$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: SqO7i/uIhjUG/eh4KJvFJjh4uds2l4FHjW0OIWnrcaY= Subject key identifier: 71:0B:1B:38:E5:65:9D:B0:CD:83:EF:BC:36:E4:88:9F:E9:61:21:64 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 230248A74F285F065CC35481ECDE3EC70330F751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 95 Signing time: Sat 14 Jun 2025 20:11:33 +0000 Manifest this update: Sat 14 Jun 2025 20:06:33 +0000 Manifest next update: Wed 18 Jun 2025 03:36:33 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: Yj0bUb62jlDDKtjxWWXUQodwQWHBknvUbPiQAd5Mo+I=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:02:48:a7:4f:28:5f:06:5c:c3:54:81:ec:de:3e:c7:03:30:f7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Jun 14 20:06:33 2025 GMT Not After : Jun 18 03:36:33 2025 GMT Subject: CN=710B1B38E5659DB0CD83EFBC36E4889FE9612164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:94:73:33:d0:05:cf:49:9b:6e:13:f3:f1: 48:f8:ff:20:b7:06:23:01:f5:7e:c8:88:99:b6:d4: 4d:8e:37:34:66:26:2b:12:56:d3:90:f3:d4:e1:9d: a8:de:ae:f0:01:82:9b:d4:81:6f:52:ea:58:06:13: 66:0c:0f:ac:6a:7e:ee:fa:09:39:7a:7b:bc:ab:81: d6:ce:f1:ca:84:37:4c:ed:34:4c:d0:3a:a2:da:9e: 55:61:ba:c2:29:a7:5f:da:eb:fb:d3:22:dd:68:f8: 0d:a8:13:97:0c:b6:d1:4d:57:46:54:91:5b:d4:6f: da:12:fa:a6:e5:9b:4d:7a:b5:45:e4:85:76:ab:eb: 32:42:85:29:5a:f6:b8:74:30:5a:e0:1b:ff:bb:d4: 1a:95:18:d7:cc:4b:c8:46:0d:b5:58:dd:8b:d4:e0: 49:c3:33:5a:10:8d:4c:c4:2b:75:dc:d2:fe:66:9a: 46:80:62:b8:ff:4c:ec:f1:43:1f:bc:14:f2:88:7d: 62:69:22:01:3f:16:9e:ba:24:df:d7:6c:61:fb:9f: 85:f6:88:1a:86:0e:a4:c5:32:e6:91:cd:5d:fe:6c: 20:9f:01:2c:51:5a:1f:d6:8e:c6:4b:96:64:12:ca: 12:fc:13:7d:41:5b:7b:d3:01:08:eb:ca:3e:5b:ce: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:1B:38:E5:65:9D:B0:CD:83:EF:BC:36:E4:88:9F:E9:61:21:64 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a1:ca:fb:bf:37:2f:a4:5a:f0:10:a9:40:80:b8:c5:52:e4: c9:53:61:df:78:74:48:a3:65:88:cc:96:91:d4:cf:20:d6:bb: a5:b5:1b:0e:e7:bc:3f:80:b0:94:54:79:a0:76:4c:fb:9c:35: be:e6:6d:41:54:0c:46:3d:4f:74:a3:12:6d:cd:fa:d8:dc:b7: 59:f6:e0:fc:2d:67:cc:73:b5:a3:2b:fd:76:5d:f3:80:17:68: 81:86:04:45:5b:e6:b9:0a:47:9c:7f:1d:89:11:3e:10:36:86: 02:18:23:c9:aa:43:d8:9c:b4:c4:ba:16:15:fa:0a:91:8d:80: 13:d9:26:be:59:79:60:ee:55:4f:7e:67:2e:e5:17:af:37:ba: 47:75:11:9c:f7:d0:33:bc:6f:43:fa:1b:46:cb:91:4c:a6:0b: 7b:9e:94:7b:a4:ac:e6:4f:dc:a4:67:9a:b2:50:df:98:92:9f: c3:e5:b0:1c:84:3d:66:83:d7:0f:f9:96:dc:65:78:a7:a8:8e: b6:fd:7b:60:14:1b:5b:ca:33:02:96:05:69:f6:bb:af:c1:7d: 28:eb:03:a1:ac:70:c1:28:22:8a:34:00:8c:cc:da:4c:3f:6b: 83:62:85:3e:5e:0e:b2:59:2f:78:80:15:61:52:b4:cb:89:94: 33:6d:28:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwJIp08oXwZcw1SB7N4+xwMw91EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA2MTQyMDA2MzNaFw0yNTA2MTgwMzM2MzNaMDMxMTAvBgNV BAMTKDcxMEIxQjM4RTU2NTlEQjBDRDgzRUZCQzM2RTQ4ODlGRTk2MTIxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxJRzM9AFz0mbbhPz8Uj4/yC3 BiMB9X7IiJm21E2ONzRmJisSVtOQ89ThnajervABgpvUgW9S6lgGE2YMD6xqfu76 CTl6e7yrgdbO8cqEN0ztNEzQOqLanlVhusIpp1/a6/vTIt1o+A2oE5cMttFNV0ZU kVvUb9oS+qblm016tUXkhXar6zJChSla9rh0MFrgG/+71BqVGNfMS8hGDbVY3YvU 4EnDM1oQjUzEK3Xc0v5mmkaAYrj/TOzxQx+8FPKIfWJpIgE/Fp66JN/XbGH7n4X2 iBqGDqTFMuaRzV3+bCCfASxRWh/WjsZLlmQSyhL8E31BW3vTAQjryj5bzuVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQsbOOVlnbDNg++8NuSIn+lhIWQwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuhyvu/Ny+kWvAQqUCAuMVS5MlTYd94dEij ZYjMlpHUzyDWu6W1Gw7nvD+AsJRUeaB2TPucNb7mbUFUDEY9T3SjEm3N+tjct1n2 4PwtZ8xztaMr/XZd84AXaIGGBEVb5rkKR5x/HYkRPhA2hgIYI8mqQ9ictMS6FhX6 CpGNgBPZJr5ZeWDuVU9+Zy7lF683ukd1EZz30DO8b0P6G0bLkUymC3uelHukrOZP 3KRnmrJQ35iSn8PlsByEPWaD1w/5ltxleKeojrb9e2AUG1vKMwKWBWn2u6/BfSjr A6GscMEoIoo0AIzM2kw/a4NihT5eDrJZL3iAFWFStMuJlDNtKBs= -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:48 2025 by rpki-client