$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json) Hash identifier: YSPo5Wey16cZmCNeCSRm769MDvwv//vwLGpDENgFP4M= Subject key identifier: F9:EF:E1:9C:76:7C:C5:79:5C:89:93:2A:C8:52:31:FC:CB:21:A4:9C Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 237E9F491F41ED099DF2AAE3CD35DBEBE2FBA48B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft Manifest number: 8D Signing time: Mon 16 Jun 2025 06:01:18 +0000 Manifest this update: Mon 16 Jun 2025 05:56:18 +0000 Manifest next update: Thu 19 Jun 2025 10:21:18 +0000 Files and hashes: 1: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2T3B+WlxteLj6OogHAOLwZBUdlPJwilxf6sGLSkZU2M=) 2: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: zlGBVtws17xLtPu/gJJn3oby1z6d0UvnxkTf/gzYOJ4=) 3: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: BmedSLLZ/Ar+kKVmJ8+lQwWqOCXWS7bTElyxdgv4frU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7e:9f:49:1f:41:ed:09:9d:f2:aa:e3:cd:35:db:eb:e2:fb:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Jun 16 05:56:18 2025 GMT Not After : Jun 19 10:21:18 2025 GMT Subject: CN=F9EFE19C767CC5795C89932AC85231FCCB21A49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:72:40:e7:3f:1f:7c:8c:f6:be:3f:84:b0: d7:97:b0:41:4b:ee:9f:1d:23:56:e8:a3:cc:be:4c: 02:67:9d:6f:5e:f1:c9:19:9b:b3:c7:c6:f4:d9:54: 7c:14:6d:92:21:bc:cd:d3:b5:44:a5:55:0e:d0:2b: c6:bf:80:6f:68:66:cf:78:b7:29:79:f9:2e:56:c4: 49:12:43:2e:31:19:7a:b2:a4:d6:c8:42:36:31:4b: 4c:9f:ff:a8:20:6b:57:d7:00:b5:c1:63:04:f1:47: 2d:a7:a1:ad:bd:49:a6:69:d8:56:b8:25:20:10:6d: 08:1e:86:45:ab:55:41:b6:49:27:f0:d4:64:fc:3e: 48:1b:c8:ca:e1:c7:33:73:a7:71:e4:99:51:57:e9: 5e:30:1c:28:12:96:6e:e5:fa:62:25:f8:0f:8a:23: b0:2b:75:19:43:55:a7:42:09:01:13:49:04:f4:9b: 02:73:b0:d3:5e:ac:be:f5:0e:cc:36:93:dd:7d:51: bf:43:38:2d:dc:fa:58:1d:ae:ab:da:c6:ff:af:c2: 75:0a:36:c5:97:ab:a1:18:fa:9a:0d:6d:eb:ae:e9: ec:48:b6:96:07:19:82:c0:31:06:32:35:a6:f2:df: bd:b9:5e:83:5f:25:df:33:44:43:67:2b:99:a2:5a: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:E1:9C:76:7C:C5:79:5C:89:93:2A:C8:52:31:FC:CB:21:A4:9C X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f7:08:47:f5:3c:35:4a:ec:65:b4:4b:f9:6a:d0:8d:51:97: ba:9a:51:46:ed:f2:fa:26:e3:34:d1:0e:80:5c:c7:0d:87:f4: c0:a0:2d:8d:4b:21:e3:db:5b:b1:6e:54:31:42:dc:ce:77:c3: ec:06:46:06:e3:5e:b6:79:09:e6:fb:c5:e5:7f:e6:60:74:c6: 85:b5:73:c1:0d:ed:4e:b9:e7:1c:c3:2c:b2:db:b7:3c:36:1a: 4a:e5:bf:11:c6:fe:75:4d:62:0f:e6:6c:7d:e7:a2:dd:22:6e: 54:1a:41:01:a9:c7:04:2d:0f:a8:91:a7:00:a4:b1:66:66:73: 77:61:d3:20:28:94:84:e6:90:e5:90:27:c0:b6:5c:30:0d:48: 65:98:0b:53:e9:00:08:39:90:bf:21:35:23:d0:d3:79:e9:bc: a4:58:f0:03:07:29:c2:3a:0e:35:8c:bc:3f:56:97:63:b7:5c: 62:46:c6:4a:4e:ed:e6:19:b1:82:81:e5:8b:a3:c3:ae:07:5b: e1:10:e2:5f:17:2a:bf:31:e4:af:13:2e:5b:f8:aa:e5:78:9e: 53:ff:2e:5c:02:10:4c:de:83:36:67:37:2c:0a:63:94:62:a3: 94:a5:a8:1c:ba:41:7d:bc:d9:53:54:36:2b:fa:98:ab:6e:6b: 86:b5:83:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI36fSR9B7Qmd8qrjzTXb6+L7pIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTA2MTYwNTU2MThaFw0yNTA2MTkxMDIxMThaMDMxMTAvBgNV BAMTKEY5RUZFMTlDNzY3Q0M1Nzk1Qzg5OTMyQUM4NTIzMUZDQ0IyMUE0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJHJA5z8ffIz2vj+EsNeXsEFL 7p8dI1boo8y+TAJnnW9e8ckZm7PHxvTZVHwUbZIhvM3TtUSlVQ7QK8a/gG9oZs94 tyl5+S5WxEkSQy4xGXqypNbIQjYxS0yf/6gga1fXALXBYwTxRy2noa29SaZp2Fa4 JSAQbQgehkWrVUG2SSfw1GT8PkgbyMrhxzNzp3HkmVFX6V4wHCgSlm7l+mIl+A+K I7ArdRlDVadCCQETSQT0mwJzsNNerL71Dsw2k919Ub9DOC3c+lgdrqvaxv+vwnUK NsWXq6EY+poNbeuu6exItpYHGYLAMQYyNaby3725XoNfJd8zRENnK5miWi7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+e/hnHZ8xXlciZMqyFIx/MshpJwwHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMy RjYzMUM4RDc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf3CEf1PDVK7GW0S/lq0I1Rl7qaUUbt8vom 4zTRDoBcxw2H9MCgLY1LIePbW7FuVDFC3M53w+wGRgbjXrZ5Ceb7xeV/5mB0xoW1 c8EN7U655xzDLLLbtzw2GkrlvxHG/nVNYg/mbH3not0iblQaQQGpxwQtD6iRpwCk sWZmc3dh0yAolITmkOWQJ8C2XDANSGWYC1PpAAg5kL8hNSPQ03npvKRY8AMHKcI6 DjWMvD9Wl2O3XGJGxkpO7eYZsYKB5Yujw64HW+EQ4l8XKr8x5K8TLlv4quV4nlP/ LlwCEEzegzZnNywKY5Rio5SlqBy6QX282VNUNiv6mKtua4a1g/A= -----END CERTIFICATE-----Generated at Tue Jun 17 02:11:32 2025 by rpki-client