$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: lmunN9vILsU4bpmognZ4sebNLItO801QWx0G5/1Q9J4= Subject key identifier: F0:5F:0C:B1:9D:8D:16:49:B5:4A:B9:3B:EA:5B:36:0F:F4:1C:37:A2 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 6F3AD428124791B76470404DC03EFD5D3F14EA87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: D9 Signing time: Sat 14 Jun 2025 13:42:08 +0000 Manifest this update: Sat 14 Jun 2025 13:37:08 +0000 Manifest next update: Tue 17 Jun 2025 21:04:08 +0000 Files and hashes: 1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=) 2: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: NcFjwpHo8xbF+85nJI20l7p7CwYg4SidDyOFkdbfnBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3a:d4:28:12:47:91:b7:64:70:40:4d:c0:3e:fd:5d:3f:14:ea:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Jun 14 13:37:08 2025 GMT Not After : Jun 17 21:04:08 2025 GMT Subject: CN=F05F0CB19D8D1649B54AB93BEA5B360FF41C37A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:d7:b3:a5:65:8f:98:17:5a:00:ab:4c:04: 77:8b:0f:27:a7:f9:48:01:35:89:b2:37:04:7c:75: a9:f1:68:74:2c:55:ce:c0:c4:1d:0a:1c:4f:12:57: 7b:2e:dc:3b:3d:6c:a9:f7:7f:f0:ce:05:41:ab:d3: 65:b8:18:cc:9b:bf:13:0f:a8:42:64:83:23:b7:bb: e7:f4:08:bb:a4:a6:49:7c:76:ed:98:9e:c2:88:2f: 3d:8f:dd:8d:7f:a1:d7:f8:40:66:d9:d1:5c:b3:15: 5d:76:ab:19:2b:88:67:0c:c5:38:a6:9b:28:d4:82: 1e:0f:48:53:53:d2:a1:27:75:a2:b7:62:59:73:99: dc:a7:d8:bc:3f:d9:5c:f8:19:66:47:3e:a2:0d:8c: 1c:3f:24:e8:a8:66:5a:86:c8:f9:f2:ce:25:66:e0: d7:10:68:3d:f0:55:47:8f:5f:54:0a:d6:70:9b:01: b6:34:b1:3c:73:eb:bc:17:89:3d:6d:c6:a5:bc:c9: 33:90:b2:9b:20:a2:97:60:c1:1b:bc:6b:4e:9f:61: 29:1a:dd:b2:56:e9:51:88:f4:90:be:bd:69:cf:3d: 85:1a:c2:17:2b:97:ba:60:4b:d7:6a:0d:fd:16:0a: 06:7b:06:a6:95:c3:27:8f:dd:60:a6:f3:e4:a8:c9: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:0C:B1:9D:8D:16:49:B5:4A:B9:3B:EA:5B:36:0F:F4:1C:37:A2 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7f:d6:89:dd:fc:37:97:71:5a:3c:51:f6:ad:13:1e:32:de: 37:68:dd:6b:fa:ed:6b:64:a8:77:32:e3:15:48:36:69:02:79: c2:75:a7:4b:69:b6:37:08:7c:0b:42:f8:7d:fd:98:de:8f:a6: a3:05:fe:b5:53:9b:70:79:45:46:ae:1c:63:05:85:07:86:e9: 95:52:d0:45:47:21:2b:61:6f:44:ea:24:81:7c:cd:ea:28:16: 4a:91:13:09:52:a8:0b:e0:ae:a6:48:53:86:89:e2:e7:f7:e3: 95:6f:7b:19:78:3e:f1:a9:1b:b3:dc:9e:40:46:b4:dd:b4:6d: 4a:fe:42:31:86:ed:4e:6f:e9:30:51:d4:96:bf:28:56:aa:01: 09:28:e3:a9:2b:34:60:9a:13:17:e8:45:ff:18:93:90:30:48: ea:bf:65:f0:a8:ee:ab:50:7c:3a:a3:86:8a:54:18:9b:d0:04: 2a:03:a9:96:c6:3a:f9:9a:91:fb:53:9a:0c:f7:9d:12:32:71: 9d:70:a6:42:11:74:ad:f9:19:3a:fc:0c:51:ac:09:aa:2a:4c: ce:af:3f:08:2b:b5:27:a5:b9:fc:88:19:ac:92:3b:3d:ce:15: 44:57:75:2a:e7:9d:7b:ae:a1:94:7d:01:44:5c:24:69:c3:59: 5e:32:bb:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzrUKBJHkbdkcEBNwD79XT8U6ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTA2MTQxMzM3MDhaFw0yNTA2MTcyMTA0MDhaMDMxMTAvBgNV BAMTKEYwNUYwQ0IxOUQ4RDE2NDlCNTRBQjkzQkVBNUIzNjBGRjQxQzM3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXtezpWWPmBdaAKtMBHeLDyen +UgBNYmyNwR8danxaHQsVc7AxB0KHE8SV3su3Ds9bKn3f/DOBUGr02W4GMybvxMP qEJkgyO3u+f0CLukpkl8du2YnsKILz2P3Y1/odf4QGbZ0VyzFV12qxkriGcMxTim myjUgh4PSFNT0qEndaK3Yllzmdyn2Lw/2Vz4GWZHPqINjBw/JOioZlqGyPnyziVm 4NcQaD3wVUePX1QK1nCbAbY0sTxz67wXiT1txqW8yTOQspsgopdgwRu8a06fYSka 3bJW6VGI9JC+vWnPPYUawhcrl7pgS9dqDf0WCgZ7BqaVwyeP3WCm8+SoyfbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8F8MsZ2NFkm1Srk76ls2D/QcN6IwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp/1ond/DeXcVo8UfatEx4y3jdo3Wv67Wtk qHcy4xVINmkCecJ1p0tptjcIfAtC+H39mN6PpqMF/rVTm3B5RUauHGMFhQeG6ZVS 0EVHISthb0TqJIF8zeooFkqREwlSqAvgrqZIU4aJ4uf345Vvexl4PvGpG7PcnkBG tN20bUr+QjGG7U5v6TBR1Ja/KFaqAQko46krNGCaExfoRf8Yk5AwSOq/ZfCo7qtQ fDqjhopUGJvQBCoDqZbGOvmakftTmgz3nRIycZ1wpkIRdK35GTr8DFGsCaoqTM6v PwgrtSelufyIGaySOz3OFURXdSrnnXuuoZR9AURcJGnDWV4yu6s= -----END CERTIFICATE-----Generated at Sun Jun 15 17:10:36 2025 by rpki-client