$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: buaajUr/QwU8S2GYWTAyOOg2LLfpIaS+rU3dvKMIIZM= Subject key identifier: 4B:6C:DC:01:21:B3:34:68:81:8D:B9:D8:99:1F:54:EA:2B:E4:5C:AD Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 3147FF81CE9F608B61404B006D6076374B763B92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04E9 Signing time: Mon 30 Jun 2025 20:51:53 +0000 Manifest this update: Mon 30 Jun 2025 20:46:53 +0000 Manifest next update: Thu 03 Jul 2025 22:18:53 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 8Wv0x9X35+koqv+1DVSR3CiLLzEbgLa+7Yp97aEZJCI=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:ff:81:ce:9f:60:8b:61:40:4b:00:6d:60:76:37:4b:76:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Jun 30 20:46:53 2025 GMT Not After : Jul 3 22:18:53 2025 GMT Subject: CN=4B6CDC0121B33468818DB9D8991F54EA2BE45CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a3:e6:8c:2c:2d:bc:02:19:c2:ab:9e:1a:a9: 19:f6:e1:94:ee:df:b3:22:22:0c:68:6a:ad:4a:10: 3c:93:a6:1c:b6:7f:7c:87:4a:ac:6e:9b:91:41:a8: b3:9f:d3:07:cc:45:03:be:7a:d0:e7:26:28:78:f1: 34:af:06:d8:be:75:b3:96:e4:85:3e:de:c1:46:59: e7:6a:2f:75:b9:9d:59:14:11:ef:d0:10:95:ff:94: eb:93:d8:81:cd:a5:78:fd:29:6a:68:82:6a:2b:19: ae:41:da:43:b5:17:cc:80:21:16:02:24:a3:87:f3: c9:c8:32:c9:9a:25:4d:ef:47:1e:b5:17:dd:7d:31: af:b0:6b:29:96:fc:3d:10:37:64:a5:4b:29:00:4c: db:8d:15:b5:6b:49:44:ef:83:80:d4:b6:cb:a3:c7: a0:bd:4a:d4:e5:6c:e2:ff:54:05:6b:a4:48:f9:75: cc:90:05:c0:3f:a3:ff:01:34:14:c2:42:70:dd:e8: 60:ef:86:3a:d9:e0:7a:49:69:41:3a:35:6b:15:8a: 17:dc:74:00:d7:7a:a4:70:97:76:5a:64:09:f7:17: 2c:4f:38:55:80:56:a5:10:85:3a:e4:15:fb:7b:14: 85:11:3f:30:7a:ac:08:78:b3:67:63:81:98:f4:de: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:DC:01:21:B3:34:68:81:8D:B9:D8:99:1F:54:EA:2B:E4:5C:AD X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:2f:35:82:47:6b:cf:cd:7c:74:5d:51:46:46:23:5b:1e:b3: f9:f6:a2:2f:23:18:ac:8a:81:c5:a2:92:77:28:83:e9:0c:ad: ae:37:f3:3c:9f:ab:9e:6c:9f:5d:ed:3c:d3:6a:95:b8:ed:11: 8b:7b:22:1b:3d:9b:d0:48:81:28:80:ba:aa:67:b1:c1:bd:b7: bd:73:75:67:43:e1:9f:85:62:e6:f5:6c:b2:d5:f2:88:e2:cd: 02:9c:4d:ee:69:79:d9:75:d7:79:44:36:7f:73:a1:33:9e:59: 71:d7:3a:dc:84:e0:96:db:68:c5:6b:81:b4:22:7a:e0:66:d0: 99:1d:fe:fb:38:c4:3d:2e:60:d0:46:ee:34:84:dc:73:20:93: 7e:15:fe:8f:ea:2f:8a:ec:29:e0:37:54:74:a0:c6:69:f1:19: 15:63:b6:01:62:20:85:97:6b:a9:e8:a4:9b:a3:f5:fa:d1:9c: f8:e2:3f:1c:ae:85:ba:91:9e:df:3a:9a:d7:cf:0a:46:1b:97: ed:e8:f9:ec:69:6c:7a:36:21:b1:2c:55:b6:7f:fe:98:9a:67: 35:dc:20:f7:42:92:8b:68:43:e9:1f:5d:9c:88:03:1e:2a:be: f6:a1:76:7e:6a:c9:f5:cd:45:3e:2e:d7:f0:ba:84:11:34:d4: 59:d9:be:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUf/gc6fYIthQEsAbWB2N0t2O5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA2MzAyMDQ2NTNaFw0yNTA3MDMyMjE4NTNaMDMxMTAvBgNV BAMTKDRCNkNEQzAxMjFCMzM0Njg4MThEQjlEODk5MUY1NEVBMkJFNDVDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDro+aMLC28AhnCq54aqRn24ZTu 37MiIgxoaq1KEDyTphy2f3yHSqxum5FBqLOf0wfMRQO+etDnJih48TSvBti+dbOW 5IU+3sFGWedqL3W5nVkUEe/QEJX/lOuT2IHNpXj9KWpogmorGa5B2kO1F8yAIRYC JKOH88nIMsmaJU3vRx61F919Ma+waymW/D0QN2SlSykATNuNFbVrSUTvg4DUtsuj x6C9StTlbOL/VAVrpEj5dcyQBcA/o/8BNBTCQnDd6GDvhjrZ4HpJaUE6NWsVihfc dADXeqRwl3ZaZAn3FyxPOFWAVqUQhTrkFft7FIURPzB6rAh4s2djgZj03m+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2zcASGzNGiBjbnYmR9U6ivkXK0wHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYvNYJHa8/NfHRdUUZGI1ses/n2oi8jGKyK gcWikncog+kMra438zyfq55sn13tPNNqlbjtEYt7Ihs9m9BIgSiAuqpnscG9t71z dWdD4Z+FYub1bLLV8ojizQKcTe5pedl113lENn9zoTOeWXHXOtyE4JbbaMVrgbQi euBm0Jkd/vs4xD0uYNBG7jSE3HMgk34V/o/qL4rsKeA3VHSgxmnxGRVjtgFiIIWX a6nopJuj9frRnPjiPxyuhbqRnt86mtfPCkYbl+3o+expbHo2IbEsVbZ//piaZzXc IPdCkotoQ+kfXZyIAx4qvvahdn5qyfXNRT4u1/C6hBE01FnZvl0= -----END CERTIFICATE-----Generated at Wed Jul 2 04:19:08 2025 by rpki-client