$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: WEk6QjOLWjCGvd9aWMmnu4IQSceEPN1PcZDjEaMXrnU= Subject key identifier: C6:48:CD:6C:13:86:87:3F:93:61:B5:4F:15:EB:58:88:B2:3F:10:14 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 516830848A1844C9042C63D8BE69AD6CC7DB59ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: A5 Signing time: Sat 05 Jul 2025 17:40:04 +0000 Manifest this update: Sat 05 Jul 2025 17:35:04 +0000 Manifest next update: Tue 08 Jul 2025 22:42:04 +0000 Files and hashes: 1: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) 2: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 3: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: 4pAZLTFGzUUOwYJLa1D0oJUWNLU5JQxqTypN388ZaUs=) 4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:68:30:84:8a:18:44:c9:04:2c:63:d8:be:69:ad:6c:c7:db:59:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Jul 5 17:35:04 2025 GMT Not After : Jul 8 22:42:04 2025 GMT Subject: CN=C648CD6C1386873F9361B54F15EB5888B23F1014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:a5:40:1b:f4:ef:46:de:1d:c4:b0:04:31: 7b:90:a4:d8:00:01:cc:6e:c5:7e:95:1f:e7:6a:a5: 5c:97:00:ad:5f:3d:bc:06:2a:86:2a:40:56:35:94: 8d:ef:81:dd:f3:80:13:b0:08:55:db:9a:1b:3f:a8: 93:f0:19:4a:d7:4e:a1:d7:95:05:dd:ee:a5:45:3e: 02:80:0b:11:3e:91:ef:89:7e:87:66:7c:91:26:22: fd:3d:d8:7f:91:fa:8d:7c:de:24:18:d6:94:02:d0: 31:44:e5:73:fe:2b:86:21:9f:74:55:92:bc:59:32: a8:cd:d0:a2:d2:00:0c:d5:5e:5a:c5:92:33:11:76: 2f:d7:97:e2:c4:04:c9:f2:e3:63:99:ca:0b:3b:e3: 20:ba:22:a1:3a:41:6f:93:8e:c9:23:41:89:40:25: d7:d7:58:14:a1:58:3e:31:9d:f3:37:78:b5:c1:26: 2e:bb:a7:1b:fa:ab:17:d4:82:20:ba:94:d8:92:e7: a1:8e:18:da:f5:85:da:47:2e:d8:2c:c9:51:e3:9f: bf:fc:0a:2d:92:82:78:ea:61:bb:51:8c:62:1b:82: 1a:3a:f8:2c:77:4b:8b:0f:2f:c6:8e:0c:37:aa:4d: 57:6a:64:53:be:28:01:10:cd:30:3f:54:7c:32:69: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:CD:6C:13:86:87:3F:93:61:B5:4F:15:EB:58:88:B2:3F:10:14 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e7:59:f4:b8:5a:7b:2f:34:4f:2a:cb:ef:31:72:b5:88:c1: f7:86:54:b4:24:5a:a6:e9:a5:bb:95:5b:c4:44:30:be:7e:fb: 54:22:7f:4d:8f:bf:46:f6:9e:4b:5a:4c:e0:46:f3:96:8e:3e: 49:13:96:57:06:a2:88:02:49:1e:68:fc:23:cf:7a:b4:51:fc: aa:d3:35:c4:16:36:b4:53:90:63:fd:52:5e:7c:8d:2b:b0:42: 8c:e3:cc:82:c5:03:5b:99:58:64:87:a6:42:31:12:38:f4:f8: 33:1c:55:8a:85:77:48:9e:65:03:75:2e:78:f5:46:e7:c7:c3: dc:4c:b1:15:9e:9b:49:41:52:6e:05:d7:b6:91:5b:65:cc:58: 62:52:c0:3e:f7:43:92:aa:6c:7b:71:a7:1c:32:f9:c6:b0:d0: 79:4c:31:86:6e:9d:7f:b3:9e:a2:7e:7f:0c:13:f4:c8:1a:88: 78:a6:41:90:5d:e8:72:d7:83:2e:dd:6a:49:af:6f:a3:58:b3: 25:a6:31:f5:29:67:de:e6:7d:b0:49:ac:92:f4:a3:69:3f:80: a5:8b:51:b9:df:23:97:d5:8a:a9:1f:49:e0:c1:35:3d:39:df: 3f:00:76:d8:dc:a2:be:79:41:76:3e:66:52:b1:6f:6c:4c:df: 75:41:c4:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWgwhIoYRMkELGPYvmmtbMfbWe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTA3MDUxNzM1MDRaFw0yNTA3MDgyMjQyMDRaMDMxMTAvBgNV BAMTKEM2NDhDRDZDMTM4Njg3M0Y5MzYxQjU0RjE1RUI1ODg4QjIzRjEwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VqVAG/TvRt4dxLAEMXuQpNgA AcxuxX6VH+dqpVyXAK1fPbwGKoYqQFY1lI3vgd3zgBOwCFXbmhs/qJPwGUrXTqHX lQXd7qVFPgKACxE+ke+JfodmfJEmIv092H+R+o183iQY1pQC0DFE5XP+K4Yhn3RV krxZMqjN0KLSAAzVXlrFkjMRdi/Xl+LEBMny42OZygs74yC6IqE6QW+TjskjQYlA JdfXWBShWD4xnfM3eLXBJi67pxv6qxfUgiC6lNiS56GOGNr1hdpHLtgsyVHjn7/8 Ci2SgnjqYbtRjGIbgho6+Cx3S4sPL8aODDeqTVdqZFO+KAEQzTA/VHwyaS3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkjNbBOGhz+TYbVPFetYiLI/EBQwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDnWfS4WnsvNE8qy+8xcrWIwfeGVLQkWqbp pbuVW8REML5++1Qif02Pv0b2nktaTOBG85aOPkkTllcGoogCSR5o/CPPerRR/KrT NcQWNrRTkGP9Ul58jSuwQozjzILFA1uZWGSHpkIxEjj0+DMcVYqFd0ieZQN1Lnj1 RufHw9xMsRWem0lBUm4F17aRW2XMWGJSwD73Q5KqbHtxpxwy+caw0HlMMYZunX+z nqJ+fwwT9MgaiHimQZBd6HLXgy7dakmvb6NYsyWmMfUpZ97mfbBJrJL0o2k/gKWL UbnfI5fViqkfSeDBNT053z8Adtjcor55QXY+ZlKxb2xM33VBxFY= -----END CERTIFICATE-----Generated at Sat Jul 5 23:56:32 2025 by rpki-client