$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: bBJfPCTAfIen+zxvINwCQARjj3CpvKjdUmO5oW9o4LE= Subject key identifier: 68:14:2A:34:EC:C2:4C:47:C8:BF:51:3C:C3:E4:09:AB:EF:12:30:78 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 0857FA69314D935228E64B2BD158D613A08E7023 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 98 Signing time: Fri 13 Jun 2025 15:00:06 +0000 Manifest this update: Fri 13 Jun 2025 14:55:06 +0000 Manifest next update: Mon 16 Jun 2025 15:52:06 +0000 Files and hashes: 1: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: odz+XvlU6wUZHmxANYcPfjvU3FxzONeuGBAElE5SFM8=) 2: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: Tn7TDSW+adNbJWWGJZH4AHcWPfC1aqL5ZrmZovxxV0I=) 3: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: l/rrbEpNeb1GQ2wJ0vFCmJ1Zty4z+52/HZ1JBvBf910=) 4: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=) 5: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: xk8tVxqn5heNhUDrnWm94cOrNBZG78jygDDr9I5XxcA=) 6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: tye+gvqn7XSIalribMctk1lo106aECSHkLzSPlnPysU=) 7: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 8: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: QHJuip7O3VcDdL7ndKGxilEe3owxbbSbcIiD01Visj4=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: rCl3Wuft1WIRGE3tw3SxP242bdORGtg1GIBI8B19PUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 15:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:57:fa:69:31:4d:93:52:28:e6:4b:2b:d1:58:d6:13:a0:8e:70:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Jun 13 14:55:06 2025 GMT Not After : Jun 16 15:52:06 2025 GMT Subject: CN=68142A34ECC24C47C8BF513CC3E409ABEF123078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:21:ca:62:56:35:0e:36:62:04:4c:7a:6c: 26:68:db:08:e8:89:96:1c:bf:2d:a5:75:a0:f0:92: ec:06:70:37:10:bd:fa:e8:5b:31:a0:d5:5a:45:99: 68:6d:f1:d9:49:99:9c:78:fd:97:96:84:9f:44:40: 66:ae:54:fd:71:e0:a4:a9:ca:5c:11:76:33:60:17: b5:cd:6d:60:e3:12:03:5e:da:ba:71:e6:ae:25:93: ea:90:7d:b9:82:92:38:d6:89:4c:59:f5:f5:1a:ae: cf:24:3d:54:a9:0c:c6:33:7f:a1:e2:3d:38:a0:2a: 34:5f:39:f2:b8:8b:70:a4:98:50:77:df:26:f1:0b: b3:8a:04:3b:96:21:01:35:5f:03:07:5c:97:23:72: 66:06:0d:e9:cc:68:b9:33:49:c0:b6:9d:73:29:05: b5:2d:6f:03:33:6c:28:3c:6f:7b:e7:a0:50:f8:bb: 33:55:01:ae:a2:85:73:4c:70:8c:95:bf:39:e4:ee: f9:25:cf:75:90:88:6d:ed:16:7c:d3:d1:b6:72:19: 38:fd:54:61:2f:f6:cc:41:67:79:2b:64:c2:e4:88: 25:71:69:04:e7:24:b1:2c:b7:d6:9e:eb:ce:07:6e: 3e:d4:26:ba:63:fe:a1:ed:cf:c0:a8:c0:c0:0d:5a: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:2A:34:EC:C2:4C:47:C8:BF:51:3C:C3:E4:09:AB:EF:12:30:78 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:be:5a:42:a8:8d:10:94:b5:cd:74:f8:c2:d2:17:14:dc:3f: 31:ee:c4:c5:1b:15:8e:d7:68:23:a9:68:bc:3e:5f:d8:dd:f6: 66:fa:b6:96:21:f2:2d:47:4a:dd:e2:f4:17:df:63:04:f6:5e: f4:7a:06:0c:52:df:85:1d:91:91:d9:86:62:85:ce:ff:28:b8: 20:3b:c4:32:65:bd:39:bd:e2:57:24:2e:e4:7f:da:9a:77:b5: f4:1b:04:93:07:45:c9:5a:1f:6e:4c:22:11:99:e5:26:15:47: 76:10:8c:e4:5f:1c:82:8e:13:d9:5f:45:23:c2:a0:d1:2f:42: f5:db:45:3e:75:e5:d7:f8:f1:12:d7:eb:44:fc:16:bc:68:c6: 93:79:25:a6:32:8a:c8:c4:ee:c0:c7:77:45:bc:89:45:f0:f1: cb:d1:1c:d4:d1:48:09:8d:d9:db:ad:b1:aa:f0:fc:47:bb:ea: 2d:ba:f7:05:d4:be:f6:77:ed:a4:f7:ee:00:6d:ec:2e:d0:3f: cb:56:54:25:89:55:86:b9:2b:00:e4:98:7d:81:15:7b:6b:5f: 45:d7:59:7e:a3:f9:67:98:e0:59:6f:21:ed:2c:4d:1b:e2:53: d9:66:e1:45:7b:c2:4e:0b:c7:48:99:b1:64:19:1d:91:02:25: 02:c4:d6:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFf6aTFNk1Io5ksr0VjWE6COcCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA2MTMxNDU1MDZaFw0yNTA2MTYxNTUyMDZaMDMxMTAvBgNV BAMTKDY4MTQyQTM0RUNDMjRDNDdDOEJGNTEzQ0MzRTQwOUFCRUYxMjMwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwiHKYlY1DjZiBEx6bCZo2wjo iZYcvy2ldaDwkuwGcDcQvfroWzGg1VpFmWht8dlJmZx4/ZeWhJ9EQGauVP1x4KSp ylwRdjNgF7XNbWDjEgNe2rpx5q4lk+qQfbmCkjjWiUxZ9fUars8kPVSpDMYzf6Hi PTigKjRfOfK4i3CkmFB33ybxC7OKBDuWIQE1XwMHXJcjcmYGDenMaLkzScC2nXMp BbUtbwMzbCg8b3vnoFD4uzNVAa6ihXNMcIyVvznk7vklz3WQiG3tFnzT0bZyGTj9 VGEv9sxBZ3krZMLkiCVxaQTnJLEst9ae684Hbj7UJrpj/qHtz8CowMANWnFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBQqNOzCTEfIv1E8w+QJq+8SMHgwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK+WkKojRCUtc10+MLSFxTcPzHuxMUbFY7X aCOpaLw+X9jd9mb6tpYh8i1HSt3i9BffYwT2XvR6BgxS34UdkZHZhmKFzv8ouCA7 xDJlvTm94lckLuR/2pp3tfQbBJMHRclaH25MIhGZ5SYVR3YQjORfHIKOE9lfRSPC oNEvQvXbRT515df48RLX60T8FrxoxpN5JaYyisjE7sDHd0W8iUXw8cvRHNTRSAmN 2dutsarw/Ee76i269wXUvvZ37aT37gBt7C7QP8tWVCWJVYa5KwDkmH2BFXtrX0XX WX6j+WeY4FlvIe0sTRviU9lm4UV7wk4Lx0iZsWQZHZECJQLE1u4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:02:16 2025 by rpki-client