$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: +6K4hH2F/t73NzP/ZGI+CM024WUaUjxLegCly03DTKY= Subject key identifier: 1C:FD:9E:09:CC:25:4A:4C:C3:4E:E6:9A:7A:C9:9E:66:46:F5:BD:1D Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 4C93B43E859F821D72E1D57F239E22BA5B617D3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: F0 Signing time: Mon 16 Jun 2025 10:01:14 +0000 Manifest this update: Mon 16 Jun 2025 09:56:14 +0000 Manifest next update: Thu 19 Jun 2025 21:36:14 +0000 Files and hashes: 1: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) 2: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: MD5K+5U/mZIUO/EK03HjyS43OUdIGHJF3XnsH/AWAPQ=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:93:b4:3e:85:9f:82:1d:72:e1:d5:7f:23:9e:22:ba:5b:61:7d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Jun 16 09:56:14 2025 GMT Not After : Jun 19 21:36:14 2025 GMT Subject: CN=1CFD9E09CC254A4CC34EE69A7AC99E6646F5BD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:f7:06:de:7a:e2:96:bf:29:9d:43:21:42: 21:5b:01:22:72:9e:b1:72:23:c9:61:14:4c:78:2f: ec:92:e9:08:7b:8b:f7:55:9a:d8:04:be:42:d3:9a: d9:93:66:55:f5:6c:12:a7:f7:89:4e:b9:b6:bd:37: c7:f8:21:ac:3b:ea:e8:33:92:95:f1:e7:77:d6:fb: 2e:4c:08:fa:8e:8a:5b:3d:e7:9a:50:70:cd:0e:86: e9:ef:cb:c9:e5:12:ac:86:af:2c:bb:b9:f5:43:72: bc:65:b0:cd:9a:12:c4:33:6d:9d:92:4a:94:36:15: 9c:29:4a:66:98:49:c5:08:10:b4:09:f8:f0:c0:3d: 33:2e:8f:a5:da:f8:a2:af:0b:c1:e5:d5:f3:78:f7: f7:7a:4c:ed:46:6b:b2:ae:58:84:7c:0b:74:6c:c4: 0a:5a:8b:eb:82:b3:eb:e1:7e:b9:e8:68:41:54:6e: 52:f5:26:9d:c9:8b:93:44:01:51:a7:77:29:c6:51: a2:96:e7:fc:45:c2:6a:eb:db:b4:65:f2:cc:fa:d9: c7:74:e4:1b:48:ae:d0:5a:b5:07:d4:4b:37:05:f8: d2:b8:f9:25:0f:39:4e:92:c4:37:55:04:c6:af:65: 08:63:1f:06:ae:ed:e0:10:1f:26:01:a5:89:4e:18: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FD:9E:09:CC:25:4A:4C:C3:4E:E6:9A:7A:C9:9E:66:46:F5:BD:1D X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cd:c6:ff:cb:25:3e:ff:26:61:48:3e:11:8c:a9:4a:3a:e6: 60:45:ee:31:17:28:2b:6f:43:0b:ea:a2:46:8d:64:55:9b:b7: 0a:11:10:27:53:ef:de:d4:42:69:04:f4:bf:9f:f3:c5:ce:a5: c9:7a:f3:58:da:ab:dd:4c:bb:18:07:00:fc:77:ed:35:fd:0f: 24:4c:f3:c1:1a:a5:61:58:d9:74:62:87:26:be:fb:6d:53:30: ad:bb:41:bc:60:d4:ce:41:d7:b7:a0:b1:6a:d3:a7:51:bd:c5: 8a:60:b9:6b:57:03:f9:54:14:94:85:66:b6:2b:44:2c:71:c9: 7a:42:bd:a5:13:c5:fd:73:2f:3a:7d:cc:72:5c:4f:19:5a:b6: a2:5f:00:c1:88:26:cb:38:40:d9:6a:5e:5b:1a:0a:4d:f4:a1: 87:ff:5a:98:12:fd:08:fb:1b:69:4d:da:6a:eb:38:65:9f:e7: 9a:9b:86:aa:5e:65:55:a4:0d:ca:06:fc:5c:5b:63:e5:df:3e: 67:b2:3a:06:d1:17:a8:fc:86:b2:56:ed:1a:36:8f:5f:2d:12: 7f:6b:a7:7e:e1:81:80:e3:ea:cd:47:47:d7:d4:25:3a:b4:d1: 7e:db:ab:6b:7e:50:6d:5c:1f:8d:de:78:e9:fe:c5:74:8e:c5: 17:53:ed:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJO0PoWfgh1y4dV/I54iulthfT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA2MTYwOTU2MTRaFw0yNTA2MTkyMTM2MTRaMDMxMTAvBgNV BAMTKDFDRkQ5RTA5Q0MyNTRBNENDMzRFRTY5QTdBQzk5RTY2NDZGNUJEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87PcG3nrilr8pnUMhQiFbASJy nrFyI8lhFEx4L+yS6Qh7i/dVmtgEvkLTmtmTZlX1bBKn94lOuba9N8f4Iaw76ugz kpXx53fW+y5MCPqOils955pQcM0Ohunvy8nlEqyGryy7ufVDcrxlsM2aEsQzbZ2S SpQ2FZwpSmaYScUIELQJ+PDAPTMuj6Xa+KKvC8Hl1fN49/d6TO1Ga7KuWIR8C3Rs xApai+uCs+vhfrnoaEFUblL1Jp3Ji5NEAVGndynGUaKW5/xFwmrr27Rl8sz62cd0 5BtIrtBatQfUSzcF+NK4+SUPOU6SxDdVBMavZQhjHwau7eAQHyYBpYlOGBeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHP2eCcwlSkzDTuaaesmeZkb1vR0wHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLNxv/LJT7/JmFIPhGMqUo65mBF7jEXKCtv QwvqokaNZFWbtwoRECdT797UQmkE9L+f88XOpcl681jaq91MuxgHAPx37TX9DyRM 88EapWFY2XRihya++21TMK27Qbxg1M5B17egsWrTp1G9xYpguWtXA/lUFJSFZrYr RCxxyXpCvaUTxf1zLzp9zHJcTxlatqJfAMGIJss4QNlqXlsaCk30oYf/WpgS/Qj7 G2lN2mrrOGWf55qbhqpeZVWkDcoG/FxbY+XfPmeyOgbRF6j8hrJW7Ro2j18tEn9r p37hgYDj6s1HR9fUJTq00X7bq2t+UG1cH43eeOn+xXSOxRdT7SU= -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:09 2025 by rpki-client