$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: CCzNiiUs6lr1EoNUNUPzDXi5B/DSa77DKnuqpBi51Kc= Subject key identifier: EB:FA:A3:FF:E9:AB:49:A6:80:54:27:75:4B:3A:9F:EB:1B:3E:C5:FC Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 422C689DD8060F90FB1BAEC39420A45CAC118B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0140 Signing time: Sun 15 Jun 2025 05:10:35 +0000 Manifest this update: Sun 15 Jun 2025 05:05:35 +0000 Manifest next update: Wed 18 Jun 2025 10:25:35 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: DthagPlAeTvI+yu1ea3FLUgwhlECUmB39XB3eeUDo3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2c:68:9d:d8:06:0f:90:fb:1b:ae:c3:94:20:a4:5c:ac:11:8b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Jun 15 05:05:35 2025 GMT Not After : Jun 18 10:25:35 2025 GMT Subject: CN=EBFAA3FFE9AB49A6805427754B3A9FEB1B3EC5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:3e:29:93:92:83:d9:21:0a:6e:90:35:75: 27:96:7c:76:d1:c5:90:1f:d4:73:79:92:ad:df:26: e6:ff:e1:b8:0c:22:47:b0:8d:c5:12:2b:65:18:54: b2:45:48:35:7e:d5:c2:7e:76:47:f8:06:be:ce:1e: b3:0f:b4:f1:6a:fe:73:bc:c8:db:71:43:cb:46:e1: e0:c2:48:48:33:99:d6:e7:d6:fb:6e:5d:46:aa:2f: 5c:04:bf:af:35:d7:5b:31:3b:f4:72:ed:14:2d:2a: 09:67:a3:17:2e:40:73:8d:be:fe:bd:f6:d1:e4:e9: da:e5:f0:64:81:e9:fd:08:40:c8:2d:6b:8b:73:e8: 79:ee:55:ae:76:2f:bc:12:a0:59:f1:0a:eb:e0:7e: 6f:63:d5:cc:e4:ad:de:01:88:92:3e:3c:fa:1c:aa: 2a:bd:dc:1f:e1:e4:06:ea:66:02:15:9e:91:52:d6: 40:29:cc:8a:bb:73:78:cb:cf:d4:c4:ea:51:81:b9: 69:8f:02:e7:2e:2b:5e:d8:63:99:a3:4a:00:e0:1d: a0:f5:51:14:58:62:a3:e7:bd:78:4d:91:7a:7a:2d: af:b0:01:d6:70:c3:bf:01:db:1b:36:4f:b1:2a:2a: 9a:bd:4d:1a:91:d0:b6:74:49:24:a8:66:4d:f4:a8: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FA:A3:FF:E9:AB:49:A6:80:54:27:75:4B:3A:9F:EB:1B:3E:C5:FC X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:62:f5:24:3f:9a:75:d2:30:84:a4:85:2a:b1:54:c5:ba: ab:15:39:59:e8:8b:c0:9b:18:4f:42:71:bc:24:8f:e8:6f:4b: 0c:5d:66:41:35:5e:a3:a0:cc:08:ef:b7:b0:c6:7b:63:21:b6: b9:cb:90:30:2d:4d:e3:7d:0b:e6:b4:ac:7f:0e:8b:24:c1:77: a5:59:fc:69:bf:51:16:41:f7:1b:7e:87:f4:d9:45:8d:71:20: c4:fc:79:7f:f7:82:c1:1a:44:69:60:ad:9f:38:ee:3f:ce:d0: eb:1e:63:c4:d4:07:93:30:ad:37:36:fc:da:83:7a:e5:2f:cd: d5:2d:75:e5:bb:6f:77:08:c4:80:c7:1f:1d:2d:16:a4:8f:78: 07:9a:85:82:ae:10:41:d3:c7:ca:dd:43:6d:88:24:53:93:9d: 99:ec:b2:f8:38:51:a7:91:1b:71:97:0c:d9:24:6b:65:88:e5: dd:19:f4:27:60:a7:eb:2e:fb:ce:ba:0c:a7:23:01:e9:f6:d3: 71:84:ca:3c:99:95:59:c0:e3:94:89:64:db:0b:19:1f:52:17: 4c:0d:65:53:27:d4:75:37:c9:ec:a3:47:3f:e3:33:e7:23:9a: 29:22:de:35:25:c9:54:f9:b9:88:e1:36:84:ad:f4:bb:65:bc: a6:f2:66:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQixondgGD5D7G67DlCCkXKwRizkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA2MTUwNTA1MzVaFw0yNTA2MTgxMDI1MzVaMDMxMTAvBgNV BAMTKEVCRkFBM0ZGRTlBQjQ5QTY4MDU0Mjc3NTRCM0E5RkVCMUIzRUM1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVD4pk5KD2SEKbpA1dSeWfHbR xZAf1HN5kq3fJub/4bgMIkewjcUSK2UYVLJFSDV+1cJ+dkf4Br7OHrMPtPFq/nO8 yNtxQ8tG4eDCSEgzmdbn1vtuXUaqL1wEv68111sxO/Ry7RQtKglnoxcuQHONvv69 9tHk6drl8GSB6f0IQMgta4tz6HnuVa52L7wSoFnxCuvgfm9j1czkrd4BiJI+PPoc qiq93B/h5AbqZgIVnpFS1kApzIq7c3jLz9TE6lGBuWmPAucuK17YY5mjSgDgHaD1 URRYYqPnvXhNkXp6La+wAdZww78B2xs2T7EqKpq9TRqR0LZ0SSSoZk30qJepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/qj/+mrSaaAVCd1Szqf6xs+xfwwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtOYvUkP5p10jCEpIUqsVTFuqsVOVnoi8Cb GE9Ccbwkj+hvSwxdZkE1XqOgzAjvt7DGe2MhtrnLkDAtTeN9C+a0rH8OiyTBd6VZ /Gm/URZB9xt+h/TZRY1xIMT8eX/3gsEaRGlgrZ847j/O0OseY8TUB5MwrTc2/NqD euUvzdUtdeW7b3cIxIDHHx0tFqSPeAeahYKuEEHTx8rdQ22IJFOTnZnssvg4UaeR G3GXDNkka2WI5d0Z9Cdgp+su+866DKcjAen203GEyjyZlVnA45SJZNsLGR9SF0wN ZVMn1HU3yeyjRz/jM+cjmiki3jUlyVT5uYjhNoSt9LtlvKbyZpg= -----END CERTIFICATE-----Generated at Tue Jun 17 05:56:26 2025 by rpki-client