$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: 5nHYEN0AnDrkjUVQ3RmRNsfnGaPfhKXn8nMS0PWLLU8= Subject key identifier: 20:99:F2:F6:24:67:FF:23:23:46:EB:3C:B8:BE:7D:6A:72:78:8A:7A Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 6EBB2659EF6CD61629C8E0F0AD9F5622389FE317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 01B9 Signing time: Sun 29 Jun 2025 16:01:44 +0000 Manifest this update: Sun 29 Jun 2025 15:56:44 +0000 Manifest next update: Thu 03 Jul 2025 00:34:44 +0000 Files and hashes: 1: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: 9/Y5H1VLCaLZkibevMuAhVKmClZKAkA7OuueIRL5ptI=) 2: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=) 3: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: n3sbBfuLKEC1geB0k1Dh7NZVeI84mrHDuJ/mBS5tW04=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: tCdlLAwoC+YY63D9MBa5GyVbtzsufzTeHqMYaKr8EzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bb:26:59:ef:6c:d6:16:29:c8:e0:f0:ad:9f:56:22:38:9f:e3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Jun 29 15:56:44 2025 GMT Not After : Jul 3 00:34:44 2025 GMT Subject: CN=2099F2F62467FF232346EB3CB8BE7D6A72788A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:dc:dc:05:ca:8d:ed:0e:00:8b:35:1e:a9: c9:6c:09:c7:d7:da:9e:8c:58:ab:1a:a4:dc:2d:a7: 6c:5d:97:58:16:5a:08:b2:2f:4c:c0:4d:85:da:21: a6:4e:1d:7d:71:b6:53:f6:81:36:36:7f:f9:4e:40: b0:a8:ec:56:e0:28:73:4c:7d:58:9e:23:64:18:54: 12:99:59:71:8b:23:ab:5a:a8:82:0d:51:b0:08:2b: 00:85:cd:72:22:ff:8b:eb:ae:47:df:47:68:9f:72: 84:c8:bd:59:5c:d8:59:e0:f4:ec:5e:fe:c2:50:28: 3d:06:cf:77:ac:b2:23:b6:05:db:bf:0b:d9:7e:e8: 02:b2:53:0d:57:ac:ad:d0:6e:2c:e0:e6:a1:a2:4d: bd:40:3d:82:1a:b4:a9:91:e7:df:38:68:0f:89:d6: 14:3b:e4:41:a3:58:b1:dd:87:37:2a:35:03:f9:a3: d8:17:2d:fd:eb:b2:81:a6:a8:56:56:52:03:cf:98: b5:68:e4:a0:e8:2f:50:72:f0:9b:4f:08:c8:d2:70: 21:dc:cc:2e:a8:80:b2:f3:31:6c:92:b3:ec:b1:01: 17:ac:b7:2d:32:40:2f:72:8c:06:e9:db:22:7f:3c: 75:89:9b:0a:fa:95:1e:4e:f8:24:c1:e1:c1:49:f4: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:F2:F6:24:67:FF:23:23:46:EB:3C:B8:BE:7D:6A:72:78:8A:7A X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:fa:5f:5f:24:c3:f6:e4:ba:3c:c0:2a:fa:75:cd:6f:61:04: 51:d3:23:03:6e:a6:c0:85:cb:95:48:4d:5d:09:b5:25:ee:1a: e6:ef:2c:11:a0:b5:8d:44:88:e7:25:69:9c:cf:45:9c:a8:30: ca:18:27:d2:55:ce:47:a2:b2:40:94:d6:c1:ab:45:c2:99:4a: 2a:d1:e9:84:c4:87:a6:bc:eb:a8:c5:f8:ba:95:3c:cf:5a:0b: 12:89:1b:b6:fa:1e:2c:00:18:e1:67:f5:09:24:bd:a8:23:38: 9b:f5:44:8c:52:56:b4:be:37:c3:98:db:1c:2e:2e:6e:46:53: 1c:f9:03:2c:28:c7:f5:cb:a5:bc:a6:18:84:ad:c0:b4:45:e4: 6d:a4:e2:02:b5:fa:8d:e4:4d:72:e5:c1:ca:a4:26:53:d9:44: 75:af:2f:66:72:73:09:51:18:ba:4a:86:a4:de:77:f7:b9:fd: c3:7b:3b:e3:fd:db:4a:0e:4b:61:8a:16:44:98:79:08:8f:f2: 70:f4:72:a6:33:55:1e:ae:f2:d4:d0:55:ca:7e:2a:b4:fc:d4: 70:d0:4a:b6:3a:3b:29:ce:8b:33:f0:6b:6c:ab:ab:2c:4e:d9: 66:b8:55:28:67:11:95:69:02:1c:10:f1:b6:c0:79:e6:89:e0: 93:62:ae:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrsmWe9s1hYpyODwrZ9WIjif4xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTA2MjkxNTU2NDRaFw0yNTA3MDMwMDM0NDRaMDMxMTAvBgNV BAMTKDIwOTlGMkY2MjQ2N0ZGMjMyMzQ2RUIzQ0I4QkU3RDZBNzI3ODhBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefdzcBcqN7Q4AizUeqclsCcfX 2p6MWKsapNwtp2xdl1gWWgiyL0zATYXaIaZOHX1xtlP2gTY2f/lOQLCo7FbgKHNM fVieI2QYVBKZWXGLI6taqIINUbAIKwCFzXIi/4vrrkffR2ifcoTIvVlc2Fng9Oxe /sJQKD0Gz3essiO2Bdu/C9l+6AKyUw1XrK3Qbizg5qGiTb1APYIatKmR5984aA+J 1hQ75EGjWLHdhzcqNQP5o9gXLf3rsoGmqFZWUgPPmLVo5KDoL1By8JtPCMjScCHc zC6ogLLzMWySs+yxAResty0yQC9yjAbp2yJ/PHWJmwr6lR5O+CTB4cFJ9C6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJny9iRn/yMjRus8uL59anJ4inowHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMv6X18kw/bkujzAKvp1zW9hBFHTIwNupsCF y5VITV0JtSXuGubvLBGgtY1EiOclaZzPRZyoMMoYJ9JVzkeiskCU1sGrRcKZSirR 6YTEh6a866jF+LqVPM9aCxKJG7b6HiwAGOFn9QkkvagjOJv1RIxSVrS+N8OY2xwu Lm5GUxz5Aywox/XLpbymGIStwLRF5G2k4gK1+o3kTXLlwcqkJlPZRHWvL2ZycwlR GLpKhqTed/e5/cN7O+P920oOS2GKFkSYeQiP8nD0cqYzVR6u8tTQVcp+KrT81HDQ SrY6OynOizPwa2yrqyxO2Wa4VShnEZVpAhwQ8bbAeeaJ4JNirpY= -----END CERTIFICATE-----Generated at Mon Jun 30 18:48:15 2025 by rpki-client