$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: gK0vIK0LdAXwHxJWAqOAZkvkjnQH+89xTZnOoeHmqgs= Subject key identifier: DD:8C:5D:5E:5A:EE:DB:5B:F0:D8:40:D6:B6:67:97:45:7F:E6:59:59 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 6B149D302ABF8045617752BEDAADDBB3179A05D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 0390 Signing time: Fri 25 Jul 2025 13:41:55 +0000 Manifest this update: Fri 25 Jul 2025 13:36:55 +0000 Manifest next update: Mon 28 Jul 2025 15:49:55 +0000 Files and hashes: 1: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: Ssv2eZbvx9q2HF9yBmPHiXg5F7RXJ5IV1vipTWA9H6o=) 2: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: sHfaQ9ErEKfvqbOJExa7BFCyKPu6zMikglExNmMz8iQ=) 3: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=) 4: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=) 5: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 15:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:14:9d:30:2a:bf:80:45:61:77:52:be:da:ad:db:b3:17:9a:05:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Jul 25 13:36:55 2025 GMT Not After : Jul 28 15:49:55 2025 GMT Subject: CN=DD8C5D5E5AEEDB5BF0D840D6B66797457FE65959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:28:43:fa:f0:75:62:24:ff:de:5a:ae:c5: 0d:c2:81:c5:45:4d:60:7f:46:83:7d:2b:89:42:d7: 43:2b:81:fc:b0:3b:f5:bf:b7:0a:72:a8:60:9e:83: fe:ed:e4:67:88:11:0d:38:d7:fc:58:63:7b:6e:f1: 10:2e:38:f5:7b:16:66:4b:23:d3:81:18:d8:54:14: 57:2a:8a:dd:22:9a:95:ee:3a:26:02:27:de:45:bc: 78:a4:f9:42:92:05:3d:19:28:77:1b:22:e7:b2:c5: 69:98:c9:eb:8b:97:72:19:56:13:f2:5e:a6:6e:e7: 13:ab:2b:54:10:57:93:02:94:60:1b:7e:80:9d:b8: 8a:38:66:88:3b:48:fb:d2:cf:de:62:5b:cf:1f:e7: 70:df:4a:8b:28:66:f0:e2:40:02:ac:5c:5b:6a:8f: 75:ce:6a:17:f1:d5:69:21:ad:3f:d6:4d:6e:e4:5e: da:8d:e6:69:b4:dc:89:d4:d7:98:8f:db:08:98:8e: 6e:d7:e7:ef:0a:2f:3e:6d:91:b8:1f:9c:99:16:42: e9:a3:0b:13:86:43:59:85:0f:8e:84:12:3f:9e:8e: 2a:ce:db:db:56:ef:96:97:e6:e9:7c:e4:58:03:b5: 5c:1d:17:78:7b:02:70:a9:dd:67:35:0b:13:31:0b: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8C:5D:5E:5A:EE:DB:5B:F0:D8:40:D6:B6:67:97:45:7F:E6:59:59 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b6:c9:1d:05:af:18:92:5c:52:4c:47:d1:bd:1c:ab:3e:bd: bd:ad:0d:28:4d:1e:42:3e:44:a2:7f:47:6b:0d:31:4f:5e:bb: 69:71:1d:5e:fa:d7:56:31:0c:0c:fb:1d:5b:22:92:7b:09:1c: 72:60:38:b7:27:d6:b8:88:83:f9:23:3d:ef:54:d0:35:3d:79: a1:48:25:35:2f:bb:59:a7:42:b1:68:1b:08:6a:dc:7e:9f:d3: b4:89:66:2d:a1:75:56:1a:d6:1b:cf:05:aa:86:3d:69:32:ba: af:07:f0:c0:22:c3:df:86:a3:ea:76:e4:cf:96:4b:30:a9:ed: 48:6a:7b:1c:4b:d5:6e:c4:6a:04:8b:c9:02:a0:b1:40:17:ab: 64:3f:9d:ce:57:5f:5b:1c:e3:5a:23:26:a2:1d:ab:35:97:5f: 3e:57:b1:ae:16:12:ee:3b:95:ee:65:9d:15:5d:a3:c7:fa:d0: c1:c9:27:09:78:61:f9:0e:0e:cf:89:96:22:cf:5e:cc:fd:62: 75:cc:c2:10:b0:c4:81:1a:54:db:bb:75:5b:ea:85:68:e5:8b: ef:21:89:d0:2f:7d:b1:6d:7c:cb:3d:73:70:91:9a:ae:d0:e0: 76:8e:f7:02:1a:22:bd:a9:e4:91:46:52:fb:9e:15:b3:54:82: d2:6a:2c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxSdMCq/gEVhd1K+2q3bsxeaBdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTA3MjUxMzM2NTVaFw0yNTA3MjgxNTQ5NTVaMDMxMTAvBgNV BAMTKEREOEM1RDVFNUFFRURCNUJGMEQ4NDBENkI2Njc5NzQ1N0ZFNjU5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aShD+vB1YiT/3lquxQ3CgcVF TWB/RoN9K4lC10MrgfywO/W/twpyqGCeg/7t5GeIEQ041/xYY3tu8RAuOPV7FmZL I9OBGNhUFFcqit0impXuOiYCJ95FvHik+UKSBT0ZKHcbIueyxWmYyeuLl3IZVhPy XqZu5xOrK1QQV5MClGAbfoCduIo4Zog7SPvSz95iW88f53DfSosoZvDiQAKsXFtq j3XOahfx1WkhrT/WTW7kXtqN5mm03InU15iP2wiYjm7X5+8KLz5tkbgfnJkWQumj CxOGQ1mFD46EEj+ejirO29tW75aX5ul85FgDtVwdF3h7AnCp3Wc1CxMxC7U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YxdXlru21vw2EDWtmeXRX/mWVkwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO2yR0FrxiSXFJMR9G9HKs+vb2tDShNHkI+ RKJ/R2sNMU9eu2lxHV7611YxDAz7HVsiknsJHHJgOLcn1riIg/kjPe9U0DU9eaFI JTUvu1mnQrFoGwhq3H6f07SJZi2hdVYa1hvPBaqGPWkyuq8H8MAiw9+Go+p25M+W SzCp7UhqexxL1W7EagSLyQKgsUAXq2Q/nc5XX1sc41ojJqIdqzWXXz5Xsa4WEu47 le5lnRVdo8f60MHJJwl4YfkODs+JliLPXsz9YnXMwhCwxIEaVNu7dVvqhWjli+8h idAvfbFtfMs9c3CRmq7Q4HaO9wIaIr2p5JFGUvueFbNUgtJqLEA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:04:02 2025 by rpki-client