$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: mPl3SQZ5yRk/8Fvclq3kZpYyu9hTbInpdwTkIaHezZE= Subject key identifier: 37:6C:C8:89:F9:C4:0C:1A:09:51:D5:EC:85:D5:77:8D:42:1C:3C:8F Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 7B0CF7F69296CBC5DAC863E44810F4DC536DB58B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 57 Signing time: Sun 15 Jun 2025 06:01:32 +0000 Manifest this update: Sun 15 Jun 2025 05:56:32 +0000 Manifest next update: Wed 18 Jun 2025 15:44:32 +0000 Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: Bpfm7eHT4X92E9F2448grqqTyXFi5cqcDmg5okWtXq4=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0c:f7:f6:92:96:cb:c5:da:c8:63:e4:48:10:f4:dc:53:6d:b5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Jun 15 05:56:32 2025 GMT Not After : Jun 18 15:44:32 2025 GMT Subject: CN=376CC889F9C40C1A0951D5EC85D5778D421C3C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:53:9f:60:1c:f9:1b:50:cf:df:f3:99:ac: dc:db:60:ce:bd:34:a7:bc:b4:4a:9d:41:79:1f:1d: 30:e7:07:eb:b0:e0:1e:2e:c4:0e:ef:74:f7:a1:c8: 8f:8a:b1:ea:b7:d8:d2:56:6d:cd:ff:50:ab:10:ad: 7f:35:76:5c:74:89:18:5a:a4:82:12:54:dd:95:c6: dc:ec:dd:a9:d7:4b:b9:99:64:61:39:78:0f:a2:9d: b5:7c:95:c8:4a:d5:57:e2:60:5c:67:14:a8:1b:a0: 60:5a:2e:08:87:3d:99:8b:8b:ab:b9:2d:5d:14:11: 00:96:25:4b:03:65:e6:0f:b2:9f:8a:e7:54:ee:1c: b4:eb:12:c6:72:a9:57:47:1f:ca:59:19:7e:6d:d4: 11:13:a5:cb:0b:b5:fe:d5:20:35:75:f4:79:d4:ee: d3:d8:0b:48:55:f3:98:1d:5d:40:c9:af:0f:c7:f6: a0:76:61:13:35:0f:da:20:be:cb:36:f7:34:c6:51: 4f:32:83:45:86:34:fb:34:20:a1:9a:8d:d0:eb:cb: a7:54:00:7f:f6:1d:50:93:e5:37:ed:1f:fd:e6:11: 13:0b:55:c3:11:03:83:2d:09:53:c0:1d:7c:23:37: 13:ef:5b:c1:2e:e9:90:29:fb:92:fa:62:f0:f1:d4: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6C:C8:89:F9:C4:0C:1A:09:51:D5:EC:85:D5:77:8D:42:1C:3C:8F X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0b:e4:03:d5:0c:d2:60:61:d8:85:6a:c3:5e:a4:aa:66:cd: 9a:fa:a1:14:99:11:e8:e7:f9:e3:62:fb:07:c8:5c:69:0b:d9: 7a:30:4b:cf:81:d3:75:b2:16:4a:24:ce:ff:d8:c3:0d:05:04: 76:bb:c4:9e:f4:e3:da:3d:90:de:18:80:bf:2e:7f:62:0f:c4: 89:b4:88:bf:60:49:c7:66:23:09:28:32:74:fb:b7:7a:20:c1: c2:50:ee:21:2b:9b:88:3c:17:0e:fa:2c:47:27:b5:26:53:80: 45:bd:c1:d2:15:19:58:b0:4d:9d:72:57:27:79:31:c5:5a:6a: 94:fd:32:74:f4:1c:4c:81:46:ab:fb:a6:6b:70:a3:2e:70:6c: e4:f3:61:0c:b0:69:13:92:85:50:9e:9f:7f:cd:c0:3d:b5:0f: 49:30:fc:1f:f6:97:8d:d1:30:d8:37:41:87:98:7a:06:1f:e0: dc:7a:20:07:12:eb:12:90:8f:45:6b:95:e8:ac:01:2d:45:b1: cb:3f:28:9e:0a:d6:23:6e:e2:fc:14:c0:7f:fd:a2:94:04:aa: d8:7f:6f:55:e1:57:5d:83:f6:4c:43:f1:15:9c:8e:5b:14:62: 9b:be:66:22:b0:47:e5:76:08:50:47:21:c4:38:2d:a3:4c:ce: 25:e2:7f:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewz39pKWy8XayGPkSBD03FNttYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA2MTUwNTU2MzJaFw0yNTA2MTgxNTQ0MzJaMDMxMTAvBgNV BAMTKDM3NkNDODg5RjlDNDBDMUEwOTUxRDVFQzg1RDU3NzhENDIxQzNDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo91OfYBz5G1DP3/OZrNzbYM69 NKe8tEqdQXkfHTDnB+uw4B4uxA7vdPehyI+Kseq32NJWbc3/UKsQrX81dlx0iRha pIISVN2Vxtzs3anXS7mZZGE5eA+inbV8lchK1VfiYFxnFKgboGBaLgiHPZmLi6u5 LV0UEQCWJUsDZeYPsp+K51TuHLTrEsZyqVdHH8pZGX5t1BETpcsLtf7VIDV19HnU 7tPYC0hV85gdXUDJrw/H9qB2YRM1D9ogvss29zTGUU8yg0WGNPs0IKGajdDry6dU AH/2HVCT5TftH/3mERMLVcMRA4MtCVPAHXwjNxPvW8Eu6ZAp+5L6YvDx1JbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2zIifnEDBoJUdXshdV3jUIcPI8wHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADML5APVDNJgYdiFasNepKpmzZr6oRSZEejn +eNi+wfIXGkL2XowS8+B03WyFkokzv/Yww0FBHa7xJ7049o9kN4YgL8uf2IPxIm0 iL9gScdmIwkoMnT7t3ogwcJQ7iErm4g8Fw76LEcntSZTgEW9wdIVGViwTZ1yVyd5 McVaapT9MnT0HEyBRqv7pmtwoy5wbOTzYQywaROShVCen3/NwD21D0kw/B/2l43R MNg3QYeYegYf4Nx6IAcS6xKQj0VrleisAS1Fscs/KJ4K1iNu4vwUwH/9opQEqth/ b1XhV12D9kxD8RWcjlsUYpu+ZiKwR+V2CFBHIcQ4LaNMziXifzg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:36 2025 by rpki-client