$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: ioEcrRmyNI6Rm3z1ddE3cIKJn5NmIAtRhum3a7eG+3g= Subject key identifier: E9:16:F1:37:06:44:2C:4F:83:D5:2F:3B:57:C4:E9:43:0A:B3:7F:39 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 76B8344BD4F233781112D0E01563251FDE04F953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 019C Signing time: Mon 16 Jun 2025 01:22:20 +0000 Manifest this update: Mon 16 Jun 2025 01:17:20 +0000 Manifest next update: Thu 19 Jun 2025 12:30:20 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: AshNp1YSCGaNElxHowTGNepA+qZtkyibLv2dQROYn7s=) 2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) 3: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: UR0TWMWgXqudddMKhRSP7Y5sJnog+ckXeMzXSamPQ84=) 4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: 8bvQvtlBe7JNMYj2xQaIWZUm48/28VwMFP7AYXq8A30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b8:34:4b:d4:f2:33:78:11:12:d0:e0:15:63:25:1f:de:04:f9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Jun 16 01:17:20 2025 GMT Not After : Jun 19 12:30:20 2025 GMT Subject: CN=E916F13706442C4F83D52F3B57C4E9430AB37F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:26:ba:68:af:9a:75:be:81:3e:3c:bc:87:1a: b4:4c:56:88:d4:a2:14:b8:94:e8:79:5f:bf:45:eb: 74:5f:d8:31:dc:29:94:0c:91:82:ab:8f:ab:11:fc: bb:78:aa:be:fa:7e:c5:27:62:bb:12:bb:d8:38:e9: 46:fd:97:55:1d:50:fe:66:93:0c:6f:18:32:b7:b9: 5f:0e:a3:20:3b:10:18:7e:5d:99:3b:5f:22:35:39: 9f:6d:7e:d6:5c:9a:81:ee:db:74:c0:e9:ab:2f:d0: 89:f2:29:bf:bd:61:7e:86:ff:a6:7a:18:ec:6d:b1: 63:c7:32:f3:b4:65:7d:50:b9:4a:2b:bf:eb:2c:27: f3:d1:e3:35:16:5d:91:3d:18:a4:3d:ab:cd:35:86: e3:ad:79:1f:69:c6:cd:d1:32:98:5b:ee:0d:20:15: 2c:50:11:d2:66:a1:15:54:86:6f:85:6b:dd:06:c4: ac:72:db:38:4c:57:85:31:07:4c:11:cf:43:8a:26: b4:77:09:0e:cf:13:b8:a4:b6:ca:be:ee:da:ee:d8: 3c:1e:34:a3:8b:74:9f:f2:c0:51:59:55:8b:47:33: 70:1c:69:61:9f:d9:f8:6e:f8:30:28:7b:aa:46:fe: db:cf:e7:9e:71:45:79:13:67:78:4d:af:12:68:f8: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:16:F1:37:06:44:2C:4F:83:D5:2F:3B:57:C4:E9:43:0A:B3:7F:39 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:bf:f2:3b:39:a0:b2:bc:43:63:4e:67:80:34:f8:58:d6: 39:96:dd:0e:40:61:41:61:5d:6b:45:06:94:f2:99:9a:7f:18: 55:69:d8:61:69:c6:8c:da:0c:27:43:f3:d5:78:99:58:bf:d2: ba:81:4f:06:fd:df:48:69:aa:17:37:2b:76:c2:16:3e:6a:e7: fb:5a:79:b5:68:04:7c:b7:bc:48:7d:b4:6e:29:72:41:4e:33: 15:88:bb:d6:40:87:5d:8f:dd:e3:db:d8:71:d9:d1:b2:1f:5a: 82:08:c9:44:9d:8d:4e:b9:65:22:8f:62:15:e4:a0:83:2b:97: cd:03:78:27:a5:ae:b7:4b:af:09:61:70:b8:70:ce:10:65:2a: 22:2d:35:51:0f:33:a7:de:55:79:3f:5e:e0:2b:e8:d2:1a:6b: a9:78:e1:58:ae:bb:f2:01:91:55:1c:c0:e1:9e:ff:36:c5:b8: 3a:b7:12:b5:b2:39:f1:27:29:05:14:2e:82:16:ec:e1:73:69: 31:c5:d6:36:5f:bd:2c:4a:a0:ff:d5:dd:0c:8c:22:7a:bb:7c: 3c:d9:f6:c6:fe:ab:f2:b4:b6:58:dc:72:1b:bf:21:f2:45:ca: de:8b:92:11:1c:10:9f:9a:f9:f1:c4:82:f7:60:ea:81:cb:17: ab:68:4f:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrg0S9TyM3gREtDgFWMlH94E+VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTA2MTYwMTE3MjBaFw0yNTA2MTkxMjMwMjBaMDMxMTAvBgNV BAMTKEU5MTZGMTM3MDY0NDJDNEY4M0Q1MkYzQjU3QzRFOTQzMEFCMzdGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJrpor5p1voE+PLyHGrRMVojU ohS4lOh5X79F63Rf2DHcKZQMkYKrj6sR/Lt4qr76fsUnYrsSu9g46Ub9l1UdUP5m kwxvGDK3uV8OoyA7EBh+XZk7XyI1OZ9tftZcmoHu23TA6asv0InyKb+9YX6G/6Z6 GOxtsWPHMvO0ZX1QuUorv+ssJ/PR4zUWXZE9GKQ9q801huOteR9pxs3RMphb7g0g FSxQEdJmoRVUhm+Fa90GxKxy2zhMV4UxB0wRz0OKJrR3CQ7PE7iktsq+7tru2Dwe NKOLdJ/ywFFZVYtHM3AcaWGf2fhu+DAoe6pG/tvP555xRXkTZ3hNrxJo+OVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RbxNwZELE+D1S87V8TpQwqzfzkwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMDv/I7OaCyvENjTmeANPhY1jmW3Q5AYUFh XWtFBpTymZp/GFVp2GFpxozaDCdD89V4mVi/0rqBTwb930hpqhc3K3bCFj5q5/ta ebVoBHy3vEh9tG4pckFOMxWIu9ZAh12P3ePb2HHZ0bIfWoIIyUSdjU65ZSKPYhXk oIMrl80DeCelrrdLrwlhcLhwzhBlKiItNVEPM6feVXk/XuAr6NIaa6l44Viuu/IB kVUcwOGe/zbFuDq3ErWyOfEnKQUULoIW7OFzaTHF1jZfvSxKoP/V3QyMInq7fDzZ 9sb+q/K0tljcchu/IfJFyt6LkhEcEJ+a+fHEgvdg6oHLF6toT4A= -----END CERTIFICATE-----Generated at Mon Jun 16 15:52:26 2025 by rpki-client