$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: ZTbBIpSPEmA+Q+FXIjTdvtNXCGr6xA92NRDkT4k3Xlk= Subject key identifier: 55:50:48:2F:6B:AC:F9:DB:41:BB:B0:98:E3:2F:8C:C0:34:1F:36:4A Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 5CEE388FE05887431BC653E07CE2E77004420666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 9B Signing time: Sat 28 Jun 2025 11:01:24 +0000 Manifest this update: Sat 28 Jun 2025 10:56:24 +0000 Manifest next update: Tue 01 Jul 2025 18:32:24 +0000 Files and hashes: 1: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 3: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: q604M8QrF0ZeQOE5a8b1Ch/kSfAZuWeayCMIux1XFoU=) 4: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ee:38:8f:e0:58:87:43:1b:c6:53:e0:7c:e2:e7:70:04:42:06:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Jun 28 10:56:24 2025 GMT Not After : Jul 1 18:32:24 2025 GMT Subject: CN=5550482F6BACF9DB41BBB098E32F8CC0341F364A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:82:71:7d:4b:4f:8c:71:0d:be:9a:96:a9: 6e:11:f5:a5:ff:ee:1f:f0:4b:f3:8e:f9:4b:5e:72: 73:8a:62:e1:4a:2b:74:29:01:fb:5f:b2:6b:5d:0c: 44:15:25:68:f5:a5:2f:be:50:fc:0f:80:15:cc:67: 3f:78:49:15:fa:19:40:11:ee:f4:69:68:5d:b5:31: 1c:cb:78:3d:60:6f:45:6d:cd:af:6e:2d:11:5f:21: 60:34:d6:03:c5:f5:37:06:d0:a5:d2:e4:6c:fd:ca: e1:c6:a3:5c:bc:4b:c1:48:6b:64:eb:c3:c7:1d:9e: 15:b7:6d:f7:2e:a8:24:0f:9f:6f:82:74:01:29:1d: cd:11:3e:3d:37:2b:f8:52:a3:7c:06:20:66:70:62: 89:3b:36:a2:c9:8b:82:fc:5f:a4:68:6a:99:af:1a: 3a:d5:5f:ea:fc:fc:05:48:2a:f8:9b:c4:77:a5:70: 68:77:5c:f6:28:a5:72:78:76:bf:14:08:ab:75:97: 10:36:24:5c:51:83:ba:d2:fe:8e:62:19:10:71:e0: d0:0c:72:66:1e:63:6e:4a:31:75:ab:b2:8f:d9:c3: 6a:f0:91:c7:d3:7b:e9:89:33:9e:b7:2e:53:72:8c: ba:c1:cb:13:da:96:ca:5a:39:bb:dc:63:2b:20:ab: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:50:48:2F:6B:AC:F9:DB:41:BB:B0:98:E3:2F:8C:C0:34:1F:36:4A X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b0:15:e5:7e:44:b1:cf:2b:d6:e2:d7:3a:e4:d7:97:d0:a3: 7c:71:ca:b5:5c:43:d7:ea:0f:46:2c:96:08:f3:b6:90:6d:2f: f6:c4:92:4e:b7:a5:76:75:99:48:19:7b:1b:1d:2c:5f:3f:a0: a2:20:9a:8d:db:28:46:0b:59:15:10:51:a5:aa:4c:b7:91:df: a3:6f:03:50:7f:a0:86:dc:71:92:13:a1:39:98:c8:12:68:e0: 3b:0c:8f:a6:12:72:4f:c1:15:79:b6:8e:c4:02:28:fa:6b:9c: 6a:b3:1d:2c:a8:01:7a:15:c0:ba:36:01:2d:32:3d:7d:4b:6f: 87:be:7c:b8:e0:fc:ed:b9:95:59:89:07:d1:f3:d0:35:4e:35: b6:ab:a3:98:dc:81:31:5f:c7:8f:ce:e8:3d:e7:10:ee:ae:7f: 0b:20:af:cc:55:1c:63:bf:66:a4:15:cb:85:9f:67:43:c8:b8: c2:4a:07:dc:a6:3d:7e:66:ef:00:ce:75:0c:bc:65:83:1a:df: ce:e4:f2:e5:b9:16:60:48:37:f7:d9:77:48:e5:c1:f2:0b:8b: 53:4b:0b:32:39:cd:e8:bc:72:24:36:e9:e1:eb:18:71:bc:82: ac:1d:f8:f3:9d:a3:4a:46:69:ed:3c:fd:92:69:11:6f:5a:77: 2f:82:dc:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXO44j+BYh0MbxlPgfOLncARCBmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA2MjgxMDU2MjRaFw0yNTA3MDExODMyMjRaMDMxMTAvBgNV BAMTKDU1NTA0ODJGNkJBQ0Y5REI0MUJCQjA5OEUzMkY4Q0MwMzQxRjM2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcoIJxfUtPjHENvpqWqW4R9aX/ 7h/wS/OO+UtecnOKYuFKK3QpAftfsmtdDEQVJWj1pS++UPwPgBXMZz94SRX6GUAR 7vRpaF21MRzLeD1gb0Vtza9uLRFfIWA01gPF9TcG0KXS5Gz9yuHGo1y8S8FIa2Tr w8cdnhW3bfcuqCQPn2+CdAEpHc0RPj03K/hSo3wGIGZwYok7NqLJi4L8X6Roapmv GjrVX+r8/AVIKvibxHelcGh3XPYopXJ4dr8UCKt1lxA2JFxRg7rS/o5iGRBx4NAM cmYeY25KMXWrso/Zw2rwkcfTe+mJM563LlNyjLrByxPalspaObvcYysgq5zxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVBIL2us+dtBu7CY4y+MwDQfNkowHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6wFeV+RLHPK9bi1zrk15fQo3xxyrVcQ9fq D0YslgjztpBtL/bEkk63pXZ1mUgZexsdLF8/oKIgmo3bKEYLWRUQUaWqTLeR36Nv A1B/oIbccZIToTmYyBJo4DsMj6YSck/BFXm2jsQCKPprnGqzHSyoAXoVwLo2AS0y PX1Lb4e+fLjg/O25lVmJB9Hz0DVONbaro5jcgTFfx4/O6D3nEO6ufwsgr8xVHGO/ ZqQVy4WfZ0PIuMJKB9ymPX5m7wDOdQy8ZYMa387k8uW5FmBIN/fZd0jlwfILi1NL CzI5zei8ciQ26eHrGHG8gqwd+POdo0pGae08/ZJpEW9ady+C3H4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:18:28 2025 by rpki-client