$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: Ka4rgAeA/tnWg1mNsVKkFbq4s2N/uTY01eQn5Zwq+1o= Subject key identifier: AC:57:2B:4A:A5:27:14:77:AA:7E:92:B4:4A:87:01:06:4F:53:08:EE Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 6178EC4C10964CDAAB01A5FB488F2D2B7A61106C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 04F4 Signing time: Sat 14 Jun 2025 16:30:46 +0000 Manifest this update: Sat 14 Jun 2025 16:25:46 +0000 Manifest next update: Tue 17 Jun 2025 19:55:46 +0000 Files and hashes: 1: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 2: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) 3: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 4: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) 5: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: kIv316S3m+q8vIceR+7SO9utK4LTUIiuxpguKKrUCPY=) 6: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 7: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) 8: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:78:ec:4c:10:96:4c:da:ab:01:a5:fb:48:8f:2d:2b:7a:61:10:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Jun 14 16:25:46 2025 GMT Not After : Jun 17 19:55:46 2025 GMT Subject: CN=AC572B4AA5271477AA7E92B44A8701064F5308EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:4d:3d:e7:d7:5e:da:dd:73:7b:f4:f0:59: 79:df:2a:b6:9b:b6:02:18:61:21:74:0c:64:fa:93: 00:24:d4:70:56:f6:c4:72:3c:d0:e4:a9:80:13:b7: 98:fd:a2:23:b4:34:a9:2c:5b:cb:fc:75:53:f9:5d: 74:86:e4:7b:4a:a0:18:1b:55:6b:53:81:25:b0:0c: e9:e0:bc:2d:91:ca:3c:62:c2:6b:e6:2b:ab:d6:8d: f9:b6:53:89:8c:8c:b7:c3:6a:43:32:40:7c:e8:88: 10:6a:f1:ef:f8:26:39:02:2d:8b:94:a2:c8:6f:a0: e2:7b:24:fc:6d:5c:c2:84:be:03:6f:d2:cc:4b:76: 78:34:7b:65:9b:4f:80:49:04:39:6c:4b:e4:d5:6b: e9:03:bb:39:c4:5f:1e:01:09:7d:d5:34:c9:da:3c: a6:c8:25:a6:87:b8:cd:b3:7e:2c:91:e5:c9:03:57: 17:b9:09:85:00:96:bc:17:0d:33:2d:28:12:fb:d0: f9:51:8b:91:14:6b:00:04:6a:e1:63:57:38:92:b1: 86:24:b1:40:38:8b:06:cd:bc:dd:e6:60:b3:22:2a: fa:8b:10:df:7c:60:dd:80:73:2c:d3:5e:15:31:90: f5:0d:1e:39:f9:b2:dc:8d:39:49:a1:52:5a:1e:e0: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:2B:4A:A5:27:14:77:AA:7E:92:B4:4A:87:01:06:4F:53:08:EE X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:30:cb:1e:ed:07:b9:64:40:ef:cf:55:b4:71:e1:14:d2:1e: 3e:10:e6:07:c6:cf:23:e4:3c:86:37:12:7b:7f:66:a2:f7:7e: af:1a:1f:ed:3c:8f:1b:8d:4e:83:40:0d:c4:b3:1c:a8:9d:7b: 19:10:87:e6:66:17:11:68:0f:11:48:64:d8:85:7d:b3:1d:d3: a5:15:05:98:c1:13:29:8b:c8:95:71:06:9b:86:47:c3:7e:df: 8c:76:d7:bc:a9:47:da:2e:9c:62:ed:50:b5:b6:33:93:87:30: da:cf:cb:fc:67:81:0b:5d:2c:72:99:de:1f:70:a1:0a:f2:c6: 3d:db:7f:b9:1c:6a:2a:85:b3:bb:55:35:2b:10:13:2b:02:b7: fa:98:c9:74:6e:81:a6:2a:37:7b:5a:3f:77:e6:7c:e1:18:41: 57:a3:cc:3c:78:6d:71:ad:84:33:53:46:36:0d:74:83:35:f1: 2a:3b:59:4f:de:fc:2e:71:e5:c8:2a:a8:a9:30:ee:a7:67:77: 0a:df:09:03:8f:cd:31:3a:6d:d7:ef:17:07:02:a4:6e:15:33: d9:58:36:f0:a4:28:b8:96:9d:24:3e:88:ba:25:39:f0:f8:d1: ef:c5:59:08:0b:b5:a7:a2:b9:20:ba:49:1f:e9:bf:73:5a:29: c2:f0:9e:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXjsTBCWTNqrAaX7SI8tK3phEGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA2MTQxNjI1NDZaFw0yNTA2MTcxOTU1NDZaMDMxMTAvBgNV BAMTKEFDNTcyQjRBQTUyNzE0NzdBQTdFOTJCNDRBODcwMTA2NEY1MzA4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TE0959de2t1ze/TwWXnfKrab tgIYYSF0DGT6kwAk1HBW9sRyPNDkqYATt5j9oiO0NKksW8v8dVP5XXSG5HtKoBgb VWtTgSWwDOngvC2RyjxiwmvmK6vWjfm2U4mMjLfDakMyQHzoiBBq8e/4JjkCLYuU oshvoOJ7JPxtXMKEvgNv0sxLdng0e2WbT4BJBDlsS+TVa+kDuznEXx4BCX3VNMna PKbIJaaHuM2zfiyR5ckDVxe5CYUAlrwXDTMtKBL70PlRi5EUawAEauFjVziSsYYk sUA4iwbNvN3mYLMiKvqLEN98YN2AcyzTXhUxkPUNHjn5styNOUmhUloe4FgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFcrSqUnFHeqfpK0SocBBk9TCO4wHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8wyx7tB7lkQO/PVbRx4RTSHj4Q5gfGzyPk PIY3Ent/ZqL3fq8aH+08jxuNToNADcSzHKidexkQh+ZmFxFoDxFIZNiFfbMd06UV BZjBEymLyJVxBpuGR8N+34x217ypR9ounGLtULW2M5OHMNrPy/xngQtdLHKZ3h9w oQryxj3bf7kcaiqFs7tVNSsQEysCt/qYyXRugaYqN3taP3fmfOEYQVejzDx4bXGt hDNTRjYNdIM18So7WU/e/C5x5cgqqKkw7qdndwrfCQOPzTE6bdfvFwcCpG4VM9lY NvCkKLiWnSQ+iLolOfD40e/FWQgLtaeiuSC6SR/pv3NaKcLwniw= -----END CERTIFICATE-----Generated at Mon Jun 16 04:33:15 2025 by rpki-client