$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: UCuNALt2632CIVGRim6QRsNPJRvemqOj8572edoVe2w= Subject key identifier: AB:C5:81:85:0D:81:EA:06:6D:63:E5:CC:35:68:40:BC:C9:1D:B8:F2 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 483B4646243010894BA9DDD7346FC5E191C731D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 01B3 Signing time: Sun 15 Jun 2025 23:11:46 +0000 Manifest this update: Sun 15 Jun 2025 23:06:46 +0000 Manifest next update: Thu 19 Jun 2025 02:55:46 +0000 Files and hashes: 1: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: /Fzx3/Mm0zQQc5c+Vrn82MQKF5f3ABrCIFUpYcKWtAM=) 2: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=) 3: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: n3sbBfuLKEC1geB0k1Dh7NZVeI84mrHDuJ/mBS5tW04=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: tCdlLAwoC+YY63D9MBa5GyVbtzsufzTeHqMYaKr8EzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3b:46:46:24:30:10:89:4b:a9:dd:d7:34:6f:c5:e1:91:c7:31:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Jun 15 23:06:46 2025 GMT Not After : Jun 19 02:55:46 2025 GMT Subject: CN=ABC581850D81EA066D63E5CC356840BCC91DB8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:ea:20:71:75:f3:37:8d:39:6f:42:27:da: b5:06:5a:27:57:86:fd:10:0c:93:3f:f5:0a:d5:61: 13:f3:b7:9a:5f:4d:c1:2b:6b:ba:5d:34:3a:7a:39: 99:05:7d:87:43:24:c1:36:bd:3f:da:15:7e:28:0c: a8:76:c2:87:a5:2e:82:9b:d3:c9:9b:c7:9a:14:ee: 91:03:eb:bd:72:78:a8:25:94:93:a3:be:1a:c7:82: 48:62:39:f8:2d:37:29:86:75:87:2c:ea:54:a8:30: 4e:5e:45:82:11:4a:05:b7:8d:68:6e:6d:fc:72:4f: a0:07:dd:5f:fe:7b:4e:bd:b2:01:32:44:05:1b:a7: fc:e1:74:e5:ff:9a:71:a7:ad:c8:f4:33:a8:d6:54: 8d:1e:d3:53:66:54:75:aa:28:00:26:30:d4:56:7b: 5d:c9:7f:8a:35:fb:3d:6b:cf:6a:0c:5b:19:21:e9: 8a:12:b2:e1:71:2c:56:59:ba:6c:42:e7:2d:15:73: df:4a:26:1b:fa:e1:ee:26:a5:02:a8:eb:5f:55:0d: e3:84:bc:a4:19:a2:66:7f:ca:81:f5:3c:08:dd:44: b8:18:99:b9:1d:c0:82:45:c7:1b:e4:0d:40:90:5f: eb:3e:3a:33:d9:62:a5:78:49:72:d3:15:92:6d:63: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C5:81:85:0D:81:EA:06:6D:63:E5:CC:35:68:40:BC:C9:1D:B8:F2 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:45:8f:71:4d:8c:01:77:7d:53:62:11:07:f8:eb:f3:15:25: 8c:9a:2c:26:8f:8d:e3:ec:cb:7b:f0:aa:82:48:56:39:25:79: aa:25:af:71:c8:a3:09:9a:a6:35:45:25:3e:e7:33:8a:9e:a6: aa:6d:2f:46:4f:61:d8:d3:fd:51:a6:ea:61:22:7e:10:8c:80: ca:f4:ee:47:2f:04:61:bf:c9:5e:a2:7c:0e:75:5b:48:7a:c3: c3:c5:aa:a0:f8:6d:47:82:db:64:bd:81:c1:ba:1b:14:ec:66: cb:11:28:be:86:b6:f9:a0:1f:1e:c1:c9:dc:00:54:93:ca:a3: 7f:f2:8b:81:04:c0:12:92:45:2f:5e:ec:5d:23:6a:2d:9f:1e: 3d:94:db:5b:d6:cf:0f:71:7a:1d:30:9e:c5:ca:da:d8:30:de: 75:c6:32:0a:b1:db:93:b8:bc:66:84:ee:5c:a6:49:93:f3:da: 74:ab:aa:b6:a9:a1:8d:ca:97:31:f9:b9:7d:dd:77:1b:bf:0d: a8:fa:48:35:d4:b2:69:7b:25:c0:a7:0e:e9:65:5b:96:cf:15: 3c:8c:8e:69:f3:2a:0d:87:bf:67:ac:2c:21:7e:9e:fa:3d:56: 4c:05:25:3f:be:41:1b:72:da:4d:33:99:9d:84:9b:a7:0f:02: ae:8f:b8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDtGRiQwEIlLqd3XNG/F4ZHHMdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTA2MTUyMzA2NDZaFw0yNTA2MTkwMjU1NDZaMDMxMTAvBgNV BAMTKEFCQzU4MTg1MEQ4MUVBMDY2RDYzRTVDQzM1Njg0MEJDQzkxREI4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMeogcXXzN405b0In2rUGWidX hv0QDJM/9QrVYRPzt5pfTcEra7pdNDp6OZkFfYdDJME2vT/aFX4oDKh2woelLoKb 08mbx5oU7pED671yeKgllJOjvhrHgkhiOfgtNymGdYcs6lSoME5eRYIRSgW3jWhu bfxyT6AH3V/+e069sgEyRAUbp/zhdOX/mnGnrcj0M6jWVI0e01NmVHWqKAAmMNRW e13Jf4o1+z1rz2oMWxkh6YoSsuFxLFZZumxC5y0Vc99KJhv64e4mpQKo619VDeOE vKQZomZ/yoH1PAjdRLgYmbkdwIJFxxvkDUCQX+s+OjPZYqV4SXLTFZJtY9D3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8WBhQ2B6gZtY+XMNWhAvMkduPIwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNFj3FNjAF3fVNiEQf46/MVJYyaLCaPjePs y3vwqoJIVjkleaolr3HIowmapjVFJT7nM4qepqptL0ZPYdjT/VGm6mEifhCMgMr0 7kcvBGG/yV6ifA51W0h6w8PFqqD4bUeC22S9gcG6GxTsZssRKL6GtvmgHx7BydwA VJPKo3/yi4EEwBKSRS9e7F0jai2fHj2U21vWzw9xeh0wnsXK2tgw3nXGMgqx25O4 vGaE7lymSZPz2nSrqrapoY3KlzH5uX3ddxu/Daj6SDXUsml7JcCnDullW5bPFTyM jmnzKg2Hv2esLCF+nvo9VkwFJT++QRty2k0zmZ2Em6cPAq6PuO0= -----END CERTIFICATE-----Generated at Wed Jun 18 01:51:52 2025 by rpki-client