$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: UEkvMMe047pl9W6p3JToxXRikA7Cg6ySK/F16RzpGnc= Subject key identifier: D8:C5:DD:41:BF:5A:03:B1:71:AF:02:F3:78:5C:0E:65:56:1D:2B:E0 Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 60548E7A329110E7536F35EFD43C7A3FCD0CE541 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 043B Signing time: Tue 01 Jul 2025 15:11:03 +0000 Manifest this update: Tue 01 Jul 2025 15:06:03 +0000 Manifest next update: Sat 05 Jul 2025 00:47:03 +0000 Files and hashes: 1: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: g9fvHl3oTeugU03TA2g7LPvraBY10Bq7bc1fnK9ECLo=) 2: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: IJE11zWl6Bd22ECBH1B+diB+bL1zv7uu4MShP4zlbeo=) 3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: pKHdGJHsGSGfDl46o2wosXGehRbXUqIap7Vy4E4vB9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:54:8e:7a:32:91:10:e7:53:6f:35:ef:d4:3c:7a:3f:cd:0c:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Jul 1 15:06:03 2025 GMT Not After : Jul 5 00:47:03 2025 GMT Subject: CN=D8C5DD41BF5A03B171AF02F3785C0E65561D2BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:eb:a4:39:92:ac:06:71:be:da:14:10:cc: ec:6e:92:ae:59:1c:53:fd:8d:d9:0b:26:ce:75:f4: 86:59:a4:af:62:dc:27:43:27:d6:ea:bc:f7:8d:4f: b9:d6:3c:ca:b7:d9:22:8e:05:a5:f5:a9:e8:a2:8e: 7b:21:99:9d:d8:36:fe:05:e2:16:1b:25:3c:15:85: 2e:d7:b0:92:63:7b:21:48:9d:3b:7c:89:db:18:bd: 46:3b:51:12:0e:eb:36:d7:2a:96:04:ca:c5:32:2b: c7:c0:93:b1:c4:1a:49:04:4a:cb:68:70:cd:62:9e: 24:22:c1:a2:8f:ee:39:e4:e2:6e:4e:cb:47:c0:ca: 4a:24:f0:db:6e:c9:86:14:37:ab:e3:e0:1f:8f:32: d6:99:c0:41:57:0d:61:c1:90:56:31:eb:d1:44:bf: f6:d9:1f:2c:8a:6d:bd:ec:e2:7f:64:a8:4c:cf:d8: c8:0f:22:99:01:7e:d4:f2:f4:f4:4a:95:d9:32:fd: 2b:16:27:85:df:a5:19:f7:18:f6:16:95:e2:d1:14: fa:57:1f:be:0b:3b:6f:d8:14:92:1e:5f:6c:c1:12: 5a:01:ee:a0:1f:dd:ae:83:63:b4:8a:c2:6b:4b:62: 94:db:f0:7a:20:a3:6c:ce:27:cf:32:90:c5:e4:2d: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:DD:41:BF:5A:03:B1:71:AF:02:F3:78:5C:0E:65:56:1D:2B:E0 X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b5:7d:4b:81:2b:f7:87:a9:1c:f5:1a:07:f0:20:07:e7:eb: 38:b0:fe:3a:ae:68:d4:cb:eb:37:98:60:c0:12:40:a3:03:24: 0a:dc:a3:7d:47:0c:d5:77:53:3d:8a:f7:ed:26:bc:5c:46:4a: 67:ca:f0:d7:72:49:95:17:13:68:45:70:1b:c3:7e:43:98:ca: 01:01:e1:99:c3:2b:d1:62:d6:cc:77:c8:7a:55:a6:7b:80:2b: af:3d:df:f5:e6:10:47:ee:74:81:d7:de:f5:52:4a:88:bb:ba: 1f:80:9e:1e:a1:2a:fa:c4:fe:d6:fb:98:6a:86:41:da:5d:bf: f0:df:51:e6:08:6d:3f:6d:7e:8e:cb:7b:b4:60:4e:c1:e6:8d: f9:7b:58:1d:a9:c2:b8:51:6e:d5:fa:f4:66:8e:5c:22:8c:ca: 5e:e3:59:19:4a:ad:3b:59:8f:45:08:9b:5b:65:52:7d:d8:41: 38:5e:e8:e2:fd:ab:fc:79:3e:22:c1:f0:0b:37:0f:0b:c2:6c: 48:1c:c0:c8:94:a9:d9:77:ff:26:d0:e7:b8:a2:c3:ce:57:18: de:aa:b9:eb:e4:ee:b6:6d:38:c2:d0:39:29:e3:52:0b:02:ce: af:7f:cb:d1:ba:10:33:9b:c4:a7:27:22:9f:9c:68:86:a1:55: e6:61:1a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFSOejKREOdTbzXv1Dx6P80M5UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNTA3MDExNTA2MDNaFw0yNTA3MDUwMDQ3MDNaMDMxMTAvBgNV BAMTKEQ4QzVERDQxQkY1QTAzQjE3MUFGMDJGMzc4NUMwRTY1NTYxRDJCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibOukOZKsBnG+2hQQzOxukq5Z HFP9jdkLJs519IZZpK9i3CdDJ9bqvPeNT7nWPMq32SKOBaX1qeiijnshmZ3YNv4F 4hYbJTwVhS7XsJJjeyFInTt8idsYvUY7URIO6zbXKpYEysUyK8fAk7HEGkkESsto cM1iniQiwaKP7jnk4m5Oy0fAykok8NtuyYYUN6vj4B+PMtaZwEFXDWHBkFYx69FE v/bZHyyKbb3s4n9kqEzP2MgPIpkBftTy9PRKldky/SsWJ4XfpRn3GPYWleLRFPpX H74LO2/YFJIeX2zBEloB7qAf3a6DY7SKwmtLYpTb8Hogo2zOJ88ykMXkLea7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MXdQb9aA7FxrwLzeFwOZVYdK+AwHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO1fUuBK/eHqRz1GgfwIAfn6ziw/jquaNTL 6zeYYMASQKMDJArco31HDNV3Uz2K9+0mvFxGSmfK8NdySZUXE2hFcBvDfkOYygEB 4ZnDK9Fi1sx3yHpVpnuAK6893/XmEEfudIHX3vVSSoi7uh+Anh6hKvrE/tb7mGqG Qdpdv/DfUeYIbT9tfo7Le7RgTsHmjfl7WB2pwrhRbtX69GaOXCKMyl7jWRlKrTtZ j0UIm1tlUn3YQThe6OL9q/x5PiLB8As3DwvCbEgcwMiUqdl3/ybQ57iiw85XGN6q uevk7rZtOMLQOSnjUgsCzq9/y9G6EDObxKcnIp+caIahVeZhGm4= -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:56 2025 by rpki-client