$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: M691BEZ5icHe7p+I6WHBg6d/Vr7Fsggnd/WOWTpjP1o= Subject key identifier: 04:61:56:32:F1:FD:3D:09:14:20:F2:6D:FB:6E:9C:33:56:9D:00:2E Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 6B155297CFA49B2693595E691C6E09070E09B773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 01EC Signing time: Sat 14 Jun 2025 06:30:00 +0000 Manifest this update: Sat 14 Jun 2025 06:25:00 +0000 Manifest next update: Tue 17 Jun 2025 12:30:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: 05AdELcFvSZLZddC3wQdEtxRYt5FEsXAlss4oIg/hvo=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:15:52:97:cf:a4:9b:26:93:59:5e:69:1c:6e:09:07:0e:09:b7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Jun 14 06:25:00 2025 GMT Not After : Jun 17 12:30:00 2025 GMT Subject: CN=04615632F1FD3D091420F26DFB6E9C33569D002E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:7e:5a:aa:9d:4e:e6:0c:fa:df:4f:90:fc: 93:c8:18:39:e4:5c:39:d3:c6:69:f8:c7:c0:cf:c6: 3a:b7:6f:c4:78:28:b1:45:ea:dd:b7:21:97:bc:00: 20:3c:63:1f:bd:c6:2d:8f:c2:98:c9:b0:58:aa:c8: b6:d8:ee:01:5f:e3:80:21:23:80:78:73:92:76:99: 44:16:08:31:99:fc:9f:3c:d0:66:24:88:0b:04:45: d3:3b:82:90:d7:d6:a2:cf:fc:ea:21:9b:82:21:6b: c6:d2:c9:64:3c:79:50:8c:09:72:43:f0:56:13:06: fc:16:b6:3a:ee:5b:7b:0a:9d:25:26:80:56:94:34: 25:6b:b6:ea:24:4e:59:e1:5b:46:b5:fc:53:8c:26: 22:bc:44:2c:ee:d2:af:1e:30:42:8f:da:7b:ee:ef: 4f:bb:2c:7f:67:46:7e:a3:04:d4:d8:88:d2:12:e2: cc:5b:3c:de:b1:68:2b:59:3d:c5:fd:75:80:17:57: e6:31:78:1d:ef:b1:62:49:72:9b:7c:17:51:75:79: b8:c0:62:d8:3b:67:6b:8d:13:c7:c8:cf:de:f4:6d: ea:08:68:99:10:9c:18:19:63:f0:fa:0e:19:c1:c1: 21:4e:f6:f8:88:32:98:20:95:86:61:c5:f1:53:4d: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:61:56:32:F1:FD:3D:09:14:20:F2:6D:FB:6E:9C:33:56:9D:00:2E X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:84:8c:c9:91:a8:16:48:02:f7:a3:03:d1:bf:cd:1c:12:83: 45:36:2b:a3:62:45:73:ae:8c:7d:44:d0:4e:bc:b0:b9:e6:25: 33:0e:b4:e0:b7:7f:2e:1a:e8:b3:6a:16:6d:3a:ca:55:cd:ff: a7:bd:9f:8b:17:27:ac:06:a3:b3:d3:03:29:c4:96:de:69:64: bb:b8:5b:69:48:57:13:79:16:55:58:87:d5:7e:20:c8:39:82: df:b7:57:6c:39:0c:7b:c0:13:2d:68:1a:82:4e:83:93:dd:e0: 34:b1:04:28:c3:57:c3:1e:45:69:a7:e4:ca:02:17:cc:2b:94: 18:87:cd:56:79:3d:ba:5c:8f:fd:b4:fe:72:69:b4:11:d3:7a: 58:9c:65:87:a8:1c:07:b1:2c:f4:db:fe:09:be:62:e6:5b:08: 8c:1d:27:31:83:83:8a:49:68:06:6e:7e:91:3f:7a:a7:d4:0f: 81:3c:a0:82:7e:4e:ee:43:0d:68:74:74:3d:00:52:9b:1f:df: 1a:75:2a:70:cb:f0:aa:e1:52:0b:b9:5c:95:0b:74:e7:2c:5c: 34:09:c6:25:81:54:fd:20:49:23:67:18:fa:27:23:c1:7a:f6: 1d:60:04:e2:45:f4:84:46:fa:70:0c:a9:de:c7:ba:bc:c2:7a: 26:a7:0b:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxVSl8+kmyaTWV5pHG4JBw4Jt3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA2MTQwNjI1MDBaFw0yNTA2MTcxMjMwMDBaMDMxMTAvBgNV BAMTKDA0NjE1NjMyRjFGRDNEMDkxNDIwRjI2REZCNkU5QzMzNTY5RDAwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsH5aqp1O5gz630+Q/JPIGDnk XDnTxmn4x8DPxjq3b8R4KLFF6t23IZe8ACA8Yx+9xi2PwpjJsFiqyLbY7gFf44Ah I4B4c5J2mUQWCDGZ/J880GYkiAsERdM7gpDX1qLP/Oohm4Iha8bSyWQ8eVCMCXJD 8FYTBvwWtjruW3sKnSUmgFaUNCVrtuokTlnhW0a1/FOMJiK8RCzu0q8eMEKP2nvu 70+7LH9nRn6jBNTYiNIS4sxbPN6xaCtZPcX9dYAXV+YxeB3vsWJJcpt8F1F1ebjA Ytg7Z2uNE8fIz970beoIaJkQnBgZY/D6DhnBwSFO9viIMpgglYZhxfFTTWWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGFWMvH9PQkUIPJt+26cM1adAC4wHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuEjMmRqBZIAvejA9G/zRwSg0U2K6NiRXOu jH1E0E68sLnmJTMOtOC3fy4a6LNqFm06ylXN/6e9n4sXJ6wGo7PTAynElt5pZLu4 W2lIVxN5FlVYh9V+IMg5gt+3V2w5DHvAEy1oGoJOg5Pd4DSxBCjDV8MeRWmn5MoC F8wrlBiHzVZ5Pbpcj/20/nJptBHTelicZYeoHAexLPTb/gm+YuZbCIwdJzGDg4pJ aAZufpE/eqfUD4E8oIJ+Tu5DDWh0dD0AUpsf3xp1KnDL8KrhUgu5XJULdOcsXDQJ xiWBVP0gSSNnGPonI8F69h1gBOJF9IRG+nAMqd7HurzCeianC9E= -----END CERTIFICATE-----Generated at Mon Jun 16 00:38:49 2025 by rpki-client