$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: Tmuc5WWxOt50dr5K7Lldt5v0QSVkwb3vuRMDzdfCSPQ= Subject key identifier: 5E:71:3A:D1:E1:17:4A:60:7E:5F:E5:91:B2:67:AD:E4:90:5E:70:14 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 3FE1EB74F3001650B5ED78ADD31607757D1D6D58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: 8D Signing time: Tue 17 Jun 2025 03:01:28 +0000 Manifest this update: Tue 17 Jun 2025 02:56:28 +0000 Manifest next update: Fri 20 Jun 2025 12:36:28 +0000 Files and hashes: 1: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) 3: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: u6GvbdH825pyKRa2bnuTW6i6Bzk4Xwzwis2Kg8pmjaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e1:eb:74:f3:00:16:50:b5:ed:78:ad:d3:16:07:75:7d:1d:6d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Jun 17 02:56:28 2025 GMT Not After : Jun 20 12:36:28 2025 GMT Subject: CN=5E713AD1E1174A607E5FE591B267ADE4905E7014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:14:a0:63:74:76:d7:19:ac:57:6d:92:9a: 44:6a:88:72:c1:89:83:70:b7:86:bd:ba:fa:df:96: b0:f6:c0:e0:49:b0:d9:16:d6:9d:1a:0f:84:e3:1c: 59:7d:9b:5c:92:4f:0c:6e:78:91:e2:68:4d:8a:c5: 51:de:87:8b:e7:65:8e:33:11:f8:4b:91:4a:d4:48: cc:3c:27:30:a0:3a:99:24:93:80:4c:62:00:8f:f5: 8f:cd:bb:29:08:ca:25:24:22:7e:88:09:b1:12:27: 08:c5:ec:da:32:7f:b8:24:d3:72:94:9b:cb:40:ab: 07:df:c1:b7:3c:01:18:21:f6:37:3f:0c:14:4c:7f: 16:b3:a8:95:30:6f:64:0e:94:c7:8d:08:0d:17:21: d4:e7:dc:1f:08:62:ee:0d:e6:b3:ac:f1:54:04:35: 95:b2:53:c2:8c:3e:f0:05:fe:5a:da:45:d1:7f:9d: d5:37:d3:29:f3:08:c3:81:a1:cc:86:f2:f3:4d:00: 85:77:65:20:43:38:0c:67:66:3a:24:0e:d7:70:7e: de:e2:06:b0:f5:0a:44:72:70:2c:54:f2:76:3d:a7: a0:a7:de:2d:0e:0a:76:38:54:3b:d1:9e:22:79:20: a3:22:80:7a:ee:a1:6f:c9:22:d0:0c:9f:2d:70:7a: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:3A:D1:E1:17:4A:60:7E:5F:E5:91:B2:67:AD:E4:90:5E:70:14 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b0:bc:07:ba:e2:02:38:1d:79:28:1c:8a:c8:67:45:24:4a: 7f:34:de:8e:1c:a3:fe:b3:57:40:89:75:01:65:a4:0e:4d:c0: e8:62:a9:a1:d9:6c:73:dc:84:d0:66:7a:08:18:5d:74:c1:f3: f0:18:e3:8a:f5:21:7c:f4:62:7f:e9:4e:c9:b9:67:b9:dc:1d: 46:b3:e3:0e:5c:2b:0c:3a:4d:fd:9c:66:81:3d:f5:87:7d:33: 57:cf:36:24:bb:ed:13:e4:dd:d1:90:a5:a9:66:47:6e:71:95: d5:69:da:1f:cc:91:cb:2d:74:b4:3d:26:7d:80:17:a4:1d:d1: 7b:f1:fb:6d:4c:91:2e:d2:63:35:07:31:dd:37:8f:d0:fc:9c: a6:72:7a:6d:f9:d1:c4:2e:dc:b1:0e:34:cc:8e:1b:76:d0:0f: 13:74:84:26:91:01:e4:0a:2f:70:83:66:0f:f4:e2:a9:29:37: 93:40:69:fd:71:19:1b:7a:53:1c:62:53:e3:12:75:c6:03:10: 6b:ec:74:6c:0a:49:09:64:cb:f1:4b:fb:81:ec:85:34:06:17: 21:e3:f1:30:73:6d:0f:45:58:30:45:3f:b5:1b:80:51:f9:9f: f9:43:b1:be:b8:f9:53:91:82:71:85:9f:3e:32:8c:27:0c:8e: 6e:f2:27:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+HrdPMAFlC17Xit0xYHdX0dbVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTA2MTcwMjU2MjhaFw0yNTA2MjAxMjM2MjhaMDMxMTAvBgNV BAMTKDVFNzEzQUQxRTExNzRBNjA3RTVGRTU5MUIyNjdBREU0OTA1RTcwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SxSgY3R21xmsV22SmkRqiHLB iYNwt4a9uvrflrD2wOBJsNkW1p0aD4TjHFl9m1ySTwxueJHiaE2KxVHeh4vnZY4z EfhLkUrUSMw8JzCgOpkkk4BMYgCP9Y/NuykIyiUkIn6ICbESJwjF7Noyf7gk03KU m8tAqwffwbc8ARgh9jc/DBRMfxazqJUwb2QOlMeNCA0XIdTn3B8IYu4N5rOs8VQE NZWyU8KMPvAF/lraRdF/ndU30ynzCMOBocyG8vNNAIV3ZSBDOAxnZjokDtdwft7i BrD1CkRycCxU8nY9p6Cn3i0OCnY4VDvRniJ5IKMigHruoW/JItAMny1weqO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnE60eEXSmB+X+WRsmet5JBecBQwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADywvAe64gI4HXkoHIrIZ0UkSn803o4co/6z V0CJdQFlpA5NwOhiqaHZbHPchNBmeggYXXTB8/AY44r1IXz0Yn/pTsm5Z7ncHUaz 4w5cKww6Tf2cZoE99Yd9M1fPNiS77RPk3dGQpalmR25xldVp2h/MkcstdLQ9Jn2A F6Qd0Xvx+21MkS7SYzUHMd03j9D8nKZyem350cQu3LEONMyOG3bQDxN0hCaRAeQK L3CDZg/04qkpN5NAaf1xGRt6UxxiU+MSdcYDEGvsdGwKSQlky/FL+4HshTQGFyHj 8TBzbQ9FWDBFP7UbgFH5n/lDsb64+VORgnGFnz4yjCcMjm7yJzU= -----END CERTIFICATE-----Generated at Wed Jun 18 00:07:36 2025 by rpki-client