$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: ORHrQNh3F1wlmRjOTLHKrJSzbyrthsmGsrV5+/s/Tq4= Subject key identifier: 12:A0:8C:DF:C8:AA:A9:F9:A2:38:D8:E8:EB:8A:6F:57:AE:E4:B4:06 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 20603CACB257D8BE1FC2B6E8897C8C5AB9E13E7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: A9 Signing time: Sun 15 Jun 2025 13:11:31 +0000 Manifest this update: Sun 15 Jun 2025 13:06:31 +0000 Manifest next update: Thu 19 Jun 2025 00:14:31 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: VgXl/vsnRQfRWortMGZUZ7iIfpLAScH/py62CrorVz4=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:3c:ac:b2:57:d8:be:1f:c2:b6:e8:89:7c:8c:5a:b9:e1:3e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jun 15 13:06:31 2025 GMT Not After : Jun 19 00:14:31 2025 GMT Subject: CN=12A08CDFC8AAA9F9A238D8E8EB8A6F57AEE4B406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:45:9f:36:75:bb:a2:3c:3d:b8:4b:b6:b3: 55:79:c0:dd:ab:48:2d:a8:36:4f:ad:96:be:de:d7: 73:14:05:0e:4b:33:5f:d1:8a:28:8f:01:63:e3:16: df:99:12:9a:09:1a:12:61:bc:59:77:1a:cc:51:68: 8c:7a:59:c9:02:ec:eb:20:83:c8:f5:24:18:64:f3: aa:ad:42:b1:f0:fc:26:46:24:8d:8d:20:50:c0:12: b0:e8:d5:0e:de:39:4e:fc:25:17:4f:2a:bb:0f:48: 4c:87:21:3b:65:81:f2:f4:2c:6a:b4:24:28:46:78: 5e:93:73:3d:56:a6:0c:8a:1a:30:37:4f:4a:e1:b7: 6a:26:6a:b9:cb:fb:f6:d5:56:f0:fb:eb:9a:4d:3e: 94:d4:fd:9c:b1:f1:b7:f3:c9:4b:30:e4:da:cc:fa: d2:a6:d4:6e:35:8a:e0:45:b0:a9:4f:3f:44:95:95: d0:a9:9e:d7:1b:be:e0:b9:47:e7:17:39:b1:4a:92: 8c:78:3d:4f:f9:c9:50:d1:ac:ad:20:b5:cd:10:9f: 1d:e5:93:bc:25:c1:82:3f:4e:62:cb:1b:90:08:8a: db:28:32:3d:66:0e:0d:ce:f0:6e:49:e6:80:c2:43: b8:09:1a:f6:41:17:47:fc:84:c0:08:4c:6b:0a:00: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:8C:DF:C8:AA:A9:F9:A2:38:D8:E8:EB:8A:6F:57:AE:E4:B4:06 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:dc:6a:74:72:95:f1:96:aa:11:71:02:f4:4c:0a:a8:a8:d0: c6:93:62:1a:ba:84:4f:02:72:17:c5:56:9d:08:19:37:4c:11: e3:a3:71:8b:d5:ad:93:75:3f:27:91:67:fd:99:19:a7:86:59: 19:85:c2:79:8e:16:93:33:23:fd:3e:10:0b:31:92:9d:7f:95: 4a:01:08:74:ca:34:13:9c:c2:6e:e8:79:1a:da:4b:b6:45:56: 68:a7:9a:12:8c:6f:ee:85:7a:90:af:6e:fa:d5:66:60:cc:fe: e4:0e:ea:18:ae:ac:5c:5b:77:ab:0b:ba:6a:1f:48:0f:d0:a0: 1a:3f:2c:46:0d:ba:f2:ed:ad:9b:bd:8d:aa:46:1f:c8:a8:fa: af:c1:cb:c7:6d:af:c2:3a:5c:5d:2a:49:bc:6b:a5:95:9e:8a: 1d:45:a4:0c:69:bf:90:77:c0:87:db:c7:0f:9f:0b:37:59:30: 3a:be:03:ac:76:da:42:73:46:1b:9c:33:41:d9:f2:c2:a8:b8: ec:55:53:3a:91:c9:2c:55:be:27:f7:9a:53:ce:64:94:3d:17: 85:f1:e6:d2:9d:aa:2d:f3:f4:c7:18:2a:e2:7e:80:1a:e2:1b: 2f:7f:f4:57:2d:36:47:1c:e3:9a:1e:f1:ef:20:97:a9:43:f5: e7:c4:dd:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGA8rLJX2L4fwrboiXyMWrnhPnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA2MTUxMzA2MzFaFw0yNTA2MTkwMDE0MzFaMDMxMTAvBgNV BAMTKDEyQTA4Q0RGQzhBQUE5RjlBMjM4RDhFOEVCOEE2RjU3QUVFNEI0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJREWfNnW7ojw9uEu2s1V5wN2r SC2oNk+tlr7e13MUBQ5LM1/RiiiPAWPjFt+ZEpoJGhJhvFl3GsxRaIx6WckC7Osg g8j1JBhk86qtQrHw/CZGJI2NIFDAErDo1Q7eOU78JRdPKrsPSEyHITtlgfL0LGq0 JChGeF6Tcz1WpgyKGjA3T0rht2omarnL+/bVVvD765pNPpTU/Zyx8bfzyUsw5NrM +tKm1G41iuBFsKlPP0SVldCpntcbvuC5R+cXObFKkox4PU/5yVDRrK0gtc0Qnx3l k7wlwYI/TmLLG5AIitsoMj1mDg3O8G5J5oDCQ7gJGvZBF0f8hMAITGsKADkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqCM38iqqfmiONjo64pvV67ktAYwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHcanRylfGWqhFxAvRMCqio0MaTYhq6hE8C chfFVp0IGTdMEeOjcYvVrZN1PyeRZ/2ZGaeGWRmFwnmOFpMzI/0+EAsxkp1/lUoB CHTKNBOcwm7oeRraS7ZFVminmhKMb+6FepCvbvrVZmDM/uQO6hiurFxbd6sLumof SA/QoBo/LEYNuvLtrZu9japGH8io+q/By8dtr8I6XF0qSbxrpZWeih1FpAxpv5B3 wIfbxw+fCzdZMDq+A6x22kJzRhucM0HZ8sKouOxVUzqRySxVvif3mlPOZJQ9F4Xx 5tKdqi3z9McYKuJ+gBriGy9/9FctNkcc45oe8e8gl6lD9efE3Xc= -----END CERTIFICATE-----Generated at Mon Jun 16 02:14:53 2025 by rpki-client