$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: 2ouUtHPlCpVTgL4bAaUN4emNgriDPsUIxRw9LEc6cXc= Subject key identifier: 2C:2B:36:02:96:A2:B3:3D:FA:B2:20:31:1C:F9:BC:10:D4:C0:21:87 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 3BB7F1E7EFEAFFD963AEA7F6A89AC7D5703A2DDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 8A Signing time: Mon 30 Jun 2025 20:02:11 +0000 Manifest this update: Mon 30 Jun 2025 19:57:11 +0000 Manifest next update: Thu 03 Jul 2025 21:20:11 +0000 Files and hashes: 1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) 2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: RRBt6VJGHYgSFfd2dR0tPhncsHP01MKW9aV4S4YAbhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:f1:e7:ef:ea:ff:d9:63:ae:a7:f6:a8:9a:c7:d5:70:3a:2d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Jun 30 19:57:11 2025 GMT Not After : Jul 3 21:20:11 2025 GMT Subject: CN=2C2B360296A2B33DFAB220311CF9BC10D4C02187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:96:35:bd:59:a6:b5:ea:c1:70:fe:95:e0: be:a6:a8:2f:89:b6:7b:bf:89:b9:93:9c:69:9f:45: 01:3d:f4:3e:cc:3a:85:60:7e:bc:2c:94:49:b9:42: 8f:3d:44:e8:9a:a0:99:bd:6a:35:5e:e4:dd:09:20: ff:53:f2:30:6d:c6:38:60:f4:f8:d1:78:d7:49:c5: c7:2c:09:25:2e:7b:41:d5:ea:45:8a:d0:21:81:49: 1e:a3:1d:fc:e1:d7:5f:09:3b:fd:dc:ea:42:cc:cc: 2a:42:c3:e6:77:ef:2d:9b:8a:99:d8:2d:3a:ac:b1: 63:fb:72:a0:30:53:70:4b:a7:af:22:75:c3:bf:fb: b4:ea:c7:e8:cb:32:fb:3a:f6:fb:a0:94:9b:3d:41: 1d:71:87:60:31:f6:f1:87:2d:80:97:32:dd:ad:b8: 3b:12:34:65:ef:77:45:4f:3a:c9:9e:4c:3d:0e:5e: 39:ed:b3:88:61:ad:6f:c8:84:38:40:31:8d:25:3f: 19:29:27:f3:fd:0e:46:dc:a3:66:59:20:c0:34:ad: b2:2e:b3:0f:78:0c:64:1f:c7:ee:ae:18:ba:57:b0: f5:33:9c:57:2a:ca:1a:1f:cc:43:5b:e4:32:c3:a9: 2d:81:ca:62:91:f4:49:5d:67:e3:8e:7f:39:00:0f: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:36:02:96:A2:B3:3D:FA:B2:20:31:1C:F9:BC:10:D4:C0:21:87 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:95:b7:91:15:ea:1e:d0:df:87:99:99:74:e5:28:7f:de: 3b:8b:c1:86:80:67:79:36:16:cc:ae:d5:e9:78:ef:ff:4f:1b: 1d:2e:28:24:52:0d:ae:b3:1e:50:0d:22:03:ab:31:c7:2e:08: cc:76:38:ec:5d:b9:42:61:e3:34:9d:f3:73:a0:b9:17:0a:9f: 3a:5a:67:a2:6f:d6:dd:e0:91:ae:27:2c:2c:67:67:49:bf:33: a4:3f:4c:c9:05:34:a6:5d:1c:1c:c7:27:dd:8c:4b:98:6a:54: 7c:49:8a:40:38:3e:83:06:59:91:ac:5c:87:d2:19:07:e0:c3: fa:8c:8e:83:ad:84:1c:fb:99:67:b7:cf:c2:c9:f7:72:96:b5: 78:f4:b0:98:0e:b4:47:73:9b:c1:e1:cc:b8:bb:19:a5:47:de: 53:db:a6:80:eb:5b:c7:15:74:d7:92:2a:2c:64:38:40:a2:61: 2e:1c:14:75:f4:70:b1:7d:aa:f4:f6:ec:38:58:70:8f:e1:88: 6b:60:91:1b:7e:f7:74:43:ba:a4:a3:b0:b0:e7:80:67:aa:f7: b8:df:ec:66:14:1f:01:61:76:d0:87:cf:aa:c5:01:19:bc:a4: 12:3e:68:f2:68:d7:e3:4d:c2:38:df:0c:8b:27:db:21:ee:8a: d0:c0:bc:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7fx5+/q/9ljrqf2qJrH1XA6LdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA2MzAxOTU3MTFaFw0yNTA3MDMyMTIwMTFaMDMxMTAvBgNV BAMTKDJDMkIzNjAyOTZBMkIzM0RGQUIyMjAzMTFDRjlCQzEwRDRDMDIxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmZY1vVmmterBcP6V4L6mqC+J tnu/ibmTnGmfRQE99D7MOoVgfrwslEm5Qo89ROiaoJm9ajVe5N0JIP9T8jBtxjhg 9PjReNdJxccsCSUue0HV6kWK0CGBSR6jHfzh118JO/3c6kLMzCpCw+Z37y2bipnY LTqssWP7cqAwU3BLp68idcO/+7Tqx+jLMvs69vuglJs9QR1xh2Ax9vGHLYCXMt2t uDsSNGXvd0VPOsmeTD0OXjnts4hhrW/IhDhAMY0lPxkpJ/P9Dkbco2ZZIMA0rbIu sw94DGQfx+6uGLpXsPUznFcqyhofzENb5DLDqS2BymKR9EldZ+OOfzkAD4UfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCs2Apaisz36siAxHPm8ENTAIYcwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRalbeRFeoe0N+HmZl05Sh/3juLwYaAZ3k2 Fsyu1el47/9PGx0uKCRSDa6zHlANIgOrMccuCMx2OOxduUJh4zSd83OguRcKnzpa Z6Jv1t3gka4nLCxnZ0m/M6Q/TMkFNKZdHBzHJ92MS5hqVHxJikA4PoMGWZGsXIfS GQfgw/qMjoOthBz7mWe3z8LJ93KWtXj0sJgOtEdzm8HhzLi7GaVH3lPbpoDrW8cV dNeSKixkOECiYS4cFHX0cLF9qvT27DhYcI/hiGtgkRt+93RDuqSjsLDngGeq97jf 7GYUHwFhdtCHz6rFARm8pBI+aPJo1+NNwjjfDIsn2yHuitDAvMQ= -----END CERTIFICATE-----Generated at Tue Jul 1 13:21:17 2025 by rpki-client