$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: m6QSgcs+TcUy8njvJ9iKuzN0VnfPXjWA7zdlI3wGsVc= Subject key identifier: 84:E4:9E:66:45:EB:90:87:B5:8D:6D:15:AE:08:24:87:42:71:75:9C Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 2AB75D8E60E3F40D2272E960FDA3DCC6CDB1D6BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 018C Signing time: Tue 17 Jun 2025 17:51:27 +0000 Manifest this update: Tue 17 Jun 2025 17:46:27 +0000 Manifest next update: Sat 21 Jun 2025 03:29:27 +0000 Files and hashes: 1: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: kDS4MbJhz54aj2fesl3ebA7CcUcYrvxqFsU092iz/SQ=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b7:5d:8e:60:e3:f4:0d:22:72:e9:60:fd:a3:dc:c6:cd:b1:d6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Jun 17 17:46:27 2025 GMT Not After : Jun 21 03:29:27 2025 GMT Subject: CN=84E49E6645EB9087B58D6D15AE0824874271759C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:6a:8e:e3:71:cc:0c:5f:b0:ee:a0:62:f5: 9e:99:c3:9a:7e:d4:c0:d8:2c:fb:9e:f8:27:5d:9d: 44:97:31:ea:92:68:c5:d0:74:63:75:d5:59:ee:c4: cc:9f:81:a7:27:21:e7:85:4f:4c:aa:b9:81:7e:e4: 23:ba:de:db:17:7e:62:60:5d:2b:d9:8f:9a:ef:f6: 05:de:09:e8:03:96:f3:20:f9:2f:cc:bf:f4:e8:e3: 6d:80:1f:51:4f:6d:8d:3d:dd:8b:3f:01:1c:5f:ce: 5a:f3:7f:77:ef:1f:60:63:38:72:6a:06:16:62:a5: b7:55:88:eb:87:b1:47:94:dc:5d:7c:42:a8:18:16: 68:19:55:f7:b4:ea:50:27:60:2a:24:ae:ff:62:2d: 96:55:5e:8b:71:a8:1a:ae:09:4b:9e:8e:90:fe:45: 1a:34:9c:8f:e2:5b:35:28:7f:0c:20:35:25:81:4a: 7e:85:51:43:99:bd:6d:53:ef:ce:c2:08:14:46:8b: 0d:ad:9c:15:78:99:e5:4f:99:ba:fe:1f:90:b6:2f: c7:d4:1e:ac:30:70:e5:9f:b8:ec:20:b0:ff:55:c4: d7:83:67:f3:cf:83:89:64:6f:f9:35:6d:c6:e9:c9: 27:33:3d:c8:c6:51:58:c2:23:f9:5d:f6:40:7a:04: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E4:9E:66:45:EB:90:87:B5:8D:6D:15:AE:08:24:87:42:71:75:9C X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:2d:09:e5:32:2a:2d:f0:5f:23:c7:d1:8a:95:65:ae:0a: e0:ee:59:f4:8c:91:4d:d6:26:7c:2a:2f:71:8d:03:61:bc:4e: 16:e2:53:ca:88:ec:27:e8:56:55:05:19:29:a8:1f:9d:85:7d: ca:12:22:04:0f:d3:8b:ae:f6:47:5b:99:ec:e1:f1:e2:95:48: f4:ba:34:19:58:dc:4d:7a:b3:83:61:0b:f3:63:35:5a:ac:ea: 58:48:df:cc:c2:ec:59:6a:ae:a8:a8:5c:99:10:41:33:fa:fa: 7a:6a:de:8f:f4:bb:73:90:be:99:c9:34:38:30:74:91:64:26: 88:76:d2:9e:ce:5c:8f:6d:23:9e:6c:53:f9:43:4b:cc:28:a0: ba:4a:2b:a8:4f:62:e7:bc:c4:f3:69:f4:c7:e2:1a:92:c1:0a: 95:21:45:b0:8d:94:31:6c:a3:4f:e7:f8:9f:b9:ae:49:a8:f2: 16:ea:31:5c:43:26:68:dc:62:89:d4:01:3f:a0:2e:c8:4f:b5: 65:fa:a5:7f:1f:bf:6a:60:1c:ae:d3:95:28:1f:f4:2c:ed:71: e9:26:4b:4e:8a:bb:a6:16:d5:8b:32:cf:25:3d:43:00:ca:85: 50:78:be:c8:2b:01:66:61:75:79:4b:5a:01:ea:66:76:82:f8: 1a:56:77:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrddjmDj9A0iculg/aPcxs2x1r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTA2MTcxNzQ2MjdaFw0yNTA2MjEwMzI5MjdaMDMxMTAvBgNV BAMTKDg0RTQ5RTY2NDVFQjkwODdCNThENkQxNUFFMDgyNDg3NDI3MTc1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpT2qO43HMDF+w7qBi9Z6Zw5p+ 1MDYLPue+CddnUSXMeqSaMXQdGN11VnuxMyfgacnIeeFT0yquYF+5CO63tsXfmJg XSvZj5rv9gXeCegDlvMg+S/Mv/To422AH1FPbY093Ys/ARxfzlrzf3fvH2BjOHJq BhZipbdViOuHsUeU3F18QqgYFmgZVfe06lAnYCokrv9iLZZVXotxqBquCUuejpD+ RRo0nI/iWzUofwwgNSWBSn6FUUOZvW1T787CCBRGiw2tnBV4meVPmbr+H5C2L8fU HqwwcOWfuOwgsP9VxNeDZ/PPg4lkb/k1bcbpySczPcjGUVjCI/ld9kB6BMQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOSeZkXrkIe1jW0Vrggkh0JxdZwwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh4LQnlMiot8F8jx9GKlWWuCuDuWfSMkU3W JnwqL3GNA2G8ThbiU8qI7CfoVlUFGSmoH52FfcoSIgQP04uu9kdbmezh8eKVSPS6 NBlY3E16s4NhC/NjNVqs6lhI38zC7FlqrqioXJkQQTP6+npq3o/0u3OQvpnJNDgw dJFkJoh20p7OXI9tI55sU/lDS8wooLpKK6hPYue8xPNp9MfiGpLBCpUhRbCNlDFs o0/n+J+5rkmo8hbqMVxDJmjcYonUAT+gLshPtWX6pX8fv2pgHK7TlSgf9Cztcekm S06Ku6YW1YsyzyU9QwDKhVB4vsgrAWZhdXlLWgHqZnaC+BpWdxo= -----END CERTIFICATE-----Generated at Wed Jun 18 16:02:14 2025 by rpki-client