$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: ru5oWbeXku2TlNRVuxzFiKgccf8KrRsa4FohnoIMj8o= Subject key identifier: C9:8F:5C:0F:1C:44:A1:8F:8E:68:02:6F:5E:6A:30:92:6F:21:5A:C3 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 43CF40F32CB85904FC1AD74952DF4FE6A6AF0DA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 0176 Signing time: Sun 29 Jun 2025 04:11:36 +0000 Manifest this update: Sun 29 Jun 2025 04:06:36 +0000 Manifest next update: Wed 02 Jul 2025 11:50:36 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: sSS5VCi55dy2iqOddg0KAjekyz2sA8p7+xKU2iaK6EU=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cf:40:f3:2c:b8:59:04:fc:1a:d7:49:52:df:4f:e6:a6:af:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Jun 29 04:06:36 2025 GMT Not After : Jul 2 11:50:36 2025 GMT Subject: CN=C98F5C0F1C44A18F8E68026F5E6A30926F215AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:11:57:52:0c:f6:a0:f4:4e:69:87:73:77: 73:be:ab:c3:c6:eb:35:df:f0:d1:a8:3a:f0:03:3d: 4c:dc:9e:12:93:96:c5:7e:4d:6d:ad:79:07:db:ef: 0a:50:10:09:05:03:58:2c:27:8f:47:5c:ae:7c:ae: ac:82:fc:5f:43:ff:3b:8b:28:fc:e4:db:d5:dc:58: ef:e8:65:fb:b1:a4:87:7f:38:48:8e:d6:db:50:1c: 42:1f:e2:88:70:e5:1c:e7:ba:3d:43:79:96:8a:65: 4b:43:53:26:1f:19:2d:04:38:6c:38:10:ae:62:31: e9:98:d7:ee:85:e0:ab:fd:e6:9a:d7:c4:a5:55:73: f7:0e:e1:16:1d:a2:28:ef:a3:4a:a0:99:53:59:88: 0f:d2:cf:03:b1:17:61:c8:64:58:dc:2d:ff:7d:fc: ef:28:bc:98:45:a8:24:cd:9a:a8:c9:50:3a:c4:41: c6:18:d4:90:fb:4b:87:98:f2:cd:ec:84:f7:c2:d6: 86:4e:6c:3f:03:8e:d2:22:6c:a9:fb:7a:79:31:0c: f8:c9:b5:c9:25:ac:df:0c:a0:a8:05:92:c4:5b:7c: 64:8a:3a:8c:b6:1d:ee:70:37:12:1e:f8:cd:a0:82: ee:9e:84:84:76:88:c0:fc:b0:a5:65:82:7a:ff:5d: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:5C:0F:1C:44:A1:8F:8E:68:02:6F:5E:6A:30:92:6F:21:5A:C3 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e0:2f:c3:21:85:b4:07:fd:cf:6e:02:df:c2:b9:28:76:73: 45:3f:de:2d:d2:ea:fa:b9:00:a0:14:d4:f5:2c:2c:ed:c6:24: 38:f3:6f:f1:9a:4b:a3:6a:a9:2d:9f:9d:b6:16:3d:fc:b8:72: f6:a6:e0:11:c9:4c:a9:91:5c:7b:9d:d1:c2:65:9d:a0:2a:d5: 0e:98:bf:2a:55:ad:df:b7:4c:cb:07:c0:4a:02:38:db:a8:34: 0f:6f:c8:d0:ad:cb:2d:bd:30:b9:2b:d7:f4:f5:5d:71:43:e9: 48:84:8c:04:cb:6f:ac:1d:b0:aa:98:0b:82:ce:15:57:9b:b8: 39:0e:7c:83:15:40:cb:c5:d7:96:b9:81:83:c9:2a:fb:7b:3d: 70:ce:a9:60:cd:ba:c8:33:a7:da:17:6d:5b:0b:5a:86:e3:83: 38:f8:45:4e:19:32:a9:0f:8f:b4:b8:53:08:53:7a:13:d3:1c: 86:71:fb:6e:0c:1d:ca:99:7f:a0:e7:e4:b5:70:78:c0:df:2b: 37:2f:08:44:68:d2:fc:ce:44:ed:45:8f:91:15:43:f3:21:ac: 16:c3:2a:e1:18:78:3d:d9:d8:65:f3:07:98:56:97:78:62:ac: 68:73:de:cc:0d:28:33:9b:48:54:26:73:e6:af:4a:f1:63:f8: 56:b6:a1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ89A8yy4WQT8GtdJUt9P5qavDaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA2MjkwNDA2MzZaFw0yNTA3MDIxMTUwMzZaMDMxMTAvBgNV BAMTKEM5OEY1QzBGMUM0NEExOEY4RTY4MDI2RjVFNkEzMDkyNkYyMTVBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNRFXUgz2oPROaYdzd3O+q8PG 6zXf8NGoOvADPUzcnhKTlsV+TW2teQfb7wpQEAkFA1gsJ49HXK58rqyC/F9D/zuL KPzk29XcWO/oZfuxpId/OEiO1ttQHEIf4ohw5Rznuj1DeZaKZUtDUyYfGS0EOGw4 EK5iMemY1+6F4Kv95prXxKVVc/cO4RYdoijvo0qgmVNZiA/SzwOxF2HIZFjcLf99 /O8ovJhFqCTNmqjJUDrEQcYY1JD7S4eY8s3shPfC1oZObD8DjtIibKn7enkxDPjJ tcklrN8MoKgFksRbfGSKOoy2He5wNxIe+M2ggu6ehIR2iMD8sKVlgnr/XXlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyY9cDxxEoY+OaAJvXmowkm8hWsMwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7gL8MhhbQH/c9uAt/CuSh2c0U/3i3S6vq5 AKAU1PUsLO3GJDjzb/GaS6NqqS2fnbYWPfy4cvam4BHJTKmRXHud0cJlnaAq1Q6Y vypVrd+3TMsHwEoCONuoNA9vyNCtyy29MLkr1/T1XXFD6UiEjATLb6wdsKqYC4LO FVebuDkOfIMVQMvF15a5gYPJKvt7PXDOqWDNusgzp9oXbVsLWobjgzj4RU4ZMqkP j7S4UwhTehPTHIZx+24MHcqZf6Dn5LVweMDfKzcvCERo0vzORO1Fj5EVQ/MhrBbD KuEYeD3Z2GXzB5hWl3hirGhz3swNKDObSFQmc+avSvFj+Fa2obE= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:42 2025 by rpki-client