$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: 4N3TRWRHdmTlRBFHEwIKgBmdHbJHLJtPk7XIHNfs7pM= Subject key identifier: BE:56:7D:FF:66:FA:04:EF:78:8A:3D:6F:7F:AD:21:29:23:F9:37:04 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 0F14351B601921C329946A8672B0B6D2472FF420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: F6 Signing time: Mon 30 Jun 2025 01:31:13 +0000 Manifest this update: Mon 30 Jun 2025 01:26:13 +0000 Manifest next update: Thu 03 Jul 2025 04:06:13 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 2: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: L4yURYqN20H41cnZW5q+zt+WYrTtCHBgrQRdLrK5ZTo=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:14:35:1b:60:19:21:c3:29:94:6a:86:72:b0:b6:d2:47:2f:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Jun 30 01:26:13 2025 GMT Not After : Jul 3 04:06:13 2025 GMT Subject: CN=BE567DFF66FA04EF788A3D6F7FAD212923F93704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:75:c8:2f:5e:61:ad:24:77:a0:5a:ae:8b: eb:f3:a5:29:03:c1:70:43:85:5c:bb:76:98:22:eb: ed:db:04:06:29:6f:1d:2b:e9:77:fe:93:84:5e:d6: c4:8b:7d:9a:ee:16:16:57:27:57:dd:c9:60:44:ba: 0b:3b:c9:68:ac:f0:33:32:9f:b4:b0:b6:32:a3:86: b6:d8:78:3b:78:48:af:a2:fa:51:ec:36:97:6a:81: c4:6f:bc:47:3e:d6:0c:81:6a:fa:bd:1f:d2:d7:81: d2:8e:ef:96:62:7c:9b:a7:b7:b1:d7:e8:73:8f:d4: e8:fb:8e:9a:cb:e1:b7:f7:fa:e6:1e:07:e6:2a:81: af:08:35:1b:4e:80:54:db:b0:7f:90:e0:c9:7e:1a: 61:21:0a:44:d7:35:fb:f4:ba:dc:0f:fe:8f:f1:8a: ce:6b:2a:e6:0a:75:6d:f6:78:8e:40:06:f3:fb:0c: 14:04:0c:bd:99:f8:dc:27:2b:be:db:a5:0b:68:84: 07:5e:e7:0f:a1:eb:85:b1:1e:d8:57:e6:db:8e:b5: 16:4c:ff:db:5a:bd:3d:2c:1f:1f:95:d9:a6:a9:14: 05:86:2a:c9:d2:e2:ac:ae:42:71:cb:8f:f4:0a:90: c3:14:32:78:c4:e9:2f:d4:2e:d2:72:d0:56:b4:7e: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:7D:FF:66:FA:04:EF:78:8A:3D:6F:7F:AD:21:29:23:F9:37:04 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:82:76:0e:14:7f:58:76:42:b5:5e:6c:32:27:f6:23:6b:46: 90:ac:77:bb:e5:c9:c5:84:e4:15:f3:82:38:f6:6a:b3:fb:de: e9:0a:3c:c9:df:72:2c:ac:94:98:40:5c:c9:c1:4c:39:42:7a: 97:89:57:14:66:86:65:bf:99:41:e4:d1:12:3f:ab:33:cc:39: 03:bf:95:d7:f8:da:c5:a2:e0:1f:fa:bc:a3:a2:ce:25:59:72: b5:80:bd:77:e4:6c:53:cb:54:28:6b:87:6b:78:6a:2e:b1:a4: 69:f6:78:39:45:fe:da:a2:e6:89:bb:cf:f5:96:f1:bf:1b:00: 73:c1:bd:ce:e6:56:5d:45:0a:e1:98:d8:d4:82:ba:c8:a1:46: a7:90:5a:21:ce:0b:85:3e:b5:fc:4c:b5:5c:c8:c3:87:71:86: 05:a1:9c:4a:69:73:38:c7:b7:f4:a6:8b:50:2e:37:bf:d2:51: 59:dc:a5:81:cf:b1:cf:8d:e6:48:3c:c9:c4:aa:a7:98:de:24: 4f:2a:5d:c9:79:79:77:1a:61:ed:7b:12:55:68:62:59:b4:7d: 40:83:bb:1e:c2:6b:66:da:c8:e5:53:ea:37:c0:b1:fc:85:90: cb:4b:64:7d:e6:c2:80:1e:eb:e0:a7:74:69:75:e6:1e:c1:6f: 7f:cf:78:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxQ1G2AZIcMplGqGcrC20kcv9CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA2MzAwMTI2MTNaFw0yNTA3MDMwNDA2MTNaMDMxMTAvBgNV BAMTKEJFNTY3REZGNjZGQTA0RUY3ODhBM0Q2RjdGQUQyMTI5MjNGOTM3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHq3XIL15hrSR3oFqui+vzpSkD wXBDhVy7dpgi6+3bBAYpbx0r6Xf+k4Re1sSLfZruFhZXJ1fdyWBEugs7yWis8DMy n7SwtjKjhrbYeDt4SK+i+lHsNpdqgcRvvEc+1gyBavq9H9LXgdKO75ZifJunt7HX 6HOP1Oj7jprL4bf3+uYeB+Yqga8INRtOgFTbsH+Q4Ml+GmEhCkTXNfv0utwP/o/x is5rKuYKdW32eI5ABvP7DBQEDL2Z+NwnK77bpQtohAde5w+h64WxHthX5tuOtRZM /9tavT0sHx+V2aapFAWGKsnS4qyuQnHLj/QKkMMUMnjE6S/ULtJy0Fa0fjmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvlZ9/2b6BO94ij1vf60hKSP5NwQwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOCdg4Uf1h2QrVebDIn9iNrRpCsd7vlycWE 5BXzgjj2arP73ukKPMnfciyslJhAXMnBTDlCepeJVxRmhmW/mUHk0RI/qzPMOQO/ ldf42sWi4B/6vKOiziVZcrWAvXfkbFPLVChrh2t4ai6xpGn2eDlF/tqi5om7z/WW 8b8bAHPBvc7mVl1FCuGY2NSCusihRqeQWiHOC4U+tfxMtVzIw4dxhgWhnEppczjH t/Smi1AuN7/SUVncpYHPsc+N5kg8ycSqp5jeJE8qXcl5eXcaYe17ElVoYlm0fUCD ux7Ca2bayOVT6jfAsfyFkMtLZH3mwoAe6+CndGl15h7Bb3/PeCs= -----END CERTIFICATE-----Generated at Tue Jul 1 23:22:56 2025 by rpki-client