$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: AlY5df78glBPd4/QnB9p8URe//hbxH9p6NA63nEwaeg= Subject key identifier: C3:25:78:67:47:0B:CD:68:0C:5F:52:75:65:E0:12:6B:B9:46:2F:A1 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 2B8FB8D73E3331D5B0099F3EF02786F622A3750A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 010E Signing time: Mon 16 Jun 2025 00:00:40 +0000 Manifest this update: Sun 15 Jun 2025 23:55:40 +0000 Manifest next update: Thu 19 Jun 2025 08:08:40 +0000 Files and hashes: 1: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: +APICdlzAXzPTovwwSZJ61UodMycupz4fczsxJqAXjc=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) 3: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8f:b8:d7:3e:33:31:d5:b0:09:9f:3e:f0:27:86:f6:22:a3:75:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Jun 15 23:55:40 2025 GMT Not After : Jun 19 08:08:40 2025 GMT Subject: CN=C3257867470BCD680C5F527565E0126BB9462FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:73:fc:c0:ff:cd:56:ff:97:b5:68:b2:bc: fd:55:40:77:0a:e8:59:05:10:e3:e8:2a:35:50:e1: 0d:ee:7a:b6:38:95:55:dc:ee:90:1f:5c:a3:ff:de: ff:08:df:fd:5e:ff:22:c8:53:5e:63:ea:e4:b8:7c: 4f:93:f3:cb:2a:11:0c:38:4b:d9:0a:9d:7a:ca:73: d0:16:fe:26:23:75:30:23:6b:84:c2:39:88:1f:ce: f0:22:71:2d:d5:2b:8e:32:9c:59:86:59:56:68:ba: 97:90:fb:4e:12:e9:c7:f3:4e:19:92:76:27:47:3d: ab:67:2c:cf:f3:82:5d:7b:9f:cb:95:e5:1a:28:cc: 3e:65:94:10:53:2b:da:c8:20:8c:d1:10:2a:7f:e8: 4f:24:8d:dc:78:67:7c:bc:4f:c9:31:8e:d6:86:82: bf:3d:bb:04:49:e1:f0:bf:d3:e5:07:ef:0c:c7:26: ce:ff:27:a9:c6:f5:dd:a2:ea:09:8b:c1:6b:29:2e: 18:de:46:68:b7:39:21:89:7f:6d:d3:8b:36:45:c3: a3:c2:da:75:cb:9d:a4:84:b6:1a:19:bd:05:0c:5b: 61:06:69:22:25:3a:1a:87:8f:20:28:9e:9d:dc:e8: 8e:c6:02:be:06:bf:15:9a:c5:fa:db:d8:96:db:87: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:25:78:67:47:0B:CD:68:0C:5F:52:75:65:E0:12:6B:B9:46:2F:A1 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4a:00:b6:d9:cc:07:24:53:7e:ee:24:37:44:f7:4a:6f:95: 75:fc:ec:a4:a0:16:af:7b:6f:f1:92:fb:3b:f7:96:94:eb:14: 62:a4:f8:52:d3:c2:46:3b:c0:31:9b:fc:1e:4f:31:c6:88:6b: 36:d3:de:3a:5a:fb:c3:44:c3:d7:38:9d:ae:b8:92:ee:20:5e: 35:ff:35:7c:c9:42:65:ae:80:71:5b:fa:72:38:a0:4f:12:20: 15:2f:43:22:6e:38:08:82:e8:1e:ef:1e:2c:84:30:79:0a:bb: 0e:fe:80:a7:ab:c3:07:49:9a:c8:58:d7:17:83:8b:b2:dd:71: 8a:9c:a9:fb:eb:a7:4d:ef:4c:bd:08:91:03:1f:08:aa:f5:df: e9:30:a0:c9:16:dd:86:fe:73:34:5e:47:bc:98:be:55:45:b8: 70:02:87:34:a9:4b:04:b0:7d:b3:42:94:c1:ce:53:c9:bc:7e: d4:ce:a0:cc:3d:20:65:ea:dd:29:c6:b8:95:fd:ba:2e:ce:0d: 85:31:46:73:62:34:25:61:df:bd:fb:c3:09:bc:5f:92:29:12: f5:e7:4d:1b:74:2f:d3:e8:e6:c6:35:7f:d8:24:88:86:f1:20: 50:9e:a4:92:31:e5:f4:2f:fa:a0:93:58:de:3d:82:8f:b8:0f: 25:9a:db:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4+41z4zMdWwCZ8+8CeG9iKjdQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA2MTUyMzU1NDBaFw0yNTA2MTkwODA4NDBaMDMxMTAvBgNV BAMTKEMzMjU3ODY3NDcwQkNENjgwQzVGNTI3NTY1RTAxMjZCQjk0NjJGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCXP8wP/NVv+XtWiyvP1VQHcK 6FkFEOPoKjVQ4Q3uerY4lVXc7pAfXKP/3v8I3/1e/yLIU15j6uS4fE+T88sqEQw4 S9kKnXrKc9AW/iYjdTAja4TCOYgfzvAicS3VK44ynFmGWVZoupeQ+04S6cfzThmS didHPatnLM/zgl17n8uV5RoozD5llBBTK9rIIIzRECp/6E8kjdx4Z3y8T8kxjtaG gr89uwRJ4fC/0+UH7wzHJs7/J6nG9d2i6gmLwWspLhjeRmi3OSGJf23TizZFw6PC 2nXLnaSEthoZvQUMW2EGaSIlOhqHjyAonp3c6I7GAr4GvxWaxfrb2Jbbh44LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwyV4Z0cLzWgMX1J1ZeASa7lGL6EwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1KALbZzAckU37uJDdE90pvlXX87KSgFq97 b/GS+zv3lpTrFGKk+FLTwkY7wDGb/B5PMcaIazbT3jpa+8NEw9c4na64ku4gXjX/ NXzJQmWugHFb+nI4oE8SIBUvQyJuOAiC6B7vHiyEMHkKuw7+gKerwwdJmshY1xeD i7LdcYqcqfvrp03vTL0IkQMfCKr13+kwoMkW3Yb+czReR7yYvlVFuHAChzSpSwSw fbNClMHOU8m8ftTOoMw9IGXq3SnGuJX9ui7ODYUxRnNiNCVh3737wwm8X5IpEvXn TRt0L9Po5sY1f9gkiIbxIFCepJIx5fQv+qCTWN49go+4DyWa268= -----END CERTIFICATE-----Generated at Wed Jun 18 07:48:46 2025 by rpki-client