$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: F1GO0qPPE6hqIHT42bUANeBtOnUzPIrRkIRvWQHzJ6g= Subject key identifier: 52:A2:F3:97:A4:9F:B7:5F:34:33:C0:A8:B7:52:91:04:62:E5:84:CC Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 4748CC5CBD20527C41842BF7702D5336CCE065BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 9F Signing time: Sun 29 Jun 2025 05:10:05 +0000 Manifest this update: Sun 29 Jun 2025 05:05:05 +0000 Manifest next update: Wed 02 Jul 2025 08:15:05 +0000 Files and hashes: 1: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=) 2: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: 5GnAGMXFme59H0PYlu3kIc4Ri548zyCt1a8m56mKvms=) 3: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=) 4: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=) 5: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=) 6: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=) 7: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=) 8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:48:cc:5c:bd:20:52:7c:41:84:2b:f7:70:2d:53:36:cc:e0:65:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Jun 29 05:05:05 2025 GMT Not After : Jul 2 08:15:05 2025 GMT Subject: CN=52A2F397A49FB75F3433C0A8B752910462E584CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:14:20:e5:5e:49:cd:63:42:45:32:54:c1: 59:fa:b9:27:6a:b1:58:38:f0:4d:c9:cb:da:3c:43: 7c:dc:6f:04:8f:d7:49:0b:4a:dd:4f:21:39:a9:a8: 72:1c:1b:d5:e8:0f:3c:e5:89:2b:e6:11:bc:3d:10: eb:dd:5c:32:5b:03:28:0c:de:9e:0f:c6:df:63:f8: 92:c0:aa:9c:87:1f:6e:45:07:73:d1:c3:06:68:a9: 37:fd:67:7b:d0:80:30:b7:f7:e8:8f:4e:15:d6:e8: dc:62:1c:79:58:4a:5f:0d:6b:21:03:a3:0c:52:9d: 3e:06:a0:77:c7:14:46:2a:8a:b5:28:98:ed:91:d6: 78:ac:a0:d3:2f:bd:94:f1:7a:86:d3:8f:bd:2a:ba: 69:fe:0d:46:b9:fa:2a:07:18:25:2f:7a:b9:94:f7: 79:19:0e:48:2f:ee:72:ff:b8:8f:a9:4d:55:c1:93: 01:b3:a8:5b:7a:78:06:9f:c1:b3:90:8b:29:bf:0a: 2e:22:8d:b1:29:e2:49:b0:21:b8:01:77:cd:6c:45: 02:7b:d8:c2:4c:7e:49:26:3b:1d:32:a5:6b:dd:b5: c5:2f:d5:3e:8d:43:24:85:fa:4b:88:81:08:2f:fd: 1e:9d:a4:b3:fa:30:6f:30:72:53:45:2c:2b:17:f4: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:F3:97:A4:9F:B7:5F:34:33:C0:A8:B7:52:91:04:62:E5:84:CC X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0a:da:81:81:5b:7e:73:d3:0e:c2:83:94:d1:13:e7:77:5c: fd:e4:26:f4:67:ab:52:3c:58:7f:69:65:a1:6f:5d:4d:1a:1a: 4e:57:0a:f7:75:41:91:6d:93:9e:22:92:fb:23:34:d9:1f:dd: 70:07:46:7d:69:64:b1:02:ff:e6:f7:84:1e:47:bf:e7:c2:aa: 30:99:39:5a:19:79:d0:f0:e1:a1:d3:c3:44:76:b1:6e:a3:30: 62:a0:fb:7e:13:50:26:95:38:6f:ce:fc:f3:27:57:b3:d9:d8: d8:5e:d1:c7:80:3a:2e:24:82:1c:cf:79:1d:2f:2d:fe:f1:4c: ed:e6:01:25:b3:99:54:ff:87:ea:17:23:92:d3:ef:fc:81:ba: a3:0c:ce:3d:70:88:55:1b:da:4e:af:dc:68:f4:13:c7:3d:08: 50:bc:73:9e:52:7e:e5:3c:8e:6c:9d:00:76:76:e1:7a:81:13: 35:c0:49:6b:9f:24:2c:12:d0:2e:62:00:8b:36:32:86:43:3c: 13:89:a7:a2:7b:ec:54:fd:e4:6e:c9:68:df:9b:38:a9:14:e6: cd:97:32:d1:b8:f3:c8:dc:d8:cb:2c:39:08:24:5c:06:be:fe: 3e:13:82:70:d7:19:49:4c:6f:d4:38:c3:3a:99:3e:54:b2:b7: d7:cf:a9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0jMXL0gUnxBhCv3cC1TNszgZb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA2MjkwNTA1MDVaFw0yNTA3MDIwODE1MDVaMDMxMTAvBgNV BAMTKDUyQTJGMzk3QTQ5RkI3NUYzNDMzQzBBOEI3NTI5MTA0NjJFNTg0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8xQg5V5JzWNCRTJUwVn6uSdq sVg48E3Jy9o8Q3zcbwSP10kLSt1PITmpqHIcG9XoDzzliSvmEbw9EOvdXDJbAygM 3p4Pxt9j+JLAqpyHH25FB3PRwwZoqTf9Z3vQgDC39+iPThXW6NxiHHlYSl8NayED owxSnT4GoHfHFEYqirUomO2R1nisoNMvvZTxeobTj70qumn+DUa5+ioHGCUvermU 93kZDkgv7nL/uI+pTVXBkwGzqFt6eAafwbOQiym/Ci4ijbEp4kmwIbgBd81sRQJ7 2MJMfkkmOx0ypWvdtcUv1T6NQySF+kuIgQgv/R6dpLP6MG8wclNFLCsX9JOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqLzl6Sft180M8Cot1KRBGLlhMwwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwK2oGBW35z0w7Cg5TRE+d3XP3kJvRnq1I8 WH9pZaFvXU0aGk5XCvd1QZFtk54ikvsjNNkf3XAHRn1pZLEC/+b3hB5Hv+fCqjCZ OVoZedDw4aHTw0R2sW6jMGKg+34TUCaVOG/O/PMnV7PZ2Nhe0ceAOi4kghzPeR0v Lf7xTO3mASWzmVT/h+oXI5LT7/yBuqMMzj1wiFUb2k6v3Gj0E8c9CFC8c55SfuU8 jmydAHZ24XqBEzXASWufJCwS0C5iAIs2MoZDPBOJp6J77FT95G7JaN+bOKkU5s2X MtG488jc2MssOQgkXAa+/j4TgnDXGUlMb9Q4wzqZPlSyt9fPqfo= -----END CERTIFICATE-----Generated at Tue Jul 1 01:56:47 2025 by rpki-client