$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: M9yhgQAohr7s3e7401DuZxBWTekmSYViNYKvxxGgzgM= Subject key identifier: 10:3C:A4:14:AD:3C:2A:1E:4B:01:AA:61:0D:D8:2A:1E:F7:CC:51:98 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 213B0C1044C2BE6F172FD9811F7BAC38BCD025BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04E3 Signing time: Tue 17 Jun 2025 18:41:56 +0000 Manifest this update: Tue 17 Jun 2025 18:36:56 +0000 Manifest next update: Sat 21 Jun 2025 01:28:56 +0000 Files and hashes: 1: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: qkOUtcwQlURrdVrKD9JIYPk8lNpAPZIlteTqAebqfks=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 01:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3b:0c:10:44:c2:be:6f:17:2f:d9:81:1f:7b:ac:38:bc:d0:25:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Jun 17 18:36:56 2025 GMT Not After : Jun 21 01:28:56 2025 GMT Subject: CN=103CA414AD3C2A1E4B01AA610DD82A1EF7CC5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:bd:e7:2c:6d:49:fe:66:c5:3c:28:f2:8f: e8:61:6b:c6:d2:16:30:19:81:c1:ed:ca:82:30:14: fe:18:f9:3f:69:85:44:5a:10:e1:0b:39:65:f4:09: ca:2e:b4:05:a1:97:50:2b:43:c3:19:59:38:74:b6: c3:f7:cf:68:81:c5:01:dd:dc:90:29:b5:93:30:48: d2:f4:86:d9:e1:18:e0:09:6b:d0:6e:d3:11:3a:89: fe:4c:a3:57:b2:99:2b:76:1b:9f:56:ae:10:7b:eb: e3:75:11:e4:1f:29:dc:ce:9a:c8:26:32:ea:0d:78: 20:58:18:a4:8f:68:17:b9:89:f6:0d:21:da:9b:34: 69:18:d5:37:e4:47:a5:cd:4c:c5:9c:3f:c5:50:e2: 0f:ac:9c:ed:fc:d3:45:73:35:97:e5:0f:43:1b:2f: 3b:ca:18:80:f5:06:8f:f7:00:52:fd:e1:0d:ac:e0: c2:50:5e:9d:98:95:c5:6a:7d:50:02:35:2f:03:09: 8a:0b:86:d5:a8:5b:a3:ec:97:cb:94:12:d6:87:23: db:d2:ff:a9:0b:a9:76:c5:26:31:7b:c5:a6:93:83: 5f:9e:78:f5:39:15:1a:2c:78:6d:2f:45:79:8e:3c: 60:64:68:bb:59:3b:f9:94:b4:97:ad:b9:65:2b:35: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:A4:14:AD:3C:2A:1E:4B:01:AA:61:0D:D8:2A:1E:F7:CC:51:98 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6b:1a:f2:70:60:02:c7:1e:68:ff:07:5d:a3:19:09:9a:16: c1:65:70:17:e5:29:62:e5:43:68:9d:53:25:d6:98:59:6e:83: 38:9a:71:53:7b:5d:a7:6b:9c:9b:d2:c7:b4:01:23:4c:09:70: 2a:c9:80:98:d1:8e:4e:50:ed:a7:de:55:17:aa:d1:50:a0:ba: a2:b7:57:b1:bd:54:68:bf:d4:ce:6f:c5:71:56:37:ac:a6:d8: 5f:d3:24:51:93:18:44:ca:04:5f:d7:77:4f:9f:6c:f0:f0:3a: e3:82:06:91:c5:e7:ff:e0:69:51:96:df:48:10:67:c0:39:7a: cf:ee:e6:aa:25:91:06:53:62:5a:da:af:f8:ea:41:16:1c:d9: 1e:95:67:89:53:8e:44:46:89:86:4b:58:6e:27:53:54:5a:11: 80:b4:84:90:28:1f:b2:5b:60:31:3c:06:87:33:f0:9a:ea:2a: 91:c1:66:c6:7a:fd:a1:c7:46:3f:29:3c:82:d9:b2:dc:e4:a9: 0b:ac:46:78:93:e0:22:1c:23:09:7a:40:38:75:2b:ff:ed:2b: 84:e8:3f:87:cb:9f:77:5c:fd:11:a6:d0:86:0e:08:3a:20:60: 27:67:92:12:0b:b2:93:75:bd:56:43:53:d4:c4:09:86:3f:75: 06:6e:13:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITsMEETCvm8XL9mBH3usOLzQJbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA2MTcxODM2NTZaFw0yNTA2MjEwMTI4NTZaMDMxMTAvBgNV BAMTKDEwM0NBNDE0QUQzQzJBMUU0QjAxQUE2MTBERDgyQTFFRjdDQzUxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTL3nLG1J/mbFPCjyj+hha8bS FjAZgcHtyoIwFP4Y+T9phURaEOELOWX0CcoutAWhl1ArQ8MZWTh0tsP3z2iBxQHd 3JAptZMwSNL0htnhGOAJa9Bu0xE6if5Mo1eymSt2G59WrhB76+N1EeQfKdzOmsgm MuoNeCBYGKSPaBe5ifYNIdqbNGkY1TfkR6XNTMWcP8VQ4g+snO3800VzNZflD0Mb LzvKGID1Bo/3AFL94Q2s4MJQXp2YlcVqfVACNS8DCYoLhtWoW6Psl8uUEtaHI9vS /6kLqXbFJjF7xaaTg1+eePU5FRoseG0vRXmOPGBkaLtZO/mUtJetuWUrNZR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDykFK08Kh5LAaphDdgqHvfMUZgwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRrGvJwYALHHmj/B12jGQmaFsFlcBflKWLl Q2idUyXWmFlugziacVN7XadrnJvSx7QBI0wJcCrJgJjRjk5Q7afeVReq0VCguqK3 V7G9VGi/1M5vxXFWN6ym2F/TJFGTGETKBF/Xd0+fbPDwOuOCBpHF5//gaVGW30gQ Z8A5es/u5qolkQZTYlrar/jqQRYc2R6VZ4lTjkRGiYZLWG4nU1RaEYC0hJAoH7Jb YDE8Bocz8JrqKpHBZsZ6/aHHRj8pPILZstzkqQusRniT4CIcIwl6QDh1K//tK4To P4fLn3dc/RGm0IYOCDogYCdnkhILspN1vVZDU9TECYY/dQZuE5g= -----END CERTIFICATE-----Generated at Thu Jun 19 00:40:27 2025 by rpki-client