$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: ypZ4bdWc47lsbCGXJEgba0/32QvW2umpjqEJUhJP84o= Subject key identifier: 5B:2D:80:AD:0C:1C:F7:76:B1:96:6D:DC:F4:61:15:46:34:40:F8:4B Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 2AC767026C2CA269C67FEBD83E5D6F5AC846E220 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 018B Signing time: Tue 01 Jul 2025 01:30:49 +0000 Manifest this update: Tue 01 Jul 2025 01:25:49 +0000 Manifest next update: Fri 04 Jul 2025 07:37:49 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: Fm4lVeS9el7V12TabsqWwVe/QWMCJSfqntQUTJwqoGI=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c7:67:02:6c:2c:a2:69:c6:7f:eb:d8:3e:5d:6f:5a:c8:46:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Jul 1 01:25:49 2025 GMT Not After : Jul 4 07:37:49 2025 GMT Subject: CN=5B2D80AD0C1CF776B1966DDCF46115463440F84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:bd:d3:13:bb:06:c8:8c:e7:6a:b6:71:84: 7a:0d:8d:b8:93:05:13:97:1f:70:12:bf:11:0f:72: 22:62:cb:f6:94:a4:ac:f1:50:32:90:8e:fc:0e:c3: 98:49:90:3b:a6:01:29:32:2a:c9:8a:09:b9:19:c4: 3a:5e:93:1e:b1:ae:43:69:24:2d:27:c4:49:05:29: c6:9f:76:c5:b6:e9:81:57:7d:46:64:3d:79:78:57: f1:c6:d9:0c:22:fb:dd:88:77:d1:a0:60:bb:f7:55: e5:8b:0d:db:21:b4:a0:6b:55:86:c5:c8:68:a5:3a: c7:69:19:c6:0b:39:0e:79:aa:34:13:74:6a:1a:6c: 74:c0:a0:6b:81:47:87:c8:12:ae:03:23:80:12:65: 63:32:e0:7d:b6:4c:a1:98:30:91:0d:16:6c:44:30: 9b:80:16:1d:5a:9a:db:cd:59:45:70:79:65:03:9a: c0:7c:f7:ad:47:fc:49:c2:1e:2b:ac:84:c9:8f:20: c5:8e:ca:71:81:20:81:4d:a3:1f:06:bc:a3:32:e2: 05:a8:5e:20:77:6b:62:65:64:83:ff:67:ff:f8:ea: 4a:f4:c4:4f:9b:51:42:74:7f:f0:d6:93:a4:2b:11: 58:ef:b4:b4:4e:f0:7e:d0:55:17:69:67:c2:75:a6: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2D:80:AD:0C:1C:F7:76:B1:96:6D:DC:F4:61:15:46:34:40:F8:4B X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:52:0d:45:e9:52:a1:ec:56:51:cb:68:60:59:ae:1c:fd: f4:f5:2b:3c:e6:2d:95:79:09:92:1a:fd:8f:a6:09:23:e2:11: 26:04:05:42:31:52:a0:0d:2a:a1:16:3f:1a:a0:4c:a3:a4:e7: 37:41:9f:6a:c4:fd:06:ae:71:ed:4a:15:27:ce:22:de:bb:54: c6:3c:05:0c:a0:11:aa:f7:c3:f2:35:a4:67:3c:97:51:38:39: be:5f:b9:92:07:ce:20:5c:a8:43:93:5f:18:04:db:13:8e:6b: 43:7f:75:8d:49:d1:aa:cb:b2:8d:29:8a:72:57:96:a5:15:e9: 21:40:55:50:de:56:b8:72:9f:43:4c:2c:8f:cd:3e:cf:4a:dd: 4a:9f:be:c9:f4:3c:94:31:58:0c:2a:3c:58:85:61:07:13:0d: 11:bf:83:b3:cb:aa:0e:a1:40:bb:96:e8:b3:bf:3f:ad:f3:8f: 03:de:39:00:1a:ce:7c:ad:37:20:f9:43:28:d4:40:f4:4b:ec: d3:e3:c9:a0:de:ee:0c:00:42:32:ea:9c:51:48:fe:c4:d1:91: db:d3:dd:bf:c5:a8:39:58:f6:d7:16:51:fb:10:ec:4c:ff:fe: 1f:a6:67:ff:2c:cf:77:5e:73:74:43:67:45:0d:63:4e:bd:2b: c7:13:97:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsdnAmwsomnGf+vYPl1vWshG4iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA3MDEwMTI1NDlaFw0yNTA3MDQwNzM3NDlaMDMxMTAvBgNV BAMTKDVCMkQ4MEFEMEMxQ0Y3NzZCMTk2NkREQ0Y0NjExNTQ2MzQ0MEY4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ73TE7sGyIznarZxhHoNjbiT BROXH3ASvxEPciJiy/aUpKzxUDKQjvwOw5hJkDumASkyKsmKCbkZxDpekx6xrkNp JC0nxEkFKcafdsW26YFXfUZkPXl4V/HG2Qwi+92Id9GgYLv3VeWLDdshtKBrVYbF yGilOsdpGcYLOQ55qjQTdGoabHTAoGuBR4fIEq4DI4ASZWMy4H22TKGYMJENFmxE MJuAFh1amtvNWUVweWUDmsB8961H/EnCHiushMmPIMWOynGBIIFNox8GvKMy4gWo XiB3a2JlZIP/Z//46kr0xE+bUUJ0f/DWk6QrEVjvtLRO8H7QVRdpZ8J1pmIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWy2ArQwc93axlm3c9GEVRjRA+EswHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfTUg1F6VKh7FZRy2hgWa4c/fT1KzzmLZV5 CZIa/Y+mCSPiESYEBUIxUqANKqEWPxqgTKOk5zdBn2rE/Qauce1KFSfOIt67VMY8 BQygEar3w/I1pGc8l1E4Ob5fuZIHziBcqEOTXxgE2xOOa0N/dY1J0arLso0pinJX lqUV6SFAVVDeVrhyn0NMLI/NPs9K3Uqfvsn0PJQxWAwqPFiFYQcTDRG/g7PLqg6h QLuW6LO/P63zjwPeOQAaznytNyD5QyjUQPRL7NPjyaDe7gwAQjLqnFFI/sTRkdvT 3b/FqDlY9tcWUfsQ7Ez//h+mZ/8sz3dec3RDZ0UNY069K8cTl3Q= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:40 2025 by rpki-client