$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: BKBY5KJPt/kVjDV3li6R8CmR7MKhLfA9/yzVaJ1PW/g= Subject key identifier: D1:18:76:38:EA:0B:4C:4F:6B:60:F1:52:CE:3F:58:C7:24:64:49:4A Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 0F61CAFF38EAB4E212541795A68993FD091AAF95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 69 Signing time: Fri 06 Jun 2025 02:20:05 +0000 Manifest this update: Fri 06 Jun 2025 02:15:05 +0000 Manifest next update: Mon 09 Jun 2025 11:42:05 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 3: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: KFEBDycCn9PMfJ1oAM/T3SMz6d0t1tPTFm8YULPLL+k=) 4: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:61:ca:ff:38:ea:b4:e2:12:54:17:95:a6:89:93:fd:09:1a:af:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Jun 6 02:15:05 2025 GMT Not After : Jun 9 11:42:05 2025 GMT Subject: CN=D1187638EA0B4C4F6B60F152CE3F58C72464494A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:46:10:a7:e4:e4:da:32:24:67:89:62:e3: b9:89:dc:49:53:cc:11:41:ef:1e:ff:26:14:b2:68: 7c:10:fa:8c:d0:46:62:40:fb:e2:fc:1b:ea:c0:cc: 19:4f:d1:ed:0b:dc:51:d5:f1:0a:37:6b:3b:13:e8: ae:cb:14:e4:0a:d7:a6:d4:54:ed:53:fb:c9:40:0e: ac:98:55:c7:4f:72:66:00:ff:1d:cf:39:e6:6f:6e: 76:6f:f1:17:d4:42:7f:f3:2c:e1:f1:0e:9e:c6:b5: 56:74:62:ac:0b:45:ff:55:13:2e:63:87:cf:08:cd: f5:6e:32:48:e8:c3:e7:d1:ce:1d:48:56:66:f1:e0: 54:88:f9:52:92:c8:2a:08:b9:6f:85:91:f2:a6:2c: 71:bb:ad:cb:b5:c6:4b:5c:d1:d5:4d:b4:d3:28:69: 98:39:8c:bf:55:ab:9e:21:56:bc:19:00:a7:33:29: c1:2e:48:71:3b:d4:ac:7b:ec:3b:a0:36:79:35:5c: be:89:8d:e6:89:b2:2b:91:9b:2c:06:06:f0:e3:7f: d3:e9:79:6e:32:13:c2:c1:9d:39:ac:2e:10:cf:37: 2e:94:1c:9f:11:2a:37:f4:63:d6:05:33:1a:66:36: b4:54:f8:0c:09:71:f1:81:43:2c:2b:a7:2d:09:8c: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:18:76:38:EA:0B:4C:4F:6B:60:F1:52:CE:3F:58:C7:24:64:49:4A X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:93:59:10:ad:e0:7b:bb:3e:8f:df:64:e5:a5:0b:44:d6:fa: 0f:e4:e7:41:52:df:64:59:f9:4b:aa:35:ba:ec:3f:aa:fe:15: 5a:09:3f:06:c3:4b:73:04:bf:5d:fa:e8:70:fc:69:f4:9c:c7: 0d:6a:14:f0:95:10:05:94:20:72:b7:9d:2f:25:09:91:26:63: a2:c8:bc:85:ce:d2:81:86:ee:d0:a0:69:66:8b:a5:97:4a:02: 8c:6f:29:b5:0a:68:52:33:04:6a:f3:79:0c:93:47:de:ad:d4: 14:7a:f4:b6:6d:48:ca:03:2d:ea:ab:b5:10:4a:fc:25:1d:ca: 75:9a:c3:14:1a:64:3c:7b:07:9a:79:27:b8:05:7f:b0:58:9d: bd:f1:ca:96:3a:aa:69:f5:74:ff:ea:16:6f:d6:b6:b1:b3:12: b7:6c:9d:29:ad:23:13:f2:94:ef:ca:9e:b9:5d:33:c7:37:fa: 6a:54:e0:ee:ab:dd:2a:a8:50:21:a5:21:e4:a2:5a:2d:3b:57: 29:0b:99:b4:7e:ff:7c:9d:4a:4c:05:cb:d9:29:be:08:0a:a1: b3:12:f8:97:da:d4:56:43:48:b0:11:65:88:40:30:76:c6:49: c6:e3:3e:5c:5a:f8:72:13:d5:6d:96:4c:f5:ce:49:47:9e:e5: b2:61:dd:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2HK/zjqtOISVBeVpomT/Qkar5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA2MDYwMjE1MDVaFw0yNTA2MDkxMTQyMDVaMDMxMTAvBgNV BAMTKEQxMTg3NjM4RUEwQjRDNEY2QjYwRjE1MkNFM0Y1OEM3MjQ2NDQ5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYm0YQp+Tk2jIkZ4li47mJ3ElT zBFB7x7/JhSyaHwQ+ozQRmJA++L8G+rAzBlP0e0L3FHV8Qo3azsT6K7LFOQK16bU VO1T+8lADqyYVcdPcmYA/x3POeZvbnZv8RfUQn/zLOHxDp7GtVZ0YqwLRf9VEy5j h88IzfVuMkjow+fRzh1IVmbx4FSI+VKSyCoIuW+FkfKmLHG7rcu1xktc0dVNtNMo aZg5jL9Vq54hVrwZAKczKcEuSHE71Kx77DugNnk1XL6JjeaJsiuRmywGBvDjf9Pp eW4yE8LBnTmsLhDPNy6UHJ8RKjf0Y9YFMxpmNrRU+AwJcfGBQywrpy0JjCgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Rh2OOoLTE9rYPFSzj9YxyRkSUowHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeTWRCt4Hu7Po/fZOWlC0TW+g/k50FS32RZ +UuqNbrsP6r+FVoJPwbDS3MEv1366HD8afScxw1qFPCVEAWUIHK3nS8lCZEmY6LI vIXO0oGG7tCgaWaLpZdKAoxvKbUKaFIzBGrzeQyTR96t1BR69LZtSMoDLeqrtRBK /CUdynWawxQaZDx7B5p5J7gFf7BYnb3xypY6qmn1dP/qFm/WtrGzErdsnSmtIxPy lO/KnrldM8c3+mpU4O6r3SqoUCGlIeSiWi07VykLmbR+/3ydSkwFy9kpvggKobMS +Jfa1FZDSLARZYhAMHbGScbjPlxa+HIT1W2WTPXOSUee5bJh3SI= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:48 2025 by rpki-client