$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: G15qrHrBKcxghU7L5NEq88MQi7W8NgnKJlG1VS4BcVE= Subject key identifier: 3C:6B:D7:60:3D:88:10:56:22:D0:D1:D6:D1:78:9A:29:A5:DD:7B:49 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 158AB9B89BF64CC47CF994F8D7DC2694BC453598 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0344 Signing time: Sun 15 Jun 2025 14:01:37 +0000 Manifest this update: Sun 15 Jun 2025 13:56:37 +0000 Manifest next update: Wed 18 Jun 2025 14:07:37 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: e8+vo1qNJAfCL95Pz5pJVDuYXOoN/zeh1MzDbKLEjiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8a:b9:b8:9b:f6:4c:c4:7c:f9:94:f8:d7:dc:26:94:bc:45:35:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jun 15 13:56:37 2025 GMT Not After : Jun 18 14:07:37 2025 GMT Subject: CN=3C6BD7603D88105622D0D1D6D1789A29A5DD7B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:6d:33:1b:db:c1:4c:22:8b:be:fa:8f:cc: de:2b:09:c2:c0:c9:59:5c:e5:7e:00:52:5f:c5:8c: 0d:6d:3e:a4:19:87:e1:aa:7a:76:12:d5:99:18:ab: 2b:11:b0:bd:03:51:02:d1:f0:1b:96:9b:a5:fd:38: d7:ff:e6:4f:03:51:f1:b8:58:95:21:97:9a:75:cd: 5b:18:76:97:16:c9:d5:6e:f3:72:7c:1f:d9:f4:76: 9d:06:c1:a2:02:a1:b1:f0:43:de:64:4c:9e:ae:78: 47:26:8f:ca:80:81:37:04:42:f7:4a:f5:ad:d4:ce: 8e:2e:c3:35:46:60:12:5f:d8:76:40:69:a1:25:66: c7:d7:76:75:94:1c:bd:ca:40:41:7c:a7:da:4b:d1: 43:4a:14:23:e6:35:be:c1:10:d1:1e:9b:1d:8e:04: e8:95:d4:14:ab:e6:01:ac:5a:8f:6d:21:6f:b3:c7: 3e:da:fb:2b:5a:3b:7d:96:56:43:04:f1:15:fb:f8: 60:bc:57:c6:d6:04:19:d7:3f:eb:21:c4:2c:c8:7c: 3d:dd:13:cc:bb:bd:12:19:95:d3:a2:9f:36:7f:ab: 80:b9:a8:6c:1c:04:35:71:58:e6:2f:b5:1d:e6:f2: d3:71:cf:24:fa:2d:88:68:30:48:82:c8:fb:02:ce: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:D7:60:3D:88:10:56:22:D0:D1:D6:D1:78:9A:29:A5:DD:7B:49 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ef:36:f7:22:39:e0:41:9b:59:1b:38:9e:6c:7b:cd:b9:93: dc:b3:9c:ff:2e:4c:e4:ff:14:c8:ec:c8:25:f3:54:95:e1:ce: 28:87:a3:46:e6:a5:d2:29:1e:95:71:96:b3:3a:82:97:ad:e6: f2:3c:8d:a1:8f:75:e3:a7:28:a0:e0:45:60:2c:a0:b7:5e:6e: dd:00:44:53:fc:de:4c:96:5d:f9:07:4c:e0:8e:57:f2:e4:89: e4:84:f0:7d:ac:78:ae:97:17:6b:41:bf:2d:b5:96:0e:89:9e: 05:1e:72:af:d5:c0:cb:6f:e2:36:ad:7b:2d:2c:ec:29:b3:e5: 2e:85:f0:09:f4:aa:a7:a2:3b:e4:6a:f9:49:19:ff:35:03:50: 25:fd:57:60:30:b8:02:4e:75:c9:3f:d6:be:fd:87:5c:43:72: a4:b0:ef:87:79:9e:2b:71:ad:3a:3d:fc:37:19:6f:ae:30:88: 59:72:d1:1e:21:04:f6:e9:9e:7b:11:8e:f0:ac:9e:2e:ba:c9: be:b8:4e:c3:9e:47:2f:41:30:4a:30:9c:ac:3e:db:e9:c9:ee: d0:06:41:54:cf:4e:03:32:66:1b:19:11:4b:5b:33:fb:7b:69: b1:80:c1:ef:ab:af:ae:ec:d9:84:cc:6a:60:d3:48:ca:c3:3a: 8b:bd:b8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYq5uJv2TMR8+ZT419wmlLxFNZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA2MTUxMzU2MzdaFw0yNTA2MTgxNDA3MzdaMDMxMTAvBgNV BAMTKDNDNkJENzYwM0Q4ODEwNTYyMkQwRDFENkQxNzg5QTI5QTVERDdCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhF20zG9vBTCKLvvqPzN4rCcLA yVlc5X4AUl/FjA1tPqQZh+GqenYS1ZkYqysRsL0DUQLR8BuWm6X9ONf/5k8DUfG4 WJUhl5p1zVsYdpcWydVu83J8H9n0dp0GwaICobHwQ95kTJ6ueEcmj8qAgTcEQvdK 9a3Uzo4uwzVGYBJf2HZAaaElZsfXdnWUHL3KQEF8p9pL0UNKFCPmNb7BENEemx2O BOiV1BSr5gGsWo9tIW+zxz7a+ytaO32WVkME8RX7+GC8V8bWBBnXP+shxCzIfD3d E8y7vRIZldOinzZ/q4C5qGwcBDVxWOYvtR3m8tNxzyT6LYhoMEiCyPsCzmHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGvXYD2IEFYi0NHW0XiaKaXde0kwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHvNvciOeBBm1kbOJ5se825k9yznP8uTOT/ FMjsyCXzVJXhziiHo0bmpdIpHpVxlrM6gpet5vI8jaGPdeOnKKDgRWAsoLdebt0A RFP83kyWXfkHTOCOV/LkieSE8H2seK6XF2tBvy21lg6JngUecq/VwMtv4jatey0s 7Cmz5S6F8An0qqeiO+Rq+UkZ/zUDUCX9V2AwuAJOdck/1r79h1xDcqSw74d5nitx rTo9/DcZb64wiFly0R4hBPbpnnsRjvCsni66yb64TsOeRy9BMEownKw+2+nJ7tAG QVTPTgMyZhsZEUtbM/t7abGAwe+rr67s2YTMamDTSMrDOou9uDM= -----END CERTIFICATE-----Generated at Tue Jun 17 16:22:21 2025 by rpki-client