$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: GgWGJOxT1bW0QATpCjc9BdKdWCrOq24sp5uHJcKEfkA= Subject key identifier: 43:68:74:B2:46:12:F1:F7:70:96:EA:1F:60:3C:9D:9C:F1:49:11:49 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 3CCDF1208C16DFCA9D45EF01557EE52975CE47F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 67 Signing time: Sun 29 Jun 2025 03:50:46 +0000 Manifest this update: Sun 29 Jun 2025 03:45:46 +0000 Manifest next update: Wed 02 Jul 2025 06:26:46 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: QzfN0s2nhRlklPCiMoOZrieDZk1YRgj3T0BfxEL6Tt0=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cd:f1:20:8c:16:df:ca:9d:45:ef:01:55:7e:e5:29:75:ce:47:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Jun 29 03:45:46 2025 GMT Not After : Jul 2 06:26:46 2025 GMT Subject: CN=436874B24612F1F77096EA1F603C9D9CF1491149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:49:e0:ef:45:52:67:1c:ef:ca:74:2c:4b: 90:eb:cb:34:ff:64:da:73:57:5f:ef:79:aa:5a:49: fe:de:c0:7e:0a:f3:6d:11:13:cb:6c:81:f1:38:d3: 71:ae:ba:d9:44:13:9e:b5:65:0b:93:c2:68:71:38: 30:8b:f4:c2:80:88:4c:b2:45:1a:d4:df:d8:96:a3: ea:71:66:3f:66:94:db:15:52:84:2c:26:17:75:f0: 36:0d:73:75:59:cb:a6:e9:45:a5:66:9d:c3:a5:c7: 8a:1d:96:9b:71:4a:c8:84:b3:29:e0:9a:60:9d:9f: 37:11:2a:32:a3:40:26:c7:cc:cf:e3:61:e8:1b:b1: 90:2c:ef:60:8b:21:57:3b:6a:3d:55:e2:5a:dd:5e: 19:86:c4:1f:73:9f:29:4b:b0:6e:9e:d2:d2:21:06: e1:7b:a2:51:32:70:62:1a:cb:b7:eb:39:86:83:4b: 5e:6d:cb:2a:48:dd:07:b8:bb:f4:8b:00:ae:0d:8c: a4:37:24:cb:f9:a0:ab:ff:6b:fa:2c:9f:ed:33:9a: 3c:62:ab:11:c9:ed:d9:67:6a:2f:c7:b5:17:03:e0: 33:b2:ed:fa:b1:50:5a:4e:e0:0c:f5:ec:2b:9e:00: c6:b1:f7:e2:df:9f:14:72:5b:73:24:3e:69:97:5f: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:68:74:B2:46:12:F1:F7:70:96:EA:1F:60:3C:9D:9C:F1:49:11:49 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d5:d0:f8:0b:0a:d6:57:a4:44:26:b6:6a:31:37:fd:88:3f: 58:01:d5:e4:a8:4c:a1:a1:f9:56:66:56:34:84:c7:3e:06:c9: 52:c9:62:c7:6a:80:eb:d4:e4:91:52:2d:3f:80:b7:14:6c:76: c9:4d:1f:f0:f4:ed:0f:8e:13:a4:6a:87:f3:2c:35:e5:aa:26: 3c:85:62:fb:05:f4:b9:bd:e1:f7:ee:c9:4b:a2:56:b8:8b:27: ec:63:6b:36:ba:ec:8d:9c:15:73:00:06:40:29:c2:87:f1:e8: 7b:41:fa:08:05:ed:56:94:50:85:56:51:d6:87:9f:63:24:a4: 28:de:48:2c:be:32:e5:0d:8e:1b:8c:0f:b0:f0:43:8c:2e:09: e3:46:60:d4:1e:48:e3:6d:d8:8f:e9:4e:a0:42:78:bc:fa:ae: ec:c6:f3:50:7b:2d:1d:89:06:6e:7d:b9:cb:43:f6:34:47:0e: f5:08:0a:19:67:b9:57:aa:94:a3:42:65:32:ba:f7:fa:bf:77: 5c:7a:51:2b:78:e7:98:ab:8d:dd:92:f9:1c:ac:42:63:fa:c5: fc:a3:ff:11:fa:8e:24:d6:d8:5b:7a:05:80:d0:e0:3e:a9:e7: 3f:3b:3d:1a:21:c3:b6:05:83:ac:8c:03:38:9e:de:6e:7e:6b: f2:07:ab:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPM3xIIwW38qdRe8BVX7lKXXOR/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA2MjkwMzQ1NDZaFw0yNTA3MDIwNjI2NDZaMDMxMTAvBgNV BAMTKDQzNjg3NEIyNDYxMkYxRjc3MDk2RUExRjYwM0M5RDlDRjE0OTExNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZnUng70VSZxzvynQsS5DryzT/ ZNpzV1/veapaSf7ewH4K820RE8tsgfE403GuutlEE561ZQuTwmhxODCL9MKAiEyy RRrU39iWo+pxZj9mlNsVUoQsJhd18DYNc3VZy6bpRaVmncOlx4odlptxSsiEsyng mmCdnzcRKjKjQCbHzM/jYegbsZAs72CLIVc7aj1V4lrdXhmGxB9znylLsG6e0tIh BuF7olEycGIay7frOYaDS15tyypI3Qe4u/SLAK4NjKQ3JMv5oKv/a/osn+0zmjxi qxHJ7dlnai/HtRcD4DOy7fqxUFpO4Az17CueAMax9+LfnxRyW3MkPmmXX+61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2h0skYS8fdwluofYDydnPFJEUkwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnV0PgLCtZXpEQmtmoxN/2IP1gB1eSoTKGh +VZmVjSExz4GyVLJYsdqgOvU5JFSLT+AtxRsdslNH/D07Q+OE6Rqh/MsNeWqJjyF YvsF9Lm94ffuyUuiVriLJ+xjaza67I2cFXMABkApwofx6HtB+ggF7VaUUIVWUdaH n2MkpCjeSCy+MuUNjhuMD7DwQ4wuCeNGYNQeSONt2I/pTqBCeLz6ruzG81B7LR2J Bm59uctD9jRHDvUIChlnuVeqlKNCZTK69/q/d1x6USt455irjd2S+RysQmP6xfyj /xH6jiTW2Ft6BYDQ4D6p5z87PRohw7YFg6yMAzie3m5+a/IHq/E= -----END CERTIFICATE-----Generated at Mon Jun 30 22:32:41 2025 by rpki-client