$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: TBayeRfovjEmpZGixoQYRSd9qFR9YzQ9ltmLDa+ZClQ= Subject key identifier: 44:B3:7D:FB:B1:FA:04:B8:CF:C7:B4:56:8D:A7:BA:0F:2F:44:F2:ED Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 7D557846FB90A6E80135001CD3414CC009F3F3AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 5D Signing time: Sat 28 Jun 2025 16:01:31 +0000 Manifest this update: Sat 28 Jun 2025 15:56:31 +0000 Manifest next update: Tue 01 Jul 2025 22:42:31 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: 4lEAXdysACAE6sJEfRe7xjUfeK+QljjMKMe1VrMhcnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:55:78:46:fb:90:a6:e8:01:35:00:1c:d3:41:4c:c0:09:f3:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Jun 28 15:56:31 2025 GMT Not After : Jul 1 22:42:31 2025 GMT Subject: CN=44B37DFBB1FA04B8CFC7B4568DA7BA0F2F44F2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5d:12:e9:5c:a5:d3:c5:1b:b4:d5:a3:09:33: a5:a4:11:87:59:c1:fb:0d:b7:71:57:e8:a0:35:17: c8:83:6a:b2:7b:c8:92:6a:ae:c1:36:be:b4:db:78: df:6f:49:f3:42:a8:cf:7a:8d:94:9c:cc:b5:70:44: c8:19:e5:9a:5e:ed:e3:09:6b:e2:af:c0:40:5e:d1: 15:75:1b:16:18:c7:17:4a:37:34:12:c4:50:8a:f4: af:1e:9b:c7:43:45:2a:6a:e0:5a:db:2c:47:80:87: c9:b5:35:b2:fa:62:ee:f3:05:a0:a7:29:3b:78:58: 90:0b:15:b9:46:48:27:29:39:f4:66:58:f8:42:78: 8b:95:5f:c6:10:ea:6a:15:e0:ed:51:01:ed:dc:d8: 82:84:01:b8:a9:ad:3f:ce:7a:35:42:a7:d8:9b:e7: 71:30:2e:bd:c6:dd:2b:28:d5:32:68:24:f5:9c:ad: 32:cb:b4:d8:7c:50:f4:3c:9a:30:61:ca:97:3f:5d: 96:23:7f:d8:68:43:47:72:6d:35:d7:1d:18:3a:91: 74:ed:34:e2:7f:a9:1d:44:e0:1d:a5:c0:11:2a:c8: d8:39:33:43:bb:3f:9e:2a:09:27:53:cb:80:4d:00: ed:c1:a8:b9:77:2b:20:62:9d:4c:61:0b:60:7e:f1: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B3:7D:FB:B1:FA:04:B8:CF:C7:B4:56:8D:A7:BA:0F:2F:44:F2:ED X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:da:98:77:b3:fc:ed:cf:f8:57:34:32:1c:2f:6a:28:f5:91: f8:50:32:87:47:b1:bd:7f:93:87:39:b8:8a:e0:4b:bf:03:5c: 1f:02:ea:41:03:26:b7:47:29:ea:18:4d:4d:43:6c:50:24:1f: 24:0a:bb:e6:38:2e:5f:01:df:29:e5:94:80:c4:f8:a6:bf:71: ef:1c:c5:e9:81:5c:91:23:74:ad:c6:49:64:7a:63:b3:fd:f6: d9:56:46:ed:37:ca:77:a9:cb:d6:1e:0e:71:5b:dc:b3:fd:37: 79:bd:1b:61:2f:b1:59:0a:7f:5d:b3:16:28:4a:d4:aa:66:42: e8:c8:77:c2:a6:cc:52:3c:ce:d8:e4:be:51:3b:87:f0:b7:dc: 4c:38:b6:1c:ef:f4:86:f2:4b:0b:e3:96:15:8f:2a:4c:66:e8: a3:92:5a:57:be:b3:06:12:46:9e:03:73:3c:bb:a7:77:16:ad: 44:f8:be:26:52:34:17:9f:e9:18:e1:dc:65:2f:98:ab:00:be: 08:19:e0:0c:63:f7:17:94:f2:13:10:e9:f9:28:36:f1:b5:c8: 9e:68:39:f1:07:e2:3b:ed:2e:cc:d3:80:2b:42:0c:b6:6a:01: ae:8a:17:67:34:5e:77:24:e2:6c:a7:a7:91:38:5f:ee:3c:9a: 92:25:31:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVV4RvuQpugBNQAc00FMwAnz86wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA2MjgxNTU2MzFaFw0yNTA3MDEyMjQyMzFaMDMxMTAvBgNV BAMTKDQ0QjM3REZCQjFGQTA0QjhDRkM3QjQ1NjhEQTdCQTBGMkY0NEYyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXRLpXKXTxRu01aMJM6WkEYdZ wfsNt3FX6KA1F8iDarJ7yJJqrsE2vrTbeN9vSfNCqM96jZSczLVwRMgZ5Zpe7eMJ a+KvwEBe0RV1GxYYxxdKNzQSxFCK9K8em8dDRSpq4FrbLEeAh8m1NbL6Yu7zBaCn KTt4WJALFblGSCcpOfRmWPhCeIuVX8YQ6moV4O1RAe3c2IKEAbiprT/OejVCp9ib 53EwLr3G3Sso1TJoJPWcrTLLtNh8UPQ8mjBhypc/XZYjf9hoQ0dybTXXHRg6kXTt NOJ/qR1E4B2lwBEqyNg5M0O7P54qCSdTy4BNAO3BqLl3KyBinUxhC2B+8V6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURLN9+7H6BLjPx7RWjae6Dy9E8u0wHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvamHez/O3P+Fc0Mhwvaij1kfhQModHsb1/ k4c5uIrgS78DXB8C6kEDJrdHKeoYTU1DbFAkHyQKu+Y4Ll8B3ynllIDE+Ka/ce8c xemBXJEjdK3GSWR6Y7P99tlWRu03ynepy9YeDnFb3LP9N3m9G2EvsVkKf12zFihK 1KpmQujId8KmzFI8ztjkvlE7h/C33Ew4thzv9IbySwvjlhWPKkxm6KOSWle+swYS Rp4Dczy7p3cWrUT4viZSNBef6Rjh3GUvmKsAvggZ4Axj9xeU8hMQ6fkoNvG1yJ5o OfEH4jvtLszTgCtCDLZqAa6KF2c0Xnck4mynp5E4X+48mpIlMU0= -----END CERTIFICATE-----Generated at Mon Jun 30 07:12:47 2025 by rpki-client