$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: NSjYvRhxAC47FnAWhoy6vkIXMeIS98csNAZr44qh1Cg= Subject key identifier: F1:DD:02:EC:53:56:6C:39:F3:7A:BC:CC:8D:37:3D:6D:86:C1:7D:43 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 218ABE3BA6FE8515AF6040493E05EEFAA780EB20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: A6 Signing time: Tue 17 Jun 2025 23:51:25 +0000 Manifest this update: Tue 17 Jun 2025 23:46:25 +0000 Manifest next update: Sat 21 Jun 2025 08:41:25 +0000 Files and hashes: 1: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 2: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: DYT3Mx47S7f7FFQglTrnztMMPtIFouoDRQobO5P5B/c=) 3: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 08:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8a:be:3b:a6:fe:85:15:af:60:40:49:3e:05:ee:fa:a7:80:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Jun 17 23:46:25 2025 GMT Not After : Jun 21 08:41:25 2025 GMT Subject: CN=F1DD02EC53566C39F37ABCCC8D373D6D86C17D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:f1:17:79:05:de:f6:b1:99:d5:11:72:56: c3:0a:6b:9a:cb:57:3b:b3:ef:a5:33:c6:14:fd:57: 32:e4:a5:74:b6:e3:d3:fd:87:87:21:e3:90:cf:4f: e3:68:1f:f8:92:09:40:0a:83:70:a8:ce:44:7c:9f: ad:53:37:fa:2a:87:73:c6:78:b9:02:12:ba:74:87: af:38:eb:8b:49:5e:0f:8a:4d:d0:87:10:07:c4:e3: 17:09:3c:17:37:8f:6e:5e:4b:ad:51:57:21:80:ba: 71:47:fb:43:43:23:e1:3e:33:0e:d8:8a:54:30:6b: f7:77:14:11:78:dc:da:22:e6:cd:40:36:39:be:8d: 7a:18:f8:6e:e1:6e:08:28:2c:a3:b0:28:ee:6b:59: ec:3e:a5:82:0e:36:33:aa:c5:f6:b8:33:45:6e:cd: b9:cd:69:06:ea:d0:8b:36:51:87:db:2c:bc:f4:08: a2:70:54:8e:28:99:e4:5e:4b:aa:85:ef:66:24:ff: 2c:2f:be:91:32:fc:cc:01:b0:7e:97:06:c1:1c:88: 37:a8:73:13:f3:a1:9d:33:9b:c4:ca:f9:91:13:48: 8c:0a:9e:18:e6:79:98:ae:54:75:37:a0:21:68:db: 8f:a3:69:d7:95:5c:cd:ae:13:e8:1c:c7:b9:ff:b1: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DD:02:EC:53:56:6C:39:F3:7A:BC:CC:8D:37:3D:6D:86:C1:7D:43 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:7e:4c:39:f3:fd:78:aa:06:2c:1c:af:8c:1f:c5:88:0b: d6:de:9c:07:98:ab:65:7b:aa:ff:6e:9a:8d:62:56:c8:d1:40: 8d:1d:9e:68:d8:e5:98:c7:28:2d:67:98:2a:cd:8f:af:a1:2f: f0:11:54:d1:dc:b5:05:4c:b9:67:04:19:87:10:16:91:14:04: 03:84:f3:3e:a8:00:10:35:70:c9:e7:e8:d2:48:10:01:e4:32: 90:24:5f:3d:a5:bd:b4:c4:df:54:b3:63:b1:84:b7:c8:26:52: 51:23:e8:44:dd:5a:47:5f:7d:83:c3:14:10:88:bf:87:73:44: 50:e6:c3:b0:73:f4:38:91:ff:c4:7d:db:c2:d8:c1:68:67:6a: 18:ac:d5:d7:7a:10:48:5c:71:a3:06:d0:95:f0:4a:68:f6:96: 3c:e2:45:b4:77:cf:48:90:43:6d:ad:25:c7:72:27:fa:34:21: ff:eb:c6:bc:ca:60:66:39:c2:f5:b2:57:97:78:15:93:a5:d9: f5:3e:dd:f6:e0:6d:0b:6b:d7:80:d7:1d:b5:c3:10:53:12:54: a3:2d:17:5e:98:b4:68:7d:c8:d7:2f:af:74:a9:9a:cb:9d:1b: 3b:83:53:f1:ce:c7:aa:54:7b:5f:ec:7d:8b:0f:58:a9:93:f3: 44:66:58:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYq+O6b+hRWvYEBJPgXu+qeA6yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA2MTcyMzQ2MjVaFw0yNTA2MjEwODQxMjVaMDMxMTAvBgNV BAMTKEYxREQwMkVDNTM1NjZDMzlGMzdBQkNDQzhEMzczRDZEODZDMTdENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FvEXeQXe9rGZ1RFyVsMKa5rL Vzuz76UzxhT9VzLkpXS249P9h4ch45DPT+NoH/iSCUAKg3CozkR8n61TN/oqh3PG eLkCErp0h68464tJXg+KTdCHEAfE4xcJPBc3j25eS61RVyGAunFH+0NDI+E+Mw7Y ilQwa/d3FBF43Noi5s1ANjm+jXoY+G7hbggoLKOwKO5rWew+pYIONjOqxfa4M0Vu zbnNaQbq0Is2UYfbLLz0CKJwVI4omeReS6qF72Yk/ywvvpEy/MwBsH6XBsEciDeo cxPzoZ0zm8TK+ZETSIwKnhjmeZiuVHU3oCFo24+jadeVXM2uE+gcx7n/scrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8d0C7FNWbDnzerzMjTc9bYbBfUMwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWRfkw58/14qgYsHK+MH8WIC9benAeYq2V7 qv9umo1iVsjRQI0dnmjY5ZjHKC1nmCrNj6+hL/ARVNHctQVMuWcEGYcQFpEUBAOE 8z6oABA1cMnn6NJIEAHkMpAkXz2lvbTE31SzY7GEt8gmUlEj6ETdWkdffYPDFBCI v4dzRFDmw7Bz9DiR/8R928LYwWhnahis1dd6EEhccaMG0JXwSmj2ljziRbR3z0iQ Q22tJcdyJ/o0If/rxrzKYGY5wvWyV5d4FZOl2fU+3fbgbQtr14DXHbXDEFMSVKMt F16YtGh9yNcvr3SpmsudGzuDU/HOx6pUe1/sfYsPWKmT80RmWFQ= -----END CERTIFICATE-----Generated at Thu Jun 19 20:04:28 2025 by rpki-client