$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: bK+b6d5Jp8Nv2KqxegTH7UgTKs3w9ftu+A6vGTKmuwg= Subject key identifier: CE:FA:FD:D3:0B:D8:C4:0A:28:99:1C:6E:0C:0C:6A:8A:49:1E:84:6E Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 643D46BBA9681CF448431E6B73788EB713229C59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 92 Signing time: Mon 30 Jun 2025 17:51:05 +0000 Manifest this update: Mon 30 Jun 2025 17:46:05 +0000 Manifest next update: Thu 03 Jul 2025 22:54:05 +0000 Files and hashes: 1: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: z127ctIVX/vDNKEY4gsPX5/YwD7OFdEnSs2H0ktMwi8=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3d:46:bb:a9:68:1c:f4:48:43:1e:6b:73:78:8e:b7:13:22:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Jun 30 17:46:05 2025 GMT Not After : Jul 3 22:54:05 2025 GMT Subject: CN=CEFAFDD30BD8C40A28991C6E0C0C6A8A491E846E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:16:2e:cf:9f:5a:90:16:85:37:e4:18:fd: 1b:bd:e3:ed:18:31:10:ef:54:06:ec:46:68:a5:a6: 4c:89:7c:c5:33:0d:b2:d1:98:12:18:92:b6:ab:bb: 4b:ee:55:21:5c:b6:2e:0f:65:11:4b:42:2a:1a:c5: c1:cd:80:f7:fc:4c:6f:a5:dd:f3:54:04:94:e6:b7: c5:53:37:59:91:da:e5:94:5d:e8:28:15:a7:80:73: fe:a8:aa:25:5a:8d:66:98:28:2b:8f:08:00:72:f5: 1a:dd:31:eb:00:6d:ba:a7:16:33:21:27:62:34:f5: 58:8e:4e:82:2a:ec:99:c6:ee:a1:47:43:72:f4:48: 2a:b0:11:9a:55:e4:3f:0c:02:9c:b5:9e:9b:db:96: f1:7d:2a:f7:94:19:54:d1:0b:8b:df:4f:9c:d7:7e: ab:4d:9e:1c:65:dc:10:12:4d:e1:82:17:96:f7:fb: 7c:7a:6a:2f:d5:fc:f9:1c:dd:91:a6:ee:7d:4f:ee: a2:93:ce:68:3e:15:59:00:ec:69:5e:57:3a:0d:11: 1b:a6:09:a7:38:e0:c5:bf:4d:38:8d:59:76:cc:48: c7:a5:ef:ba:df:07:e4:f1:1b:b7:d4:32:22:69:f5: 90:15:4f:7d:3a:2a:ea:df:4d:a5:78:76:7a:dd:ca: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FA:FD:D3:0B:D8:C4:0A:28:99:1C:6E:0C:0C:6A:8A:49:1E:84:6E X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fa:22:67:74:37:fe:85:40:bb:9e:73:ee:e6:f6:47:0b:e5: 76:67:2b:11:72:43:7c:51:88:4f:42:f2:f9:0d:85:49:61:4c: c2:6b:36:99:f6:26:b5:1a:37:ab:9b:80:60:4c:e6:e8:28:20: 5d:8f:48:82:8c:0a:e6:36:c3:85:35:6f:32:3f:db:3d:23:36: 60:c3:c8:b6:45:12:43:ee:76:28:24:fe:d8:1c:49:28:40:fe: ff:5f:b9:7c:a9:bd:99:fe:95:cd:90:71:11:e9:16:b7:42:ff: 57:a5:8b:c3:1b:c6:74:03:23:b0:4e:06:f6:da:5f:f4:80:31: 04:2c:b8:db:76:09:33:43:97:79:1a:36:aa:fa:fc:32:68:29: 12:e1:70:f4:1e:ea:44:fd:dd:22:34:f8:68:4a:41:3e:12:f1: 95:9c:f3:8b:0a:df:83:42:76:33:54:f5:be:63:2a:41:24:6c: b1:09:5d:63:eb:ac:79:04:6c:5e:25:46:2d:2a:19:e2:b1:7e: 3b:6b:50:21:c1:1d:61:db:e7:7f:36:44:86:02:57:a8:d5:2a: dc:70:b9:0c:19:f6:3f:16:14:1a:36:1b:ce:e1:c3:e3:d1:cf: b7:c9:25:ab:81:1f:71:33:67:45:a4:78:f9:89:f5:c4:0e:77: cc:9b:a5:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZD1Gu6loHPRIQx5rc3iOtxMinFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA2MzAxNzQ2MDVaFw0yNTA3MDMyMjU0MDVaMDMxMTAvBgNV BAMTKENFRkFGREQzMEJEOEM0MEEyODk5MUM2RTBDMEM2QThBNDkxRTg0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UxYuz59akBaFN+QY/Ru94+0Y MRDvVAbsRmilpkyJfMUzDbLRmBIYkraru0vuVSFcti4PZRFLQioaxcHNgPf8TG+l 3fNUBJTmt8VTN1mR2uWUXegoFaeAc/6oqiVajWaYKCuPCABy9RrdMesAbbqnFjMh J2I09ViOToIq7JnG7qFHQ3L0SCqwEZpV5D8MApy1npvblvF9KveUGVTRC4vfT5zX fqtNnhxl3BASTeGCF5b3+3x6ai/V/Pkc3ZGm7n1P7qKTzmg+FVkA7GleVzoNERum Cac44MW/TTiNWXbMSMel77rfB+TxG7fUMiJp9ZAVT306KurfTaV4dnrdyrhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzvr90wvYxAoomRxuDAxqikkehG4wHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz6Imd0N/6FQLuec+7m9kcL5XZnKxFyQ3xR iE9C8vkNhUlhTMJrNpn2JrUaN6ubgGBM5ugoIF2PSIKMCuY2w4U1bzI/2z0jNmDD yLZFEkPudigk/tgcSShA/v9fuXypvZn+lc2QcRHpFrdC/1eli8MbxnQDI7BOBvba X/SAMQQsuNt2CTNDl3kaNqr6/DJoKRLhcPQe6kT93SI0+GhKQT4S8ZWc84sK34NC djNU9b5jKkEkbLEJXWPrrHkEbF4lRi0qGeKxfjtrUCHBHWHb5382RIYCV6jVKtxw uQwZ9j8WFBo2G87hw+PRz7fJJauBH3EzZ0WkePmJ9cQOd8ybpYA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:29:47 2025 by rpki-client