$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: ck2GsshNOYkjF94C9JGKRAC807CYjjux+rSCKxowJP4= Subject key identifier: 90:31:DF:78:59:66:AA:95:13:57:17:69:4F:13:C2:FF:87:4E:9C:C9 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 6D951F33BF8EAB642FA574FDD426D521FBAB3C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: C7 Signing time: Sun 15 Jun 2025 23:12:13 +0000 Manifest this update: Sun 15 Jun 2025 23:07:13 +0000 Manifest next update: Thu 19 Jun 2025 08:00:13 +0000 Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) 2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: ZJy4pa4LPCrY4yEmCNCeiRrTvV9j8KGhTCJIFMA5ddA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:95:1f:33:bf:8e:ab:64:2f:a5:74:fd:d4:26:d5:21:fb:ab:3c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Jun 15 23:07:13 2025 GMT Not After : Jun 19 08:00:13 2025 GMT Subject: CN=9031DF785966AA95135717694F13C2FF874E9CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:fc:c9:2b:99:64:b1:d2:77:0d:02:af:69: dd:20:48:79:51:58:2c:8f:f8:96:57:9f:23:74:0d: ac:51:11:aa:2c:e3:f9:b8:93:02:9e:05:cf:7a:95: e9:eb:af:c5:bb:82:44:4a:3f:87:e7:f6:2b:13:74: 64:df:e7:ae:a2:83:f6:dc:2e:43:7a:c9:e3:ef:7c: 75:d2:c4:c0:6c:6d:5a:06:17:ff:62:06:09:75:84: 10:fb:5d:d2:e5:78:6b:4d:ea:bf:70:be:fb:4d:ad: 98:39:53:f8:49:e0:d3:3f:f9:0a:67:5b:99:8d:7c: a3:cf:87:a2:dc:9d:e3:65:76:25:c6:bf:47:2e:29: ca:e4:8b:07:20:13:32:01:e3:22:d3:a7:e4:7b:9b: 90:a7:29:91:f8:4b:42:f5:0a:cd:fd:08:7e:a8:b9: 51:5e:c1:ad:94:33:0d:73:97:2e:6d:91:a1:65:30: 90:62:17:3c:87:7f:0f:67:0d:d3:41:9f:bb:4e:0a: 11:4d:3c:08:3d:7c:42:80:25:ae:e7:ce:cc:82:52: 31:63:04:67:16:14:32:ec:cb:d8:dc:ce:00:70:b0: 65:17:f0:97:c4:98:94:fa:67:0b:8a:8d:f7:4d:ea: cc:43:4d:3a:15:e7:29:bd:c6:2f:e1:2f:95:2d:d0: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:31:DF:78:59:66:AA:95:13:57:17:69:4F:13:C2:FF:87:4E:9C:C9 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6b:6d:38:4e:a5:57:09:5f:51:3e:86:fe:1e:9b:37:2f:22: 13:9b:9c:58:7a:99:ba:6c:57:21:36:f9:84:8a:3b:9e:68:c5: a6:6b:f7:96:de:cc:5d:15:98:ae:78:8e:ac:16:ed:4c:25:64: 33:70:2c:f4:74:5d:51:39:ac:42:e8:7a:4c:35:5c:e8:26:2c: 95:ce:a3:e3:cd:95:9c:9a:dc:e8:b5:85:79:c6:3f:e5:9b:59: 69:ba:97:05:b9:89:50:16:71:06:b1:81:8f:7c:a8:a5:59:05: ff:af:a9:89:cc:81:8b:79:51:4b:26:e4:ae:98:98:12:79:f8: 8d:08:5f:f5:fa:df:9f:b1:b1:73:cf:af:fa:e2:eb:2e:d9:3f: 18:8a:13:6a:61:ef:1a:80:e1:c8:a5:2c:9b:22:33:e9:a9:b6: 93:78:49:2a:89:0e:8e:0b:fe:8e:31:c7:34:c5:21:e6:15:ae: 5e:fe:af:24:29:82:10:77:60:59:20:03:1b:2a:37:48:6a:c5: b5:9c:f5:e0:9e:e4:78:4d:fd:3f:b0:5f:b1:55:dc:92:41:70: 1d:8d:1b:bb:fb:ca:26:e8:6c:2a:77:b9:c9:47:9b:3b:75:f2: 84:33:37:8f:c4:fd:66:5d:6d:54:96:b3:36:ec:c8:01:21:bf: da:7b:7c:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZUfM7+Oq2QvpXT91CbVIfurPBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTA2MTUyMzA3MTNaFw0yNTA2MTkwODAwMTNaMDMxMTAvBgNV BAMTKDkwMzFERjc4NTk2NkFBOTUxMzU3MTc2OTRGMTNDMkZGODc0RTlDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40/zJK5lksdJ3DQKvad0gSHlR WCyP+JZXnyN0DaxREaos4/m4kwKeBc96lenrr8W7gkRKP4fn9isTdGTf566ig/bc LkN6yePvfHXSxMBsbVoGF/9iBgl1hBD7XdLleGtN6r9wvvtNrZg5U/hJ4NM/+Qpn W5mNfKPPh6LcneNldiXGv0cuKcrkiwcgEzIB4yLTp+R7m5CnKZH4S0L1Cs39CH6o uVFewa2UMw1zly5tkaFlMJBiFzyHfw9nDdNBn7tOChFNPAg9fEKAJa7nzsyCUjFj BGcWFDLsy9jczgBwsGUX8JfEmJT6ZwuKjfdN6sxDTToV5ym9xi/hL5Ut0NghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDHfeFlmqpUTVxdpTxPC/4dOnMkwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZrbThOpVcJX1E+hv4emzcvIhObnFh6mbps VyE2+YSKO55oxaZr95bezF0VmK54jqwW7UwlZDNwLPR0XVE5rELoekw1XOgmLJXO o+PNlZya3Oi1hXnGP+WbWWm6lwW5iVAWcQaxgY98qKVZBf+vqYnMgYt5UUsm5K6Y mBJ5+I0IX/X635+xsXPPr/ri6y7ZPxiKE2ph7xqA4cilLJsiM+mptpN4SSqJDo4L /o4xxzTFIeYVrl7+ryQpghB3YFkgAxsqN0hqxbWc9eCe5HhN/T+wX7FV3JJBcB2N G7v7yibobCp3uclHmzt18oQzN4/E/WZdbVSWszbsyAEhv9p7fNk= -----END CERTIFICATE-----Generated at Wed Jun 18 01:55:37 2025 by rpki-client