$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: 1DBVOwsR51VAjMrtVLorFs3npHw92EsrK15kPzPnA5c= Subject key identifier: 5C:E1:09:15:CC:82:D4:83:9E:29:86:32:0C:67:A0:CB:6E:D3:B9:2F Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 0E3FFA794CC46087CA723F10C97616B02EBE3AC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 12:00:01 +0000 Manifest this update: Tue 17 Jun 2025 11:55:01 +0000 Manifest next update: Fri 20 Jun 2025 20:24:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: bgQ9cQKiX8/BQjFDyK1Fu0uZxOoDK0x+Xvr4TqU0WBc=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 20:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3f:fa:79:4c:c4:60:87:ca:72:3f:10:c9:76:16:b0:2e:be:3a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Jun 17 11:55:01 2025 GMT Not After : Jun 20 20:24:01 2025 GMT Subject: CN=5CE10915CC82D4839E2986320C67A0CB6ED3B92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:fe:bc:0c:e5:ba:54:9c:f9:a3:e5:d0:f0: 0f:2f:e1:f5:fa:27:5e:f4:ce:45:04:ae:e7:4e:69: dc:b6:22:da:cc:b4:fc:d2:0d:15:d8:f4:a0:98:3c: c6:08:20:50:d9:62:46:33:a8:e7:83:c0:4b:b5:a9: 2d:52:25:6d:df:da:54:0e:5e:74:24:05:80:65:4c: 9f:94:5b:47:c7:12:5a:b8:eb:54:b9:e3:05:70:1a: ae:fc:a7:95:4b:54:86:f8:aa:6f:83:92:20:6f:18: 67:86:75:da:34:f9:a4:76:9f:69:bb:b5:7c:31:7b: 0a:79:bc:e9:09:2a:d6:d0:54:b3:1a:1f:c3:93:1f: b2:1a:08:54:b7:ca:7e:f0:0b:6d:f9:09:bb:86:8d: 53:5b:23:ff:ca:f1:58:9d:8f:ca:0a:13:ee:82:f6: a5:8c:28:6c:f3:74:5b:12:34:fd:a7:75:ae:37:fd: 93:f4:75:f4:64:88:f9:55:24:55:5a:1a:b8:7f:b1: 56:3f:17:38:a8:3d:b5:4d:e8:ed:6c:a1:73:48:5b: 3b:59:38:48:b2:69:a6:b8:3e:df:a5:9a:1d:42:54: 63:1d:af:08:78:a7:2b:46:82:60:62:c2:63:4e:87: 31:ec:15:05:be:6a:89:18:39:df:23:19:66:7b:d7: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:09:15:CC:82:D4:83:9E:29:86:32:0C:67:A0:CB:6E:D3:B9:2F X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3d:c4:1e:f6:61:8f:ea:df:89:9d:5d:c4:2e:ad:26:8e:00: 61:02:05:15:d9:56:c8:83:3e:be:8d:91:50:ff:db:da:50:21: bf:e1:e5:e1:58:8c:fb:4f:08:36:71:7d:20:da:e4:24:3c:ae: 33:80:cd:ec:06:15:fa:6d:be:51:ae:4f:93:12:44:00:a3:f2: cb:5f:1c:a3:f9:ec:11:ba:fc:e0:23:5d:51:e3:75:b8:c9:db: 36:87:09:d9:1c:91:06:f6:94:70:8b:27:73:ef:4c:2f:16:51: 31:fc:8b:55:10:06:8a:25:ce:46:4b:c6:a0:4b:48:b6:55:e3: 99:4b:5b:9b:4f:f7:09:78:29:59:48:fb:02:3e:b2:8c:c0:54: 7e:c5:66:b7:46:8d:1c:79:84:0d:69:8c:c5:54:47:4c:e1:32: 82:42:46:e9:b1:d2:c9:c9:dc:3b:9f:1a:15:66:9c:99:6b:cb: 1c:6a:af:6a:d6:ac:dd:2d:04:86:68:d7:c4:0f:75:79:44:90: 90:b8:98:45:10:2d:2b:c0:a1:67:86:28:af:f8:0a:88:8a:c4: 10:63:63:3f:3a:50:51:17:ee:81:e5:00:65:bb:86:db:eb:7b: 60:2f:27:5f:da:c3:b2:ff:a1:dc:66:b2:ec:97:6a:29:1f:ba: cc:bc:54:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj/6eUzEYIfKcj8QyXYWsC6+OsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA2MTcxMTU1MDFaFw0yNTA2MjAyMDI0MDFaMDMxMTAvBgNV BAMTKDVDRTEwOTE1Q0M4MkQ0ODM5RTI5ODYzMjBDNjdBMENCNkVEM0I5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcM/68DOW6VJz5o+XQ8A8v4fX6 J170zkUErudOady2ItrMtPzSDRXY9KCYPMYIIFDZYkYzqOeDwEu1qS1SJW3f2lQO XnQkBYBlTJ+UW0fHElq461S54wVwGq78p5VLVIb4qm+DkiBvGGeGddo0+aR2n2m7 tXwxewp5vOkJKtbQVLMaH8OTH7IaCFS3yn7wC235CbuGjVNbI//K8Vidj8oKE+6C 9qWMKGzzdFsSNP2nda43/ZP0dfRkiPlVJFVaGrh/sVY/FzioPbVN6O1soXNIWztZ OEiyaaa4Pt+lmh1CVGMdrwh4pytGgmBiwmNOhzHsFQW+aokYOd8jGWZ715ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOEJFcyC1IOeKYYyDGegy27TuS8wHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc9xB72YY/q34mdXcQurSaOAGECBRXZVsiD Pr6NkVD/29pQIb/h5eFYjPtPCDZxfSDa5CQ8rjOAzewGFfptvlGuT5MSRACj8stf HKP57BG6/OAjXVHjdbjJ2zaHCdkckQb2lHCLJ3PvTC8WUTH8i1UQBoolzkZLxqBL SLZV45lLW5tP9wl4KVlI+wI+sozAVH7FZrdGjRx5hA1pjMVUR0zhMoJCRumx0snJ 3DufGhVmnJlryxxqr2rWrN0tBIZo18QPdXlEkJC4mEUQLSvAoWeGKK/4CoiKxBBj Yz86UFEX7oHlAGW7htvre2AvJ1/aw7L/odxmsuyXaikfusy8VHI= -----END CERTIFICATE-----Generated at Tue Jun 17 19:10:13 2025 by rpki-client