$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: LW+qUx5axwRaKumnjL0gbBo+x+8KiZGAS9+hr8u7WSI= Subject key identifier: FF:F3:8C:72:31:5A:1F:D6:72:3F:FA:70:1F:0C:45:54:20:95:6B:4B Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 4540F5B9CBE2D9F7F1EBCCE4A868D6331074351D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 77 Signing time: Sun 29 Jun 2025 17:50:54 +0000 Manifest this update: Sun 29 Jun 2025 17:45:54 +0000 Manifest next update: Wed 02 Jul 2025 22:32:54 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: diqunrypgXXo7qwGtmjCxp1JsFCg7mzKXzyVmhdIVE0=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:40:f5:b9:cb:e2:d9:f7:f1:eb:cc:e4:a8:68:d6:33:10:74:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Jun 29 17:45:54 2025 GMT Not After : Jul 2 22:32:54 2025 GMT Subject: CN=FFF38C72315A1FD6723FFA701F0C455420956B4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:35:39:84:eb:9c:04:73:a0:87:70:a1:58: ef:4a:91:49:87:44:b9:59:63:c8:5c:f2:0e:2a:3e: fe:3a:de:12:9b:1f:86:71:c1:1c:d7:23:1c:68:63: bc:3f:e8:1b:20:26:dd:be:36:95:de:e5:86:5d:ad: 72:99:6c:05:46:3f:bf:9d:2a:2b:64:5c:88:40:cf: 2f:a2:f6:71:d1:66:5b:5a:00:66:44:25:23:b9:39: 4f:16:6f:db:34:de:cf:46:c2:a1:9c:1b:47:c6:07: de:d3:1e:5d:14:14:5f:e2:93:85:14:af:1e:21:24: 24:bc:1c:7f:1b:20:c2:48:b1:58:37:a4:b6:45:99: 6b:d3:e1:b3:ad:a1:52:27:7d:8d:d1:d7:72:ca:1f: 54:19:47:8f:24:4e:83:c9:33:79:44:f1:05:29:5e: 3c:89:c0:a3:74:76:a4:ec:77:53:04:30:df:5d:e3: c1:47:3f:b9:45:17:b1:ec:a0:e8:19:11:67:61:b5: 96:9e:ed:19:eb:b6:19:5d:84:e9:73:bc:9a:a0:10: ae:f3:86:48:ad:a0:50:e4:57:ec:65:0f:7b:a6:a9: 70:e8:10:6f:d4:34:01:3f:e7:91:3b:67:13:db:ab: e4:41:75:e1:25:7e:3f:65:8b:f0:f6:69:23:2e:41: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:8C:72:31:5A:1F:D6:72:3F:FA:70:1F:0C:45:54:20:95:6B:4B X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:61:d0:14:4b:6d:ef:e4:4f:e9:c6:9b:39:e1:e2:4f:61: 0b:d5:61:97:cd:3b:f5:2f:68:b9:27:bf:60:63:db:03:27:61: f9:7c:37:ab:df:23:7e:ae:42:84:b4:02:be:08:5b:bb:c0:da: 47:94:c2:c5:fe:ba:48:45:bc:cd:08:50:ce:88:e1:0a:81:1a: 77:c0:9f:3f:56:a1:37:f0:2c:91:d5:32:3b:a9:00:40:62:53: 26:1a:43:1a:5b:7b:8a:10:95:d1:e4:f6:10:a5:a3:cd:2b:31: b2:0d:66:54:a0:04:cf:e6:41:7d:77:0d:4f:c2:7e:f9:44:11: da:8b:ef:72:44:9b:d0:c7:5e:f0:68:a2:fc:9a:81:c0:7d:4b: 4d:e8:43:8a:00:9b:9c:c3:8e:0b:b9:4e:8d:fd:d0:d4:39:42: 50:bc:7a:c7:e9:63:27:59:8c:e4:a4:98:be:4d:5d:46:eb:82: 13:77:4d:59:8c:ad:9a:ac:53:0f:e6:4c:84:df:96:d3:f0:3c: a9:66:48:18:3e:67:a9:78:4d:cd:45:48:61:04:0a:e6:92:8a: 8f:ca:b9:fb:1f:07:be:31:54:e7:7c:41:eb:f0:57:98:a1:06: d6:a5:a4:c6:f3:95:b9:32:c2:4a:fd:6e:8b:14:ad:3e:be:03: ee:ef:f8:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUD1ucvi2ffx68zkqGjWMxB0NR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA2MjkxNzQ1NTRaFw0yNTA3MDIyMjMyNTRaMDMxMTAvBgNV BAMTKEZGRjM4QzcyMzE1QTFGRDY3MjNGRkE3MDFGMEM0NTU0MjA5NTZCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpzU5hOucBHOgh3ChWO9KkUmH RLlZY8hc8g4qPv463hKbH4ZxwRzXIxxoY7w/6BsgJt2+NpXe5YZdrXKZbAVGP7+d KitkXIhAzy+i9nHRZltaAGZEJSO5OU8Wb9s03s9GwqGcG0fGB97THl0UFF/ik4UU rx4hJCS8HH8bIMJIsVg3pLZFmWvT4bOtoVInfY3R13LKH1QZR48kToPJM3lE8QUp XjyJwKN0dqTsd1MEMN9d48FHP7lFF7HsoOgZEWdhtZae7RnrthldhOlzvJqgEK7z hkitoFDkV+xlD3umqXDoEG/UNAE/55E7ZxPbq+RBdeElfj9li/D2aSMuQWjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//OMcjFaH9ZyP/pwHwxFVCCVa0swHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9dYdAUS23v5E/pxps54eJPYQvVYZfNO/Uv aLknv2Bj2wMnYfl8N6vfI36uQoS0Ar4IW7vA2keUwsX+ukhFvM0IUM6I4QqBGnfA nz9WoTfwLJHVMjupAEBiUyYaQxpbe4oQldHk9hClo80rMbINZlSgBM/mQX13DU/C fvlEEdqL73JEm9DHXvBoovyagcB9S03oQ4oAm5zDjgu5To390NQ5QlC8esfpYydZ jOSkmL5NXUbrghN3TVmMrZqsUw/mTITfltPwPKlmSBg+Z6l4Tc1FSGEECuaSio/K ufsfB74xVOd8QevwV5ihBtalpMbzlbkywkr9bosUrT6+A+7v+Ec= -----END CERTIFICATE-----Generated at Mon Jun 30 00:34:12 2025 by rpki-client