$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: KanniS+KgbUlFb2XRpPQYen8kuNxno3XmF0xOEjz5Oo= Subject key identifier: 90:A0:EE:93:99:D7:49:87:CF:10:1E:42:C1:CC:4C:A4:A8:B2:61:31 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 6735D8B14AA7322FB90E179A7652361E1F3846D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: 9B Signing time: Sat 14 Jun 2025 07:20:04 +0000 Manifest this update: Sat 14 Jun 2025 07:15:04 +0000 Manifest next update: Tue 17 Jun 2025 15:34:04 +0000 Files and hashes: 1: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: P/GpQXGOjF7jcAj4BsdYCr51af409NTv8Gr9lK6BrZA=) 2: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: McNi6uIe5Axf6tBtLxMOSaRGdTnkzxQvhnQV75cvKKU=) 3: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: nALNOd2M4Ypyg+e26YPaQ5ppKocXSpgBvFiHxaD0J/s=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: Nt9qLfTDr0UpJAVtWSyKuAtUsz1EA6jNL3P3TZGVw9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:35:d8:b1:4a:a7:32:2f:b9:0e:17:9a:76:52:36:1e:1f:38:46:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Jun 14 07:15:04 2025 GMT Not After : Jun 17 15:34:04 2025 GMT Subject: CN=90A0EE9399D74987CF101E42C1CC4CA4A8B26131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:4b:2e:ec:db:0e:b5:15:7a:1d:22:c9:82: 88:28:de:94:45:c7:f6:5c:dc:c5:f5:d6:be:b3:00: 3b:5d:ee:70:21:b5:dc:af:18:64:aa:62:0b:3d:63: 07:04:a1:49:2a:5e:82:59:0d:dd:16:1e:05:30:18: a9:27:34:5f:fa:0f:3d:a1:3c:5a:2e:54:7e:c4:8b: d6:f7:be:f3:f2:6f:c3:56:f1:29:30:aa:7a:c5:9a: 65:6c:6f:9b:d8:b8:46:a6:58:94:7b:f7:78:23:74: 94:64:53:d1:85:de:aa:21:5e:fb:c5:3b:47:de:cc: 4c:bf:37:56:0f:b4:ce:96:91:6c:e2:57:c9:6c:47: 26:db:43:2d:f2:57:66:e7:a8:6a:b7:43:d2:6d:c5: f6:f0:5a:9d:89:4d:fb:ce:97:92:be:c7:c3:13:88: 2a:00:c3:9e:04:42:d0:40:49:f8:98:16:32:37:79: d7:e0:5c:d9:a2:b3:26:72:aa:c5:ab:c4:7c:74:72: a1:e7:d9:04:c1:dc:1e:77:e3:1a:ad:07:8f:23:3e: 12:0d:ea:af:13:6d:43:6b:11:c9:fa:db:ca:e5:0d: 1c:ea:b0:27:51:22:40:99:62:5f:9d:a7:88:80:1a: c6:48:46:ea:65:f0:14:3b:f1:a0:21:64:20:13:88: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A0:EE:93:99:D7:49:87:CF:10:1E:42:C1:CC:4C:A4:A8:B2:61:31 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:11:0b:79:59:40:dc:95:58:d9:51:f9:21:96:3c:94:c4: 51:e7:ab:5d:8d:15:b8:59:6c:90:f3:ad:ab:77:f9:f4:1a:5f: 83:4c:c1:07:d9:e2:89:bf:1b:03:8f:96:8f:1e:99:05:59:62: 3f:2a:e5:2e:95:d6:6b:f6:f9:87:da:b7:de:02:0c:da:78:db: 24:19:d1:e2:b0:49:4c:ef:5e:54:fb:4c:6f:68:eb:75:cb:2c: db:52:6b:14:27:15:42:6f:c2:6b:9a:17:ea:ea:36:86:c8:dd: d7:31:54:bc:08:5f:22:88:81:ea:ec:3c:a8:dc:1e:1c:3a:64: f4:bd:8b:af:ca:55:9d:b7:47:af:b7:69:b5:fb:99:23:e4:06: 20:7d:2d:6e:38:13:c5:07:ec:39:d7:ae:e3:67:3e:5e:59:9e: e9:df:09:e7:b4:24:86:fd:f0:94:1e:b6:e0:4a:ee:cb:6c:6b: 78:6c:49:ed:38:08:ec:f2:c6:03:6b:7a:cf:92:0f:fa:8e:73: fd:a7:58:10:a0:e4:69:9f:4d:5f:5f:6d:6e:22:1a:08:5c:e3: 97:93:a9:25:ca:8d:2e:dc:15:7a:85:05:ea:a4:16:4d:07:cc: 69:ef:71:ed:34:ab:8a:bd:ed:3c:f3:5b:41:61:7c:da:35:f3: b0:79:8a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzXYsUqnMi+5DheadlI2Hh84RtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTA2MTQwNzE1MDRaFw0yNTA2MTcxNTM0MDRaMDMxMTAvBgNV BAMTKDkwQTBFRTkzOTlENzQ5ODdDRjEwMUU0MkMxQ0M0Q0E0QThCMjYxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe0su7NsOtRV6HSLJgogo3pRF x/Zc3MX11r6zADtd7nAhtdyvGGSqYgs9YwcEoUkqXoJZDd0WHgUwGKknNF/6Dz2h PFouVH7Ei9b3vvPyb8NW8SkwqnrFmmVsb5vYuEamWJR793gjdJRkU9GF3qohXvvF O0fezEy/N1YPtM6WkWziV8lsRybbQy3yV2bnqGq3Q9JtxfbwWp2JTfvOl5K+x8MT iCoAw54EQtBASfiYFjI3edfgXNmisyZyqsWrxHx0cqHn2QTB3B534xqtB48jPhIN 6q8TbUNrEcn628rlDRzqsCdRIkCZYl+dp4iAGsZIRupl8BQ78aAhZCATiNyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKDuk5nXSYfPEB5CwcxMpKiyYTEwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE7EQt5WUDclVjZUfkhljyUxFHnq12NFbhZ bJDzrat3+fQaX4NMwQfZ4om/GwOPlo8emQVZYj8q5S6V1mv2+Yfat94CDNp42yQZ 0eKwSUzvXlT7TG9o63XLLNtSaxQnFUJvwmuaF+rqNobI3dcxVLwIXyKIgersPKjc Hhw6ZPS9i6/KVZ23R6+3abX7mSPkBiB9LW44E8UH7DnXruNnPl5ZnunfCee0JIb9 8JQetuBK7stsa3hsSe04COzyxgNres+SD/qOc/2nWBCg5GmfTV9fbW4iGghc45eT qSXKjS7cFXqFBeqkFk0HzGnvce00q4q97TzzW0FhfNo187B5iro= -----END CERTIFICATE-----Generated at Sun Jun 15 17:11:27 2025 by rpki-client