$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json) Hash identifier: IrE4zmyistpGz5zoL2PSsHhQv4iXJDEx4XnLdGobQr8= Subject key identifier: D9:75:FB:F7:E6:CB:E1:56:1E:64:D6:37:7C:6D:37:9E:37:1F:98:F4 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 310956F3800C5D3D74E8E76335388B54057C8AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft Manifest number: 0322 Signing time: Sun 29 Jun 2025 09:10:24 +0000 Manifest this update: Sun 29 Jun 2025 09:05:24 +0000 Manifest next update: Mon 30 Jun 2025 11:44:24 +0000 Files and hashes: 1: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: 03J/danHrRrUf5+1VD3u6MMOJbhoX9hiSFBAhf9ApE0=) 2: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: 55PDBfiNO7785lQ74TpDgI+R/EhhJs+Qx7PPaQwuhVc=) 3: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: FfYGvZr4SFWPjlAzX82KpSKmBRhTz7G//KPcNec2hhc=) 4: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: ulx6RKWeZv7oKnpaNFV95Hac18fP+TNAepjWakUMmA0=) 5: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: 9o9sYCBvv89cZi/setzqWtCpYi4p2zeAk4HPlkj79To=) 6: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: pgeYu3iShqQKvlIx2f1qXuAoowtyTG7BHfXN/foqY2A=) 7: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: dxkM5JVcb7W4AXTDG322RYpeM/ueW7NJ+43Fi9Geah4=) 8: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: xh8Sz+UX718ObRCWgtCtKu1Ea/C7rUKcDeEuMvnakOU=) 9: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: 4z11sQdUJz1Zykfa5O/UqcXdJZq+xLbs1EF1QSPhnXw=) 10: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: 8i2Uhg35vt+EQ6r1FdnJelDCfkdVacT4X7Ea+iyOf2k=) 11: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: uEYjBirJT+i0hlQMTypSSmmJ9f6MpXLy/c4beoodP6A=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 11:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:09:56:f3:80:0c:5d:3d:74:e8:e7:63:35:38:8b:54:05:7c:8a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Jun 29 09:05:24 2025 GMT Not After : Jun 30 11:44:24 2025 GMT Subject: CN=D975FBF7E6CBE1561E64D6377C6D379E371F98F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:82:a8:be:02:60:b3:42:f3:91:36:4f:a8: c5:f1:0b:6f:61:5e:38:dd:2b:78:de:68:e0:9e:b9: 62:5d:72:6d:26:ca:31:ef:fc:a0:cf:ba:2c:23:e0: d1:4f:92:24:a2:c6:f3:91:50:82:ee:97:7b:ad:a5: df:89:5c:dd:be:bd:95:34:eb:d7:88:c8:9c:6b:0f: ba:57:3b:a6:2d:59:e1:eb:b1:2a:97:61:23:1d:00: 60:cf:5a:2b:3b:90:fa:cc:da:62:a7:15:84:87:56: b9:a4:39:5b:fb:16:0d:63:c9:a3:bf:19:98:3f:d2: bc:14:e9:30:07:3d:6a:e4:09:bc:70:50:f0:b7:b7: 46:08:ba:9b:4c:aa:be:b3:a4:e3:fb:d3:10:98:bc: 26:7a:98:d6:36:86:0e:5f:09:de:c4:0e:5d:8c:01: 3e:97:28:f2:92:89:94:6e:b5:f7:db:32:4a:d1:2a: f0:af:db:b7:a3:66:13:1b:60:e3:a8:a3:8f:c6:70: 68:25:43:1b:9d:6e:49:b8:0f:d2:ce:e3:77:d5:6d: 04:65:ea:ed:5c:94:ed:bf:ca:87:8c:b3:be:fd:fc: 9e:a8:81:29:f5:62:b7:a8:a4:68:60:96:b0:03:be: f1:de:ea:10:87:62:cd:80:b9:25:9d:cb:1e:cf:84: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:75:FB:F7:E6:CB:E1:56:1E:64:D6:37:7C:6D:37:9E:37:1F:98:F4 X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:ca:d5:50:83:b2:bb:3c:f5:6f:a1:4b:83:aa:6e:1d:60: 01:d2:ff:24:f0:86:4d:43:fb:ec:41:7c:38:39:85:d3:3d:79: 75:39:62:2c:26:bd:26:05:34:f4:bf:86:9b:9f:86:03:c4:e2: 63:04:6a:5e:c5:3c:46:d0:2b:74:4b:4f:f5:1b:e7:79:64:3d: 19:9b:c8:4b:3f:98:ea:4b:40:8e:04:ed:46:a0:14:c3:e6:fd: 53:f5:98:e7:67:64:a9:ca:fd:d1:f6:04:be:87:02:fa:7e:a8: c1:cd:1d:db:f9:9f:17:99:8d:e1:ba:28:ee:5f:bf:1a:2a:ef: dd:70:47:ac:3e:36:53:e3:5b:a0:ef:97:7b:44:e2:a2:73:ba: 21:d0:89:ed:eb:11:f3:20:d2:50:1c:57:fe:17:13:c7:d5:79: 73:ad:7d:09:2b:0d:5c:2c:5c:a8:11:25:fb:69:b6:13:40:33: c2:ea:3d:02:4c:d2:fa:b9:ff:e5:64:c0:5b:42:f6:db:c7:d1: 66:41:82:ba:67:f8:04:0e:0f:3a:05:d9:bb:71:c4:b7:90:59: 40:dc:c1:07:cb:b0:c2:af:64:c0:72:d7:0f:15:32:66:0c:0e: 5e:2f:13:19:ec:63:ac:e1:c8:53:5f:f5:37:0f:7f:6a:74:55: 0c:e8:c1:e8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUMQlW84AMXT106OdjNTiLVAV8ivcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI1MDYyOTA5MDUyNFoX DTI1MDYzMDExNDQyNFowMzExMC8GA1UEAxMoRDk3NUZCRjdFNkNCRTE1NjFFNjRE NjM3N0M2RDM3OUUzNzFGOThGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6Pgqi+AmCzQvORNk+oxfELb2FeON0reN5o4J65Yl1ybSbKMe/8oM+6LCPg 0U+SJKLG85FQgu6Xe62l34lc3b69lTTr14jInGsPulc7pi1Z4euxKpdhIx0AYM9a KzuQ+szaYqcVhIdWuaQ5W/sWDWPJo78ZmD/SvBTpMAc9auQJvHBQ8Le3Rgi6m0yq vrOk4/vTEJi8JnqY1jaGDl8J3sQOXYwBPpco8pKJlG6199syStEq8K/bt6NmExtg 46ijj8ZwaCVDG51uSbgP0s7jd9VtBGXq7VyU7b/Kh4yzvv38nqiBKfVit6ikaGCW sAO+8d7qEIdizYC5JZ3LHs+E4SUCAwEAAaOCAfkwggH1MB0GA1UdDgQWBBTZdfv3 5svhVh5k1jd8bTeeNx+Y9DAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjBsBggrBgEFBQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzlDRjA1RTcwMjRENEE0ODdFMEI3OUUyRjU3 NTI1QkYzNDVEQjUzRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAkMrVUIOyuzz1b6FLg6puHWAB0v8k 8IZNQ/vsQXw4OYXTPXl1OWIsJr0mBTT0v4abn4YDxOJjBGpexTxG0Ct0S0/1G+d5 ZD0Zm8hLP5jqS0COBO1GoBTD5v1T9ZjnZ2Spyv3R9gS+hwL6fqjBzR3b+Z8XmY3h uijuX78aKu/dcEesPjZT41ug75d7ROKic7oh0Int6xHzINJQHFf+FxPH1XlzrX0J Kw1cLFyoESX7abYTQDPC6j0CTNL6uf/lZMBbQvbbx9FmQYK6Z/gEDg86Bdm7ccS3 kFlA3MEHy7DCr2TActcPFTJmDA5eLxMZ7GOs4chTX/U3D39qdFUM6MHo -----END CERTIFICATE-----Generated at Sun Jun 29 19:36:08 2025 by rpki-client