$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: AtHGijLJZrYMojGkG896ZoSjXlISoHQsjYSHZO4/SCQ= Subject key identifier: 97:11:16:78:16:D5:56:FA:6F:6A:CC:2B:A1:0C:44:59:77:21:71:1F Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 7545F3A74A9AD69BAD36D7DCF313F9192EC8B044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 9F Signing time: Sat 14 Jun 2025 18:02:08 +0000 Manifest this update: Sat 14 Jun 2025 17:57:08 +0000 Manifest next update: Wed 18 Jun 2025 01:10:08 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 2: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: zG5NG6bL5hO3jJHNMKiuzv/WsDvUONO6eL2rukhLg0s=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:45:f3:a7:4a:9a:d6:9b:ad:36:d7:dc:f3:13:f9:19:2e:c8:b0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Jun 14 17:57:08 2025 GMT Not After : Jun 18 01:10:08 2025 GMT Subject: CN=9711167816D556FA6F6ACC2BA10C44597721711F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:6c:60:f9:68:4f:5d:8f:13:57:3f:61:f5: 0d:d7:66:ce:f1:49:03:fa:e0:14:28:78:b7:ea:e0: f1:a3:48:90:99:2e:40:d1:91:94:86:aa:a8:be:ea: b5:aa:e2:cf:4c:1c:75:dc:33:98:d7:32:3d:ca:bc: f5:09:8e:52:28:1c:81:42:a3:4c:ce:0f:55:85:a9: fb:fd:39:ae:ae:15:c2:8a:d0:b8:3f:d2:eb:e3:ff: 42:d5:66:70:0b:45:c3:51:b5:e8:34:9d:82:79:97: cc:93:44:73:9b:e0:d5:77:ae:66:30:d0:70:99:0f: ec:98:c6:fa:fc:0b:e4:ee:04:47:7d:3d:71:06:a8: db:c9:9b:44:da:2d:fd:9c:05:79:98:bc:e6:20:3f: b6:e9:07:de:05:e5:e5:2f:fd:17:0e:b1:e0:03:ec: d8:52:54:a6:d7:e8:6b:b8:98:a9:a8:68:f2:63:d7: e5:c3:b3:a0:98:a0:ce:fc:b8:65:f1:3c:cd:b6:d1: 45:27:3d:d2:e5:9f:0f:01:8a:7b:cf:c5:ab:04:15: fb:10:f1:fb:b1:7f:76:ba:03:dd:c3:71:c2:eb:c2: fd:46:c8:3c:07:3c:15:a8:8d:1f:92:04:96:8d:eb: 70:e7:0f:0e:6f:24:a0:b0:61:9d:3e:de:4b:ae:7f: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:11:16:78:16:D5:56:FA:6F:6A:CC:2B:A1:0C:44:59:77:21:71:1F X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6a:17:fb:95:29:28:07:13:aa:41:b0:28:7d:f5:61:d3:1e: 08:01:af:2d:a6:68:ad:90:5f:40:13:ad:b5:79:35:26:13:18: c9:5f:fb:86:22:a0:9d:bc:dc:8b:95:a3:8d:7a:3e:e0:d1:6c: 89:04:bd:2f:95:ed:b2:74:80:91:fb:f1:3a:77:8d:da:f3:40: b9:48:63:89:70:d6:9e:41:d7:12:b3:bf:48:73:8d:f8:c4:96: 05:44:77:aa:c9:09:ef:84:ea:f7:9b:7a:e3:4d:b2:02:9a:e1: 43:35:b1:db:d5:ea:5e:ff:02:79:15:67:83:5d:43:45:b9:b9: ab:a9:df:5e:5a:c4:6c:3e:78:c2:d6:2c:ab:36:6d:a2:6f:f2: 96:d1:0e:68:69:3a:71:3a:5d:ae:2c:13:3b:96:70:7e:40:fe: ea:0c:1b:87:6c:21:9e:92:b4:d8:7b:d5:84:89:41:37:a6:ce: 12:dc:f0:c5:bd:b1:6e:63:e1:8e:e7:57:7c:b9:9c:41:ac:d5: 3f:83:f5:33:61:94:8d:47:77:e7:dc:d6:51:ee:2e:5a:7d:7d: f9:9e:fb:ce:54:3c:e0:64:b0:88:fc:e5:c8:b6:43:81:39:14: f0:f8:71:50:d3:9e:d1:1a:64:50:76:86:de:96:76:07:e9:cb: 90:ce:4e:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUXzp0qa1putNtfc8xP5GS7IsEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA2MTQxNzU3MDhaFw0yNTA2MTgwMTEwMDhaMDMxMTAvBgNV BAMTKDk3MTExNjc4MTZENTU2RkE2RjZBQ0MyQkExMEM0NDU5NzcyMTcxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAmxg+WhPXY8TVz9h9Q3XZs7x SQP64BQoeLfq4PGjSJCZLkDRkZSGqqi+6rWq4s9MHHXcM5jXMj3KvPUJjlIoHIFC o0zOD1WFqfv9Oa6uFcKK0Lg/0uvj/0LVZnALRcNRteg0nYJ5l8yTRHOb4NV3rmYw 0HCZD+yYxvr8C+TuBEd9PXEGqNvJm0TaLf2cBXmYvOYgP7bpB94F5eUv/RcOseAD 7NhSVKbX6Gu4mKmoaPJj1+XDs6CYoM78uGXxPM220UUnPdLlnw8BinvPxasEFfsQ 8fuxf3a6A93DccLrwv1GyDwHPBWojR+SBJaN63DnDw5vJKCwYZ0+3kuufwd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxEWeBbVVvpvaswroQxEWXchcR8wHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVqF/uVKSgHE6pBsCh99WHTHggBry2maK2Q X0ATrbV5NSYTGMlf+4YioJ283IuVo416PuDRbIkEvS+V7bJ0gJH78Tp3jdrzQLlI Y4lw1p5B1xKzv0hzjfjElgVEd6rJCe+E6vebeuNNsgKa4UM1sdvV6l7/AnkVZ4Nd Q0W5uaup315axGw+eMLWLKs2baJv8pbRDmhpOnE6Xa4sEzuWcH5A/uoMG4dsIZ6S tNh71YSJQTemzhLc8MW9sW5j4Y7nV3y5nEGs1T+D9TNhlI1Hd+fc1lHuLlp9ffme +85UPOBksIj85ci2Q4E5FPD4cVDTntEaZFB2ht6Wdgfpy5DOTmM= -----END CERTIFICATE-----Generated at Mon Jun 16 03:19:21 2025 by rpki-client