$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: wmJoZUyk/wRREx8EWwqE5UPWfuza0FiLAFcuvd/oXZI= Subject key identifier: F2:DD:7C:67:5F:E6:7E:6F:4A:A4:5E:A3:86:D0:A1:24:5D:0F:87:34 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 7D1BE76744108EC26C692335E3E382A4F7549FA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: 5B Signing time: Sun 15 Jun 2025 09:21:19 +0000 Manifest this update: Sun 15 Jun 2025 09:16:19 +0000 Manifest next update: Wed 18 Jun 2025 14:52:19 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=) 2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: iKIzKRNK647SDkJ0GKEPom0Q3phpu9/J4S9BOIl3kzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1b:e7:67:44:10:8e:c2:6c:69:23:35:e3:e3:82:a4:f7:54:9f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Jun 15 09:16:19 2025 GMT Not After : Jun 18 14:52:19 2025 GMT Subject: CN=F2DD7C675FE67E6F4AA45EA386D0A1245D0F8734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:d3:0d:39:73:77:bb:80:1c:dc:8e:fa:67: 80:de:08:4d:68:f8:15:da:7b:33:86:23:b4:71:f6: 36:1f:92:e2:46:44:a5:90:a7:89:ce:00:ca:01:b7: cc:4f:3d:e9:3f:73:8f:fc:bf:8b:a7:7a:56:b1:24: e9:19:42:b2:ac:12:58:f0:c6:77:3c:10:8d:13:ab: 67:a9:f2:47:a4:da:9e:0c:45:6d:c0:17:42:31:9d: 17:43:69:9d:49:74:77:8f:65:89:50:e8:55:ef:38: 45:8e:69:66:50:14:cf:13:54:ba:11:99:c3:e2:4c: 0b:ea:af:ac:a5:1d:4a:d9:22:59:59:fe:91:8f:d8: 8f:95:bf:f9:a0:e3:15:3a:7f:1d:ee:47:85:b0:86: e4:2c:6f:5a:6e:a4:cd:35:ff:a2:02:64:d3:1d:3e: 78:e1:d5:ef:29:69:61:67:3c:8a:55:29:22:75:a8: 25:0b:13:e8:0c:47:05:d4:9b:98:47:97:2d:23:2e: fa:9d:b1:52:23:5d:64:d0:55:ec:99:7b:cc:71:a9: c5:96:bd:73:2d:f3:1b:db:d6:6f:5f:6e:80:04:c6: d5:61:03:7c:f2:4f:76:ee:5e:68:fc:ad:2d:74:58: 0b:72:5d:f4:10:5b:5e:72:af:b6:29:ac:4f:60:01: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DD:7C:67:5F:E6:7E:6F:4A:A4:5E:A3:86:D0:A1:24:5D:0F:87:34 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:87:c9:61:17:57:b8:c4:48:ec:d3:a4:b1:7b:13:71:98:51: 4e:dc:58:3f:ef:42:6e:a2:21:95:ce:d3:83:ac:4e:7a:40:94: fb:c2:da:7e:a8:18:cd:8e:e0:81:f9:8e:6e:49:b2:3e:fe:ce: 1c:10:d5:ff:dc:da:25:77:ad:87:a2:25:55:05:4c:29:56:31: b9:b8:d2:c2:b9:69:fa:25:23:a5:f7:02:6d:6f:eb:fc:c5:85: c1:d5:94:ea:e8:28:41:c8:01:89:14:d9:73:d5:37:95:83:83: 56:89:1b:ed:dc:45:73:61:25:88:51:80:c7:cc:63:64:eb:00: 7d:8a:8f:7d:48:4b:b8:cf:e8:15:fb:12:56:97:4b:90:54:69: 30:f3:b8:af:2d:dd:81:be:63:bf:e0:63:98:cc:7a:8f:da:2f: e4:1a:29:b1:6a:08:29:91:64:98:01:e6:6a:3b:e5:a9:51:98: 76:e5:41:b3:4c:b3:92:c9:3e:e6:77:9e:93:d2:3e:bc:e7:e8: 59:9b:50:06:94:20:e0:7b:a1:7f:e0:8b:69:7c:e0:01:f3:9f: c3:a6:21:0e:bf:40:32:90:e4:05:04:ee:c0:98:1c:eb:26:ba: b3:8c:b1:b0:75:a6:a6:b5:a8:fc:c5:05:65:82:00:91:c6:e4: 55:c6:71:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRvnZ0QQjsJsaSM14+OCpPdUn6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTA2MTUwOTE2MTlaFw0yNTA2MTgxNDUyMTlaMDMxMTAvBgNV BAMTKEYyREQ3QzY3NUZFNjdFNkY0QUE0NUVBMzg2RDBBMTI0NUQwRjg3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55tMNOXN3u4Ac3I76Z4DeCE1o +BXaezOGI7Rx9jYfkuJGRKWQp4nOAMoBt8xPPek/c4/8v4unelaxJOkZQrKsEljw xnc8EI0Tq2ep8kek2p4MRW3AF0IxnRdDaZ1JdHePZYlQ6FXvOEWOaWZQFM8TVLoR mcPiTAvqr6ylHUrZIllZ/pGP2I+Vv/mg4xU6fx3uR4WwhuQsb1pupM01/6ICZNMd Pnjh1e8paWFnPIpVKSJ1qCULE+gMRwXUm5hHly0jLvqdsVIjXWTQVeyZe8xxqcWW vXMt8xvb1m9fboAExtVhA3zyT3buXmj8rS10WAtyXfQQW15yr7YprE9gAfaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8t18Z1/mfm9KpF6jhtChJF0PhzQwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2HyWEXV7jESOzTpLF7E3GYUU7cWD/vQm6i IZXO04OsTnpAlPvC2n6oGM2O4IH5jm5Jsj7+zhwQ1f/c2iV3rYeiJVUFTClWMbm4 0sK5afolI6X3Am1v6/zFhcHVlOroKEHIAYkU2XPVN5WDg1aJG+3cRXNhJYhRgMfM Y2TrAH2Kj31IS7jP6BX7ElaXS5BUaTDzuK8t3YG+Y7/gY5jMeo/aL+QaKbFqCCmR ZJgB5mo75alRmHblQbNMs5LJPuZ3npPSPrzn6FmbUAaUIOB7oX/gi2l84AHzn8Om IQ6/QDKQ5AUE7sCYHOsmurOMsbB1pqa1qPzFBWWCAJHG5FXGcds= -----END CERTIFICATE-----Generated at Sun Jun 15 23:02:39 2025 by rpki-client