$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: 3X2ppQNR6OqAMCubdxpfUB6aLwjN3V1EqNYukAptbNc= Subject key identifier: 47:4C:D1:FC:CF:75:35:F4:FF:E7:27:0B:43:E5:8E:F7:B4:3F:81:B9 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 7BA44FF8203CA90CF59FE910C3CD7ED732DBD076 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 024F Signing time: Sun 15 Jun 2025 18:30:03 +0000 Manifest this update: Sun 15 Jun 2025 18:25:03 +0000 Manifest next update: Thu 19 Jun 2025 01:15:03 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: 7EhY43A0WBAeJlCdrMu2CjWBsoMdCblC3eHkItDSHCs=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a4:4f:f8:20:3c:a9:0c:f5:9f:e9:10:c3:cd:7e:d7:32:db:d0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Jun 15 18:25:03 2025 GMT Not After : Jun 19 01:15:03 2025 GMT Subject: CN=474CD1FCCF7535F4FFE7270B43E58EF7B43F81B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:dc:22:06:87:2c:5a:82:af:f0:bd:7b:b5: 56:45:eb:f2:0a:4e:a4:3b:5d:f0:d7:c1:16:82:41: 82:53:63:a2:1e:4d:53:3e:29:30:27:1e:90:a3:26: 57:c5:82:a6:54:cc:36:f8:05:cd:88:59:31:f9:5d: 14:54:41:40:b1:ba:be:63:14:fc:4e:3a:f7:6d:4a: e9:19:84:60:e1:f6:b4:48:b9:b1:69:a1:74:43:2a: 22:b3:4d:ad:6e:8c:e8:72:6f:4c:0c:d8:26:98:3b: 16:06:1a:03:d9:cb:aa:ad:27:2d:22:1d:78:11:2f: b5:a8:30:d1:20:81:9f:4c:6e:ea:ea:ae:87:9e:aa: e4:b8:43:c8:c6:aa:3a:e8:3f:ca:33:0a:3f:3a:f7: 7f:62:51:c0:56:a3:eb:a8:4f:c2:92:42:76:5c:a8: e6:58:9f:40:ad:3e:60:fa:2f:b1:b8:cc:a1:90:13: f0:66:02:2e:2c:a7:a2:c1:5e:32:b3:8c:88:ca:a7: 80:bf:67:ca:25:75:39:c3:d6:69:4f:de:f1:b7:e1: b7:57:0e:07:10:f6:30:35:d1:ab:53:12:3c:f1:94: 7d:46:c4:6a:a4:ad:d3:a4:31:60:aa:92:4c:ef:f6: d5:1e:94:10:73:75:91:f4:b1:c9:b8:04:14:b0:ed: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4C:D1:FC:CF:75:35:F4:FF:E7:27:0B:43:E5:8E:F7:B4:3F:81:B9 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:93:95:6b:16:a0:93:58:43:05:2c:e1:51:da:ca:0b:14:ca: ca:6f:44:e8:f5:ad:be:aa:06:79:f2:45:68:25:34:96:34:75: fc:5e:bf:7a:e9:9c:d4:27:14:50:de:4d:ec:ef:b3:66:8c:d1: 5e:f7:34:27:75:48:5d:37:71:41:79:33:66:1e:be:46:65:70: 33:92:bf:fa:86:53:f3:9a:ac:c1:1c:ab:45:50:08:13:87:ea: da:9a:4a:13:67:94:cc:ae:d3:ef:d4:af:7e:eb:de:1a:d8:a2: b1:c4:43:76:17:e0:6b:0b:d5:52:b2:30:81:b3:e9:59:29:ac: cb:20:dd:7a:e3:ce:e3:36:5e:d9:44:54:9b:b9:17:a9:a6:59: 81:dc:b6:7f:cd:26:56:20:67:2a:61:fc:49:c6:2c:08:c0:6a: 20:da:f8:f8:06:bf:3f:14:ae:60:95:c3:43:f5:54:a3:07:88: 29:f7:20:c9:0e:fc:d1:76:9a:a3:0c:db:a6:e0:75:40:f0:68: d9:fa:d6:d8:a7:9b:41:50:40:84:66:52:da:b1:4d:ae:83:84: 34:c4:65:67:ef:ac:6d:4e:92:15:a8:3a:59:73:13:d3:1a:7f: ca:d0:b2:f1:ef:9a:d7:aa:08:2b:0a:44:85:11:2f:d2:71:1e: 5c:66:6d:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6RP+CA8qQz1n+kQw81+1zLb0HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA2MTUxODI1MDNaFw0yNTA2MTkwMTE1MDNaMDMxMTAvBgNV BAMTKDQ3NENEMUZDQ0Y3NTM1RjRGRkU3MjcwQjQzRTU4RUY3QjQzRjgxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvtwiBocsWoKv8L17tVZF6/IK TqQ7XfDXwRaCQYJTY6IeTVM+KTAnHpCjJlfFgqZUzDb4Bc2IWTH5XRRUQUCxur5j FPxOOvdtSukZhGDh9rRIubFpoXRDKiKzTa1ujOhyb0wM2CaYOxYGGgPZy6qtJy0i HXgRL7WoMNEggZ9MburqroeequS4Q8jGqjroP8ozCj86939iUcBWo+uoT8KSQnZc qOZYn0CtPmD6L7G4zKGQE/BmAi4sp6LBXjKzjIjKp4C/Z8oldTnD1mlP3vG34bdX DgcQ9jA10atTEjzxlH1GxGqkrdOkMWCqkkzv9tUelBBzdZH0scm4BBSw7eB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR0zR/M91NfT/5ycLQ+WO97Q/gbkwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmTlWsWoJNYQwUs4VHaygsUyspvROj1rb6q BnnyRWglNJY0dfxev3rpnNQnFFDeTezvs2aM0V73NCd1SF03cUF5M2YevkZlcDOS v/qGU/OarMEcq0VQCBOH6tqaShNnlMyu0+/Ur37r3hrYorHEQ3YX4GsL1VKyMIGz 6VkprMsg3XrjzuM2XtlEVJu5F6mmWYHctn/NJlYgZyph/EnGLAjAaiDa+PgGvz8U rmCVw0P1VKMHiCn3IMkO/NF2mqMM26bgdUDwaNn61tinm0FQQIRmUtqxTa6DhDTE ZWfvrG1OkhWoOllzE9Maf8rQsvHvmteqCCsKRIURL9JxHlxmbdQ= -----END CERTIFICATE-----Generated at Tue Jun 17 05:02:08 2025 by rpki-client