$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: XFlH8YedJZ+guoVg3PLf+WseE6oWuWQSLRHEdj2MGgs= Subject key identifier: B3:67:36:20:3C:39:A9:25:8D:A4:86:30:C0:A4:A1:4A:E5:FD:10:00 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 189AE9369279E2B873179828CEEAB851987CD04D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 01E6 Signing time: Sun 29 Jun 2025 11:41:30 +0000 Manifest this update: Sun 29 Jun 2025 11:36:30 +0000 Manifest next update: Wed 02 Jul 2025 19:45:30 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: 8SdzltA30IYa/eLpdzjWxoO0h1G4501r1W9sBo1pn4g=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9a:e9:36:92:79:e2:b8:73:17:98:28:ce:ea:b8:51:98:7c:d0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Jun 29 11:36:30 2025 GMT Not After : Jul 2 19:45:30 2025 GMT Subject: CN=B36736203C39A9258DA48630C0A4A14AE5FD1000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:60:f0:0b:3f:85:10:8d:ca:b7:6e:91:03: cf:06:bb:ff:7f:6d:d7:9f:7e:98:c6:be:ce:bd:f8: 61:4e:5d:eb:32:ec:9b:15:dd:c4:4d:d0:04:a4:15: f4:86:67:06:0a:a0:d2:a6:88:08:bd:ae:03:58:03: 2b:5f:15:e3:14:a2:b9:a6:97:13:ea:48:85:ac:60: 76:45:a6:a9:f1:59:3b:15:dc:48:c3:9c:05:c4:bb: 65:3d:98:f9:7e:2c:94:4f:d0:ee:4c:88:03:99:b9: 8e:54:bf:90:84:fc:e1:e1:a5:4c:de:9a:31:78:26: 97:ea:0a:28:35:24:4a:d1:9c:5b:bb:f2:81:00:de: eb:bf:1e:8b:36:66:f5:1f:9e:ba:84:2d:75:b0:d9: 0c:43:af:f3:67:f8:d1:fb:7c:ab:0f:de:42:12:84: 61:e7:49:d2:ae:6b:36:50:1d:d8:14:f6:1d:d5:69: 43:6b:22:bb:e5:c0:8b:e7:d3:bc:2c:da:b0:6a:05: dd:59:b6:ed:35:00:b7:e5:b9:1d:73:9e:88:10:bd: d5:16:21:d8:ef:4c:47:51:e2:f4:3b:1a:43:b8:44: fc:bf:3d:58:7f:d7:ed:28:1e:6c:fd:1f:c9:ba:d8: b1:d4:21:ce:56:41:ff:b2:c8:21:95:cb:dd:e6:9f: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:67:36:20:3C:39:A9:25:8D:A4:86:30:C0:A4:A1:4A:E5:FD:10:00 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ad:c3:12:dc:52:98:b8:e2:52:42:3c:02:21:de:55:60:dc: b8:fc:34:28:24:09:5b:86:85:87:66:77:92:36:37:11:0d:e8: fe:36:63:ee:75:61:f2:56:33:1c:2d:3b:e5:79:09:97:d7:ee: 74:8c:0e:f0:15:44:dd:38:ea:40:8c:41:a1:a7:4f:95:01:7a: aa:bc:61:7c:d6:a9:c9:63:d5:34:c6:10:db:4b:07:b4:e3:55: 46:a7:14:fc:3a:d6:54:68:1d:4d:0f:1d:39:9c:49:ab:95:cf: 82:f9:d6:32:42:46:2f:c2:e1:a0:e5:52:78:bc:17:71:6a:72: 52:c9:08:61:16:77:51:70:79:f9:ce:a3:c2:bf:4c:80:13:b4: f2:b3:56:c4:a0:f9:e0:d4:0b:dd:8c:88:ea:fc:ca:96:49:b4: 61:f5:7a:89:8c:fa:4c:0a:92:5d:de:90:07:dc:34:09:18:97: 6a:e9:3a:aa:c8:97:a8:b0:d6:87:48:3f:2f:68:67:17:1c:f5: 85:eb:5a:67:95:69:f7:c1:40:c0:90:36:c6:8b:dc:35:bf:24: 3e:23:01:a6:5b:73:d8:ce:7b:57:4c:84:53:65:18:13:39:d9: c4:9e:1e:20:7c:10:ac:cb:c8:e1:a1:5f:d2:5f:04:eb:78:aa: b7:7f:b3:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJrpNpJ54rhzF5gozuq4UZh80E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTA2MjkxMTM2MzBaFw0yNTA3MDIxOTQ1MzBaMDMxMTAvBgNV BAMTKEIzNjczNjIwM0MzOUE5MjU4REE0ODYzMEMwQTRBMTRBRTVGRDEwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWmDwCz+FEI3Kt26RA88Gu/9/ bdeffpjGvs69+GFOXesy7JsV3cRN0ASkFfSGZwYKoNKmiAi9rgNYAytfFeMUormm lxPqSIWsYHZFpqnxWTsV3EjDnAXEu2U9mPl+LJRP0O5MiAOZuY5Uv5CE/OHhpUze mjF4JpfqCig1JErRnFu78oEA3uu/Hos2ZvUfnrqELXWw2QxDr/Nn+NH7fKsP3kIS hGHnSdKuazZQHdgU9h3VaUNrIrvlwIvn07ws2rBqBd1Ztu01ALfluR1znogQvdUW IdjvTEdR4vQ7GkO4RPy/PVh/1+0oHmz9H8m62LHUIc5WQf+yyCGVy93mn7xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2c2IDw5qSWNpIYwwKShSuX9EAAwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCtwxLcUpi44lJCPAIh3lVg3Lj8NCgkCVuG hYdmd5I2NxEN6P42Y+51YfJWMxwtO+V5CZfX7nSMDvAVRN046kCMQaGnT5UBeqq8 YXzWqclj1TTGENtLB7TjVUanFPw61lRoHU0PHTmcSauVz4L51jJCRi/C4aDlUni8 F3FqclLJCGEWd1FwefnOo8K/TIATtPKzVsSg+eDUC92MiOr8ypZJtGH1eomM+kwK kl3ekAfcNAkYl2rpOqrIl6iw1odIPy9oZxcc9YXrWmeVaffBQMCQNsaL3DW/JD4j AaZbc9jOe1dMhFNlGBM52cSeHiB8EKzLyOGhX9JfBOt4qrd/swo= -----END CERTIFICATE-----Generated at Mon Jun 30 18:53:42 2025 by rpki-client