$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: JzQF9KfPXxnDFLOlD/MTxst3mJT2X2mvO50IxkHgqJU= Subject key identifier: 04:F5:E0:1F:97:A1:D3:F3:35:25:02:10:7E:EB:05:42:4E:E2:D4:D2 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: C957C26BCA940F2E8073E4E95D92161E646284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: F3 Signing time: Sat 28 Jun 2025 04:52:12 +0000 Manifest this update: Sat 28 Jun 2025 04:47:12 +0000 Manifest next update: Tue 01 Jul 2025 08:30:12 +0000 Files and hashes: 1: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=) 2: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: 9FeQdQIjRCWG+b/B2F3vNvwDIuHvnYAYiXq2qmked44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c9:57:c2:6b:ca:94:0f:2e:80:73:e4:e9:5d:92:16:1e:64:62:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Jun 28 04:47:12 2025 GMT Not After : Jul 1 08:30:12 2025 GMT Subject: CN=04F5E01F97A1D3F3352502107EEB05424EE2D4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:be:8f:79:cc:cb:56:0e:9d:0d:88:3b:f4: bc:74:7d:c1:47:ff:d2:d0:9d:e5:bb:c7:74:a5:60: 77:f3:e3:20:32:ae:4b:dc:b9:69:09:ce:bb:92:bf: 4d:3f:c9:17:68:0b:2d:c7:4c:ea:3a:d6:58:6b:09: 1a:6c:ff:35:23:ad:f9:90:72:08:20:57:f2:e4:3c: 00:6e:e4:5b:5b:96:4a:ac:b1:68:ae:ab:60:c1:5e: 5b:bb:44:16:37:ae:17:62:29:30:f1:50:b6:73:3d: 0d:31:47:5f:e7:19:d4:fc:ff:1e:89:35:dd:f1:7d: 04:73:1b:fd:fc:64:b1:67:9b:95:21:75:0b:1b:37: cb:fe:36:c2:a4:c1:94:66:55:2d:98:23:49:e3:f5: 45:93:81:46:36:c3:37:fa:e7:70:ad:3a:d8:0b:0b: 7a:0a:15:de:82:7d:d6:de:0a:90:07:d3:a8:54:c2: 0f:0f:8e:0e:20:f7:a1:07:62:ae:4f:2f:be:76:68: e7:d2:55:e2:15:5a:83:33:58:be:0e:ac:84:ba:45: ea:10:b7:6f:23:47:e0:ae:a8:40:3e:f3:45:32:96: dc:2b:4e:25:d2:fc:14:60:14:c6:59:77:5f:6b:14: 56:dd:ee:a0:72:43:94:20:07:62:8d:c4:50:d4:bf: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F5:E0:1F:97:A1:D3:F3:35:25:02:10:7E:EB:05:42:4E:E2:D4:D2 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a0:47:66:4f:e1:dd:cb:1f:3a:a7:f1:30:8f:9f:74:74:90: 8e:61:1f:ce:da:f6:26:d6:e6:4c:37:89:ad:39:4b:ae:6a:b0: 4b:cc:04:03:3e:cd:82:4b:87:fd:e5:b0:65:77:9d:51:79:fb: 1c:bd:50:95:ee:f6:67:7d:ce:1a:91:c0:bd:e6:3c:b5:e2:54: 2b:51:20:14:c4:9b:17:ae:4b:4b:11:07:e9:1f:56:ee:db:de: 31:53:24:b3:d6:76:ee:2f:a3:c5:25:d9:c2:72:88:85:fd:d3: 16:59:11:8b:46:55:ee:12:f3:f1:fa:0d:fa:55:f4:39:e5:d5: 53:cd:30:5d:d6:91:f4:10:31:4d:90:15:8b:0f:72:c1:e8:4f: f0:b8:bd:91:e5:0b:21:32:ba:c2:9f:3d:72:10:4c:93:3c:dc: 8c:b9:8c:ee:d4:2f:4b:d2:40:f9:12:83:51:e5:b4:30:7e:e6: e0:6c:7b:75:3a:b1:99:23:3a:96:33:cd:52:8c:e6:fe:f9:02: b4:a2:0e:df:75:07:51:30:cd:99:04:01:f2:df:ac:d1:c2:31: aa:5f:d6:8a:03:ad:38:8a:a5:35:97:9f:ca:92:4a:77:35:ba: 25:6f:1d:6e:28:87:dd:b0:c9:06:ea:94:5a:37:4e:51:dd:cb: d2:13:42:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMlXwmvKlA8ugHPk6V2SFh5kYoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTA2MjgwNDQ3MTJaFw0yNTA3MDEwODMwMTJaMDMxMTAvBgNV BAMTKDA0RjVFMDFGOTdBMUQzRjMzNTI1MDIxMDdFRUIwNTQyNEVFMkQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAL6PeczLVg6dDYg79Lx0fcFH /9LQneW7x3SlYHfz4yAyrkvcuWkJzruSv00/yRdoCy3HTOo61lhrCRps/zUjrfmQ cgggV/LkPABu5FtblkqssWiuq2DBXlu7RBY3rhdiKTDxULZzPQ0xR1/nGdT8/x6J Nd3xfQRzG/38ZLFnm5UhdQsbN8v+NsKkwZRmVS2YI0nj9UWTgUY2wzf653CtOtgL C3oKFd6CfdbeCpAH06hUwg8Pjg4g96EHYq5PL752aOfSVeIVWoMzWL4OrIS6ReoQ t28jR+CuqEA+80UyltwrTiXS/BRgFMZZd19rFFbd7qByQ5QgB2KNxFDUvyPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPXgH5eh0/M1JQIQfusFQk7i1NIwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGgR2ZP4d3LHzqn8TCPn3R0kI5hH87a9ibW 5kw3ia05S65qsEvMBAM+zYJLh/3lsGV3nVF5+xy9UJXu9md9zhqRwL3mPLXiVCtR IBTEmxeuS0sRB+kfVu7b3jFTJLPWdu4vo8Ul2cJyiIX90xZZEYtGVe4S8/H6DfpV 9Dnl1VPNMF3WkfQQMU2QFYsPcsHoT/C4vZHlCyEyusKfPXIQTJM83Iy5jO7UL0vS QPkSg1HltDB+5uBse3U6sZkjOpYzzVKM5v75ArSiDt91B1EwzZkEAfLfrNHCMapf 1ooDrTiKpTWXn8qSSnc1uiVvHW4oh92wyQbqlFo3TlHdy9ITQsE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:54 2025 by rpki-client