 07:26:50 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) 2: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: 9tww8ZHlc8t049wVLd/A3HGApPywFubzpPmVC4KnIbg=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8e:07:ab:1b:bf:c2:d3:fa:7c:de:75:62:a9:7d:5e:a0:82:b6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Jun 29 04:15:50 2025 GMT Not After : Jul 2 07:26:50 2025 GMT Subject: CN=78FDECC251EEFDCD25D64210AA2C8564C8EEEBF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:04:12:6c:df:2d:a3:59:03:e6:cd:02:dc: 55:9e:40:77:63:03:09:46:7d:09:a0:0c:70:06:42: 36:72:44:54:37:6e:65:34:16:c4:29:44:04:cc:ee: c7:8d:66:db:57:99:8a:4f:8a:e7:fb:11:25:aa:ca: 88:89:da:1e:74:ab:75:c2:f8:c1:13:44:d5:29:99: 33:e5:49:51:b3:09:af:2d:ab:fe:42:c3:65:e0:28: de:7f:f0:c9:c6:9c:3a:11:a0:06:f6:24:94:34:38: 75:f9:51:ba:3c:e7:bf:fd:63:c6:57:cf:62:22:aa: 72:ea:b8:ae:82:b0:49:e6:58:27:80:6e:3d:45:eb: 9d:89:8f:ae:e5:a6:ab:dd:a7:d9:75:6f:4d:6d:da: 2c:6d:76:4b:0d:4d:93:f0:eb:86:09:76:69:0a:2f: 9e:33:0d:ea:e7:5c:b2:14:4d:50:61:2b:e8:03:53: 3d:4b:69:35:f0:5d:0e:10:ac:67:7b:da:50:e4:cf: 51:2e:5a:6c:ae:01:3a:ad:8e:7c:d1:19:19:da:a4: 2c:a7:21:b8:ab:35:86:a3:10:71:93:4e:ec:8f:8c: 68:bd:8c:b2:0a:f6:9f:ca:87:a2:e0:9f:f3:f5:e1: 1f:9d:57:bd:06:d9:3c:ad:3f:6c:84:b9:0a:bd:1c: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:EC:C2:51:EE:FD:CD:25:D6:42:10:AA:2C:85:64:C8:EE:EB:F5 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:97:ce:1e:aa:72:d1:b1:5b:76:24:27:35:d3:8a:fa:97:4c: 07:aa:76:75:ff:70:0e:c6:07:31:11:a1:36:1e:69:1c:c4:fa: 11:37:62:69:06:ae:46:37:02:f6:36:47:22:91:c4:a8:c9:24: 6d:b4:73:ad:b5:01:74:c0:1c:01:92:c4:cd:be:09:a5:7b:cc: a3:cf:ae:47:82:6f:b8:05:82:da:9f:f7:78:0f:07:32:4c:63: 4c:38:de:d2:29:c7:3b:4e:d6:95:a4:91:d6:7b:90:2f:6f:9d: 16:ed:ae:89:ae:54:99:c8:bd:68:a7:f8:33:2b:91:c7:72:c1: 9c:97:e4:97:e8:e1:7a:5b:fe:fe:cc:83:e0:ea:4a:64:23:5f: 22:5a:3c:df:d2:93:7f:fa:c9:4a:b3:56:ea:08:3b:b7:32:80: d3:c0:42:32:fc:07:5f:9b:8a:0a:ec:aa:d9:11:bb:3c:be:18: 56:78:35:1b:56:84:a8:e3:80:0a:42:bc:b4:48:c5:7e:62:51: 08:b7:79:86:95:fa:cc:5e:94:0e:8f:9a:f4:52:85:7f:90:62: f1:81:b1:83:b1:7d:97:dd:8f:c9:8c:e1:dd:46:39:c5:ec:d3: e4:87:3a:62:e4:35:3e:16:34:a7:e1:fd:15:ff:bd:c4:c9:a9: ab:7b:63:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH44Hqxu/wtP6fN51Yql9XqCCtkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA2MjkwNDE1NTBaFw0yNTA3MDIwNzI2NTBaMDMxMTAvBgNV BAMTKDc4RkRFQ0MyNTFFRUZEQ0QyNUQ2NDIxMEFBMkM4NTY0QzhFRUVCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisgQSbN8to1kD5s0C3FWeQHdj AwlGfQmgDHAGQjZyRFQ3bmU0FsQpRATM7seNZttXmYpPiuf7ESWqyoiJ2h50q3XC +METRNUpmTPlSVGzCa8tq/5Cw2XgKN5/8MnGnDoRoAb2JJQ0OHX5Ubo857/9Y8ZX z2IiqnLquK6CsEnmWCeAbj1F652Jj67lpqvdp9l1b01t2ixtdksNTZPw64YJdmkK L54zDernXLIUTVBhK+gDUz1LaTXwXQ4QrGd72lDkz1EuWmyuATqtjnzRGRnapCyn IbirNYajEHGTTuyPjGi9jLIK9p/Kh6Lgn/P14R+dV70G2TytP2yEuQq9HEe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeP3swlHu/c0l1kIQqiyFZMju6/UwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqXzh6qctGxW3YkJzXTivqXTAeqdnX/cA7G BzERoTYeaRzE+hE3YmkGrkY3AvY2RyKRxKjJJG20c621AXTAHAGSxM2+CaV7zKPP rkeCb7gFgtqf93gPBzJMY0w43tIpxztO1pWkkdZ7kC9vnRbtromuVJnIvWin+DMr kcdywZyX5Jfo4Xpb/v7Mg+DqSmQjXyJaPN/Sk3/6yUqzVuoIO7cygNPAQjL8B1+b igrsqtkRuzy+GFZ4NRtWhKjjgApCvLRIxX5iUQi3eYaV+sxelA6PmvRShX+QYvGB sYOxfZfdj8mM4d1GOcXs0+SHOmLkNT4WNKfh/RX/vcTJqat7Y94= -----END CERTIFICATE-----Generated at Mon Jun 30 11:47:16 2025 by rpki-client