$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: RX58BqJBzvwb9FedcHMbGlb+PxIGig0gequQtJlKzmY= Subject key identifier: 5F:F8:E4:89:99:5D:12:9A:40:C0:6B:0B:CC:37:04:D2:3B:5A:48:AF Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 39A7266CEFE2DD9C4E2B08EEE7513FF483F3EA51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: B8 Signing time: Fri 27 Jun 2025 10:51:13 +0000 Manifest this update: Fri 27 Jun 2025 10:46:13 +0000 Manifest next update: Mon 30 Jun 2025 21:08:13 +0000 Files and hashes: 1: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: 6bvFC4dh8GYcL6cpeuD38VwpxmwXtj2eBbTGpBtWXDU=) 2: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 4: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a7:26:6c:ef:e2:dd:9c:4e:2b:08:ee:e7:51:3f:f4:83:f3:ea:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Jun 27 10:46:13 2025 GMT Not After : Jun 30 21:08:13 2025 GMT Subject: CN=5FF8E489995D129A40C06B0BCC3704D23B5A48AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:2d:ea:8d:83:bd:00:64:74:22:96:48:45: e1:fb:81:10:1e:1e:b7:4e:8d:5d:4e:e1:f4:c5:46: 92:54:49:55:ad:b9:ec:87:41:56:23:c9:7b:49:cf: 41:4c:a6:7a:0d:40:95:4f:fe:8b:46:8a:fb:2e:b4: 01:ca:55:b8:cd:25:c4:20:fb:f8:13:49:5e:ee:22: 97:d4:a4:cf:c7:81:ef:51:2d:e9:5c:be:18:c8:e8: 6a:c7:c7:bb:1e:f0:9a:b3:7e:f6:53:a8:89:c5:45: b0:08:d6:69:31:5c:c0:6d:03:dc:ea:8d:d8:d4:0a: 5d:c9:5e:71:a3:b9:b8:ae:f6:d5:09:92:ca:03:56: 6e:34:c5:29:67:50:61:6f:5d:d7:d6:07:91:da:f6: 41:e0:d2:78:2a:b0:ce:fa:e1:54:e3:0d:1a:40:81: 7b:c9:7e:47:6b:db:95:14:75:3e:c8:f5:da:f5:ae: 51:a8:78:88:12:47:2b:70:5d:99:60:f4:39:a1:82: c9:c8:d6:f8:2d:67:6b:d7:0f:29:ef:15:f8:41:6e: e8:59:01:c3:52:32:ed:34:b6:91:af:df:c7:56:ad: b7:dd:c3:2e:40:87:7b:f4:94:0c:20:7f:c1:a1:d8: 30:f9:03:f2:10:b6:1a:ed:88:aa:56:eb:5c:ca:da: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:E4:89:99:5D:12:9A:40:C0:6B:0B:CC:37:04:D2:3B:5A:48:AF X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:69:2a:de:ef:b8:2e:86:a0:e5:ba:42:e0:7c:c3:ae:d9:8d: fc:8f:32:4d:23:f5:17:8c:c9:bb:a3:66:57:46:0d:79:f5:9a: 31:60:d3:9a:91:18:ad:c3:e0:1e:23:1c:e1:8b:4a:d9:42:85: 99:3b:04:2d:b5:95:a8:b3:85:75:f7:40:44:15:24:ac:9b:49: 02:a3:16:97:90:24:ca:af:12:a2:6b:2a:39:38:7b:e6:df:77: ea:3f:bf:f9:87:2c:42:bd:89:b8:ee:e4:a5:fa:97:e0:b1:a5: b4:86:39:27:cf:40:6e:03:60:22:e1:d4:25:5a:70:27:ab:2e: 6d:8e:95:35:07:fe:d7:03:2f:ac:38:4f:ce:8a:e7:3f:92:7e: ab:28:de:93:5e:6d:42:f0:d7:ab:24:cd:56:b4:ce:f8:fa:f1: 9b:0a:b6:20:83:ad:e5:de:81:dd:49:33:17:f1:89:38:3f:48: 6d:99:6f:dc:2b:94:50:d4:fb:93:d6:0e:2a:0c:12:23:f2:23: 82:b4:6f:fe:25:91:6b:d5:47:97:e2:19:0c:cc:4c:cf:d0:44: 50:a0:86:c3:1d:5e:78:89:32:bc:19:b0:f3:e1:c6:c1:b5:ad: db:b3:a9:f6:84:d5:44:12:71:6d:6b:78:52:a8:4c:d6:2f:37: f7:f6:17:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOacmbO/i3ZxOKwju51E/9IPz6lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA2MjcxMDQ2MTNaFw0yNTA2MzAyMTA4MTNaMDMxMTAvBgNV BAMTKDVGRjhFNDg5OTk1RDEyOUE0MEMwNkIwQkNDMzcwNEQyM0I1QTQ4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCS3qjYO9AGR0IpZIReH7gRAe HrdOjV1O4fTFRpJUSVWtueyHQVYjyXtJz0FMpnoNQJVP/otGivsutAHKVbjNJcQg +/gTSV7uIpfUpM/Hge9RLelcvhjI6GrHx7se8JqzfvZTqInFRbAI1mkxXMBtA9zq jdjUCl3JXnGjubiu9tUJksoDVm40xSlnUGFvXdfWB5Ha9kHg0ngqsM764VTjDRpA gXvJfkdr25UUdT7I9dr1rlGoeIgSRytwXZlg9DmhgsnI1vgtZ2vXDynvFfhBbuhZ AcNSMu00tpGv38dWrbfdwy5Ah3v0lAwgf8Gh2DD5A/IQthrtiKpW61zK2qPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/jkiZldEppAwGsLzDcE0jtaSK8wHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtpKt7vuC6GoOW6QuB8w67ZjfyPMk0j9ReM ybujZldGDXn1mjFg05qRGK3D4B4jHOGLStlChZk7BC21laizhXX3QEQVJKybSQKj FpeQJMqvEqJrKjk4e+bfd+o/v/mHLEK9ibju5KX6l+CxpbSGOSfPQG4DYCLh1CVa cCerLm2OlTUH/tcDL6w4T86K5z+Sfqso3pNebULw16skzVa0zvj68ZsKtiCDreXe gd1JMxfxiTg/SG2Zb9wrlFDU+5PWDioMEiPyI4K0b/4lkWvVR5fiGQzMTM/QRFCg hsMdXniJMrwZsPPhxsG1rduzqfaE1UQScW1reFKoTNYvN/f2F2I= -----END CERTIFICATE-----Generated at Sun Jun 29 22:27:32 2025 by rpki-client