$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json) Hash identifier: Z65ANM3vakTjh4r+bcaMlGbPx6y5zdm81NjdS5joyZY= Subject key identifier: D6:BC:C5:18:E3:09:92:59:6E:48:38:11:F3:E5:C3:40:50:1C:CC:8D Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 46632B7D88404C39A1939562E80AB1C90AD48783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft Manifest number: 030E Signing time: Sat 14 Jun 2025 09:30:11 +0000 Manifest this update: Sat 14 Jun 2025 09:25:11 +0000 Manifest next update: Sun 15 Jun 2025 12:45:11 +0000 Files and hashes: 1: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: FfYGvZr4SFWPjlAzX82KpSKmBRhTz7G//KPcNec2hhc=) 2: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: 9o9sYCBvv89cZi/setzqWtCpYi4p2zeAk4HPlkj79To=) 3: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: ulx6RKWeZv7oKnpaNFV95Hac18fP+TNAepjWakUMmA0=) 4: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: pgeYu3iShqQKvlIx2f1qXuAoowtyTG7BHfXN/foqY2A=) 5: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: 55PDBfiNO7785lQ74TpDgI+R/EhhJs+Qx7PPaQwuhVc=) 6: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: 03J/danHrRrUf5+1VD3u6MMOJbhoX9hiSFBAhf9ApE0=) 7: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: uEYjBirJT+i0hlQMTypSSmmJ9f6MpXLy/c4beoodP6A=) 8: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: 4z11sQdUJz1Zykfa5O/UqcXdJZq+xLbs1EF1QSPhnXw=) 9: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: xh8Sz+UX718ObRCWgtCtKu1Ea/C7rUKcDeEuMvnakOU=) 10: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: 2OG+ivW0Dot2bVlS7Bbv5i/EHs9WX4KjYPuwozFff+c=) 11: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: 8i2Uhg35vt+EQ6r1FdnJelDCfkdVacT4X7Ea+iyOf2k=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 12:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:63:2b:7d:88:40:4c:39:a1:93:95:62:e8:0a:b1:c9:0a:d4:87:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Jun 14 09:25:11 2025 GMT Not After : Jun 15 12:45:11 2025 GMT Subject: CN=D6BCC518E30992596E483811F3E5C340501CCC8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:09:33:8c:fe:86:91:3f:78:d7:07:44:f6: ad:84:bf:09:88:3e:e6:d2:57:29:be:04:b7:d2:1b: 5d:21:f8:5f:fe:eb:69:69:04:aa:98:b2:5b:74:79: fc:d1:e4:a7:df:4a:10:36:8d:24:dc:3f:e4:7e:a5: b9:b7:3c:7b:9c:97:25:0f:c2:0f:be:55:81:79:eb: 46:97:aa:6f:45:c2:e2:f1:9f:92:58:29:b2:e3:d2: b9:0b:33:94:e7:83:34:94:85:3c:0f:6e:17:b6:e3: de:ae:66:54:fa:39:56:a1:79:f0:55:70:f0:ce:97: aa:d2:d9:24:bd:38:a8:e9:b3:a8:55:c9:e7:60:d2: a9:07:bf:5c:20:12:97:7a:18:e1:c7:dc:0c:01:28: c9:bd:e0:31:01:54:99:60:51:7d:11:eb:1c:4f:cd: 87:56:ef:da:47:9a:cb:94:2d:19:7a:03:00:5c:70: 9b:a3:1d:7f:ba:de:4f:a7:3e:58:3c:97:c7:26:b8: 1f:34:35:09:fa:8c:7e:12:c0:ef:db:a0:85:a3:1b: a4:34:21:6b:93:82:e6:d5:48:69:b6:f0:90:d2:7f: f4:61:ca:98:6f:e6:e2:d5:e5:f0:2c:d6:df:42:be: 85:ee:76:81:17:b9:df:be:f6:23:1e:b0:e8:ca:4a: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:C5:18:E3:09:92:59:6E:48:38:11:F3:E5:C3:40:50:1C:CC:8D X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:5f:dc:95:72:91:59:a3:4c:b2:c3:b2:90:fe:8e:40:42: b8:66:51:f1:8e:f6:b9:5d:0a:47:1a:17:ac:05:48:da:b7:fd: 0e:83:82:56:98:76:f0:c3:58:65:f6:a2:9d:7a:b7:16:d4:3c: fd:a9:03:7e:d2:c8:a9:75:28:46:35:81:e8:d5:54:44:ec:0c: f6:68:48:63:8d:83:18:4f:32:3e:d0:b5:3c:c6:4f:2d:81:c3: 83:23:d4:5f:13:09:86:62:fb:2d:08:74:b0:2a:78:17:74:96: 29:d6:7a:2e:f5:6a:45:57:1d:3a:39:74:f5:da:b5:fb:c5:80: 57:73:cf:73:f7:a0:c2:54:79:3a:37:a1:2a:35:92:3e:b5:8d: 28:99:29:e7:0b:4d:54:a1:bd:53:03:66:84:06:2c:0e:c9:0b: 5b:74:13:13:2c:ef:1b:07:41:c4:f2:2e:0a:3a:38:7d:b2:80: ba:d7:97:2b:d1:a3:9d:71:7d:f1:0e:af:0b:94:73:90:25:18: 3e:90:4d:01:af:ab:fe:fb:76:6b:a3:7b:7c:df:4c:dc:0e:a5: ae:36:5d:e1:6a:e2:01:24:f6:fa:8b:9a:75:69:92:3a:b9:24: 38:4c:b5:e3:0e:79:f3:d7:10:2e:8c:31:e3:97:c6:c9:21:0a: 7f:a4:64:03 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIURmMrfYhATDmhk5Vi6AqxyQrUh4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI1MDYxNDA5MjUxMVoX DTI1MDYxNTEyNDUxMVowMzExMC8GA1UEAxMoRDZCQ0M1MThFMzA5OTI1OTZFNDgz ODExRjNFNUMzNDA1MDFDQ0M4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKs4CTOM/oaRP3jXB0T2rYS/CYg+5tJXKb4Et9IbXSH4X/7raWkEqpiyW3R5 /NHkp99KEDaNJNw/5H6lubc8e5yXJQ/CD75VgXnrRpeqb0XC4vGfklgpsuPSuQsz lOeDNJSFPA9uF7bj3q5mVPo5VqF58FVw8M6XqtLZJL04qOmzqFXJ52DSqQe/XCAS l3oY4cfcDAEoyb3gMQFUmWBRfRHrHE/Nh1bv2keay5QtGXoDAFxwm6Mdf7reT6c+ WDyXxya4HzQ1CfqMfhLA79ughaMbpDQha5OC5tVIabbwkNJ/9GHKmG/m4tXl8CzW 30K+he52gRe53772Ix6w6MpKIy0CAwEAAaOCAfkwggH1MB0GA1UdDgQWBBTWvMUY 4wmSWW5IOBHz5cNAUBzMjTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjBsBggrBgEFBQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzlDRjA1RTcwMjRENEE0ODdFMEI3OUUyRjU3 NTI1QkYzNDVEQjUzRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeMl/clXKRWaNMssOykP6OQEK4ZlHx jva5XQpHGhesBUjat/0Og4JWmHbww1hl9qKdercW1Dz9qQN+0sipdShGNYHo1VRE 7Az2aEhjjYMYTzI+0LU8xk8tgcODI9RfEwmGYvstCHSwKngXdJYp1nou9WpFVx06 OXT12rX7xYBXc89z96DCVHk6N6EqNZI+tY0omSnnC01Uob1TA2aEBiwOyQtbdBMT LO8bB0HE8i4KOjh9soC615cr0aOdcX3xDq8LlHOQJRg+kE0Br6v++3Zro3t830zc DqWuNl3hauIBJPb6i5p1aZI6uSQ4TLXjDnnz1xAujDHjl8bJIQp/pGQD -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:16 2025 by rpki-client