$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: +sqCtMFh4K2feVmmSFEeAJkjRC1aWYuoaFybtDa6I1Q= Subject key identifier: C5:F5:8F:BE:27:DC:BA:51:54:DA:94:4F:E8:2F:71:8F:78:2A:E7:1C Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 42FA6E0CC0ADFDE3DF97D75A5052CBA1476A93C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 04F0 Signing time: Sun 20 Jul 2025 05:51:36 +0000 Manifest this update: Sun 20 Jul 2025 05:46:36 +0000 Manifest next update: Wed 23 Jul 2025 07:52:36 +0000 Files and hashes: 1: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: b8u6bSKOqrhI83+i2PVY6oj6+8CCDbkt1GJr+t947QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fa:6e:0c:c0:ad:fd:e3:df:97:d7:5a:50:52:cb:a1:47:6a:93:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Jul 20 05:46:36 2025 GMT Not After : Jul 23 07:52:36 2025 GMT Subject: CN=C5F58FBE27DCBA5154DA944FE82F718F782AE71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:fa:cd:b4:b7:1d:db:8c:2b:49:1c:5a:5f: 16:4a:32:8b:fa:a0:ff:c1:91:c9:bb:9d:ff:cb:07: e1:53:6c:f7:8e:05:d7:b9:ce:5b:43:a6:33:8d:ea: 18:fe:a7:27:85:ab:02:5a:e6:9f:c9:ee:ca:cb:64: 3b:97:f2:a8:3a:b4:cb:2b:52:12:aa:df:fa:b5:b2: d3:92:0d:d5:c2:06:2c:ed:f6:d3:73:76:e5:ce:fa: b5:b9:5f:8a:42:f8:d3:11:69:9d:47:b7:fb:a8:f2: 12:71:a5:3f:11:d8:bc:5a:a6:25:8e:6c:17:6f:41: 99:c2:a5:ed:ff:cd:a1:e9:8b:98:34:26:75:fe:2e: 4e:a0:ef:7e:dd:1b:54:c1:5a:83:8a:d4:a1:e0:cd: d2:4e:1e:1e:71:21:42:2c:4e:d2:6e:bf:24:f3:5c: c6:92:36:af:33:9f:8e:3c:9a:5d:4a:63:6a:3d:4b: 4d:a6:6e:ca:92:67:96:f5:1c:1f:fd:da:7d:8d:4c: 70:c7:65:83:7c:60:af:72:87:a9:d9:b8:2f:5e:60: 16:db:60:71:60:15:75:78:22:e0:2b:02:cd:cc:30: 02:59:22:b4:63:86:42:0d:98:4d:92:77:6f:1b:88: ca:8f:21:53:db:73:8a:82:f8:34:f0:72:ea:0d:12: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:8F:BE:27:DC:BA:51:54:DA:94:4F:E8:2F:71:8F:78:2A:E7:1C X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:f9:9a:59:13:b8:2e:d5:27:05:ca:b9:3d:18:a9:47:08:b0: 1a:36:d6:cf:28:33:8f:4f:86:d5:24:cb:45:e7:d8:5b:91:6b: 90:42:a9:d9:57:53:42:d6:60:2a:16:57:6a:ad:ad:a0:73:98: 03:66:c9:9d:bc:5d:b0:96:4e:5d:00:c5:0c:15:ac:5e:4b:63: e9:a8:9b:74:96:8d:e2:fe:63:7b:4b:06:75:68:cd:8e:4c:4f: c0:58:e0:2e:c0:1f:4a:63:0f:46:cb:0a:42:f0:ed:16:d2:ea: 5a:d6:aa:fd:9c:13:cd:39:e6:51:5f:a0:bc:3e:88:4d:03:e3: 81:77:2f:f1:0f:b7:dd:32:49:be:dc:40:0c:29:51:bd:c5:eb: 22:a0:e5:64:64:a2:6c:d8:da:9a:2a:54:41:a9:a9:30:d4:9c: a2:a1:55:21:da:5b:9d:0e:9d:e7:92:72:66:52:6c:d7:29:1a: 1e:0b:0b:ca:a6:18:56:30:2f:c4:1e:fb:81:8a:e6:4b:30:a9: 16:63:74:72:ad:b4:5f:b0:c1:5f:e1:ce:63:a2:06:6c:37:26: a0:da:2c:02:d6:05:51:9a:e5:2b:67:ea:d7:9c:dc:16:f1:a9: b6:21:80:55:9e:33:b5:dd:7d:4a:55:e7:fe:2b:1b:fc:50:d6: 28:39:91:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvpuDMCt/ePfl9daUFLLoUdqk8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTA3MjAwNTQ2MzZaFw0yNTA3MjMwNzUyMzZaMDMxMTAvBgNV BAMTKEM1RjU4RkJFMjdEQ0JBNTE1NERBOTQ0RkU4MkY3MThGNzgyQUU3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt8frNtLcd24wrSRxaXxZKMov6 oP/Bkcm7nf/LB+FTbPeOBde5zltDpjON6hj+pyeFqwJa5p/J7srLZDuX8qg6tMsr UhKq3/q1stOSDdXCBizt9tNzduXO+rW5X4pC+NMRaZ1Ht/uo8hJxpT8R2LxapiWO bBdvQZnCpe3/zaHpi5g0JnX+Lk6g737dG1TBWoOK1KHgzdJOHh5xIUIsTtJuvyTz XMaSNq8zn448ml1KY2o9S02mbsqSZ5b1HB/92n2NTHDHZYN8YK9yh6nZuC9eYBbb YHFgFXV4IuArAs3MMAJZIrRjhkINmE2Sd28biMqPIVPbc4qC+DTwcuoNEpEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfWPvifculFU2pRP6C9xj3gq5xwwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOz5mlkTuC7VJwXKuT0YqUcIsBo21s8oM49P htUky0Xn2FuRa5BCqdlXU0LWYCoWV2qtraBzmANmyZ28XbCWTl0AxQwVrF5LY+mo m3SWjeL+Y3tLBnVozY5MT8BY4C7AH0pjD0bLCkLw7RbS6lrWqv2cE8055lFfoLw+ iE0D44F3L/EPt90ySb7cQAwpUb3F6yKg5WRkomzY2poqVEGpqTDUnKKhVSHaW50O neeScmZSbNcpGh4LC8qmGFYwL8Qe+4GK5kswqRZjdHKttF+wwV/hzmOiBmw3JqDa LALWBVGa5Stn6tec3BbxqbYhgFWeM7XdfUpV5/4rG/xQ1ig5kbE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:14 2025 by rpki-client