$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: etb91elxAM7ocYg2ffx9tkEgtkuB8kzLT+sHN9fW5lg= Subject key identifier: 9C:54:87:D5:ED:63:B7:11:F0:17:04:BA:AA:85:6E:D9:07:0C:58:8D Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 7FDF0DD52BDCB404F56F462749889CD0892B4001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 019B Signing time: Sun 15 Jun 2025 21:22:05 +0000 Manifest this update: Sun 15 Jun 2025 21:17:05 +0000 Manifest next update: Thu 19 Jun 2025 07:28:05 +0000 Files and hashes: 1: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) 2: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: Lb66wQKEJ5K5vr5bMBL5680MSwhl2YrtOmoZXCtJxzU=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 4: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:df:0d:d5:2b:dc:b4:04:f5:6f:46:27:49:88:9c:d0:89:2b:40:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Jun 15 21:17:05 2025 GMT Not After : Jun 19 07:28:05 2025 GMT Subject: CN=9C5487D5ED63B711F01704BAAA856ED9070C588D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:c6:f3:49:3d:80:2a:71:c1:00:a1:39:d3: 75:0f:0e:fa:f1:e7:44:93:7d:75:a4:9a:ac:15:42: 6b:c8:d9:c8:dc:a3:c7:ff:f0:89:69:07:dd:0a:66: 9d:87:01:2e:f8:9d:c0:2c:04:7c:eb:3c:a1:f9:a6: d4:07:f8:77:63:f9:07:67:46:8d:c2:1b:cf:75:6c: 0f:b2:76:44:d9:5a:b8:03:d8:09:f9:ca:8c:3c:1f: 9b:e4:2e:5b:06:c8:32:ff:62:99:4b:06:fa:75:42: 8a:ff:a4:03:4d:d7:f1:12:bf:1a:2f:8c:75:1f:86: 54:bf:9c:c3:94:9a:be:d6:d2:87:b9:15:4a:f1:12: 7d:15:bd:dc:45:10:4d:13:01:c4:72:37:a7:dc:92: 44:a7:75:95:83:65:64:92:0d:08:82:38:a2:87:ac: b3:f8:24:42:54:c3:96:b1:57:5b:f2:b8:74:7c:62: 9a:29:17:e7:2c:2b:95:45:3b:1e:00:95:ef:68:15: 36:09:ab:01:ef:aa:18:86:b2:63:0a:8b:a2:de:0e: 7e:b3:c8:d9:56:bf:95:6f:33:5e:ee:37:bc:39:f7: 3d:8a:b4:5f:30:99:de:27:8e:fb:48:a7:be:5f:7e: 05:8e:b9:ae:a4:a2:22:ac:c8:88:c2:f9:4c:5f:5b: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:87:D5:ED:63:B7:11:F0:17:04:BA:AA:85:6E:D9:07:0C:58:8D X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:93:51:be:6d:6d:70:70:a7:2c:3b:9b:53:76:0e:d3:ce:01: a9:ce:f5:04:aa:72:83:38:ab:bd:ac:84:27:9c:8c:88:50:21: ae:b1:34:1e:90:6c:59:ac:2b:b2:48:cb:21:e1:9d:1b:94:82: 55:94:32:52:99:eb:81:14:39:3d:7d:31:7f:c7:9d:e3:59:4f: 79:f4:0e:09:44:56:96:21:80:05:70:ca:f5:0f:a5:31:80:eb: a5:70:6e:6e:49:31:63:91:52:c5:38:81:52:4f:86:c1:17:06: 27:fa:65:f8:bb:30:53:81:02:aa:b3:e9:1d:35:1e:5e:4b:41: 3d:12:d2:9a:9e:97:df:b6:e6:0e:2d:83:fa:e6:84:27:d7:02: f2:23:49:4d:e9:24:22:ba:9f:9b:f2:4c:db:ff:ec:d1:5c:3c: a2:8e:55:99:69:a8:68:f7:fb:da:2c:63:32:de:ee:d5:54:75: eb:72:02:e6:4a:fd:07:61:2f:55:e2:51:c7:a3:39:55:a3:d7: 3d:8e:25:7e:3a:ae:26:15:e5:d8:4a:ba:09:1d:16:c0:35:4a: 56:0c:80:33:e6:26:dd:06:20:59:f1:03:19:62:3a:0d:89:20: e2:a4:16:9f:e8:bc:8b:71:ed:5d:f9:48:8f:3f:9c:32:eb:da: d8:bd:fe:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf98N1SvctAT1b0YnSYic0IkrQAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTA2MTUyMTE3MDVaFw0yNTA2MTkwNzI4MDVaMDMxMTAvBgNV BAMTKDlDNTQ4N0Q1RUQ2M0I3MTFGMDE3MDRCQUFBODU2RUQ5MDcwQzU4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q8bzST2AKnHBAKE503UPDvrx 50STfXWkmqwVQmvI2cjco8f/8IlpB90KZp2HAS74ncAsBHzrPKH5ptQH+Hdj+Qdn Ro3CG891bA+ydkTZWrgD2An5yow8H5vkLlsGyDL/YplLBvp1Qor/pANN1/ESvxov jHUfhlS/nMOUmr7W0oe5FUrxEn0VvdxFEE0TAcRyN6fckkSndZWDZWSSDQiCOKKH rLP4JEJUw5axV1vyuHR8YpopF+csK5VFOx4Ale9oFTYJqwHvqhiGsmMKi6LeDn6z yNlWv5VvM17uN7w59z2KtF8wmd4njvtIp75ffgWOua6koiKsyIjC+UxfW8CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFSH1e1jtxHwFwS6qoVu2QcMWI0wHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2TUb5tbXBwpyw7m1N2DtPOAanO9QSqcoM4 q72shCecjIhQIa6xNB6QbFmsK7JIyyHhnRuUglWUMlKZ64EUOT19MX/HneNZT3n0 DglEVpYhgAVwyvUPpTGA66Vwbm5JMWORUsU4gVJPhsEXBif6Zfi7MFOBAqqz6R01 Hl5LQT0S0pqel9+25g4tg/rmhCfXAvIjSU3pJCK6n5vyTNv/7NFcPKKOVZlpqGj3 +9osYzLe7tVUdetyAuZK/QdhL1XiUcejOVWj1z2OJX46riYV5dhKugkdFsA1SlYM gDPmJt0GIFnxAxliOg2JIOKkFp/ovItx7V35SI8/nDLr2ti9/mc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:43:06 2025 by rpki-client