$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: x1ch6bHnRiPCEM8K7Dnv/HgI5rhXFUfLf+FteWqbcbc= Subject key identifier: E0:70:89:43:1F:B2:DC:A8:EA:FF:08:47:F2:B1:EC:DC:E9:D0:2E:13 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 5E1D3D3D22F6CF6C94D341C71A2D494D84E768A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 034E Signing time: Wed 18 Jun 2025 04:01:33 +0000 Manifest this update: Wed 18 Jun 2025 03:56:33 +0000 Manifest next update: Sat 21 Jun 2025 13:26:33 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: Z6JIb9Js5cuqjjH3MFKJ+3Dcl39JiOa4wYnFNXSO3LQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 13:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:3d:3d:22:f6:cf:6c:94:d3:41:c7:1a:2d:49:4d:84:e7:68:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Jun 18 03:56:33 2025 GMT Not After : Jun 21 13:26:33 2025 GMT Subject: CN=E07089431FB2DCA8EAFF0847F2B1ECDCE9D02E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:c1:56:6d:ee:8e:1c:5e:a3:a1:4e:11:69: 86:cd:0b:e8:00:a0:83:a5:2c:3a:f4:c0:b2:7b:bd: e2:58:f5:6a:c4:4c:9a:17:4e:e7:4e:d9:c4:70:03: 47:37:bf:ef:a2:ed:91:0e:84:1b:81:32:b6:bb:0d: b8:25:13:56:a7:1c:c1:da:d4:ec:ef:fd:76:86:90: e2:43:b2:14:89:7b:96:04:3c:64:f9:6b:ef:87:cd: a2:fd:4b:10:0b:de:ec:c0:af:95:bf:a6:fb:74:4c: 9b:ea:5a:5a:be:7e:71:2c:60:d9:32:79:0c:db:ba: da:03:01:27:20:18:28:a6:79:6a:a1:77:38:39:95: 90:a1:64:aa:5c:48:4b:9d:5e:96:53:1b:f2:89:3e: c8:39:23:87:62:2a:f7:90:2c:d9:99:7c:a2:90:a0: e1:ad:01:66:ac:88:1b:4a:e7:d6:3e:76:aa:e4:d8: 37:e7:1f:c9:e0:0c:2d:d9:e6:fb:fe:58:bf:c1:4f: b3:86:58:8b:a0:e7:3b:f8:2e:4a:3c:11:4a:ec:80: 40:9a:4b:9b:7f:3a:7f:78:47:7a:7d:12:6b:80:db: 22:55:0a:a8:4e:97:df:aa:30:76:bf:cd:a1:25:2d: 0d:20:37:9f:25:07:d1:b8:f2:97:7a:44:d7:2f:86: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:89:43:1F:B2:DC:A8:EA:FF:08:47:F2:B1:EC:DC:E9:D0:2E:13 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:25:ef:05:07:99:26:b5:8c:07:36:19:29:7f:9b:a8:44:05: f8:4e:4d:55:3c:f7:f3:5f:2d:5a:43:0d:d0:2c:f4:2c:28:70: 76:f6:96:07:80:42:bc:08:e9:a9:d5:e2:43:bf:a2:44:8a:73: d4:7c:14:0b:26:c8:26:6a:d8:fd:57:e0:d4:5b:49:a3:88:a5: fa:9b:c3:09:20:9b:72:39:e2:5b:44:2b:c5:75:2c:c6:3f:48: 84:b9:8a:6e:d3:82:8a:23:94:4a:1f:fa:dd:4e:f9:8f:4e:17: 09:45:60:95:1c:38:a8:8e:c3:1d:2c:a5:89:e3:8c:08:a3:a7: f5:30:31:59:a8:c0:ad:62:46:7e:c2:42:7b:7a:76:31:40:a3: 73:89:f6:1a:09:4d:96:2e:34:e8:f2:5f:aa:01:f5:92:25:91: e7:e3:6a:93:67:ee:57:6b:43:25:31:35:68:0a:53:0d:ab:ce: 61:75:f4:5f:45:ff:02:b7:5f:39:30:52:81:4a:5b:aa:07:92: a1:b5:26:d8:87:bb:6a:53:82:28:41:96:72:87:03:36:cb:d1: 10:8f:47:45:66:32:d9:b5:bd:31:42:46:35:a5:78:52:c2:a8: 0e:c4:ea:c4:ac:8f:69:05:35:84:bd:7c:38:53:4c:79:e9:c6: 47:73:0f:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh09PSL2z2yU00HHGi1JTYTnaKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA2MTgwMzU2MzNaFw0yNTA2MjExMzI2MzNaMDMxMTAvBgNV BAMTKEUwNzA4OTQzMUZCMkRDQThFQUZGMDg0N0YyQjFFQ0RDRTlEMDJFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wsFWbe6OHF6joU4RaYbNC+gA oIOlLDr0wLJ7veJY9WrETJoXTudO2cRwA0c3v++i7ZEOhBuBMra7DbglE1anHMHa 1Ozv/XaGkOJDshSJe5YEPGT5a++HzaL9SxAL3uzAr5W/pvt0TJvqWlq+fnEsYNky eQzbutoDAScgGCimeWqhdzg5lZChZKpcSEudXpZTG/KJPsg5I4diKveQLNmZfKKQ oOGtAWasiBtK59Y+dqrk2DfnH8ngDC3Z5vv+WL/BT7OGWIug5zv4Lko8EUrsgECa S5t/On94R3p9EmuA2yJVCqhOl9+qMHa/zaElLQ0gN58lB9G48pd6RNcvhvlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4HCJQx+y3Kjq/whH8rHs3OnQLhMwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUl7wUHmSa1jAc2GSl/m6hEBfhOTVU89/Nf LVpDDdAs9CwocHb2lgeAQrwI6anV4kO/okSKc9R8FAsmyCZq2P1X4NRbSaOIpfqb wwkgm3I54ltEK8V1LMY/SIS5im7TgoojlEof+t1O+Y9OFwlFYJUcOKiOwx0spYnj jAijp/UwMVmowK1iRn7CQnt6djFAo3OJ9hoJTZYuNOjyX6oB9ZIlkefjapNn7ldr QyUxNWgKUw2rzmF19F9F/wK3XzkwUoFKW6oHkqG1JtiHu2pTgihBlnKHAzbL0RCP R0VmMtm1vTFCRjWleFLCqA7E6sSsj2kFNYS9fDhTTHnpxkdzDw8= -----END CERTIFICATE-----Generated at Thu Jun 19 15:17:58 2025 by rpki-client