$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: oCnrHVTwA7AqKDheXRHh+BJ1onnxlkjkG0207T4B8Ro= Subject key identifier: 35:38:CB:DB:3E:FE:67:5B:8E:89:5B:7F:92:4D:43:A6:93:E2:EC:85 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 7C051B87C50A9E7A750B67675D574BDC2EB05E7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 010E Signing time: Sat 28 Jun 2025 16:11:16 +0000 Manifest this update: Sat 28 Jun 2025 16:06:16 +0000 Manifest next update: Tue 01 Jul 2025 23:40:16 +0000 Files and hashes: 1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: +w+mPMWcwjGLdHRAf5edR31vFLpTipW8m+sgTHXjITQ=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: MXfDIthgoWl0DB7t5bTdlNeO4VZUUfb84boo8bz76t8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:05:1b:87:c5:0a:9e:7a:75:0b:67:67:5d:57:4b:dc:2e:b0:5e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Jun 28 16:06:16 2025 GMT Not After : Jul 1 23:40:16 2025 GMT Subject: CN=3538CBDB3EFE675B8E895B7F924D43A693E2EC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:1f:40:58:ea:89:65:9a:d8:59:7a:c3:e6: 6c:df:e0:fa:2a:7e:c7:c6:60:b9:ba:98:15:3b:20: 12:29:50:ff:81:fb:f6:bd:67:f3:f8:d2:18:f6:1c: 65:d7:83:ab:60:26:a5:e6:82:6f:b4:f7:1c:f4:32: 19:3a:35:82:15:ed:e3:17:9e:88:7e:59:00:5d:40: 4c:1b:96:31:0a:b7:c2:ff:28:4a:0c:bc:03:f5:81: 16:2f:b0:02:ef:e4:1e:26:fc:ee:1c:fa:bd:e2:d6: 49:9d:f5:a7:7b:64:01:ad:d7:ae:34:10:20:bb:77: 51:7a:0a:ab:ed:04:46:f6:8c:6a:d8:ba:5e:1b:85: 98:f4:f4:f1:68:5d:d8:6b:02:ab:38:d4:e4:79:09: f2:d9:d9:13:8a:b7:cd:ba:b1:f0:20:4f:2d:78:2e: fc:41:ee:aa:9a:73:28:76:ba:04:ab:00:44:8e:c1: 83:88:84:c2:8e:b8:44:7c:60:e8:9b:fc:0b:f6:52: 50:18:ba:88:88:ac:42:0a:79:d1:7a:d0:f8:1e:0a: 80:c7:ec:64:c1:b2:4d:77:f0:67:20:fd:f6:97:ca: be:e7:f5:01:8c:93:80:12:d4:d2:b9:4c:38:2a:94: 96:8f:ce:34:8f:3f:d1:02:52:03:9b:0d:8b:29:90: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:38:CB:DB:3E:FE:67:5B:8E:89:5B:7F:92:4D:43:A6:93:E2:EC:85 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4e:23:2a:35:56:cf:5c:99:48:1f:2e:47:50:a0:5d:e3:45: 21:43:5c:6e:1b:af:17:21:e6:5c:b9:58:f5:31:22:be:34:d6: 6b:31:94:02:6b:90:50:ad:00:52:3e:98:11:e9:14:72:59:c7: 17:fa:64:b6:b6:2d:14:6c:4a:8c:4c:85:00:98:d2:d6:0c:5c: 5e:58:a5:27:9e:f8:c6:dd:46:ae:46:58:07:48:4c:ab:6d:c3: 5c:f5:4a:68:37:a1:95:50:15:15:ab:89:fd:35:cf:cc:84:b4: 3a:fa:1d:94:65:ed:16:80:f7:c9:b4:36:46:00:d2:95:45:d8: cc:45:19:92:13:ee:82:84:b7:1f:d2:fd:2c:39:15:c9:47:db: a3:56:b6:cf:d6:fa:44:50:08:ea:ad:da:61:9d:73:8b:45:5b: 20:f9:df:3a:56:98:2f:f0:26:5a:36:70:a4:7c:80:67:d6:a8: fa:38:90:95:92:9f:66:a6:be:7e:64:e4:f3:8f:2c:ec:bb:73: b2:0e:19:41:4e:fa:63:9f:b1:99:e9:4a:59:76:24:e2:aa:c0: dc:22:2a:a0:24:ca:a2:2d:14:26:16:8f:14:c7:c1:78:51:35: cb:79:8e:ee:10:4c:bd:18:4e:49:71:e6:28:4c:8f:b2:57:e8: 35:91:1e:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAUbh8UKnnp1C2dnXVdL3C6wXnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTA2MjgxNjA2MTZaFw0yNTA3MDEyMzQwMTZaMDMxMTAvBgNV BAMTKDM1MzhDQkRCM0VGRTY3NUI4RTg5NUI3RjkyNEQ0M0E2OTNFMkVDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Qx9AWOqJZZrYWXrD5mzf4Poq fsfGYLm6mBU7IBIpUP+B+/a9Z/P40hj2HGXXg6tgJqXmgm+09xz0Mhk6NYIV7eMX noh+WQBdQEwbljEKt8L/KEoMvAP1gRYvsALv5B4m/O4c+r3i1kmd9ad7ZAGt1640 ECC7d1F6CqvtBEb2jGrYul4bhZj09PFoXdhrAqs41OR5CfLZ2ROKt826sfAgTy14 LvxB7qqacyh2ugSrAESOwYOIhMKOuER8YOib/Av2UlAYuoiIrEIKedF60PgeCoDH 7GTBsk138Gcg/faXyr7n9QGMk4AS1NK5TDgqlJaPzjSPP9ECUgObDYspkK17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTjL2z7+Z1uOiVt/kk1DppPi7IUwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1OIyo1Vs9cmUgfLkdQoF3jRSFDXG4brxch 5ly5WPUxIr401msxlAJrkFCtAFI+mBHpFHJZxxf6ZLa2LRRsSoxMhQCY0tYMXF5Y pSee+MbdRq5GWAdITKttw1z1Smg3oZVQFRWrif01z8yEtDr6HZRl7RaA98m0NkYA 0pVF2MxFGZIT7oKEtx/S/Sw5FclH26NWts/W+kRQCOqt2mGdc4tFWyD53zpWmC/w Jlo2cKR8gGfWqPo4kJWSn2amvn5k5POPLOy7c7IOGUFO+mOfsZnpSll2JOKqwNwi KqAkyqItFCYWjxTHwXhRNct5ju4QTL0YTklx5ihMj7JX6DWRHsQ= -----END CERTIFICATE-----Generated at Sun Jun 29 21:59:47 2025 by rpki-client