$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: l3OsIXaVAwDBYbE6IYiDje4CV25I/329n1vztyIzkmI= Subject key identifier: 39:67:7E:1F:4B:72:0C:20:95:BC:47:12:F7:7B:E3:75:79:6E:FF:65 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 5780BE6AE926D8094E0161025B188A836F201A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02B9 Signing time: Sun 15 Jun 2025 04:51:08 +0000 Manifest this update: Sun 15 Jun 2025 04:46:08 +0000 Manifest next update: Wed 18 Jun 2025 11:17:08 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: yuNuCgaZSByh+KmhWN2YtoMG8CbnHBx0nR+Kbg/E/MY=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:80:be:6a:e9:26:d8:09:4e:01:61:02:5b:18:8a:83:6f:20:1a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Jun 15 04:46:08 2025 GMT Not After : Jun 18 11:17:08 2025 GMT Subject: CN=39677E1F4B720C2095BC4712F77BE375796EFF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:92:1a:87:e5:63:c3:7b:0a:ac:d5:33:ef:57: bc:fa:56:82:dd:39:89:11:c5:aa:d0:f6:37:89:ac: cc:56:55:51:99:55:99:45:27:bc:a5:78:a8:30:69: 00:67:a6:c9:e9:4e:47:61:10:5d:35:da:49:f8:1b: b7:ed:2d:c1:85:1f:d2:a9:3c:c8:56:3d:2a:cd:1d: 77:f9:79:36:7f:38:9e:b5:4c:c5:c5:5e:b2:7b:95: 0c:83:9d:66:5e:71:00:ba:a9:a1:a1:8f:c4:da:a9: 7f:a5:1b:dc:b4:eb:a4:c1:82:d8:d5:e3:24:d8:82: 73:84:57:76:ab:24:b6:f8:7a:da:8c:96:86:8e:15: 58:77:f3:55:0e:bc:4a:54:f7:ea:44:a5:c3:86:8a: 3b:3f:cb:82:41:c7:27:63:4d:b5:00:d6:9f:c4:d2: ff:6f:cb:47:97:3e:29:e5:4f:54:46:af:07:57:4f: fd:c2:c9:1f:ea:86:c1:d2:c6:37:dc:7a:ed:01:38: 0f:c6:14:37:56:c6:a1:9c:4b:46:a5:41:bb:8f:10: d5:98:7a:01:81:17:e4:4c:f9:26:a5:3d:b9:fc:27: 6b:0a:88:77:9a:37:9d:e6:d8:68:fb:d1:b5:55:e2: 5b:6b:6c:c4:68:27:e2:e0:4b:08:51:91:e4:e8:9d: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:67:7E:1F:4B:72:0C:20:95:BC:47:12:F7:7B:E3:75:79:6E:FF:65 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:29:35:2e:c0:66:b6:54:b3:d2:0e:2a:bb:c6:7e:22:a5:82: b0:c4:af:f6:9c:86:1f:df:24:6f:f4:22:a1:3e:22:a1:2f:f4: c8:a8:f2:50:99:f5:9a:0b:56:34:b4:e7:72:06:1c:80:48:72: ee:64:8f:80:0e:ae:3c:d1:3b:ce:70:30:5e:06:45:14:12:aa: 4a:0e:c0:94:ac:a0:37:ce:5b:2b:02:2b:14:ac:99:58:8c:c3: ee:2e:e7:15:cc:c6:7d:02:53:1f:ba:0d:12:85:47:91:2b:d2: 3c:9c:91:ae:08:63:55:ea:7b:df:de:35:ed:04:8a:74:e1:0e: 59:f8:c1:82:cb:8b:d9:a9:9a:5e:86:f0:09:81:75:db:f1:7c: 0c:85:86:df:04:5c:0b:d6:5e:fa:d0:93:8b:f0:52:2c:54:76: 1a:04:79:e5:c7:ef:c2:2c:b9:dd:08:46:7e:a9:d3:a2:d5:9e: ab:b3:ed:05:e7:bc:81:d9:bf:e9:45:40:88:e0:35:0b:0d:70: 44:dd:87:c3:00:87:a8:5b:12:f1:bd:1b:1d:fc:30:ac:f2:33: d0:a5:67:43:06:91:70:1c:36:f6:a5:69:40:2d:9c:89:6d:80: f9:2c:c3:20:d9:61:7c:92:d8:8d:df:da:75:32:f9:95:e0:6c: 8b:36:28:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4C+aukm2AlOAWECWxiKg28gGoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA2MTUwNDQ2MDhaFw0yNTA2MTgxMTE3MDhaMDMxMTAvBgNV BAMTKDM5Njc3RTFGNEI3MjBDMjA5NUJDNDcxMkY3N0JFMzc1Nzk2RUZGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkhqH5WPDewqs1TPvV7z6VoLd OYkRxarQ9jeJrMxWVVGZVZlFJ7yleKgwaQBnpsnpTkdhEF012kn4G7ftLcGFH9Kp PMhWPSrNHXf5eTZ/OJ61TMXFXrJ7lQyDnWZecQC6qaGhj8TaqX+lG9y066TBgtjV 4yTYgnOEV3arJLb4etqMloaOFVh381UOvEpU9+pEpcOGijs/y4JBxydjTbUA1p/E 0v9vy0eXPinlT1RGrwdXT/3CyR/qhsHSxjfceu0BOA/GFDdWxqGcS0alQbuPENWY egGBF+RM+SalPbn8J2sKiHeaN53m2Gj70bVV4ltrbMRoJ+LgSwhRkeTondh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWd+H0tyDCCVvEcS93vjdXlu/2UwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMpNS7AZrZUs9IOKrvGfiKlgrDEr/achh/f JG/0IqE+IqEv9Mio8lCZ9ZoLVjS053IGHIBIcu5kj4AOrjzRO85wMF4GRRQSqkoO wJSsoDfOWysCKxSsmViMw+4u5xXMxn0CUx+6DRKFR5Er0jycka4IY1Xqe9/eNe0E inThDln4wYLLi9mpml6G8AmBddvxfAyFht8EXAvWXvrQk4vwUixUdhoEeeXH78Is ud0IRn6p06LVnquz7QXnvIHZv+lFQIjgNQsNcETdh8MAh6hbEvG9Gx38MKzyM9Cl Z0MGkXAcNvalaUAtnIltgPkswyDZYXyS2I3f2nUy+ZXgbIs2KIc= -----END CERTIFICATE-----Generated at Mon Jun 16 11:06:04 2025 by rpki-client