$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: aqo0j2IG50lXlwXe6gCeI8fcjSz7BDnCMhATNsHHnhU= Subject key identifier: 41:4F:EA:5F:C8:31:B8:B2:17:B1:6E:76:65:1A:01:25:86:61:9E:58 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 5D776BFD4F05ECA1C12F6B4E48476457B70F0C60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: A3 Signing time: Sun 29 Jun 2025 03:51:17 +0000 Manifest this update: Sun 29 Jun 2025 03:46:17 +0000 Manifest next update: Wed 02 Jul 2025 07:01:17 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 2: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: b4cewG2iBHgsZLs0kNvu+/aUSJvkBPfMAd1fX3W8eWs=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:77:6b:fd:4f:05:ec:a1:c1:2f:6b:4e:48:47:64:57:b7:0f:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Jun 29 03:46:17 2025 GMT Not After : Jul 2 07:01:17 2025 GMT Subject: CN=414FEA5FC831B8B217B16E76651A012586619E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:16:c2:03:3d:6d:96:7f:d0:5f:48:18:ac:c5: 33:e5:b6:cb:00:b1:70:4b:64:7e:4a:19:4a:e1:a4: 70:2c:25:3c:02:83:92:e6:30:b6:39:25:6a:9d:c6: f8:8e:c0:fb:36:e9:c1:3c:7d:be:01:51:93:a1:9d: 02:59:e4:35:3e:dc:82:d6:e5:3b:af:26:75:ca:85: 35:e0:39:ce:49:e4:c5:44:5a:82:59:54:cc:95:3a: b8:21:00:72:9f:d2:6a:a9:48:14:8e:f0:e2:35:39: c4:56:16:3d:f0:13:8d:b8:5f:b0:e3:01:8a:9e:a7: 4c:83:da:7c:8d:76:8d:cd:57:0c:d1:ec:f9:d7:29: 76:02:03:5d:6f:11:3a:70:ba:c2:de:f7:30:22:cb: e4:58:4d:10:55:58:91:0b:6f:c2:6a:d1:9b:ca:ab: 0d:24:d0:44:2d:5f:ea:47:3e:a4:67:a2:84:7d:6c: 52:52:56:1b:c6:b5:f3:73:dd:51:e9:84:76:88:7d: de:79:77:4a:e6:82:6c:20:90:4b:27:f5:38:2f:94: 09:09:29:f0:54:5b:a5:d6:29:4b:b3:f4:ce:da:e3: 12:fb:e0:fb:31:c8:67:b7:e3:b5:0e:12:26:46:3f: 11:23:04:af:f7:3d:d4:7d:ac:18:9b:c0:5a:84:75: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4F:EA:5F:C8:31:B8:B2:17:B1:6E:76:65:1A:01:25:86:61:9E:58 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f1:7f:8d:7c:46:56:1e:bb:11:2d:f1:73:c5:29:b6:f4:aa: e3:87:dd:c0:8e:cd:4d:0d:25:c0:dd:c4:63:69:5b:b3:24:45: 02:f2:65:23:08:8d:22:a5:ea:d2:b1:2e:2d:c9:de:79:f6:29: 6c:11:f8:5f:2d:17:8d:13:5a:15:25:92:f6:97:67:2a:7f:c5: 36:8f:c8:8c:0c:ac:11:1f:b7:ee:cd:80:75:f3:4a:31:93:d7: 4c:37:03:12:06:83:a6:9b:98:96:ff:ed:23:8a:1b:d0:39:c1: 50:b9:85:58:94:1f:f1:61:49:84:af:99:a4:bf:3b:d2:69:ac: 6a:ec:b9:de:b1:2a:60:89:af:30:99:d7:46:30:59:87:e0:64: 31:da:1a:37:f2:69:08:5b:dd:43:fd:81:d6:4f:be:51:5f:2b: 96:9d:d1:85:f0:96:dd:4a:93:aa:80:22:e6:65:7c:60:b8:4b: 5d:55:43:c0:59:97:e5:ca:7e:9d:73:42:09:07:d6:83:22:d9: e6:91:50:c6:3d:ac:d0:0c:bd:e0:34:50:e1:01:a2:06:de:b4: 64:d5:d7:0e:6b:55:79:19:9f:11:57:be:9a:c3:72:d3:4f:23: 2e:ed:42:f2:c8:5e:4c:4d:31:2a:89:0f:6d:3e:72:57:fa:4a: fc:fa:1f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXdr/U8F7KHBL2tOSEdkV7cPDGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTA2MjkwMzQ2MTdaFw0yNTA3MDIwNzAxMTdaMDMxMTAvBgNV BAMTKDQxNEZFQTVGQzgzMUI4QjIxN0IxNkU3NjY1MUEwMTI1ODY2MTlFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFsIDPW2Wf9BfSBisxTPltssA sXBLZH5KGUrhpHAsJTwCg5LmMLY5JWqdxviOwPs26cE8fb4BUZOhnQJZ5DU+3ILW 5TuvJnXKhTXgOc5J5MVEWoJZVMyVOrghAHKf0mqpSBSO8OI1OcRWFj3wE424X7Dj AYqep0yD2nyNdo3NVwzR7PnXKXYCA11vETpwusLe9zAiy+RYTRBVWJELb8Jq0ZvK qw0k0EQtX+pHPqRnooR9bFJSVhvGtfNz3VHphHaIfd55d0rmgmwgkEsn9TgvlAkJ KfBUW6XWKUuz9M7a4xL74PsxyGe347UOEiZGPxEjBK/3PdR9rBibwFqEdQY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQU/qX8gxuLIXsW52ZRoBJYZhnlgwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLxf418RlYeuxEt8XPFKbb0quOH3cCOzU0N JcDdxGNpW7MkRQLyZSMIjSKl6tKxLi3J3nn2KWwR+F8tF40TWhUlkvaXZyp/xTaP yIwMrBEft+7NgHXzSjGT10w3AxIGg6abmJb/7SOKG9A5wVC5hViUH/FhSYSvmaS/ O9JprGrsud6xKmCJrzCZ10YwWYfgZDHaGjfyaQhb3UP9gdZPvlFfK5ad0YXwlt1K k6qAIuZlfGC4S11VQ8BZl+XKfp1zQgkH1oMi2eaRUMY9rNAMveA0UOEBogbetGTV 1w5rVXkZnxFXvprDctNPIy7tQvLIXkxNMSqJD20+clf6Svz6H2w= -----END CERTIFICATE-----Generated at Mon Jun 30 03:42:05 2025 by rpki-client