$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: 1frLgARAMOvh8xoREJr97EoNz5NgRI6kaOwjGCHY4rA= Subject key identifier: 1C:FB:B3:B3:AA:C5:F4:4F:03:EC:6A:B7:F2:13:70:E3:57:D1:1D:43 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 45EF57DF5828E3EC9753CEC127CC812D7237B396 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 7C Signing time: Tue 17 Jun 2025 16:51:23 +0000 Manifest this update: Tue 17 Jun 2025 16:46:23 +0000 Manifest next update: Fri 20 Jun 2025 20:10:23 +0000 Files and hashes: 1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: 7CgQK1vr2Ty4CskquMWnK1/SROMTQog6G4qNsp1L7AU=) 2: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 5: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 20:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ef:57:df:58:28:e3:ec:97:53:ce:c1:27:cc:81:2d:72:37:b3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Jun 17 16:46:23 2025 GMT Not After : Jun 20 20:10:23 2025 GMT Subject: CN=1CFBB3B3AAC5F44F03EC6AB7F21370E357D11D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:01:ba:50:84:b1:5c:f2:fb:47:a9:cf:23: 95:86:08:6e:43:9d:44:64:aa:f8:71:b8:5f:7e:fb: 0f:31:48:31:52:51:03:7c:98:d6:f4:8e:97:24:e8: e9:fb:6b:ce:58:2d:86:38:43:73:91:5d:ad:cf:7c: bc:71:d6:d3:5c:a0:0f:ba:07:29:25:74:29:58:a9: 37:6c:bd:33:92:eb:c7:ee:47:64:08:7b:03:3b:48: 69:44:48:d0:00:4a:8d:3b:a3:e7:53:1d:9e:0c:95: f3:d9:da:7e:60:99:a0:f5:58:53:da:a5:76:c6:58: a2:12:22:7f:b6:3f:38:01:70:cc:59:4c:a8:89:96: 90:3b:11:0b:31:01:0f:ea:8e:c8:82:b9:e2:7a:56: d3:34:9b:68:c5:b1:98:66:b7:d3:4b:7c:0b:48:6d: 63:77:0d:7e:5d:60:26:eb:0b:90:b0:3d:07:5f:3b: 13:99:11:cf:37:db:a0:c0:cb:1e:4c:9c:ff:2a:98: 0c:86:77:7c:55:f3:b1:0e:2a:8b:4d:ad:b6:76:c9: 92:65:e7:ac:26:20:38:e4:c7:e5:20:3e:50:30:55: 47:fc:4e:83:6a:ea:cc:7b:5e:94:76:d8:90:68:06: 56:7d:ce:f8:26:32:d4:2a:fd:62:69:74:da:85:32: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FB:B3:B3:AA:C5:F4:4F:03:EC:6A:B7:F2:13:70:E3:57:D1:1D:43 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:36:de:36:a7:b8:92:7c:2b:ba:59:be:a5:aa:62:67:5b:e5: 3f:9c:05:a9:4e:3c:b6:89:f5:c5:63:da:6c:be:e1:b5:0a:24: be:cc:23:80:ef:40:e0:6c:c6:69:bf:1d:2c:c7:b7:70:2c:2d: 68:db:20:4d:13:13:ff:47:7c:f1:6c:8d:51:ef:f2:6f:ea:ce: 0c:c5:ea:30:8b:96:be:2e:af:b2:df:d2:dc:09:b7:c4:91:34: a5:3b:0f:96:8f:cd:dd:c6:ec:71:76:91:69:50:2a:8b:4b:87: 96:5a:11:36:31:0d:57:ff:98:8e:e9:6d:26:fb:64:43:80:1b: 8d:29:a7:c3:d0:eb:e9:55:a0:c2:09:2e:9d:f8:e6:16:b2:c7: 3d:ff:f9:d6:05:21:78:d1:ee:c6:95:be:c1:fe:1a:9c:16:98: 66:19:2b:b2:af:86:36:d7:2c:0a:3b:eb:dc:f1:c2:67:ed:ca: 8d:90:48:40:cd:33:a6:35:1a:cc:7c:28:f9:5d:2f:ab:f6:fc: 13:57:4b:23:dc:51:fa:dc:61:19:b4:4d:42:0c:cc:da:f4:fb: d4:2c:0f:68:4f:73:83:62:0b:f8:e7:c2:78:f6:93:2c:02:86: 16:e4:a7:68:04:3a:05:8a:1b:3d:cf:a2:c9:d9:3c:09:f3:8d: ba:f1:1f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURe9X31go4+yXU87BJ8yBLXI3s5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA2MTcxNjQ2MjNaFw0yNTA2MjAyMDEwMjNaMDMxMTAvBgNV BAMTKDFDRkJCM0IzQUFDNUY0NEYwM0VDNkFCN0YyMTM3MEUzNTdEMTFENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtQG6UISxXPL7R6nPI5WGCG5D nURkqvhxuF9++w8xSDFSUQN8mNb0jpck6On7a85YLYY4Q3ORXa3PfLxx1tNcoA+6 BykldClYqTdsvTOS68fuR2QIewM7SGlESNAASo07o+dTHZ4MlfPZ2n5gmaD1WFPa pXbGWKISIn+2PzgBcMxZTKiJlpA7EQsxAQ/qjsiCueJ6VtM0m2jFsZhmt9NLfAtI bWN3DX5dYCbrC5CwPQdfOxOZEc8326DAyx5MnP8qmAyGd3xV87EOKotNrbZ2yZJl 56wmIDjkx+UgPlAwVUf8ToNq6sx7XpR22JBoBlZ9zvgmMtQq/WJpdNqFMrmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHPuzs6rF9E8D7Gq38hNw41fRHUMwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB023januJJ8K7pZvqWqYmdb5T+cBalOPLaJ 9cVj2my+4bUKJL7MI4DvQOBsxmm/HSzHt3AsLWjbIE0TE/9HfPFsjVHv8m/qzgzF 6jCLlr4ur7Lf0twJt8SRNKU7D5aPzd3G7HF2kWlQKotLh5ZaETYxDVf/mI7pbSb7 ZEOAG40pp8PQ6+lVoMIJLp345hayxz3/+dYFIXjR7saVvsH+GpwWmGYZK7KvhjbX LAo769zxwmftyo2QSEDNM6Y1Gsx8KPldL6v2/BNXSyPcUfrcYRm0TUIMzNr0+9Qs D2hPc4NiC/jnwnj2kywChhbkp2gEOgWKGz3PosnZPAnzjbrxH2M= -----END CERTIFICATE-----Generated at Wed Jun 18 11:13:46 2025 by rpki-client