$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: Yq8IPcP/j6xS4ulOIOnpOfDD75dP3rTbC1khlkBZG9s= Subject key identifier: C9:74:E8:02:89:D2:A0:EA:6F:4A:31:91:2A:1B:B8:43:C5:1F:8C:CD Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 1E74EC1E9DC932FE4686792F978391A19979286B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 08:41:06 +0000 Manifest this update: Sun 29 Jun 2025 08:36:06 +0000 Manifest next update: Wed 02 Jul 2025 16:26:06 +0000 Files and hashes: 1: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: nD7NbhF/t1Cv8J4rHUSbcUQ1s803yfHnh/XAoIzZ988=) 2: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 3: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 16:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:74:ec:1e:9d:c9:32:fe:46:86:79:2f:97:83:91:a1:99:79:28:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Jun 29 08:36:06 2025 GMT Not After : Jul 2 16:26:06 2025 GMT Subject: CN=C974E80289D2A0EA6F4A31912A1BB843C51F8CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:c5:4e:51:16:0c:fe:43:e6:ec:4b:f5:1d: 80:ee:fb:47:c3:3f:6d:a2:b2:74:da:64:3a:42:40: cb:77:6b:e5:ee:78:88:1a:64:1b:3c:83:12:70:ee: 12:f9:9a:84:a4:69:35:6b:a0:19:88:36:e7:60:44: 82:6e:0d:34:4a:83:c4:ac:b3:64:1a:11:58:5a:cc: 0a:b3:ba:84:32:44:9e:37:e7:a9:a3:2e:f9:58:45: 82:fa:9e:fb:24:8a:dc:d8:95:9b:6f:e2:a1:89:2b: 3f:cd:97:df:91:87:c8:b3:6b:61:44:5d:a5:2b:70: f9:d3:f4:90:de:48:d4:f7:b7:5f:b1:ac:f0:c4:a4: 57:76:c2:93:07:56:2f:ea:99:3d:9f:19:35:1f:a3: 95:d7:1b:98:72:70:5a:1a:db:d2:4b:bd:7b:4a:d8: 59:ca:9c:e4:60:46:1d:51:e1:a0:4f:da:bc:55:5f: 27:99:2c:05:b2:d4:1e:9b:a4:0f:a1:52:7a:01:75: ff:9a:6c:b1:45:f8:59:b0:1e:8f:1a:d0:b3:9c:a3: 7c:d5:ec:de:9c:59:9a:08:4c:ac:1e:8c:29:f3:3d: f4:6c:61:ff:b6:8f:bc:bd:ac:aa:4e:2d:2a:35:7e: 2d:eb:55:87:3a:5d:b5:25:0d:04:10:98:56:37:27: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:74:E8:02:89:D2:A0:EA:6F:4A:31:91:2A:1B:B8:43:C5:1F:8C:CD X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:47:9d:03:2c:0e:77:97:d5:6b:08:91:ac:65:75:dd:f7:34: d4:2d:00:1a:97:31:d0:a9:4f:62:7d:bf:5f:9a:f9:4e:d2:fd: 85:70:29:e0:d2:24:a3:5a:21:a3:2c:11:72:6e:ad:ad:31:d9: 52:de:67:6d:97:b4:58:c5:75:d6:f6:f4:7f:9a:17:4e:da:c8: 30:b1:ad:2a:c6:e4:11:8d:66:89:d8:63:0c:17:96:a8:af:b9: 1a:d0:ba:3f:bb:19:86:76:9f:b3:70:b0:53:f8:77:f7:85:21: b2:1c:66:98:22:30:61:dc:f8:68:06:a1:80:5d:7e:2b:0a:c2: 93:ef:5e:da:79:9d:fb:db:cd:ad:79:d3:ea:ab:6f:17:3b:90: ee:51:51:a1:1e:92:04:b5:ba:59:1c:d9:a4:be:73:7d:0e:ce: c4:41:9a:d4:36:15:78:8d:62:9e:14:f2:7d:d5:e9:58:8b:4f: f7:84:6c:81:44:eb:be:0a:6e:51:f2:5d:89:dd:62:0e:95:4b: 4b:5b:63:80:76:bd:6e:3f:d1:ad:a1:4d:65:ec:93:25:83:57: 3c:64:75:69:a9:3c:7c:77:0c:80:a2:f9:58:d4:4f:6c:8a:5c: 5f:05:2c:d1:cb:56:2a:ac:36:7e:af:05:fb:86:42:e5:cc:4d: 75:4e:99:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnTsHp3JMv5Ghnkvl4ORoZl5KGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNTA2MjkwODM2MDZaFw0yNTA3MDIxNjI2MDZaMDMxMTAvBgNV BAMTKEM5NzRFODAyODlEMkEwRUE2RjRBMzE5MTJBMUJCODQzQzUxRjhDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYsVOURYM/kPm7Ev1HYDu+0fD P22isnTaZDpCQMt3a+XueIgaZBs8gxJw7hL5moSkaTVroBmINudgRIJuDTRKg8Ss s2QaEVhazAqzuoQyRJ4356mjLvlYRYL6nvskitzYlZtv4qGJKz/Nl9+Rh8iza2FE XaUrcPnT9JDeSNT3t1+xrPDEpFd2wpMHVi/qmT2fGTUfo5XXG5hycFoa29JLvXtK 2FnKnORgRh1R4aBP2rxVXyeZLAWy1B6bpA+hUnoBdf+abLFF+FmwHo8a0LOco3zV 7N6cWZoITKwejCnzPfRsYf+2j7y9rKpOLSo1fi3rVYc6XbUlDQQQmFY3J6uxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXToAonSoOpvSjGRKhu4Q8UfjM0wHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5HnQMsDneX1WsIkaxldd33NNQtABqXMdCp T2J9v1+a+U7S/YVwKeDSJKNaIaMsEXJura0x2VLeZ22XtFjFddb29H+aF07ayDCx rSrG5BGNZonYYwwXlqivuRrQuj+7GYZ2n7NwsFP4d/eFIbIcZpgiMGHc+GgGoYBd fisKwpPvXtp5nfvbza150+qrbxc7kO5RUaEekgS1ulkc2aS+c30OzsRBmtQ2FXiN Yp4U8n3V6ViLT/eEbIFE674KblHyXYndYg6VS0tbY4B2vW4/0a2hTWXskyWDVzxk dWmpPHx3DICi+VjUT2yKXF8FLNHLViqsNn6vBfuGQuXMTXVOmbA= -----END CERTIFICATE-----Generated at Mon Jun 30 16:25:06 2025 by rpki-client