$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: SaLdjofgTi7ydlrHV2Q8mRcytMfAWe1XFMuIGlYKnms= Subject key identifier: 2F:43:35:81:26:8F:79:4C:DF:4C:BD:09:3F:51:54:56:84:79:99:4B Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 6CEBBF7506E13743270C8A3196D8568E22C8B77C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02F5 Signing time: Mon 30 Jun 2025 01:41:36 +0000 Manifest this update: Mon 30 Jun 2025 01:36:36 +0000 Manifest next update: Thu 03 Jul 2025 13:28:36 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: n3saSxX9/G1JGhuVPlRfnoOV/uZm6Z/0C0ag+H79EiU=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:eb:bf:75:06:e1:37:43:27:0c:8a:31:96:d8:56:8e:22:c8:b7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jun 30 01:36:36 2025 GMT Not After : Jul 3 13:28:36 2025 GMT Subject: CN=2F433581268F794CDF4CBD093F5154568479994B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:3d:8b:1d:38:53:a9:44:b0:ff:14:47:93: 64:44:5e:d3:71:b9:e6:ee:eb:d8:05:4f:58:c3:b6: 6d:d2:89:1d:f8:42:0b:3b:d5:68:e4:05:2f:8d:1b: f8:5a:41:bd:35:b0:d0:18:15:06:e9:a5:0c:6f:36: 97:44:06:e3:c2:07:22:7a:4d:c9:12:72:94:6d:b5: 39:5e:84:32:d7:c0:33:4a:3d:af:5c:2e:6f:2a:c1: c5:02:fd:72:c7:2b:52:31:4d:5e:f8:10:ed:ae:17: d4:79:22:50:22:2e:21:e4:75:99:7e:50:18:48:27: 8a:da:f8:d2:04:db:92:38:25:ae:ca:68:a5:e0:84: 3c:69:67:4d:bf:16:31:5c:9e:b6:46:b4:54:bc:ee: ab:95:67:c7:57:eb:1d:0b:e6:a7:76:6a:b1:5d:6c: f4:77:54:4b:22:af:17:e1:ea:71:24:28:5e:f7:d3: 23:ab:96:9e:fb:10:d6:a4:89:3c:da:37:f2:1f:d5: e1:ab:0c:d9:e2:14:d5:cc:77:e5:cb:41:14:23:62: 3a:59:52:e8:24:03:1c:bb:38:92:48:48:17:70:03: 3d:42:bc:2f:c2:95:20:8d:56:3f:82:92:44:36:c3: f0:50:81:87:e3:43:16:5e:21:63:f7:c9:2a:63:91: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:35:81:26:8F:79:4C:DF:4C:BD:09:3F:51:54:56:84:79:99:4B X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d7:13:b2:21:d2:7f:36:4e:04:cf:24:a6:1d:f5:e2:7f:21: e5:a6:95:b0:18:fc:6e:91:81:89:1a:f2:fc:38:b4:45:bd:f1: 2d:cb:52:c1:e3:fd:39:ae:9d:ad:e5:9d:6f:07:28:64:8d:17: e1:ae:3a:6f:f2:05:e0:dc:18:a4:0f:f7:0f:a7:e8:ef:da:dc: 17:29:83:ea:a5:9d:d8:eb:9b:81:41:17:8a:ea:91:d5:33:ac: 82:b0:7c:3c:c9:47:ee:37:bd:12:6f:e8:bd:76:b6:1c:ad:7b: e5:35:b3:5c:54:e8:0c:6d:46:5a:2f:eb:8f:b9:cb:ff:73:31: d6:3b:cb:f2:ed:3a:19:46:6c:77:ad:32:c2:ba:9a:87:cc:76: c6:be:15:5c:3e:81:ef:04:ae:bc:9b:36:f7:9d:e9:b1:c0:5d: f8:c0:fd:c4:55:d9:db:54:51:f8:21:92:3b:9a:a6:49:f7:a3: fe:fb:8c:0c:a0:18:fe:bf:07:0f:f4:10:5f:12:86:b6:46:8f: 59:84:b0:9e:1f:4d:00:36:64:ab:92:d0:7c:f9:75:40:e1:6f: bc:3d:54:dc:75:42:50:9e:21:c5:2f:a6:4d:5b:f4:2c:1b:9d: 93:2d:cc:d5:56:62:55:10:cc:62:71:51:7f:95:96:67:eb:5e: cd:e7:70:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOu/dQbhN0MnDIoxlthWjiLIt3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA2MzAwMTM2MzZaFw0yNTA3MDMxMzI4MzZaMDMxMTAvBgNV BAMTKDJGNDMzNTgxMjY4Rjc5NENERjRDQkQwOTNGNTE1NDU2ODQ3OTk5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAj2LHThTqUSw/xRHk2REXtNx uebu69gFT1jDtm3SiR34Qgs71WjkBS+NG/haQb01sNAYFQbppQxvNpdEBuPCByJ6 TckScpRttTlehDLXwDNKPa9cLm8qwcUC/XLHK1IxTV74EO2uF9R5IlAiLiHkdZl+ UBhIJ4ra+NIE25I4Ja7KaKXghDxpZ02/FjFcnrZGtFS87quVZ8dX6x0L5qd2arFd bPR3VEsirxfh6nEkKF730yOrlp77ENakiTzaN/If1eGrDNniFNXMd+XLQRQjYjpZ UugkAxy7OJJISBdwAz1CvC/ClSCNVj+CkkQ2w/BQgYfjQxZeIWP3ySpjkUVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0M1gSaPeUzfTL0JP1FUVoR5mUswHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfXE7Ih0n82TgTPJKYd9eJ/IeWmlbAY/G6R gYka8vw4tEW98S3LUsHj/Tmuna3lnW8HKGSNF+GuOm/yBeDcGKQP9w+n6O/a3Bcp g+qlndjrm4FBF4rqkdUzrIKwfDzJR+43vRJv6L12thyte+U1s1xU6AxtRlov64+5 y/9zMdY7y/LtOhlGbHetMsK6mofMdsa+FVw+ge8ErrybNved6bHAXfjA/cRV2dtU Ufghkjuapkn3o/77jAygGP6/Bw/0EF8ShrZGj1mEsJ4fTQA2ZKuS0Hz5dUDhb7w9 VNx1QlCeIcUvpk1b9CwbnZMtzNVWYlUQzGJxUX+VlmfrXs3ncM8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:09 2025 by rpki-client