$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: 4H2YK6qBP4QzUqTGZB1j5N4Q3hpRobQNt9D7TMxkaVM= Subject key identifier: EB:FF:8E:63:40:7A:6B:27:DF:39:23:32:67:16:DF:99:31:67:68:6C Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 254DC6863AE9F61FB4B05AE69848F167F7BF4C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 00:32:07 +0000 Manifest this update: Sun 29 Jun 2025 00:27:07 +0000 Manifest next update: Wed 02 Jul 2025 08:56:07 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: ccp4i6+qS1LJpFjwfOV5F/PTryxH/K5VR0dwHfsVWwQ=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4d:c6:86:3a:e9:f6:1f:b4:b0:5a:e6:98:48:f1:67:f7:bf:4c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jun 29 00:27:07 2025 GMT Not After : Jul 2 08:56:07 2025 GMT Subject: CN=EBFF8E63407A6B27DF3923326716DF993167686C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:a4:7e:3d:53:95:ae:c8:57:86:b0:e2:46: a5:1a:28:31:77:f3:26:fe:d1:59:93:64:eb:aa:02: 2f:98:b8:68:ef:b5:f3:c7:4c:da:2e:8e:c3:25:40: cb:01:bf:70:9f:cb:1e:79:15:ad:d8:af:41:0e:7c: 26:56:89:3a:61:1f:19:ef:ea:cf:f6:ec:8c:f8:60: 3c:2e:a8:96:2b:08:5d:71:ba:f0:44:e4:86:b2:f8: 1b:7f:4a:6c:5d:ba:ba:c6:c2:69:fb:52:df:5b:18: 83:48:de:8b:28:06:41:d4:17:ee:ba:89:52:06:e0: 2e:32:a4:28:70:9b:63:f0:b9:5d:91:ee:d7:4a:b4: d8:33:dc:5e:ae:31:8c:11:a8:d8:37:67:7d:1a:a5: 72:47:e0:44:a9:45:9b:45:68:be:29:3f:2a:f2:6f: 67:11:44:1d:aa:a3:92:a5:bb:dc:8a:21:c6:51:53: e1:e8:76:9b:76:d3:da:ad:59:7f:b6:3b:19:39:30: 20:e5:de:92:74:db:53:77:de:4e:63:f2:1e:38:2e: 6f:61:3d:6f:55:06:c8:f7:c0:17:ae:39:60:39:b3: 2d:9e:17:0c:3d:a0:83:9b:a4:cc:51:5d:13:bb:19: 01:63:de:eb:d4:70:73:9e:de:8e:58:ed:90:f0:ff: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FF:8E:63:40:7A:6B:27:DF:39:23:32:67:16:DF:99:31:67:68:6C X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0f:2f:33:68:ea:81:11:7b:f6:9a:0a:8c:7c:0e:59:33:a1: 60:aa:c8:77:90:13:8f:d4:47:fb:51:d1:26:1b:9d:5b:d0:ac: df:b9:bd:e9:5a:37:59:10:98:83:e2:66:3e:93:18:89:24:01: c7:dd:66:79:3d:b3:21:ef:ee:46:8b:33:68:bc:4d:3b:f2:3b: c4:b0:e8:02:88:17:ff:fd:2e:d2:e7:f3:52:80:11:94:f3:b9: 03:cb:8b:18:2e:36:cb:15:bb:2a:02:b9:ae:9a:49:6b:fa:18: fc:d2:f9:7e:9d:d8:9f:be:af:e1:c7:5a:4a:14:09:39:65:a5: c0:60:f7:70:96:2e:12:b8:6b:4c:1c:6f:ac:42:6a:51:1d:69: 01:56:4b:45:ab:69:4e:a6:f8:f3:6f:1c:db:f6:a7:e9:e5:51: 2c:85:11:d9:5f:39:c6:f4:1c:78:46:83:4d:2d:d1:d5:37:f1: 50:43:78:bc:6a:99:17:bf:02:b3:12:87:c0:6d:b5:f5:4f:86: 23:c8:e6:64:9b:38:fe:e9:bc:ca:51:2e:45:03:d6:83:1c:c1: 61:be:55:8d:14:4a:11:86:39:de:3a:8b:c8:f6:64:7f:f4:aa: 49:60:78:29:37:63:a0:83:b6:d9:09:78:d9:93:84:ba:7f:e7: 40:51:a7:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJU3Ghjrp9h+0sFrmmEjxZ/e/TBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA2MjkwMDI3MDdaFw0yNTA3MDIwODU2MDdaMDMxMTAvBgNV BAMTKEVCRkY4RTYzNDA3QTZCMjdERjM5MjMzMjY3MTZERjk5MzE2NzY4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAKR+PVOVrshXhrDiRqUaKDF3 8yb+0VmTZOuqAi+YuGjvtfPHTNoujsMlQMsBv3Cfyx55Fa3Yr0EOfCZWiTphHxnv 6s/27Iz4YDwuqJYrCF1xuvBE5Iay+Bt/SmxdurrGwmn7Ut9bGINI3osoBkHUF+66 iVIG4C4ypChwm2PwuV2R7tdKtNgz3F6uMYwRqNg3Z30apXJH4ESpRZtFaL4pPyry b2cRRB2qo5Klu9yKIcZRU+Hodpt209qtWX+2Oxk5MCDl3pJ021N33k5j8h44Lm9h PW9VBsj3wBeuOWA5sy2eFww9oIObpMxRXRO7GQFj3uvUcHOe3o5Y7ZDw/wd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/+OY0B6ayffOSMyZxbfmTFnaGwwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMPLzNo6oERe/aaCox8DlkzoWCqyHeQE4/U R/tR0SYbnVvQrN+5velaN1kQmIPiZj6TGIkkAcfdZnk9syHv7kaLM2i8TTvyO8Sw 6AKIF//9LtLn81KAEZTzuQPLixguNssVuyoCua6aSWv6GPzS+X6d2J++r+HHWkoU CTllpcBg93CWLhK4a0wcb6xCalEdaQFWS0WraU6m+PNvHNv2p+nlUSyFEdlfOcb0 HHhGg00t0dU38VBDeLxqmRe/ArMSh8BttfVPhiPI5mSbOP7pvMpRLkUD1oMcwWG+ VY0UShGGOd46i8j2ZH/0qklgeCk3Y6CDttkJeNmThLp/50BRp0o= -----END CERTIFICATE-----Generated at Mon Jun 30 05:51:07 2025 by rpki-client