$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: mMmczMs8rl+dULX96Kkdx7S4zWBFq5n5/L8gfpz9RFk= Subject key identifier: 83:36:58:82:66:CC:98:D7:D1:F8:47:2B:D5:09:AC:04:FA:77:A1:21 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 4B004BE22BB8D1C9F1692FEC7175B73100301C25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: 9C Signing time: Sat 14 Jun 2025 10:52:03 +0000 Manifest this update: Sat 14 Jun 2025 10:47:03 +0000 Manifest next update: Tue 17 Jun 2025 18:44:03 +0000 Files and hashes: 1: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: AZEmfCNTiV+FYg/yw9hFETkUfFbbK5ftbZE0ZS1n9Ro=) 2: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: sKVPjpyBrQoayc/PovqMYsqnv1S0RE1TYxr97EFCinY=) 3: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: j6dgc3ruNxec67NtQTPzypJdOlM6suihHaG3ZbEwF2U=) 4: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: wgS20VWqKQyTdaQvBzivbNIKKJm8jb1jO3D0v/T/0gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:00:4b:e2:2b:b8:d1:c9:f1:69:2f:ec:71:75:b7:31:00:30:1c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Jun 14 10:47:03 2025 GMT Not After : Jun 17 18:44:03 2025 GMT Subject: CN=8336588266CC98D7D1F8472BD509AC04FA77A121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:09:a6:60:a6:13:df:67:f6:81:ad:43:c3: f7:a2:7d:05:6b:1b:92:8a:b1:8b:0b:9e:c1:b6:60: b9:43:e1:0f:dd:eb:fd:cb:5e:db:9d:d5:b5:36:f5: 45:22:4e:77:24:bd:b9:06:c0:c4:d9:6f:3e:27:43: 0b:70:9f:c2:91:9a:cd:22:e0:bd:85:48:33:7b:72: 09:8e:a4:48:5c:af:ec:6e:24:e7:7a:d6:77:14:5e: 1c:e3:f4:89:57:70:ee:ba:1b:2e:f1:34:ae:b6:01: 82:0f:b6:f2:99:e3:de:2c:0e:54:6d:3f:6a:9e:2f: 59:dc:8e:2e:96:9b:29:91:ce:87:78:52:be:96:c7: 04:95:6b:79:d8:7f:b0:3c:06:86:a2:ab:4f:98:a2: f9:b8:2b:2d:f5:29:1e:86:28:12:3f:84:64:d6:d4: db:0f:87:09:82:7e:88:c8:f9:d5:61:f6:14:5b:6f: 21:5f:c9:c3:7e:42:f9:c1:3b:e4:74:11:b8:03:6a: 51:4b:7f:e9:35:fc:f7:bd:24:e5:65:19:f8:a4:fd: f8:38:cb:90:3b:3a:1e:24:7f:b3:6e:30:99:b7:e8: be:33:2b:ec:99:b0:d0:83:df:3d:09:ce:06:b5:bf: 91:d7:3a:65:c5:2d:78:51:12:dd:d3:a0:5b:49:f6: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:58:82:66:CC:98:D7:D1:F8:47:2B:D5:09:AC:04:FA:77:A1:21 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:0e:5d:ed:78:32:5d:0a:ea:fd:a6:d3:8d:eb:d5:d9:41: b9:57:d7:12:85:1c:25:6b:71:ff:8c:b7:2b:af:77:16:4a:bd: 20:7d:93:fc:ea:60:cc:6e:23:01:6f:43:20:68:53:17:62:a2: 8a:a3:bb:82:5a:93:a9:44:24:4d:13:0c:10:d9:51:33:c6:3c: cf:69:22:ad:f6:02:fc:ba:81:3f:27:51:75:b0:2e:2a:ca:9b: 5c:56:0d:02:d1:59:9c:6b:d2:94:de:92:1d:91:0a:4f:e0:c5: 3a:52:7f:53:73:7e:e2:c4:09:d6:cf:9d:40:fd:99:ff:2f:17: 2a:a5:49:f3:cf:fd:1a:38:0e:eb:de:1c:c6:87:43:99:f9:7f: ed:08:9d:2d:90:ee:49:af:ca:ae:9d:d7:28:35:6a:13:7b:43: b3:82:9e:d8:a8:c6:f3:ad:eb:ec:af:e1:89:a7:a8:04:71:29: 14:3d:a4:be:99:ae:d3:ab:71:12:f6:22:41:b1:d6:1c:00:e5: 7b:da:18:f9:45:16:1c:c2:b7:f6:12:74:5a:c3:9e:6a:ab:76: 51:7a:f2:b0:51:84:65:b7:d5:d0:d0:15:ef:ad:33:6a:73:0a: 71:6c:eb:67:bd:ce:75:de:08:53:76:3c:5d:a4:b0:cb:64:18: 10:d8:bc:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwBL4iu40cnxaS/scXW3MQAwHCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTA2MTQxMDQ3MDNaFw0yNTA2MTcxODQ0MDNaMDMxMTAvBgNV BAMTKDgzMzY1ODgyNjZDQzk4RDdEMUY4NDcyQkQ1MDlBQzA0RkE3N0ExMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/QmmYKYT32f2ga1Dw/eifQVr G5KKsYsLnsG2YLlD4Q/d6/3LXtud1bU29UUiTnckvbkGwMTZbz4nQwtwn8KRms0i 4L2FSDN7cgmOpEhcr+xuJOd61ncUXhzj9IlXcO66Gy7xNK62AYIPtvKZ494sDlRt P2qeL1ncji6WmymRzod4Ur6WxwSVa3nYf7A8Boaiq0+Yovm4Ky31KR6GKBI/hGTW 1NsPhwmCfojI+dVh9hRbbyFfycN+QvnBO+R0EbgDalFLf+k1/Pe9JOVlGfik/fg4 y5A7Oh4kf7NuMJm36L4zK+yZsNCD3z0Jzga1v5HXOmXFLXhREt3ToFtJ9iMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzZYgmbMmNfR+Ecr1QmsBPp3oSEwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkXDl3teDJdCur9ptON69XZQblX1xKFHCVr cf+MtyuvdxZKvSB9k/zqYMxuIwFvQyBoUxdiooqju4Jak6lEJE0TDBDZUTPGPM9p Iq32Avy6gT8nUXWwLirKm1xWDQLRWZxr0pTekh2RCk/gxTpSf1NzfuLECdbPnUD9 mf8vFyqlSfPP/Ro4DuveHMaHQ5n5f+0InS2Q7kmvyq6d1yg1ahN7Q7OCntioxvOt 6+yv4YmnqARxKRQ9pL6ZrtOrcRL2IkGx1hwA5XvaGPlFFhzCt/YSdFrDnmqrdlF6 8rBRhGW31dDQFe+tM2pzCnFs62e9znXeCFN2PF2ksMtkGBDYvFA= -----END CERTIFICATE-----Generated at Mon Jun 16 17:33:43 2025 by rpki-client