$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: w0XA8/i9ZUsO5UhstdsWZzTT71QD2ctnBgsteOz6H+0= Subject key identifier: 1D:5D:7E:63:34:51:F0:BA:16:A1:AC:3D:BD:C2:12:E7:A7:24:87:73 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 04C799957E36707F8265D4A3180C6185EADC6BBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: A1 Signing time: Wed 18 Jun 2025 09:20:36 +0000 Manifest this update: Wed 18 Jun 2025 09:15:36 +0000 Manifest next update: Sat 21 Jun 2025 19:01:36 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: iKicfbsJ16bzpV3fu335v7Pj1hKC5KGavoMSPb3w3sE=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 4: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c7:99:95:7e:36:70:7f:82:65:d4:a3:18:0c:61:85:ea:dc:6b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Jun 18 09:15:36 2025 GMT Not After : Jun 21 19:01:36 2025 GMT Subject: CN=1D5D7E633451F0BA16A1AC3DBDC212E7A7248773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:14:af:19:06:7f:a4:5a:d5:f4:85:00:97: 15:6d:0a:9f:db:8e:e5:14:bd:75:70:0c:a8:6d:aa: 04:26:7e:c3:da:8e:06:4b:5e:fd:44:e4:08:6a:1a: 73:22:47:14:86:64:40:de:da:7c:5d:72:88:cb:41: 1e:23:35:88:b9:8f:08:f8:8f:61:61:55:23:0c:b0: d3:c8:cd:c4:98:0c:3e:f4:2a:6b:a1:19:0c:f9:03: 83:a1:b3:fe:8f:7f:0c:7f:15:8b:bf:1f:cb:3b:9d: 3d:8c:9c:d0:4a:7e:8d:15:a5:f7:43:6f:4d:99:0f: 17:dd:13:ed:8f:c6:ba:42:46:44:74:38:36:d8:17: 40:47:e7:49:94:fe:fd:f5:b5:54:9f:bc:99:92:24: f1:a8:94:e8:ed:24:6f:61:2d:2e:3e:c9:63:40:bb: 79:da:d6:a8:2f:b4:54:d0:46:33:bb:b3:98:71:2d: ed:e1:9d:a5:db:1e:c0:85:cd:4a:3a:a9:48:83:17: 98:d3:4a:a9:a7:41:d0:cf:09:fa:a3:d3:17:ff:bc: d7:5b:3e:b5:51:a1:e3:4a:2e:5c:1d:3f:ad:a3:b4: 80:4d:2d:9d:fe:bf:38:f1:c6:80:d4:3c:25:60:5b: 16:83:dc:ad:14:02:c5:1e:b6:db:a8:90:3e:08:58: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:7E:63:34:51:F0:BA:16:A1:AC:3D:BD:C2:12:E7:A7:24:87:73 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8c:33:4f:63:67:58:12:cd:5f:1e:c3:4f:5d:8a:85:1c:b2: 51:bc:6d:dd:78:5a:5f:e0:1f:a8:17:88:08:c0:3b:a5:46:02: ad:26:11:7f:b7:b4:a3:fb:48:c3:52:20:53:29:f1:91:62:e9: 7b:8b:37:39:6d:2f:7e:c3:bc:c4:2f:9b:06:65:99:df:96:e8: d0:ad:cf:b6:8b:c1:3b:44:d6:bc:5f:49:c8:54:20:24:99:14: b8:c7:f6:e3:bb:58:e2:b4:d4:21:de:e1:49:56:11:da:3e:57: ca:45:43:0c:d1:64:36:c5:45:12:5f:b3:26:f6:ec:8d:8a:89: 99:e4:a5:3f:8d:90:68:19:3c:fc:ec:6c:9f:5c:c9:59:52:c1: 72:cb:2d:cf:5b:b4:6e:46:6d:14:97:40:d9:04:ec:5d:8b:9c: 36:de:de:a6:54:0e:cb:c4:b7:e5:11:45:2c:e6:99:f6:6d:f6: 2b:f3:57:de:f6:7f:35:ec:e8:49:2a:20:21:d7:82:3b:62:5c: f4:2e:7c:07:08:4e:4a:d1:42:01:61:29:08:8e:ab:f2:07:e6: 77:72:13:8d:41:ca:7c:f8:f8:99:50:cc:0b:8f:e9:40:06:1d: 1a:71:1d:94:a0:0b:2e:4a:83:3a:64:5b:2b:95:06:cf:1f:cc: a3:a5:3f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMeZlX42cH+CZdSjGAxhherca7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA2MTgwOTE1MzZaFw0yNTA2MjExOTAxMzZaMDMxMTAvBgNV BAMTKDFENUQ3RTYzMzQ1MUYwQkExNkExQUMzREJEQzIxMkU3QTcyNDg3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARRSvGQZ/pFrV9IUAlxVtCp/b juUUvXVwDKhtqgQmfsPajgZLXv1E5AhqGnMiRxSGZEDe2nxdcojLQR4jNYi5jwj4 j2FhVSMMsNPIzcSYDD70KmuhGQz5A4Ohs/6Pfwx/FYu/H8s7nT2MnNBKfo0VpfdD b02ZDxfdE+2PxrpCRkR0ODbYF0BH50mU/v31tVSfvJmSJPGolOjtJG9hLS4+yWNA u3na1qgvtFTQRjO7s5hxLe3hnaXbHsCFzUo6qUiDF5jTSqmnQdDPCfqj0xf/vNdb PrVRoeNKLlwdP62jtIBNLZ3+vzjxxoDUPCVgWxaD3K0UAsUettuokD4IWJaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHV1+YzRR8LoWoaw9vcIS56ckh3MwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqMM09jZ1gSzV8ew09dioUcslG8bd14Wl/g H6gXiAjAO6VGAq0mEX+3tKP7SMNSIFMp8ZFi6XuLNzltL37DvMQvmwZlmd+W6NCt z7aLwTtE1rxfSchUICSZFLjH9uO7WOK01CHe4UlWEdo+V8pFQwzRZDbFRRJfsyb2 7I2KiZnkpT+NkGgZPPzsbJ9cyVlSwXLLLc9btG5GbRSXQNkE7F2LnDbe3qZUDsvE t+URRSzmmfZt9ivzV972fzXs6EkqICHXgjtiXPQufAcITkrRQgFhKQiOq/IH5ndy E41Bynz4+JlQzAuP6UAGHRpxHZSgCy5KgzpkWyuVBs8fzKOlPzA= -----END CERTIFICATE-----Generated at Thu Jun 19 20:53:02 2025 by rpki-client