$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: 21eeeduD8MQV8Qx4cVWEFzWtbaCaPRDt+5csgU+o01Y= Subject key identifier: 22:73:D9:10:83:96:F1:C0:B0:FF:96:98:AB:48:3B:7C:EE:37:22:8A Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 6EA7A76DA9F98D634263EEA97D4B12A3D8E5A8EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 0355 Signing time: Mon 16 Jun 2025 01:30:52 +0000 Manifest this update: Mon 16 Jun 2025 01:25:52 +0000 Manifest next update: Thu 19 Jun 2025 04:23:52 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: LQ+yS/loWHD3ymZ66nSNFEKV8rm+iXcUeNAAU0ulBZE=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a7:a7:6d:a9:f9:8d:63:42:63:ee:a9:7d:4b:12:a3:d8:e5:a8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Jun 16 01:25:52 2025 GMT Not After : Jun 19 04:23:52 2025 GMT Subject: CN=2273D9108396F1C0B0FF9698AB483B7CEE37228A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:94:14:8a:d9:a4:b3:b1:08:6d:6d:dc:3a: 5b:a3:5e:f2:1b:9b:57:d4:ee:4c:78:1a:50:87:b7: c5:d4:fd:24:1a:be:ec:11:97:95:9e:a8:8f:d6:7f: c9:b0:06:9f:ac:94:a3:16:87:19:de:e2:e8:48:73: 36:76:e1:a8:a2:29:8b:d4:f0:ae:9e:e8:ed:e5:a2: cd:b3:1e:94:1d:dc:d4:87:17:17:f0:1f:69:16:07: 85:2e:e1:7a:19:c5:66:92:4f:8a:86:5f:6b:9e:f9: e0:17:27:a9:e7:35:1c:46:72:fe:32:78:ca:fb:ca: 9b:14:4e:f2:bd:ba:21:0e:10:4e:d1:b3:bc:07:33: 04:20:96:27:a8:cb:41:4c:3c:66:cd:00:dc:6e:b5: 95:5e:19:0d:17:3c:22:b7:8d:02:9b:11:f6:51:4f: a9:9c:d4:49:b0:74:cd:87:5d:31:e3:bb:c2:cc:7e: fb:70:89:e1:52:93:f6:8e:bd:d9:3f:bb:93:95:a7: c9:98:19:a3:fd:b4:1d:60:aa:68:3f:84:04:93:75: 15:1d:b9:d0:91:72:ef:ed:5c:3f:e2:29:a0:e7:03: a4:3c:53:f9:eb:03:6f:e2:b2:d1:2a:52:e0:42:fb: c3:e9:c0:bd:46:c6:7f:af:cd:4e:ed:eb:e5:88:31: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:D9:10:83:96:F1:C0:B0:FF:96:98:AB:48:3B:7C:EE:37:22:8A X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f9:c5:67:cd:04:8f:53:4a:62:5d:9d:42:ae:63:4f:e2:1a: 0a:cb:28:25:b9:83:a0:93:bf:b6:59:62:51:6c:06:82:a8:53: 06:88:d8:6a:bd:7d:4e:43:10:f4:70:67:e2:b4:0f:b7:56:4b: 81:bf:d8:72:fc:8f:92:5b:ee:82:3b:86:d5:06:d2:5b:a0:2a: 9d:9d:64:95:f8:04:57:17:59:7b:3d:e8:20:0e:68:5d:26:5e: ea:f7:48:09:e8:df:37:a3:1f:66:38:76:77:e8:5c:8b:0d:58: ed:37:e9:c4:37:d5:b7:87:69:ea:ce:3b:ae:d9:bf:ae:81:56: 40:5d:4e:ef:70:8d:98:7a:7b:fc:c7:d8:15:05:b1:48:5f:8e: df:87:db:9e:22:88:e8:3b:3f:55:a4:b0:d4:fc:35:8f:a5:52: 81:01:63:6b:04:32:cd:ce:46:40:ec:19:0f:ed:c8:d8:34:e8: 50:96:94:84:e0:af:43:5e:70:63:74:5f:aa:34:a7:4d:28:ec: c1:90:df:99:fa:4f:3e:46:5f:8d:b8:6c:6c:e3:89:51:ff:ee: ab:70:f4:f5:f0:32:98:aa:ce:4c:18:05:14:21:e4:81:d4:48: 53:0d:4e:38:7c:ce:0a:07:f9:36:10:bd:44:5f:de:39:c7:51: 1a:b7:f4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqenban5jWNCY+6pfUsSo9jlqOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA2MTYwMTI1NTJaFw0yNTA2MTkwNDIzNTJaMDMxMTAvBgNV BAMTKDIyNzNEOTEwODM5NkYxQzBCMEZGOTY5OEFCNDgzQjdDRUUzNzIyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYRpQUitmks7EIbW3cOlujXvIb m1fU7kx4GlCHt8XU/SQavuwRl5WeqI/Wf8mwBp+slKMWhxne4uhIczZ24aiiKYvU 8K6e6O3los2zHpQd3NSHFxfwH2kWB4Uu4XoZxWaST4qGX2ue+eAXJ6nnNRxGcv4y eMr7ypsUTvK9uiEOEE7Rs7wHMwQglieoy0FMPGbNANxutZVeGQ0XPCK3jQKbEfZR T6mc1EmwdM2HXTHju8LMfvtwieFSk/aOvdk/u5OVp8mYGaP9tB1gqmg/hASTdRUd udCRcu/tXD/iKaDnA6Q8U/nrA2/istEqUuBC+8PpwL1Gxn+vzU7t6+WIMTfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUInPZEIOW8cCw/5aYq0g7fO43IoowHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL5xWfNBI9TSmJdnUKuY0/iGgrLKCW5g6CT v7ZZYlFsBoKoUwaI2Gq9fU5DEPRwZ+K0D7dWS4G/2HL8j5Jb7oI7htUG0lugKp2d ZJX4BFcXWXs96CAOaF0mXur3SAno3zejH2Y4dnfoXIsNWO036cQ31beHaerOO67Z v66BVkBdTu9wjZh6e/zH2BUFsUhfjt+H254iiOg7P1WksNT8NY+lUoEBY2sEMs3O RkDsGQ/tyNg06FCWlITgr0NecGN0X6o0p00o7MGQ35n6Tz5GX424bGzjiVH/7qtw 9PXwMpiqzkwYBRQh5IHUSFMNTjh8zgoH+TYQvURf3jnHURq39EE= -----END CERTIFICATE-----Generated at Wed Jun 18 05:21:26 2025 by rpki-client