$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: GVxu0rjxENRUA5tBXFA0UPf6+KwbjTLZajLuz8oQhn8= Subject key identifier: 61:AD:3B:3A:FD:5D:46:8B:4D:29:04:CD:34:C3:3E:E1:03:E5:35:66 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 2171257FE3C78866B98845BFE640976E4C7203CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 04FA Signing time: Fri 27 Jun 2025 21:20:46 +0000 Manifest this update: Fri 27 Jun 2025 21:15:46 +0000 Manifest next update: Tue 01 Jul 2025 08:28:46 +0000 Files and hashes: 1: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) 2: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: pczQg0RJ96SB3w00+iY+sW6lx4RMgBp95wfdwDxFock=) 3: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 4: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) 5: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) 6: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 7: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 8: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:71:25:7f:e3:c7:88:66:b9:88:45:bf:e6:40:97:6e:4c:72:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Jun 27 21:15:46 2025 GMT Not After : Jul 1 08:28:46 2025 GMT Subject: CN=61AD3B3AFD5D468B4D2904CD34C33EE103E53566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:d7:a9:64:e0:8f:2e:2c:76:8b:7a:52:90: 6b:23:4b:2e:b9:a6:38:b7:13:f0:55:82:2f:65:47: be:6c:96:fb:4c:90:fd:04:42:22:8a:3f:29:e2:7e: cf:52:74:b9:0c:99:f8:79:34:68:48:6a:26:12:fc: c2:67:0a:ce:c1:ba:a4:98:f4:e7:a3:f6:fc:bd:f3: df:f0:13:f1:c8:90:70:75:0b:2c:5c:05:5d:ff:d3: 65:3f:ae:db:00:d7:4c:62:64:e8:12:6b:5c:ee:6e: d7:28:85:5a:8d:35:7a:55:0c:8e:0c:2b:86:c8:20: df:59:1a:2e:0f:5a:4b:ea:13:47:9f:88:78:de:e3: 35:91:9e:ae:30:77:d8:cf:ce:09:50:f2:c3:0f:03: c6:23:98:2c:99:02:3b:d5:a4:3a:10:41:aa:85:98: 99:5f:75:49:4a:be:61:93:05:a6:86:44:a0:8c:87: d5:5e:3f:49:a0:d8:61:d1:05:0a:19:29:f9:95:ec: 0b:d0:0c:bb:1a:fd:c6:e3:45:36:1a:5b:66:cb:3f: 26:c2:6e:19:61:8f:11:78:29:73:c2:9b:3c:b9:5e: c1:0b:a7:00:c4:3b:8b:bc:10:4f:f8:e2:e6:e0:01: 28:ed:ff:cb:30:88:5d:81:6b:b1:88:05:14:04:52: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:3B:3A:FD:5D:46:8B:4D:29:04:CD:34:C3:3E:E1:03:E5:35:66 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:21:db:55:f6:ec:78:f5:32:12:4f:6b:bc:57:17:e5:4d: 52:6c:33:19:2a:38:32:61:aa:1c:fa:45:e8:99:f0:30:bc:1c: d1:42:59:19:ce:e5:85:3d:04:17:87:1b:ef:d8:2e:d7:b7:fe: 7f:d3:a2:7f:30:ce:c3:3c:b7:3a:81:9a:bf:be:74:88:45:2e: ca:4d:f7:62:6c:12:3b:30:d4:61:da:dd:ac:1a:ab:b6:7e:53: 83:13:92:bb:ed:fd:f2:9e:d9:45:fe:0f:41:7d:1a:1d:3f:27: a7:30:07:7b:5f:6f:52:b2:1f:65:49:2e:08:7b:f8:4b:5d:fb: 1f:ca:2f:9c:23:a7:c4:ee:b7:ce:72:36:f9:2b:a2:87:6f:6b: ef:9d:58:ac:3c:ee:e5:00:00:4a:8f:37:f8:e4:5e:5a:9b:7e: 94:55:37:b4:5f:3f:eb:16:b5:5f:1e:71:a9:18:73:2b:1c:1c: 5c:5a:43:7a:a5:97:1b:a2:fa:c6:e3:34:01:66:1d:97:c4:36: ca:60:c5:5e:41:88:49:e0:51:9c:14:9b:15:5d:28:19:06:ab: ea:f4:08:0b:5b:4f:82:90:aa:5c:55:6f:ad:42:85:09:76:9f: 17:c9:1f:20:e2:20:78:66:7e:c3:c8:ff:1a:1b:6c:12:8b:64: e6:ad:72:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXElf+PHiGa5iEW/5kCXbkxyA8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA2MjcyMTE1NDZaFw0yNTA3MDEwODI4NDZaMDMxMTAvBgNV BAMTKDYxQUQzQjNBRkQ1RDQ2OEI0RDI5MDRDRDM0QzMzRUUxMDNFNTM1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45tepZOCPLix2i3pSkGsjSy65 pji3E/BVgi9lR75slvtMkP0EQiKKPynifs9SdLkMmfh5NGhIaiYS/MJnCs7BuqSY 9Oej9vy989/wE/HIkHB1CyxcBV3/02U/rtsA10xiZOgSa1zubtcohVqNNXpVDI4M K4bIIN9ZGi4PWkvqE0efiHje4zWRnq4wd9jPzglQ8sMPA8YjmCyZAjvVpDoQQaqF mJlfdUlKvmGTBaaGRKCMh9VeP0mg2GHRBQoZKfmV7AvQDLsa/cbjRTYaW2bLPybC bhlhjxF4KXPCmzy5XsELpwDEO4u8EE/44ubgASjt/8swiF2Ba7GIBRQEUi+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYa07Ov1dRotNKQTNNMM+4QPlNWYwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjIIdtV9ux49TIST2u8VxflTVJsMxkqODJh qhz6ReiZ8DC8HNFCWRnO5YU9BBeHG+/YLte3/n/Ton8wzsM8tzqBmr++dIhFLspN 92JsEjsw1GHa3awaq7Z+U4MTkrvt/fKe2UX+D0F9Gh0/J6cwB3tfb1KyH2VJLgh7 +Etd+x/KL5wjp8Tut85yNvkroodva++dWKw87uUAAEqPN/jkXlqbfpRVN7RfP+sW tV8ecakYcyscHFxaQ3qllxui+sbjNAFmHZfENspgxV5BiEngUZwUmxVdKBkGq+r0 CAtbT4KQqlxVb61ChQl2nxfJHyDiIHhmfsPI/xobbBKLZOatctM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:39 2025 by rpki-client