$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: WNXYa8fu+xKRo8jbPf/GbfEpqKUqDYf1Py3aKtouQgc= Subject key identifier: 75:95:A7:DD:C5:45:24:40:58:36:D5:D3:12:86:95:90:09:E9:38:16 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 597BC5F1BC97433991853F24D280388850038FF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: 9A Signing time: Sun 15 Jun 2025 14:21:36 +0000 Manifest this update: Sun 15 Jun 2025 14:16:36 +0000 Manifest next update: Thu 19 Jun 2025 00:07:36 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: iO8wx+auY9oM2UrB5DMxctzkkQopTzEr3Er9NRJUk1U=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7b:c5:f1:bc:97:43:39:91:85:3f:24:d2:80:38:88:50:03:8f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Jun 15 14:16:36 2025 GMT Not After : Jun 19 00:07:36 2025 GMT Subject: CN=7595A7DDC54524405836D5D31286959009E93816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:42:26:81:af:7f:63:ed:af:b1:01:20:4f: 50:9a:a2:17:05:d6:17:e8:77:2a:6f:1d:25:d4:c3: 80:f5:81:6b:91:da:d9:bd:6d:c9:9e:a7:21:53:29: 40:83:86:d9:ac:9e:8a:4a:3d:a1:8d:ad:09:b6:9b: b6:18:4f:25:2c:29:22:e9:e8:0a:64:0b:4b:32:8a: a4:34:42:ea:cd:8a:53:52:fa:e1:1c:bb:73:b6:bd: f1:af:01:22:c3:18:95:5f:93:c6:e9:8a:25:32:e7: 08:12:67:58:bf:37:f2:58:9e:38:d4:c4:44:93:ec: b2:87:82:74:86:29:0f:cc:b1:a8:be:e4:65:65:b8: 0a:fc:bd:22:87:7f:df:ee:91:70:e5:50:f5:7e:a9: ea:08:12:e0:81:31:d1:d5:8e:d5:77:ee:df:16:86: 08:20:24:05:db:73:ef:d5:f0:38:9e:e5:6e:4f:b2: 4d:8c:e4:80:e4:8d:fd:d7:3c:e9:dd:b4:8d:27:aa: 5a:55:f2:f3:f8:f3:e6:fd:59:21:fe:27:87:3d:66: 46:7c:18:3d:3a:c4:be:e1:30:d6:b6:d1:6a:40:89: 85:30:3f:b3:3b:e0:f9:b6:08:d7:9e:a8:ae:b3:c1: de:d9:c3:c8:fb:31:31:9c:97:5e:01:ea:c7:bc:44: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:95:A7:DD:C5:45:24:40:58:36:D5:D3:12:86:95:90:09:E9:38:16 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:62:fb:8d:94:e3:d4:06:af:4a:20:5c:b3:74:31:0f:05:01: 55:63:73:95:5e:8a:89:71:c8:cd:c2:e6:a6:e5:3e:e3:12:23: 9e:b1:49:63:6f:f7:12:61:d0:90:84:3c:bb:0e:88:7e:f1:c1: bc:6f:a0:09:f7:b1:73:07:ba:dd:f3:30:8c:69:bc:10:1a:d3: 69:8d:5d:34:1f:7a:c9:d4:3c:2d:25:85:d7:60:0e:65:0d:af: b4:60:f1:01:a0:ba:75:8e:53:92:5d:36:93:3e:08:74:01:87: 97:ed:38:08:a4:bf:ad:11:68:c9:a3:d0:fe:51:2d:e9:79:32: f5:b5:df:13:40:de:b4:a0:09:6e:90:b8:4d:95:e3:62:74:58: fe:08:3b:59:0e:79:72:32:d5:b5:20:af:30:d3:6b:1a:8f:cb: 97:6d:48:99:ef:b9:d9:25:9f:7b:36:4f:9a:67:80:2a:20:0e: 2c:dc:73:be:8c:70:57:96:4c:5a:cd:2d:de:5b:67:cc:34:12: cf:7e:89:73:27:90:2d:8a:c9:2a:48:ec:5b:91:66:c9:1b:90: be:f1:41:1a:32:0d:58:b5:3d:54:8f:44:45:f8:5c:79:cf:e7: 15:d2:5e:a9:20:58:e7:93:f0:a4:1f:b9:e9:32:ca:d8:07:f1: bf:09:ee:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXvF8byXQzmRhT8k0oA4iFADj/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA2MTUxNDE2MzZaFw0yNTA2MTkwMDA3MzZaMDMxMTAvBgNV BAMTKDc1OTVBN0REQzU0NTI0NDA1ODM2RDVEMzEyODY5NTkwMDlFOTM4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukUImga9/Y+2vsQEgT1CaohcF 1hfodypvHSXUw4D1gWuR2tm9bcmepyFTKUCDhtmsnopKPaGNrQm2m7YYTyUsKSLp 6ApkC0syiqQ0QurNilNS+uEcu3O2vfGvASLDGJVfk8bpiiUy5wgSZ1i/N/JYnjjU xEST7LKHgnSGKQ/Msai+5GVluAr8vSKHf9/ukXDlUPV+qeoIEuCBMdHVjtV37t8W hgggJAXbc+/V8Die5W5Psk2M5IDkjf3XPOndtI0nqlpV8vP48+b9WSH+J4c9ZkZ8 GD06xL7hMNa20WpAiYUwP7M74Pm2CNeeqK6zwd7Zw8j7MTGcl14B6se8RMWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdZWn3cVFJEBYNtXTEoaVkAnpOBYwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFi+42U49QGr0ogXLN0MQ8FAVVjc5Veiolx yM3C5qblPuMSI56xSWNv9xJh0JCEPLsOiH7xwbxvoAn3sXMHut3zMIxpvBAa02mN XTQfesnUPC0lhddgDmUNr7Rg8QGgunWOU5JdNpM+CHQBh5ftOAikv60RaMmj0P5R Lel5MvW13xNA3rSgCW6QuE2V42J0WP4IO1kOeXIy1bUgrzDTaxqPy5dtSJnvudkl n3s2T5pngCogDizcc76McFeWTFrNLd5bZ8w0Es9+iXMnkC2KySpI7FuRZskbkL7x QRoyDVi1PVSPREX4XHnP5xXSXqkgWOeT8KQfuekyytgH8b8J7k8= -----END CERTIFICATE-----Generated at Tue Jun 17 11:07:19 2025 by rpki-client