$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: BASPFKpszJ8jV3Z6Ddlnz5iubzTh3SxSQ9rueqPmN4g= Subject key identifier: 86:A4:44:EE:42:04:A2:5A:13:38:0D:47:2B:49:19:E8:E0:C2:78:A9 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 1A2EE4DBCD56CAD4396EEA9F0818FA89337DAA34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03D0 Signing time: Sun 15 Jun 2025 14:51:24 +0000 Manifest this update: Sun 15 Jun 2025 14:46:24 +0000 Manifest next update: Wed 18 Jun 2025 21:28:24 +0000 Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 2: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 6b7pOZqGZW3j/U8AvP4m4j1INcoxiEi4UmSpgnnY0r8=) 3: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2e:e4:db:cd:56:ca:d4:39:6e:ea:9f:08:18:fa:89:33:7d:aa:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Jun 15 14:46:24 2025 GMT Not After : Jun 18 21:28:24 2025 GMT Subject: CN=86A444EE4204A25A13380D472B4919E8E0C278A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:11:64:ef:c2:32:e3:9f:d8:60:a1:27:74: 0e:3d:80:7e:66:1e:db:b0:18:1d:1c:d9:9c:9d:42: 30:b1:77:ec:96:95:1c:1d:cb:9e:9d:83:22:1f:7d: c5:5a:a2:9e:f2:34:88:b7:c9:71:84:2a:11:d7:ee: 45:ec:91:fc:f5:2e:65:bf:70:04:a3:9c:3f:32:2b: 64:4d:f0:73:df:32:16:0e:c3:72:b5:57:cd:ed:02: 92:97:d2:4f:9f:90:54:ed:ea:3e:ba:de:fa:fa:90: 41:20:7a:94:7d:8e:b1:b9:1f:84:56:68:26:62:8b: e7:32:e8:f7:d9:0c:bd:59:a1:80:db:cd:27:88:2d: b8:4f:b9:49:10:59:0b:36:a7:df:62:ae:a5:63:ff: 74:b0:90:78:ad:69:39:66:08:87:b5:23:d1:f2:47: e0:7e:e1:8b:7d:eb:92:56:15:b9:a9:8a:ba:cb:65: de:e9:fd:b7:74:28:80:23:8f:0f:f4:f9:35:6b:c4: 62:cd:25:c1:b0:e8:2e:8a:0f:1a:73:ae:33:c2:c9: 3b:99:0b:ab:95:aa:6c:d7:0a:e7:24:33:c3:2d:3c: f5:11:dd:62:69:b6:9e:e8:7d:21:91:7d:08:08:27: 50:37:90:d5:04:81:58:70:7b:18:0e:bc:ce:1a:2f: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A4:44:EE:42:04:A2:5A:13:38:0D:47:2B:49:19:E8:E0:C2:78:A9 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8b:6d:04:55:a8:9a:4f:6c:58:b0:09:db:cd:db:ef:48:2c: fd:1d:97:f6:16:32:88:78:d6:c5:2b:1f:e7:df:1e:b9:c9:40: ab:fe:9d:50:aa:f3:16:81:b5:6a:07:b6:16:f3:30:be:8b:f2: e0:c6:41:89:11:d6:b2:73:9f:c8:aa:b5:c4:d8:10:03:fc:25: 3b:4f:f6:27:d7:f7:cb:30:8f:f7:a3:74:b7:de:f2:6e:b4:0c: 42:24:3e:a0:d0:4c:cf:af:ee:64:c2:c3:f7:5e:57:7b:8d:ca: ce:58:a5:89:95:06:c2:ca:7f:76:0b:1e:2b:5b:af:1d:34:5f: e5:5b:df:11:4d:ad:ba:11:43:a6:fd:2d:15:02:36:9d:8e:54: ef:fa:48:c2:68:57:7b:1a:87:89:f5:f2:ec:f1:d5:a9:27:49: 0c:01:99:01:a3:e5:16:80:35:0a:4e:ae:59:65:40:00:20:79: 79:b7:d3:1c:2b:34:d4:fa:5b:40:7a:fb:49:77:3b:49:23:c4: 60:9b:20:92:ee:12:3f:92:3c:b6:3b:a6:07:7e:76:7f:93:87: d6:99:03:15:a7:81:a4:85:08:34:6c:0c:74:84:da:ec:40:cc: 6d:f4:0f:c9:b7:c5:53:3d:c8:08:5c:e4:c3:d8:09:05:9f:34: 3e:17:b0:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGi7k281WytQ5buqfCBj6iTN9qjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA2MTUxNDQ2MjRaFw0yNTA2MTgyMTI4MjRaMDMxMTAvBgNV BAMTKDg2QTQ0NEVFNDIwNEEyNUExMzM4MEQ0NzJCNDkxOUU4RTBDMjc4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6RFk78Iy45/YYKEndA49gH5m HtuwGB0c2ZydQjCxd+yWlRwdy56dgyIffcVaop7yNIi3yXGEKhHX7kXskfz1LmW/ cASjnD8yK2RN8HPfMhYOw3K1V83tApKX0k+fkFTt6j663vr6kEEgepR9jrG5H4RW aCZii+cy6PfZDL1ZoYDbzSeILbhPuUkQWQs2p99irqVj/3SwkHitaTlmCIe1I9Hy R+B+4Yt965JWFbmpirrLZd7p/bd0KIAjjw/0+TVrxGLNJcGw6C6KDxpzrjPCyTuZ C6uVqmzXCuckM8MtPPUR3WJptp7ofSGRfQgIJ1A3kNUEgVhwexgOvM4aL9tzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqRE7kIEoloTOA1HK0kZ6ODCeKkwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSLbQRVqJpPbFiwCdvN2+9ILP0dl/YWMoh4 1sUrH+ffHrnJQKv+nVCq8xaBtWoHthbzML6L8uDGQYkR1rJzn8iqtcTYEAP8JTtP 9ifX98swj/ejdLfe8m60DEIkPqDQTM+v7mTCw/deV3uNys5YpYmVBsLKf3YLHitb rx00X+Vb3xFNrboRQ6b9LRUCNp2OVO/6SMJoV3sah4n18uzx1aknSQwBmQGj5RaA NQpOrlllQAAgeXm30xwrNNT6W0B6+0l3O0kjxGCbIJLuEj+SPLY7pgd+dn+Th9aZ AxWngaSFCDRsDHSE2uxAzG30D8m3xVM9yAhc5MPYCQWfND4XsP0= -----END CERTIFICATE-----Generated at Mon Jun 16 20:46:23 2025 by rpki-client