$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: P+xWbFibZtv3XtAi/FOpniWTJcmBLt0oucCZm2UGUNg= Subject key identifier: 03:75:4A:7E:03:14:6A:4E:2F:AB:7E:2E:78:D3:34:A7:D2:AD:57:3F Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 3A15AE457098B2898539BD6C69E82E661AF78FBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: B2 Signing time: Fri 13 Jun 2025 10:51:13 +0000 Manifest this update: Fri 13 Jun 2025 10:46:13 +0000 Manifest next update: Mon 16 Jun 2025 16:27:13 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 2: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: jHYnLIaqz1SqTPQp5CS8IqUeJmbN4GnFeo03/yM38q4=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 4: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 13:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:15:ae:45:70:98:b2:89:85:39:bd:6c:69:e8:2e:66:1a:f7:8f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Jun 13 10:46:13 2025 GMT Not After : Jun 16 16:27:13 2025 GMT Subject: CN=03754A7E03146A4E2FAB7E2E78D334A7D2AD573F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:3c:1b:5d:13:b9:9f:b7:46:7c:cc:ce:33: ac:4f:51:43:e2:44:ab:11:bb:f9:11:69:be:12:2d: b0:5c:cb:57:cf:42:a2:94:9f:ba:ed:b9:d2:f3:3b: cd:98:42:3e:b2:85:5a:b2:6e:d6:fd:51:34:3a:4a: 67:6c:f8:65:fa:cb:ab:fe:c4:17:a9:14:80:cc:e6: b9:53:3c:40:db:47:64:29:0d:26:9e:b7:a6:2a:b6: 07:73:6e:3a:de:7b:0f:b7:39:de:29:e6:40:d6:65: 46:b6:2b:3c:51:af:fd:e2:a8:d0:96:ef:3c:3f:76: 7e:70:3c:a8:00:fc:85:7d:0c:fd:21:76:15:b8:59: cf:b9:f2:40:2c:fe:ab:c8:d6:f8:90:4d:ff:72:53: 14:9c:53:15:e7:8a:26:8f:d7:0d:65:9c:86:fa:a9: 37:05:42:b5:1a:2d:c1:f7:af:55:66:3a:93:a1:f2: 39:bb:e5:0d:60:3e:75:db:3a:34:a0:07:7a:e3:96: a5:3c:f9:a1:98:f3:10:9e:b5:80:4a:c2:bd:f1:70: 46:74:ec:b9:23:2f:ec:b6:2c:72:8e:2f:06:77:9e: 47:7f:3e:c4:62:41:9c:de:9b:24:04:d3:9b:d6:f4: 9b:2b:5b:39:0e:8e:29:fb:c9:ae:77:c6:63:57:d7: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:75:4A:7E:03:14:6A:4E:2F:AB:7E:2E:78:D3:34:A7:D2:AD:57:3F X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ff:9b:d5:c3:58:5d:7b:77:fd:52:f8:11:81:cd:59:18:28: 20:66:3e:c7:5a:55:67:72:b7:27:7f:21:ef:df:15:ad:6c:0c: a8:e5:f3:b0:e3:fb:84:e7:7c:22:23:53:10:2b:8c:cf:11:30: 37:46:df:bf:94:7d:99:c3:33:73:d5:89:8e:03:15:9d:0b:8d: 9a:ba:6b:80:12:a3:63:c1:bd:b4:09:de:a5:6c:44:cd:55:1c: 36:eb:07:05:ab:e2:3b:2f:64:19:be:55:fd:df:e0:85:15:c4: bf:23:05:0f:5a:ac:12:4f:59:d1:35:3e:c8:be:70:71:e9:2f: 51:73:ac:c7:63:cb:70:b2:ac:c1:f3:0a:79:aa:e4:71:1d:a8: cd:b2:e2:c1:24:7f:30:de:fb:3b:2d:0d:a4:29:1e:76:78:8a: d2:56:73:17:dc:93:65:ce:d3:2a:d5:6e:49:b3:50:be:d6:bc: 68:53:77:df:97:69:d6:62:28:3d:86:51:9f:47:4a:ed:36:4b: 55:b3:de:7d:17:09:66:f3:46:9d:5f:36:15:33:81:33:d0:ae: c7:fd:32:01:24:7b:2d:05:49:a1:cb:2d:7e:5e:57:44:eb:c4: 32:7f:b4:e7:88:1d:6a:6f:0e:61:8d:b9:55:01:86:23:d9:2b: 96:15:74:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhWuRXCYsomFOb1saeguZhr3j78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA2MTMxMDQ2MTNaFw0yNTA2MTYxNjI3MTNaMDMxMTAvBgNV BAMTKDAzNzU0QTdFMDMxNDZBNEUyRkFCN0UyRTc4RDMzNEE3RDJBRDU3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHjwbXRO5n7dGfMzOM6xPUUPi RKsRu/kRab4SLbBcy1fPQqKUn7rtudLzO82YQj6yhVqybtb9UTQ6Smds+GX6y6v+ xBepFIDM5rlTPEDbR2QpDSaet6Yqtgdzbjreew+3Od4p5kDWZUa2KzxRr/3iqNCW 7zw/dn5wPKgA/IV9DP0hdhW4Wc+58kAs/qvI1viQTf9yUxScUxXniiaP1w1lnIb6 qTcFQrUaLcH3r1VmOpOh8jm75Q1gPnXbOjSgB3rjlqU8+aGY8xCetYBKwr3xcEZ0 7LkjL+y2LHKOLwZ3nkd/PsRiQZzemyQE05vW9JsrWzkOjin7ya53xmNX12N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3VKfgMUak4vq34ueNM0p9KtVz8wHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr/m9XDWF17d/1S+BGBzVkYKCBmPsdaVWdy tyd/Ie/fFa1sDKjl87Dj+4TnfCIjUxArjM8RMDdG37+UfZnDM3PViY4DFZ0LjZq6 a4ASo2PBvbQJ3qVsRM1VHDbrBwWr4jsvZBm+Vf3f4IUVxL8jBQ9arBJPWdE1Psi+ cHHpL1FzrMdjy3CyrMHzCnmq5HEdqM2y4sEkfzDe+zstDaQpHnZ4itJWcxfck2XO 0yrVbkmzUL7WvGhTd9+XadZiKD2GUZ9HSu02S1Wz3n0XCWbzRp1fNhUzgTPQrsf9 MgEkey0FSaHLLX5eV0TrxDJ/tOeIHWpvDmGNuVUBhiPZK5YVdMg= -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:36 2025 by rpki-client