$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: UHVrQUcEgZvWk25Z0/JTPrqlHgshMSxXUAy9NXJ+rAU= Subject key identifier: 29:3A:5B:D4:75:74:0D:C6:AF:8A:85:27:11:4A:BB:59:2B:5A:A4:86 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 6BE1F6FBAF1D922E31A1823D6A6C9C1070CCAFBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02B3 Signing time: Sun 01 Jun 2025 14:51:07 +0000 Manifest this update: Sun 01 Jun 2025 14:46:07 +0000 Manifest next update: Wed 04 Jun 2025 20:03:07 +0000 Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=) 2: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: 1Rn5pqJ6e78wYRNpvVJTkvL+YNUyQ4kyxDHZMuzBQFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e1:f6:fb:af:1d:92:2e:31:a1:82:3d:6a:6c:9c:10:70:cc:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Jun 1 14:46:07 2025 GMT Not After : Jun 4 20:03:07 2025 GMT Subject: CN=293A5BD475740DC6AF8A8527114ABB592B5AA486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:37:90:27:4f:ef:8b:88:f0:d1:e9:63:11: 5d:37:93:cc:aa:2c:cd:b9:23:73:ab:dc:32:7b:7a: a6:ce:40:ac:5b:34:d0:10:62:32:be:97:83:02:5c: 35:1c:6b:8e:66:e6:b4:ad:3c:35:12:e5:1d:70:90: fd:78:e2:bf:bd:41:87:9d:92:b7:2b:18:64:7a:84: 7c:a3:9b:25:da:5c:f3:3b:0c:08:1f:e4:d4:4e:ca: 63:63:de:1b:43:f3:65:a5:61:82:36:43:ea:44:17: 40:ed:0f:20:e7:6f:1c:a8:51:f5:fa:6b:0b:82:61: b7:cb:1a:25:86:d3:cd:c3:00:19:a4:bd:9f:53:a7: c2:69:54:45:83:b9:96:3a:58:71:5d:d8:a1:e1:2b: 99:16:20:9e:15:cd:8b:44:49:91:55:95:15:39:90: 70:b8:ed:70:bc:cf:e1:06:0f:86:94:dd:47:4c:43: f5:a5:b7:89:a7:d2:09:19:0d:a2:00:3a:5c:85:cf: be:14:ee:11:4d:ae:e8:e1:14:8c:99:5a:8c:98:40: bf:c7:2e:cf:90:20:d6:9a:7e:1b:29:39:45:d4:bb: f2:e9:03:b0:5c:5b:4e:e6:d0:4a:b5:17:dc:7a:15: 0a:83:f3:21:2d:69:26:52:6f:68:08:c2:39:1d:a6: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3A:5B:D4:75:74:0D:C6:AF:8A:85:27:11:4A:BB:59:2B:5A:A4:86 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:81:b7:38:48:52:c8:83:00:70:26:f3:c7:e3:da:55:5d: 33:58:96:c3:d7:a2:17:4c:d0:9f:cd:a7:30:29:7f:ed:e4:88: 22:13:c5:da:90:13:0a:63:78:77:12:ed:d1:ac:83:92:c0:49: 41:96:40:2d:c5:5c:94:b8:71:eb:d3:70:a9:77:11:40:13:f5: 8d:57:49:05:89:1a:a8:d9:0a:44:76:37:39:2b:22:77:a4:2a: 5b:b4:03:38:7e:a6:ad:3a:c3:7a:19:ca:7c:79:83:31:3e:3f: 5c:86:e1:85:bf:a1:c4:60:6f:94:e9:3e:fb:24:c0:6d:77:e3: 5b:d1:f8:5c:38:44:74:3e:9b:8b:31:f4:3f:9d:da:95:86:06: de:a8:b6:53:1d:fd:67:5f:d3:5b:c3:07:3d:66:ab:cb:b6:e2: 8d:1d:60:a4:cb:9b:89:27:4a:ac:8c:1b:97:e4:dd:c4:58:cb: 42:df:c6:9e:59:70:3d:8f:6e:e4:cd:29:e5:e5:35:6c:52:84: 53:1b:9a:ba:19:24:cf:9a:06:e9:f7:ee:56:e1:09:55:fe:ff: ec:f7:42:d9:55:79:fd:ca:5f:7a:25:73:14:22:83:b9:d9:24: 0f:87:8a:2f:ba:08:1f:5d:0f:b0:25:88:2d:f9:e8:f2:09:43: fa:fb:35:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+H2+68dki4xoYI9amycEHDMr7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA2MDExNDQ2MDdaFw0yNTA2MDQyMDAzMDdaMDMxMTAvBgNV BAMTKDI5M0E1QkQ0NzU3NDBEQzZBRjhBODUyNzExNEFCQjU5MkI1QUE0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6DeQJ0/vi4jw0eljEV03k8yq LM25I3Or3DJ7eqbOQKxbNNAQYjK+l4MCXDUca45m5rStPDUS5R1wkP144r+9QYed krcrGGR6hHyjmyXaXPM7DAgf5NROymNj3htD82WlYYI2Q+pEF0DtDyDnbxyoUfX6 awuCYbfLGiWG083DABmkvZ9Tp8JpVEWDuZY6WHFd2KHhK5kWIJ4VzYtESZFVlRU5 kHC47XC8z+EGD4aU3UdMQ/Wlt4mn0gkZDaIAOlyFz74U7hFNrujhFIyZWoyYQL/H Ls+QINaafhspOUXUu/LpA7BcW07m0Eq1F9x6FQqD8yEtaSZSb2gIwjkdptV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTpb1HV0DcavioUnEUq7WStapIYwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW1gbc4SFLIgwBwJvPH49pVXTNYlsPXohdM 0J/NpzApf+3kiCITxdqQEwpjeHcS7dGsg5LASUGWQC3FXJS4cevTcKl3EUAT9Y1X SQWJGqjZCkR2NzkrInekKlu0Azh+pq06w3oZynx5gzE+P1yG4YW/ocRgb5TpPvsk wG1341vR+Fw4RHQ+m4sx9D+d2pWGBt6otlMd/Wdf01vDBz1mq8u24o0dYKTLm4kn SqyMG5fk3cRYy0Lfxp5ZcD2PbuTNKeXlNWxShFMbmroZJM+aBun37lbhCVX+/+z3 QtlVef3KX3olcxQig7nZJA+Hii+6CB9dD7AliC356PIJQ/r7NRM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:02 2025 by rpki-client