$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: IpCdi4r2zVwgi3XPX12d59IpMkldFbMzXDvs6h5XSWk= Subject key identifier: 5C:25:E0:A9:12:F1:7B:30:79:F4:A2:CB:9D:F1:07:08:88:B7:4B:03 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 1B82D41F049C58E6F6D3F4230B797EE1C9276B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01E9 Signing time: Wed 04 Jun 2025 11:42:24 +0000 Manifest this update: Wed 04 Jun 2025 11:37:24 +0000 Manifest next update: Sat 07 Jun 2025 17:05:24 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 3: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: ga7y3oiRTDrbnm01PLWEA6vP6nDO+r4uIqHBXZyXbb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:82:d4:1f:04:9c:58:e6:f6:d3:f4:23:0b:79:7e:e1:c9:27:6b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Jun 4 11:37:24 2025 GMT Not After : Jun 7 17:05:24 2025 GMT Subject: CN=5C25E0A912F17B3079F4A2CB9DF1070888B74B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:b1:c9:6b:05:98:a2:7e:17:29:88:89:f0: 82:73:6b:61:96:b3:b0:ab:3a:01:b6:e2:7b:56:7b: 63:f0:1f:e8:36:bc:20:68:b1:f1:28:15:49:a9:78: e4:1c:d9:d2:78:06:31:95:b9:eb:d4:71:78:12:c6: 5e:74:ce:db:a8:5c:2f:1f:18:a7:88:2f:96:80:ed: dc:ad:09:70:bc:f8:fb:d4:d1:36:93:36:4d:01:93: d6:0b:82:af:c7:ef:40:e4:0e:5b:82:04:20:a0:e6: 1b:8e:09:84:04:39:d5:23:fd:44:e4:f4:8c:a4:92: 0c:a3:5d:0c:e8:db:ef:25:14:95:f3:50:3b:f1:56: a2:ff:3a:5d:a9:94:19:fd:b5:67:a3:9b:5c:ef:3a: be:77:de:de:3e:f1:a0:9c:32:ae:a4:1c:0e:80:8c: fa:97:a2:cf:f3:fb:60:a8:e4:f1:de:5e:84:f2:82: b2:88:32:93:e8:bb:0a:8d:91:ca:c0:cd:88:b7:8b: 0d:60:6b:a4:1b:17:cf:a7:28:6f:cd:37:a3:b5:e1: 50:ae:53:fc:b7:1d:ce:6e:5f:ee:49:93:25:dc:21: c1:99:82:c5:79:f6:4b:a3:04:b1:af:9f:4e:1a:56: d7:31:70:26:7b:ec:39:38:2d:e3:f4:5e:3d:91:27: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:E0:A9:12:F1:7B:30:79:F4:A2:CB:9D:F1:07:08:88:B7:4B:03 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:99:c6:55:dd:fb:0a:a0:d6:31:d5:a8:f0:2a:ef:f4:94: 94:3c:02:ed:b8:39:f0:82:b3:0e:df:08:44:2e:31:a9:af:9b: a4:d9:a5:cb:0e:47:91:45:13:47:2f:50:62:8c:5c:dd:8c:a3: 6c:41:62:80:21:cd:b9:5d:03:48:00:88:8e:83:3c:82:2b:8f: 0d:3c:2e:52:11:b4:68:14:b4:18:3d:85:a0:d2:99:5b:2f:eb: 5c:56:56:7e:f3:bf:c1:a2:95:28:28:f5:7e:43:42:9a:b7:36: 36:f9:41:a8:ea:cd:bf:76:c7:0a:cd:46:42:99:4b:98:32:15: 57:e7:14:da:02:58:7b:52:b4:e2:cd:f8:05:3b:3b:a7:fa:51: 0a:0a:d2:a0:37:62:86:a0:ff:89:61:eb:ea:15:90:15:6d:50: 7e:28:ba:3e:80:0d:e3:91:e5:55:e6:e4:f3:a1:5c:50:1c:36: 0e:ac:b2:35:17:ff:38:97:53:59:ce:6b:4b:2b:5d:b6:a8:a5: 87:b3:02:44:0f:ca:8e:f5:71:7f:1c:7c:8e:2a:ae:cf:a2:96: 90:7c:05:93:f9:5d:6f:ff:8f:4e:85:53:1b:ce:e2:7a:bc:24: c6:d8:16:c8:2b:3a:25:58:47:a9:1d:71:74:b7:c8:35:e2:db: 8f:a4:fe:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4LUHwScWOb20/QjC3l+4cknazkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA2MDQxMTM3MjRaFw0yNTA2MDcxNzA1MjRaMDMxMTAvBgNV BAMTKDVDMjVFMEE5MTJGMTdCMzA3OUY0QTJDQjlERjEwNzA4ODhCNzRCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/7HJawWYon4XKYiJ8IJza2GW s7CrOgG24ntWe2PwH+g2vCBosfEoFUmpeOQc2dJ4BjGVuevUcXgSxl50ztuoXC8f GKeIL5aA7dytCXC8+PvU0TaTNk0Bk9YLgq/H70DkDluCBCCg5huOCYQEOdUj/UTk 9IykkgyjXQzo2+8lFJXzUDvxVqL/Ol2plBn9tWejm1zvOr533t4+8aCcMq6kHA6A jPqXos/z+2Co5PHeXoTygrKIMpPouwqNkcrAzYi3iw1ga6QbF8+nKG/NN6O14VCu U/y3Hc5uX+5JkyXcIcGZgsV59kujBLGvn04aVtcxcCZ77Dk4LeP0Xj2RJ1O1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCXgqRLxezB59KLLnfEHCIi3SwMwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGezmcZV3fsKoNYx1ajwKu/0lJQ8Au24OfCC sw7fCEQuMamvm6TZpcsOR5FFE0cvUGKMXN2Mo2xBYoAhzbldA0gAiI6DPIIrjw08 LlIRtGgUtBg9haDSmVsv61xWVn7zv8GilSgo9X5DQpq3Njb5Qajqzb92xwrNRkKZ S5gyFVfnFNoCWHtStOLN+AU7O6f6UQoK0qA3Yoag/4lh6+oVkBVtUH4ouj6ADeOR 5VXm5POhXFAcNg6ssjUX/ziXU1nOa0srXbaopYezAkQPyo71cX8cfI4qrs+ilpB8 BZP5XW//j06FUxvO4nq8JMbYFsgrOiVYR6kdcXS3yDXi24+k/vc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:25 2025 by rpki-client