$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: VX9QsWQxlv2fjfoJdryg4/xri7ne2SBSR+aL6yBMXPo= Subject key identifier: 71:0D:FE:D2:45:6D:C7:C1:95:9D:08:A6:26:96:55:38:EC:04:C4:DE Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 0B83C8AB620044440E5002F42685F4BB8EE3857C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: CD Signing time: Sun 29 Jun 2025 06:52:10 +0000 Manifest this update: Sun 29 Jun 2025 06:47:10 +0000 Manifest next update: Wed 02 Jul 2025 17:42:10 +0000 Files and hashes: 1: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: rOUxtnuMAIp7VJKGuWfpdc1+mTXJq7HJOUUfxcdZBSg=) 2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:83:c8:ab:62:00:44:44:0e:50:02:f4:26:85:f4:bb:8e:e3:85:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Jun 29 06:47:10 2025 GMT Not After : Jul 2 17:42:10 2025 GMT Subject: CN=710DFED2456DC7C1959D08A626965538EC04C4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1f:db:43:88:b7:8a:77:1b:ce:93:5a:d6:b0: 2b:f8:d5:fa:1e:0b:0b:f4:a2:13:fa:02:b1:24:be: b4:1f:21:9b:ca:7f:6c:61:6e:f3:a0:73:e5:3c:0d: 49:c1:cb:13:0a:77:6e:5f:75:f8:67:63:52:1b:3f: e6:a2:89:64:79:4f:48:52:42:79:26:7c:37:2f:69: 80:4b:0a:05:fb:22:6e:29:ab:b5:b1:9e:41:e4:65: 4d:4a:6b:fa:af:48:5a:22:a2:49:51:72:3b:f3:63: 59:79:bc:61:df:67:96:dd:37:12:b4:d5:9e:cd:41: 5f:61:12:ed:29:33:ee:29:f9:8c:45:41:ad:f3:9e: 82:1d:ee:34:e7:dd:49:34:42:ba:6b:de:c2:93:53: e4:e8:5a:0e:ac:c8:21:ca:95:52:76:23:10:56:85: 6d:67:fa:01:1c:a3:3f:4d:49:78:a4:6e:a2:c6:59: 14:10:26:1b:96:b6:70:7c:93:2a:c8:23:4c:ca:b9: 8c:d7:14:56:2e:04:a9:fd:5f:78:10:59:bc:1a:5d: cb:ab:ff:a8:d7:6e:ac:ee:cd:91:fe:a3:6b:44:df: 07:6f:97:b7:82:c6:d0:21:e4:c0:23:a6:50:23:b5: f8:99:af:db:52:b9:de:8e:fb:7e:2b:ee:bc:ff:4d: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:FE:D2:45:6D:C7:C1:95:9D:08:A6:26:96:55:38:EC:04:C4:DE X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6b:79:79:cb:36:cf:8b:02:17:ea:08:5c:0f:ff:24:a5:40: 22:7c:f5:db:9c:f7:81:a2:16:cd:d8:72:8b:bf:3e:03:18:ac: c8:fc:0c:8e:db:b7:88:d6:b0:36:6d:11:3f:78:8f:89:19:97: d5:ad:90:ea:c1:b7:92:1e:7c:fd:ff:0f:a9:aa:e0:f8:48:06: 89:0f:5a:72:bb:6e:08:24:14:64:50:d0:4e:78:d5:35:fb:7d: 33:10:bf:c3:7b:22:86:9b:e4:c6:39:2b:07:c9:4d:d7:c9:38: 81:9f:68:91:75:a0:11:65:5f:e7:aa:d0:18:96:a8:d9:95:7e: db:bf:8f:00:48:90:f4:82:64:50:f2:0e:2e:1b:bc:87:83:66: b2:f3:9e:35:56:7f:c1:20:31:92:cc:06:d6:96:4f:21:aa:67: 59:4d:75:75:ea:4e:77:ea:88:7a:77:94:44:91:2c:ee:82:a1: a7:5e:a3:e9:52:0d:53:78:86:8a:94:9f:eb:ea:c9:50:1a:be: 97:18:16:ed:20:7a:63:76:9c:a1:e4:de:57:09:65:73:ea:9a: 63:f9:42:08:9b:db:4e:cd:c7:e1:4f:81:dc:a6:d2:b0:72:61: 42:30:c5:42:5b:14:4d:28:f1:64:72:c8:ad:8e:d3:b1:eb:83: 9d:70:fb:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4PIq2IAREQOUAL0JoX0u47jhXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTA2MjkwNjQ3MTBaFw0yNTA3MDIxNzQyMTBaMDMxMTAvBgNV BAMTKDcxMERGRUQyNDU2REM3QzE5NTlEMDhBNjI2OTY1NTM4RUMwNEM0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2H9tDiLeKdxvOk1rWsCv41foe Cwv0ohP6ArEkvrQfIZvKf2xhbvOgc+U8DUnByxMKd25fdfhnY1IbP+aiiWR5T0hS QnkmfDcvaYBLCgX7Im4pq7WxnkHkZU1Ka/qvSFoioklRcjvzY1l5vGHfZ5bdNxK0 1Z7NQV9hEu0pM+4p+YxFQa3znoId7jTn3Uk0Qrpr3sKTU+ToWg6syCHKlVJ2IxBW hW1n+gEcoz9NSXikbqLGWRQQJhuWtnB8kyrII0zKuYzXFFYuBKn9X3gQWbwaXcur /6jXbqzuzZH+o2tE3wdvl7eCxtAh5MAjplAjtfiZr9tSud6O+34r7rz/TVAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQ3+0kVtx8GVnQimJpZVOOwExN4wHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBreXnLNs+LAhfqCFwP/ySlQCJ89duc94Gi Fs3Ycou/PgMYrMj8DI7bt4jWsDZtET94j4kZl9WtkOrBt5IefP3/D6mq4PhIBokP WnK7bggkFGRQ0E541TX7fTMQv8N7Ioab5MY5KwfJTdfJOIGfaJF1oBFlX+eq0BiW qNmVftu/jwBIkPSCZFDyDi4bvIeDZrLznjVWf8EgMZLMBtaWTyGqZ1lNdXXqTnfq iHp3lESRLO6Coadeo+lSDVN4hoqUn+vqyVAavpcYFu0gemN2nKHk3lcJZXPqmmP5 Qgib207Nx+FPgdym0rByYUIwxUJbFE0o8WRyyK2O07Hrg51w+8s= -----END CERTIFICATE-----Generated at Tue Jul 1 01:53:59 2025 by rpki-client