$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: LZDiJz+r7QpFgFglsLfPOAZ2KbOGr3ejF74rJBYz7FU= Subject key identifier: 0F:97:43:87:5D:C8:F4:0E:E0:EE:98:F7:41:F1:AB:D8:5F:DC:0E:69 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 20CD426AFA1B035C8DABD5D1F7F7BB46C57BACB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 99 Signing time: Sun 15 Jun 2025 14:20:40 +0000 Manifest this update: Sun 15 Jun 2025 14:15:40 +0000 Manifest next update: Wed 18 Jun 2025 21:33:40 +0000 Files and hashes: 1: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) 2: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: s3w4yh4jV5+pNebRYinZXrBihhC+2MMGZHLGmrvppJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cd:42:6a:fa:1b:03:5c:8d:ab:d5:d1:f7:f7:bb:46:c5:7b:ac:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Jun 15 14:15:40 2025 GMT Not After : Jun 18 21:33:40 2025 GMT Subject: CN=0F9743875DC8F40EE0EE98F741F1ABD85FDC0E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:08:33:64:b8:41:06:54:b5:62:08:8c:54: b4:4b:1d:f8:af:f7:7f:0f:14:03:de:f0:a5:ed:e1: 0a:16:2b:df:ff:66:6a:e0:4b:8f:4f:26:a2:dc:15: 47:28:d5:bd:60:8b:b5:74:ea:4a:ab:5a:f5:aa:d7: 97:b5:4b:c5:a7:82:1f:50:fc:f3:8a:7f:95:cf:1c: 39:46:b7:cc:3f:43:5a:bb:72:20:74:9e:2b:5c:b3: e8:4f:5d:f0:18:a4:a7:09:3a:be:17:90:db:c8:d2: b6:46:7e:91:a0:5b:8b:15:2f:15:bf:fe:85:13:ea: dc:02:25:d1:87:59:9a:89:28:27:f9:35:f6:db:c1: df:76:14:fb:e5:b9:36:a3:22:ea:47:ea:f1:00:a1: 2e:44:45:dd:60:ff:d1:9b:29:10:88:31:c5:b8:84: f9:df:a2:5d:ac:5f:3a:b5:0c:1c:77:13:48:ce:3a: 69:83:bd:5e:17:c7:3c:73:2c:d3:4f:80:c4:f0:07: f2:42:f4:43:c2:45:6b:a8:7a:86:94:94:57:f3:4a: b3:02:70:3e:64:73:3f:ce:60:fa:21:d0:cb:71:04: 45:d9:c9:91:fe:f5:44:0a:bd:b0:fe:18:62:b5:3e: 7e:1b:f6:d3:4d:18:4b:08:b8:74:cb:a6:37:84:3d: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:43:87:5D:C8:F4:0E:E0:EE:98:F7:41:F1:AB:D8:5F:DC:0E:69 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:ba:d1:ef:80:9d:c1:d9:6e:00:2c:85:9d:ee:b4:2c:73: 9d:64:76:da:ed:4d:87:0f:bf:21:40:87:d5:cf:72:34:ea:c4: 16:35:66:2f:aa:22:c8:24:c8:5f:c2:db:c9:4e:bd:02:a7:08: a0:74:bb:4d:23:61:9f:b5:d1:84:10:5c:b6:42:1f:ae:e9:ca: c1:ba:16:fa:9f:b7:77:f1:cd:63:9b:fb:ab:91:ed:95:35:1a: 9f:51:ac:41:0c:46:5d:04:59:b4:b6:e0:58:aa:a5:a4:ae:95: c9:20:c7:a9:22:53:6a:dd:59:64:8e:ab:c6:1c:3b:e1:e9:07: b4:e9:8d:43:ff:9e:89:91:e6:d3:3c:d0:71:fc:83:c1:cd:a8: ce:fc:f8:2d:2b:83:08:01:cf:fc:53:69:19:f1:1c:5e:01:94: a4:5d:26:94:75:8c:a4:61:68:04:5f:42:5a:a7:bf:4d:ae:0f: 3f:02:d6:7e:a1:0e:05:36:36:e6:85:2f:ad:ea:61:9e:da:e6: 9e:a6:2e:04:ff:f7:43:b1:64:37:de:13:67:17:ab:43:f7:e0: 76:73:c6:a1:b8:ff:9d:a2:31:3a:41:0e:29:c1:44:d0:79:83: 56:8d:3e:2c:86:6d:20:91:ae:3a:f7:9a:b5:d6:89:b8:f1:51: 6c:c6:8d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM1CavobA1yNq9XR9/e7RsV7rLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTA2MTUxNDE1NDBaFw0yNTA2MTgyMTMzNDBaMDMxMTAvBgNV BAMTKDBGOTc0Mzg3NURDOEY0MEVFMEVFOThGNzQxRjFBQkQ4NUZEQzBFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIAgzZLhBBlS1YgiMVLRLHfiv 938PFAPe8KXt4QoWK9//ZmrgS49PJqLcFUco1b1gi7V06kqrWvWq15e1S8Wngh9Q /POKf5XPHDlGt8w/Q1q7ciB0nitcs+hPXfAYpKcJOr4XkNvI0rZGfpGgW4sVLxW/ /oUT6twCJdGHWZqJKCf5Nfbbwd92FPvluTajIupH6vEAoS5ERd1g/9GbKRCIMcW4 hPnfol2sXzq1DBx3E0jOOmmDvV4XxzxzLNNPgMTwB/JC9EPCRWuoeoaUlFfzSrMC cD5kcz/OYPoh0MtxBEXZyZH+9UQKvbD+GGK1Pn4b9tNNGEsIuHTLpjeEPbLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5dDh13I9A7g7pj3QfGr2F/cDmkwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJUutHvgJ3B2W4ALIWd7rQsc51kdtrtTYcP vyFAh9XPcjTqxBY1Zi+qIsgkyF/C28lOvQKnCKB0u00jYZ+10YQQXLZCH67pysG6 Fvqft3fxzWOb+6uR7ZU1Gp9RrEEMRl0EWbS24FiqpaSulckgx6kiU2rdWWSOq8Yc O+HpB7TpjUP/nomR5tM80HH8g8HNqM78+C0rgwgBz/xTaRnxHF4BlKRdJpR1jKRh aARfQlqnv02uDz8C1n6hDgU2NuaFL63qYZ7a5p6mLgT/90OxZDfeE2cXq0P34HZz xqG4/52iMTpBDinBRNB5g1aNPiyGbSCRrjr3mrXWibjxUWzGjWI= -----END CERTIFICATE-----Generated at Mon Jun 16 19:25:53 2025 by rpki-client