$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: r2b4BHCLgWcDEXIGbiwiez7KRUgGJZHeo3JdlKg+Gl0= Subject key identifier: 2C:C3:89:BC:7A:70:68:20:40:2A:88:1E:BF:C5:31:35:2F:20:02:7D Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 405967D6746817D675F639572FE8335CE2605131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 9D Signing time: Mon 16 Jun 2025 03:11:36 +0000 Manifest this update: Mon 16 Jun 2025 03:06:36 +0000 Manifest next update: Thu 19 Jun 2025 12:05:36 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: AXtjFGkR11f2LlT3CGhc9t9BW2epRB9NdyT62Nsddsc=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:59:67:d6:74:68:17:d6:75:f6:39:57:2f:e8:33:5c:e2:60:51:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Jun 16 03:06:36 2025 GMT Not After : Jun 19 12:05:36 2025 GMT Subject: CN=2CC389BC7A706820402A881EBFC531352F20027D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:2a:9a:7a:80:ba:30:1d:a1:f2:4c:54:4c: 90:21:11:83:1d:7f:eb:d9:46:37:75:7f:c3:24:29: 13:ca:88:3b:2a:d7:65:f5:b4:26:4d:71:d6:8b:41: ac:5b:f4:cc:07:a2:9e:68:08:62:28:d5:fb:c5:8d: ad:e7:3d:3e:0c:b0:4d:24:44:23:be:b4:7e:08:34: d2:e2:bb:95:57:46:2c:ad:12:e9:40:da:b3:ab:49: b5:3f:c9:18:9d:a3:72:23:3e:8d:6b:13:a1:bb:0d: fe:5a:ea:8b:65:56:12:f8:2b:f4:46:7e:18:fd:85: 9c:b3:4a:25:28:b7:3b:ee:1d:70:a9:a2:c7:ad:dd: da:ce:e9:c3:b0:b8:65:b4:3a:8c:3d:a1:56:bf:12: bb:93:4d:10:a0:5b:ee:2b:3e:c3:4b:a2:de:b8:30: 1f:45:91:1b:db:57:2f:67:80:04:ad:7c:08:d3:ce: 3d:61:22:e6:4a:ea:95:76:d8:7f:4a:18:74:ad:f4: 93:c5:f9:de:8d:59:71:8e:29:05:fd:21:7e:7b:56: 0f:bf:15:09:ee:a4:ca:89:38:6b:c1:53:7f:e2:ac: 81:97:b5:b4:65:fe:4e:e7:08:98:15:4a:05:5d:2c: 0f:0c:f0:cb:2e:0d:3c:22:6a:47:43:65:5a:99:e5: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:89:BC:7A:70:68:20:40:2A:88:1E:BF:C5:31:35:2F:20:02:7D X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:37:68:d5:b2:c1:84:b2:b7:b4:50:a7:64:4b:e9:b4:c2:a2: 26:0a:9a:a2:08:f4:16:ce:f5:be:ef:b2:39:27:f5:f0:5f:ee: 01:41:cd:f9:43:c0:d4:fe:b0:18:04:c7:de:99:d5:c0:25:27: 84:a1:ff:b3:0b:18:1e:ec:09:28:80:81:88:17:20:66:d7:fc: 7b:d1:3a:1d:18:d0:d4:bd:36:a8:e8:5b:7d:97:dc:74:99:bd: a3:e7:18:a3:95:ef:b1:57:d1:3d:3b:12:3f:05:5b:17:5d:45: f4:dc:ff:14:04:53:e1:1f:16:4d:1c:67:ea:cf:f2:ef:58:ea: 67:1d:c4:57:20:13:4b:bc:c1:c7:5f:6b:84:41:94:cf:b8:d0: d3:cc:83:84:4e:35:b9:ba:9b:2c:cb:1f:72:74:f0:39:74:12: 56:94:91:4f:65:25:c4:38:fe:89:45:ff:79:ad:d5:82:47:8b: bd:41:af:12:21:fb:57:b1:e2:e5:da:5e:78:c7:8e:97:0e:9a: ea:a4:3d:13:e1:75:33:66:31:8a:36:5b:e4:24:d2:e7:e8:c9: 35:73:56:ac:de:9d:f6:8c:85:49:39:51:4a:c8:7d:75:d9:ce: 21:c7:d3:4c:bb:70:0d:ee:0b:a3:82:9a:a2:17:74:01:ff:98: c0:0f:e9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFln1nRoF9Z19jlXL+gzXOJgUTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA2MTYwMzA2MzZaFw0yNTA2MTkxMjA1MzZaMDMxMTAvBgNV BAMTKDJDQzM4OUJDN0E3MDY4MjA0MDJBODgxRUJGQzUzMTM1MkYyMDAyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANyqaeoC6MB2h8kxUTJAhEYMd f+vZRjd1f8MkKRPKiDsq12X1tCZNcdaLQaxb9MwHop5oCGIo1fvFja3nPT4MsE0k RCO+tH4INNLiu5VXRiytEulA2rOrSbU/yRido3IjPo1rE6G7Df5a6otlVhL4K/RG fhj9hZyzSiUotzvuHXCposet3drO6cOwuGW0Oow9oVa/EruTTRCgW+4rPsNLot64 MB9FkRvbVy9ngAStfAjTzj1hIuZK6pV22H9KGHSt9JPF+d6NWXGOKQX9IX57Vg+/ FQnupMqJOGvBU3/irIGXtbRl/k7nCJgVSgVdLA8M8MsuDTwiakdDZVqZ5ZWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMOJvHpwaCBAKogev8UxNS8gAn0wHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc3aNWywYSyt7RQp2RL6bTCoiYKmqII9BbO 9b7vsjkn9fBf7gFBzflDwNT+sBgEx96Z1cAlJ4Sh/7MLGB7sCSiAgYgXIGbX/HvR Oh0Y0NS9NqjoW32X3HSZvaPnGKOV77FX0T07Ej8FWxddRfTc/xQEU+EfFk0cZ+rP 8u9Y6mcdxFcgE0u8wcdfa4RBlM+40NPMg4RONbm6myzLH3J08Dl0ElaUkU9lJcQ4 /olF/3mt1YJHi71BrxIh+1ex4uXaXnjHjpcOmuqkPRPhdTNmMYo2W+Qk0ufoyTVz VqzenfaMhUk5UUrIfXXZziHH00y7cA3uC6OCmqIXdAH/mMAP6W8= -----END CERTIFICATE-----Generated at Mon Jun 16 22:16:58 2025 by rpki-client