$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: GnpIcz/CxS/AnWZx1OD4LvW961AC1xAL6EygzI0CfoU= Subject key identifier: B4:EA:06:9B:3F:46:67:EB:95:F1:F0:05:83:49:AE:73:38:45:44:3C Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 37A9246C2CE2406A7DA5AA21E016C1B72109393E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 0435 Signing time: Tue 17 Jun 2025 22:41:04 +0000 Manifest this update: Tue 17 Jun 2025 22:36:04 +0000 Manifest next update: Sat 21 Jun 2025 05:45:04 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: IJE11zWl6Bd22ECBH1B+diB+bL1zv7uu4MShP4zlbeo=) 2: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=) 3: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: pKHdGJHsGSGfDl46o2wosXGehRbXUqIap7Vy4E4vB9g=) 4: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: phv2v0UULxjhy6jYCu5Q46Qv7tH2fN9PAI84zSaDcmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a9:24:6c:2c:e2:40:6a:7d:a5:aa:21:e0:16:c1:b7:21:09:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Jun 17 22:36:04 2025 GMT Not After : Jun 21 05:45:04 2025 GMT Subject: CN=B4EA069B3F4667EB95F1F0058349AE733845443C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:57:8b:88:2f:2e:d3:27:bd:7c:07:00:73: f2:4f:ed:57:d8:8a:57:f7:bb:a5:80:85:89:da:56: 38:6b:6d:73:46:8a:2d:66:bc:88:94:09:e3:36:3b: a1:ff:ad:ff:a7:ae:4a:30:cd:40:fe:fd:98:0d:e9: 65:eb:0b:f9:78:c7:70:eb:31:48:32:d4:7d:3a:23: 6c:d5:89:2b:e3:52:b5:3d:b5:19:f7:7d:8c:e3:ed: 0a:72:31:44:61:f9:7c:58:fa:83:24:e1:5d:8f:28: 66:32:c5:99:6e:a5:50:72:fd:fb:4a:ee:44:c4:1c: 68:22:b7:ce:c4:e1:00:8f:eb:fd:d8:71:5d:3d:9e: cf:91:16:a7:78:bb:9e:fe:1e:ce:e9:5c:6a:fb:c4: 5b:fa:6f:50:33:7c:99:c6:b0:7d:0e:7a:de:d7:a5: 47:c7:b8:aa:96:57:ef:26:a7:1b:cd:25:af:94:23: 15:a6:34:13:01:77:33:22:67:40:83:a1:06:f7:30: 9c:1e:d9:7a:bc:e7:b3:ce:15:10:44:14:69:e8:6c: 39:05:7a:5a:8b:c2:de:c0:62:15:29:81:8d:65:25: 22:f6:cc:a4:91:d3:92:76:2e:b7:49:d2:46:2c:5b: 6b:c3:77:df:d9:3f:c1:f1:56:b7:8f:51:b4:e2:66: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:06:9B:3F:46:67:EB:95:F1:F0:05:83:49:AE:73:38:45:44:3C X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4b:3b:8a:dc:b5:45:92:bd:8c:69:56:b6:90:0e:c1:83:15: ad:71:08:7c:36:3b:fc:83:41:e6:92:c2:5e:e7:02:01:2d:bd: 28:f3:ef:fb:92:79:64:90:b1:45:38:79:f8:25:ba:f2:2a:ef: 9d:f9:07:d4:da:8a:3a:91:86:ed:dd:e0:89:3e:b6:16:91:9f: 6d:97:46:65:b8:09:b0:50:d3:22:2f:68:fd:2c:89:fb:c9:7f: 7a:79:67:1e:e2:f7:84:72:f5:d8:8c:a4:e1:ed:77:ad:59:91: 2f:0d:1a:ba:a5:27:7a:03:a5:89:1f:68:e9:c0:e5:4b:fe:8a: 63:d8:17:f7:82:ce:7f:d8:c9:4e:ed:c7:a5:92:07:b3:2d:c3: 48:47:3d:50:a5:38:c8:0a:dd:2f:6a:a0:54:e9:20:9f:00:45: 96:f9:f2:3f:79:e2:e7:d3:6c:56:5b:fb:ed:af:1b:09:9b:90: 25:f3:39:c7:75:86:92:68:49:0e:03:98:3d:b5:9b:fa:eb:fb: 38:84:fc:7e:8c:1d:72:af:2e:c5:f9:f5:df:3c:e8:29:bb:88: 1d:d3:de:44:32:17:b5:51:cd:2d:3e:10:dd:b5:46:7d:f6:00: e4:27:28:d1:8a:25:f2:11:7a:bd:cb:53:08:61:10:1e:4b:4e: 46:79:9a:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6kkbCziQGp9paoh4BbBtyEJOT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNTA2MTcyMjM2MDRaFw0yNTA2MjEwNTQ1MDRaMDMxMTAvBgNV BAMTKEI0RUEwNjlCM0Y0NjY3RUI5NUYxRjAwNTgzNDlBRTczMzg0NTQ0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+VeLiC8u0ye9fAcAc/JP7VfY ilf3u6WAhYnaVjhrbXNGii1mvIiUCeM2O6H/rf+nrkowzUD+/ZgN6WXrC/l4x3Dr MUgy1H06I2zViSvjUrU9tRn3fYzj7QpyMURh+XxY+oMk4V2PKGYyxZlupVBy/ftK 7kTEHGgit87E4QCP6/3YcV09ns+RFqd4u57+Hs7pXGr7xFv6b1AzfJnGsH0Oet7X pUfHuKqWV+8mpxvNJa+UIxWmNBMBdzMiZ0CDoQb3MJwe2Xq857POFRBEFGnobDkF elqLwt7AYhUpgY1lJSL2zKSR05J2LrdJ0kYsW2vDd9/ZP8HxVrePUbTiZrKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtOoGmz9GZ+uV8fAFg0muczhFRDwwHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtLO4rctUWSvYxpVraQDsGDFa1xCHw2O/yD QeaSwl7nAgEtvSjz7/uSeWSQsUU4efgluvIq7535B9TaijqRhu3d4Ik+thaRn22X RmW4CbBQ0yIvaP0sifvJf3p5Zx7i94Ry9diMpOHtd61ZkS8NGrqlJ3oDpYkfaOnA 5Uv+imPYF/eCzn/YyU7tx6WSB7Mtw0hHPVClOMgK3S9qoFTpIJ8ARZb58j954ufT bFZb++2vGwmbkCXzOcd1hpJoSQ4DmD21m/rr+ziE/H6MHXKvLsX59d886Cm7iB3T 3kQyF7VRzS0+EN21Rn32AOQnKNGKJfIRer3LUwhhEB5LTkZ5muo= -----END CERTIFICATE-----Generated at Thu Jun 19 02:58:43 2025 by rpki-client