$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: hNCMw7N7WaTJRn6JXHX1jh+6QMnFTj1N8BBOfNjXxp0= Subject key identifier: 4A:63:5F:35:D1:D6:CD:CC:17:1A:52:FA:72:9D:9C:CA:99:B8:44:15 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 316D6C5E8E05C8111EF7ACCA5829B29C33631DB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 62 Signing time: Tue 17 Jun 2025 19:30:47 +0000 Manifest this update: Tue 17 Jun 2025 19:25:47 +0000 Manifest next update: Fri 20 Jun 2025 22:10:47 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: 2UxdgkeWU4Sci63ANqhciftg6nE/Q/JKk5DBooWNywI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6d:6c:5e:8e:05:c8:11:1e:f7:ac:ca:58:29:b2:9c:33:63:1d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Jun 17 19:25:47 2025 GMT Not After : Jun 20 22:10:47 2025 GMT Subject: CN=4A635F35D1D6CDCC171A52FA729D9CCA99B84415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:19:9a:09:30:65:91:27:40:d0:9c:49:a0: 1e:bf:9c:a9:1c:7f:27:e2:62:3d:73:c0:88:8c:d0: 0c:29:b7:c7:db:17:1f:03:e3:6c:d8:aa:0f:53:59: c1:46:0d:14:1b:d7:29:90:ea:04:9b:a9:b5:a2:ab: db:86:fc:62:50:0d:75:22:26:c4:e5:35:b3:a5:e8: 6a:cf:d6:e9:be:b8:7c:2a:7d:7d:ff:0b:cc:60:82: cd:15:64:71:a9:2c:1f:0d:00:08:ae:02:34:bc:d5: 26:a9:38:65:17:ed:b2:e7:6d:d7:52:38:2a:e3:37: f1:20:f9:1a:5d:d0:e9:76:47:78:1a:13:85:e1:63: 54:c0:1d:61:70:14:48:55:0f:1d:8d:0d:f9:8b:bf: e7:f4:d2:8c:ad:7f:cc:53:90:3a:b2:d1:7a:ac:86: fb:fb:38:a2:5e:02:b6:37:67:cb:ea:8d:3b:8f:af: 52:97:9d:fb:7f:b1:6f:93:97:90:7e:74:b6:f6:2d: 57:68:c0:74:0c:94:4d:c2:be:76:00:41:6b:59:a1: 81:69:e5:ad:00:43:a7:fd:b8:60:59:5e:f2:80:44: 7a:11:49:a5:bf:99:81:e7:f3:ce:fc:1c:eb:21:2d: 54:c7:a8:a4:5d:87:a8:3f:bd:97:6d:c9:2e:67:5a: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:63:5F:35:D1:D6:CD:CC:17:1A:52:FA:72:9D:9C:CA:99:B8:44:15 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:74:c3:37:cd:1e:c9:81:16:ab:9b:56:1f:18:96:de:92:bd: 50:17:07:f8:e2:21:94:cc:d2:24:1f:de:f0:3b:36:e1:4f:72: 01:57:f0:fc:7f:1f:c0:4e:ba:0b:5a:ea:e8:b2:a8:35:2c:26: 14:d1:bc:5f:5c:30:94:55:27:cc:97:2c:97:fe:3f:7e:0c:18: 79:e1:ec:58:c0:38:2d:e0:ce:67:ca:d6:a9:93:c8:0b:7d:40: 1f:68:7c:9d:f1:23:46:eb:60:f9:84:ca:45:4f:3c:46:94:96: 1e:18:39:d2:2e:b3:b5:8f:be:47:ac:c3:22:8e:e2:07:4c:58: 05:2c:d3:60:1c:aa:b2:c9:85:73:74:02:b5:1e:45:f9:12:f3: e2:76:6d:7e:aa:b9:96:89:fc:09:14:32:f1:43:00:1d:63:c3: db:7a:36:e3:e4:ae:ea:49:1a:b0:3f:c8:75:a6:09:82:05:cc: 3d:24:be:1c:c3:6b:5c:82:78:ff:1e:86:a9:d2:59:c8:7e:b7: f8:1a:07:a9:09:63:a3:da:39:11:f7:f7:31:e5:45:15:33:43: c4:ec:54:8a:78:02:18:d6:2f:5b:f9:c0:82:91:bc:f8:cc:45: 3b:c6:3c:ad:1f:72:15:71:8e:57:8c:cd:a6:50:27:63:97:a6: 12:9e:d0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMW1sXo4FyBEe96zKWCmynDNjHbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA2MTcxOTI1NDdaFw0yNTA2MjAyMjEwNDdaMDMxMTAvBgNV BAMTKDRBNjM1RjM1RDFENkNEQ0MxNzFBNTJGQTcyOUQ5Q0NBOTlCODQ0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCRmaCTBlkSdA0JxJoB6/nKkc fyfiYj1zwIiM0Awpt8fbFx8D42zYqg9TWcFGDRQb1ymQ6gSbqbWiq9uG/GJQDXUi JsTlNbOl6GrP1um+uHwqfX3/C8xggs0VZHGpLB8NAAiuAjS81SapOGUX7bLnbddS OCrjN/Eg+Rpd0Ol2R3gaE4XhY1TAHWFwFEhVDx2NDfmLv+f00oytf8xTkDqy0Xqs hvv7OKJeArY3Z8vqjTuPr1KXnft/sW+Tl5B+dLb2LVdowHQMlE3CvnYAQWtZoYFp 5a0AQ6f9uGBZXvKARHoRSaW/mYHn8878HOshLVTHqKRdh6g/vZdtyS5nWoOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmNfNdHWzcwXGlL6cp2cypm4RBUwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ0wzfNHsmBFqubVh8Ylt6SvVAXB/jiIZTM 0iQf3vA7NuFPcgFX8Px/H8BOugta6uiyqDUsJhTRvF9cMJRVJ8yXLJf+P34MGHnh 7FjAOC3gzmfK1qmTyAt9QB9ofJ3xI0brYPmEykVPPEaUlh4YOdIus7WPvkeswyKO 4gdMWAUs02AcqrLJhXN0ArUeRfkS8+J2bX6quZaJ/AkUMvFDAB1jw9t6NuPkrupJ GrA/yHWmCYIFzD0kvhzDa1yCeP8ehqnSWch+t/gaB6kJY6PaORH39zHlRRUzQ8Ts VIp4AhjWL1v5wIKRvPjMRTvGPK0fchVxjleMzaZQJ2OXphKe0Mg= -----END CERTIFICATE-----Generated at Wed Jun 18 00:37:57 2025 by rpki-client