$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: Tm/fRlGKnzv47XB3PMKRsnLS+0PLiHSwgfemJjUls5U= Subject key identifier: 04:8C:A9:15:4E:98:30:89:1B:42:03:D5:10:0D:8C:30:F6:45:03:DB Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 43AE00653EE4867EE5235DBE840B5DF3605DB84C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 01EA Signing time: Sun 29 Jun 2025 08:01:03 +0000 Manifest this update: Sun 29 Jun 2025 07:56:03 +0000 Manifest next update: Wed 02 Jul 2025 12:41:03 +0000 Files and hashes: 1: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: uGKNzz3lZ6WxIkU6ZWya+BrKJ1Cisgp3I3iz0fpnlTQ=) 2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 3: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 4: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 5: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 6: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 7: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 8: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 9: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 10: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ae:00:65:3e:e4:86:7e:e5:23:5d:be:84:0b:5d:f3:60:5d:b8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Jun 29 07:56:03 2025 GMT Not After : Jul 2 12:41:03 2025 GMT Subject: CN=048CA9154E9830891B4203D5100D8C30F64503DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:29:08:1c:66:91:18:c0:6c:d9:80:4c:91: 89:ea:6e:d4:bc:c6:1d:26:c0:b3:36:22:e6:db:f9: 39:f2:1f:21:47:e3:d4:0d:63:fb:e4:be:d5:47:c8: 9a:b8:25:72:64:49:2c:9b:15:71:40:53:a2:e7:1f: d3:0c:d6:5d:3c:b0:b1:fe:a7:9b:c8:33:77:f3:79: 77:72:b9:5e:72:8f:72:b0:1c:f9:5a:d5:0c:91:01: 22:6c:6f:0a:dd:16:5d:56:6f:5d:56:01:2d:aa:15: fe:67:8f:33:f5:d7:29:8c:15:9a:b8:13:89:88:64: c5:07:35:a6:29:f7:0b:f1:e2:f8:e6:e4:e6:4d:f4: ca:7e:11:19:e0:28:26:7f:d6:36:30:1f:d9:e9:21: b4:1e:76:bf:22:53:91:86:f0:38:36:40:22:2e:ca: 35:bd:0f:03:2f:fd:b7:63:45:1f:18:4a:d2:dc:83: 64:38:e0:ba:4d:0e:f9:32:ee:88:76:23:20:b8:4c: 51:19:ab:23:32:e7:f7:45:f1:31:b1:63:d2:17:7b: 82:f9:ae:6d:86:4f:85:17:cc:0c:7c:ea:63:9d:47: 80:b2:c3:63:a6:3f:b5:e7:0d:03:b2:93:3c:f0:54: 55:b6:a5:3a:fa:aa:1f:8d:36:19:67:be:d2:37:4f: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8C:A9:15:4E:98:30:89:1B:42:03:D5:10:0D:8C:30:F6:45:03:DB X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f4:f4:a5:a2:c6:9f:a9:1a:32:db:f4:90:99:2e:1a:06:d2: cb:da:23:96:d5:3e:bc:9d:cf:f1:6c:c8:2f:15:dc:60:02:48: ac:9a:71:10:ea:d2:8e:10:f7:e1:dc:59:cd:85:16:b6:34:0c: 18:53:62:47:13:c3:fd:8f:87:80:d3:48:4c:e5:a8:5a:fc:ce: 07:60:ec:a6:e9:61:e9:bc:ac:20:84:a2:a6:eb:a6:39:0f:62: dd:5c:67:43:0d:95:3d:c1:42:dd:c9:8e:d6:ea:88:2a:9f:de: e5:af:04:c0:bb:bf:c7:ff:b2:02:0d:98:74:83:3a:1a:97:01: 13:c7:50:08:68:bf:9d:b0:fc:52:57:49:91:7b:61:2d:4e:a2: 10:b4:0c:8b:4f:f7:36:c9:b7:35:b1:95:02:45:b4:d1:f8:e6: 70:15:39:59:61:bf:cc:26:9d:4d:08:52:8d:54:c3:ad:86:86: 29:7a:16:94:6a:04:c1:86:57:2f:53:7c:60:4a:39:f7:1e:c2: 9a:86:6e:fe:a0:c5:51:fe:c9:04:b8:0f:98:52:4b:4a:af:98: f4:1b:a9:6e:99:f5:7c:7f:ec:c8:67:65:e2:28:6a:73:4f:10: 5d:b1:50:d5:02:bd:23:ae:11:a2:27:50:b6:5d:40:3b:26:33: 35:70:39:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ64AZT7khn7lI12+hAtd82BduEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA2MjkwNzU2MDNaFw0yNTA3MDIxMjQxMDNaMDMxMTAvBgNV BAMTKDA0OENBOTE1NEU5ODMwODkxQjQyMDNENTEwMEQ4QzMwRjY0NTAzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESikIHGaRGMBs2YBMkYnqbtS8 xh0mwLM2Iubb+TnyHyFH49QNY/vkvtVHyJq4JXJkSSybFXFAU6LnH9MM1l08sLH+ p5vIM3fzeXdyuV5yj3KwHPla1QyRASJsbwrdFl1Wb11WAS2qFf5njzP11ymMFZq4 E4mIZMUHNaYp9wvx4vjm5OZN9Mp+ERngKCZ/1jYwH9npIbQedr8iU5GG8Dg2QCIu yjW9DwMv/bdjRR8YStLcg2Q44LpNDvky7oh2IyC4TFEZqyMy5/dF8TGxY9IXe4L5 rm2GT4UXzAx86mOdR4Cyw2OmP7XnDQOykzzwVFW2pTr6qh+NNhlnvtI3T2SzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIypFU6YMIkbQgPVEA2MMPZFA9swHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI709KWixp+pGjLb9JCZLhoG0svaI5bVPryd z/FsyC8V3GACSKyacRDq0o4Q9+HcWc2FFrY0DBhTYkcTw/2Ph4DTSEzlqFr8zgdg 7KbpYem8rCCEoqbrpjkPYt1cZ0MNlT3BQt3JjtbqiCqf3uWvBMC7v8f/sgINmHSD OhqXARPHUAhov52w/FJXSZF7YS1OohC0DItP9zbJtzWxlQJFtNH45nAVOVlhv8wm nU0IUo1Uw62Ghil6FpRqBMGGVy9TfGBKOfcewpqGbv6gxVH+yQS4D5hSS0qvmPQb qW6Z9Xx/7MhnZeIoanNPEF2xUNUCvSOuEaInULZdQDsmMzVwOQY= -----END CERTIFICATE-----Generated at Sun Jun 29 19:14:02 2025 by rpki-client