$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: Oekr0tUlyoH2brKDdLTTfNAlL4BHMztWeRlUHVSnPTk= Subject key identifier: B9:C3:F8:93:D9:41:8D:06:C1:71:B2:8F:1F:D7:94:C3:23:41:44:3B Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 72923900F1276FF71B443AF8170D9C1B61023423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 01F2 Signing time: Fri 27 Jun 2025 19:50:00 +0000 Manifest this update: Fri 27 Jun 2025 19:45:00 +0000 Manifest next update: Mon 30 Jun 2025 21:07:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: rdwBIaU8jzFMj9DDKBW/HiRWSWrezpgTBIySHfFAQZE=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:92:39:00:f1:27:6f:f7:1b:44:3a:f8:17:0d:9c:1b:61:02:34:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Jun 27 19:45:00 2025 GMT Not After : Jun 30 21:07:00 2025 GMT Subject: CN=B9C3F893D9418D06C171B28F1FD794C32341443B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:0a:dd:a5:1d:78:cb:c3:19:69:b2:c6:7f: d8:87:7a:ac:39:94:bb:cb:2a:0b:c6:85:58:37:80: fd:62:84:b5:70:18:ae:6f:35:42:dd:0f:84:0b:2e: ad:f1:bb:1e:fc:ac:4c:0b:c2:ea:b5:f3:01:6a:6a: 1d:21:b3:b5:8e:4a:fe:22:fe:f2:4d:b9:d3:70:46: bb:82:81:53:f1:4c:2a:28:42:fb:04:3b:c8:73:9c: d9:0c:16:56:a8:c6:d5:e4:88:92:b0:57:4b:e9:1e: 98:e5:87:ed:e2:8b:ba:07:99:44:23:8a:5a:3a:b8: 55:87:3e:da:ea:14:e6:3a:ce:98:64:50:00:2c:5b: 9a:0f:4f:18:4f:a4:c7:34:bb:6e:80:87:fd:61:85: fa:ee:81:ab:d8:97:b6:bd:60:86:fd:ad:a1:86:22: 49:91:eb:5b:65:33:a8:e8:37:63:41:f8:fb:61:6c: ab:cf:cd:f0:ac:20:1d:b9:d3:fc:73:b7:ad:93:d1: 38:58:2b:45:72:0c:b6:36:a3:ea:55:f6:8d:92:72: 8b:a0:aa:ec:7c:2c:6b:90:af:af:25:7c:9c:00:3d: 82:52:1d:aa:fc:be:77:4d:4d:2b:cb:5d:df:45:c5: a4:d8:76:a7:2f:7e:ed:6b:88:1e:d2:c1:f0:aa:87: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C3:F8:93:D9:41:8D:06:C1:71:B2:8F:1F:D7:94:C3:23:41:44:3B X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ab:87:b8:b7:c8:a4:11:1c:c7:2f:56:f0:07:17:37:29:7c: 66:79:ab:c7:cf:8c:7d:95:6a:ac:4a:7a:5b:88:bd:94:a4:5c: c6:49:cc:f6:bf:c8:a9:30:95:8c:e1:04:82:c3:76:1e:d7:52: 9f:04:ab:cb:69:6b:a0:9a:5a:3f:08:c9:ff:c9:15:24:35:07: 0c:8f:02:e5:be:ab:ff:bf:90:84:d6:94:9c:2e:ce:e2:fb:40: 70:5d:a0:be:d8:d9:1c:78:86:71:29:88:a2:f3:4c:68:3e:3b: 3c:79:02:42:60:0b:f1:2d:f7:81:5b:8a:df:fb:6c:4e:0a:d1: 21:7e:6f:fe:53:5e:a0:69:22:33:7f:cf:f9:a7:ab:b8:c1:41: f7:4e:bd:3e:6f:82:54:08:38:fe:c5:de:88:92:c5:58:58:df: 16:ec:06:30:35:64:09:31:65:74:1a:5e:2f:76:97:60:e6:7a: 0a:8b:ea:b5:f7:4d:f5:d5:39:75:7c:84:0f:49:0a:0c:a2:1d: d7:89:63:ca:e0:52:40:cf:2e:79:98:a2:6c:48:46:71:6d:1f: 3d:33:ed:c0:34:e0:ab:70:b1:58:bb:fa:49:9f:31:af:6e:9d: 20:27:47:03:61:b4:1b:01:18:0c:24:32:14:c2:9d:16:49:82: c4:bf:1c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpI5APEnb/cbRDr4Fw2cG2ECNCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA2MjcxOTQ1MDBaFw0yNTA2MzAyMTA3MDBaMDMxMTAvBgNV BAMTKEI5QzNGODkzRDk0MThEMDZDMTcxQjI4RjFGRDc5NEMzMjM0MTQ0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DArdpR14y8MZabLGf9iHeqw5 lLvLKgvGhVg3gP1ihLVwGK5vNULdD4QLLq3xux78rEwLwuq18wFqah0hs7WOSv4i /vJNudNwRruCgVPxTCooQvsEO8hznNkMFlaoxtXkiJKwV0vpHpjlh+3ii7oHmUQj ilo6uFWHPtrqFOY6zphkUAAsW5oPTxhPpMc0u26Ah/1hhfrugavYl7a9YIb9raGG IkmR61tlM6joN2NB+PthbKvPzfCsIB250/xzt62T0ThYK0VyDLY2o+pV9o2Scoug qux8LGuQr68lfJwAPYJSHar8vndNTSvLXd9FxaTYdqcvfu1riB7SwfCqh5QNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucP4k9lBjQbBcbKPH9eUwyNBRDswHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6rh7i3yKQRHMcvVvAHFzcpfGZ5q8fPjH2V aqxKeluIvZSkXMZJzPa/yKkwlYzhBILDdh7XUp8Eq8tpa6CaWj8Iyf/JFSQ1BwyP AuW+q/+/kITWlJwuzuL7QHBdoL7Y2Rx4hnEpiKLzTGg+Ozx5AkJgC/Et94Fbit/7 bE4K0SF+b/5TXqBpIjN/z/mnq7jBQfdOvT5vglQIOP7F3oiSxVhY3xbsBjA1ZAkx ZXQaXi92l2DmegqL6rX3TfXVOXV8hA9JCgyiHdeJY8rgUkDPLnmYomxIRnFtHz0z 7cA04KtwsVi7+kmfMa9unSAnRwNhtBsBGAwkMhTCnRZJgsS/HLo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:08 2025 by rpki-client