$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: Py3PUzJsG/VIkDLSHgw/jQn4mks0PALhbiOjc6xhaMA= Subject key identifier: B7:FB:85:78:13:1A:70:EE:15:63:B7:9D:C7:5D:B1:9D:97:CD:32:E4 Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 4E8F63D32571D9AC525F014C71ED843A0EAAAF0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 04E0 Signing time: Sun 15 Jun 2025 05:11:36 +0000 Manifest this update: Sun 15 Jun 2025 05:06:36 +0000 Manifest next update: Wed 18 Jun 2025 07:12:36 +0000 Files and hashes: 1: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 2: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: 9Unj62KS6wQZLFy1qbfgBj5HdL9oXNWzeTGpaZyNTE0=) 3: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: n5l2TDbr0eIZ7shRLW4LZaxy1MHMOTIK7ObeHbqVyPo=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8f:63:d3:25:71:d9:ac:52:5f:01:4c:71:ed:84:3a:0e:aa:af:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Jun 15 05:06:36 2025 GMT Not After : Jun 18 07:12:36 2025 GMT Subject: CN=B7FB8578131A70EE1563B79DC75DB19D97CD32E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:ff:a6:0a:50:a8:cc:c5:28:a8:bd:3b:5d: 50:17:27:bb:a4:09:de:12:11:bf:03:87:1c:bc:19: 0a:13:27:52:39:5f:73:c4:d2:c7:e4:e7:5a:1a:22: 8e:35:ef:2d:95:35:6a:cd:7e:0c:35:27:ba:97:74: c6:50:50:72:3c:04:5a:61:7a:9f:b1:ba:09:8b:b1: f5:30:bc:f1:d4:77:92:1e:5f:c1:bf:51:4f:f3:f0: 80:5b:05:a6:82:e6:28:25:b3:d1:2f:34:03:72:a1: 84:0c:0b:ca:14:0e:bd:65:d2:d1:56:e4:08:69:59: fb:4e:94:e2:7f:56:c7:39:60:61:7f:b5:97:c1:19: 8e:91:60:63:8f:04:58:a3:58:3c:86:9b:89:31:27: 11:1a:88:9d:c5:72:cf:b4:50:92:fc:ae:77:a7:51: 13:04:53:43:6f:9f:76:4e:5c:e6:4d:eb:7d:c7:e3: aa:81:2a:17:de:ff:1a:31:61:7d:52:57:c1:a4:b9: e4:44:d8:ac:6a:69:dd:2e:b7:94:02:bb:f8:61:30: 38:de:b4:72:1e:9a:66:41:6e:7b:79:63:34:84:6a: fd:6e:a4:eb:4b:8e:c0:d6:fb:e7:99:9f:98:b9:e1: 26:22:1a:a8:d9:03:61:31:20:19:ec:68:14:ee:ba: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:85:78:13:1A:70:EE:15:63:B7:9D:C7:5D:B1:9D:97:CD:32:E4 X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:eb:69:30:4b:b8:93:25:14:b6:19:9e:63:80:ed:2a:8b:0d: f5:b3:73:97:03:c4:69:63:1c:ed:71:ef:11:2a:27:7a:12:a2: 15:2b:9c:2d:63:c2:92:fc:3b:bd:4c:af:6d:03:f0:31:0b:06: a9:78:42:a8:cf:bf:06:c5:9f:fa:6f:92:1e:a6:21:2c:06:c4: 1f:fb:77:45:ab:75:5c:37:34:bc:06:9f:6c:f1:e7:46:e0:d0: 79:ff:8f:0a:8f:e7:dc:af:89:af:95:fb:43:e1:44:f0:f1:fa: 2b:83:44:ff:b5:4a:c7:66:dd:cb:89:04:76:73:ba:8f:03:0c: 6c:d5:86:44:24:90:67:6c:bd:27:81:88:fd:ec:80:35:3f:a7: 80:91:db:d6:49:84:5b:73:18:88:41:de:52:49:a6:1c:e5:92: 99:65:04:f0:e1:91:af:73:fa:3a:a8:3a:68:34:87:be:4b:df: 14:f5:9c:31:1a:df:14:26:b1:5a:90:cd:f9:fb:aa:6c:96:38: af:62:a6:97:06:25:33:de:0e:97:d0:ca:d7:7a:80:41:cc:05: 98:67:22:3f:c4:59:6b:92:d3:9a:94:12:f7:bf:e0:97:a2:8d: b7:03:f5:9b:8c:d4:2c:fa:76:62:ac:1e:75:4d:b0:a9:fa:9a: cf:74:57:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTo9j0yVx2axSXwFMce2EOg6qrwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTA2MTUwNTA2MzZaFw0yNTA2MTgwNzEyMzZaMDMxMTAvBgNV BAMTKEI3RkI4NTc4MTMxQTcwRUUxNTYzQjc5REM3NURCMTlEOTdDRDMyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2P+mClCozMUoqL07XVAXJ7uk Cd4SEb8Dhxy8GQoTJ1I5X3PE0sfk51oaIo417y2VNWrNfgw1J7qXdMZQUHI8BFph ep+xugmLsfUwvPHUd5IeX8G/UU/z8IBbBaaC5igls9EvNANyoYQMC8oUDr1l0tFW 5AhpWftOlOJ/Vsc5YGF/tZfBGY6RYGOPBFijWDyGm4kxJxEaiJ3Fcs+0UJL8rnen URMEU0Nvn3ZOXOZN633H46qBKhfe/xoxYX1SV8GkueRE2Kxqad0ut5QCu/hhMDje tHIemmZBbnt5YzSEav1upOtLjsDW++eZn5i54SYiGqjZA2ExIBnsaBTuuhNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/uFeBMacO4VY7edx12xnZfNMuQwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXraTBLuJMlFLYZnmOA7SqLDfWzc5cDxGlj HO1x7xEqJ3oSohUrnC1jwpL8O71Mr20D8DELBql4QqjPvwbFn/pvkh6mISwGxB/7 d0WrdVw3NLwGn2zx50bg0Hn/jwqP59yvia+V+0PhRPDx+iuDRP+1Ssdm3cuJBHZz uo8DDGzVhkQkkGdsvSeBiP3sgDU/p4CR29ZJhFtzGIhB3lJJphzlkpllBPDhka9z +jqoOmg0h75L3xT1nDEa3xQmsVqQzfn7qmyWOK9ippcGJTPeDpfQytd6gEHMBZhn Ij/EWWuS05qUEve/4JeijbcD9ZuM1Cz6dmKsHnVNsKn6ms90V64= -----END CERTIFICATE-----Generated at Mon Jun 16 23:08:49 2025 by rpki-client