$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: e+gCOd8SE0gxoAVppkJ7L8O7CUPqMiQhXsDqv4YyuPA= Subject key identifier: 2B:A2:06:83:60:0A:09:DE:B4:53:94:9A:48:40:12:04:42:67:40:7F Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 5193FADE617CAB01E011E4FB6FDE2053BA401960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 02:30:01 +0000 Manifest this update: Wed 04 Jun 2025 02:25:01 +0000 Manifest next update: Sat 07 Jun 2025 10:23:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) 3: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: tekKD5LiZ8OLvMnpTZ8EY6M4cZcOEVNQc4FUP9ZJhLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:93:fa:de:61:7c:ab:01:e0:11:e4:fb:6f:de:20:53:ba:40:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Jun 4 02:25:01 2025 GMT Not After : Jun 7 10:23:01 2025 GMT Subject: CN=2BA20683600A09DEB453949A484012044267407F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:fc:76:95:06:b5:35:e5:f4:de:54:45:3d: b2:53:fb:79:62:e0:13:ca:1f:8e:b8:69:18:ec:be: fc:17:27:75:11:2f:43:86:bc:cf:82:bb:50:83:b5: 8e:dc:3c:50:89:ca:7f:e6:ae:53:4d:a2:6b:66:7d: df:fb:eb:07:e8:d7:42:9b:e3:1c:41:64:de:1f:1a: c4:33:3f:ed:e5:67:1e:60:c8:27:5c:72:ac:ae:61: d9:79:a8:86:6d:e2:af:cf:9c:2a:73:d5:34:97:c5: ff:4b:b0:d4:59:22:28:49:1d:12:1d:02:ee:9c:db: 85:f3:15:27:13:cd:44:e1:8f:0a:ce:21:ea:28:5a: 19:c8:b0:93:1d:17:30:49:36:15:7e:2b:bc:eb:11: 45:49:eb:df:3c:43:c1:e8:fd:72:18:bb:3c:12:91: ba:ea:d5:cc:69:c5:56:bc:65:59:53:3d:0d:15:29: 9e:a1:82:85:7a:e6:16:ae:ec:2b:fb:d0:a3:e9:51: 92:2e:f7:f0:42:65:0a:01:72:ed:45:ab:f1:ce:01: 95:0f:23:c0:7d:64:31:cb:57:78:cf:e3:45:b8:55: 55:de:87:a6:24:df:57:84:8a:3e:b7:74:60:53:be: 8d:b0:fa:36:15:a7:e5:e2:99:b7:49:46:f3:8e:3f: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:06:83:60:0A:09:DE:B4:53:94:9A:48:40:12:04:42:67:40:7F X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:93:33:e4:45:83:79:28:06:42:b3:a4:36:87:a5:61:44:6a: 97:07:d7:4d:ba:5c:55:95:71:5e:24:53:9a:50:75:80:71:ee: 2a:03:86:7c:d3:a9:57:5b:9f:ed:bc:a0:25:3e:bc:c2:3c:1b: 46:85:3f:94:34:7f:4e:c8:e8:c5:b4:17:02:66:22:82:6d:15: 4e:af:0c:a7:cc:e8:de:a8:f2:f7:3d:03:07:56:b2:e6:c2:51: bf:32:ed:24:8c:a9:6b:d0:fb:48:56:f6:32:e9:5e:29:c8:eb: d1:eb:56:f8:36:ba:b7:e8:fd:3d:cd:14:9f:71:ef:03:01:3f: 61:6d:fb:b6:14:02:0f:5a:ba:2a:ae:92:b1:66:2f:29:2d:17: dc:b5:52:8f:05:5d:a3:6e:ef:f9:1b:ac:43:b7:1e:02:56:36: db:cd:e4:6f:ce:30:fa:c6:5c:39:51:b6:6f:ca:17:1f:de:d3: f3:83:a0:98:c3:80:01:82:5d:29:45:85:fe:43:22:39:92:21: 18:7e:c7:10:b0:96:f4:ce:d6:3f:57:76:f1:43:08:d3:91:a9: 15:9c:d2:15:39:2e:97:6f:81:06:a9:77:da:f2:0e:fa:ce:8e: f5:e8:f5:c6:a6:84:ad:98:78:1a:42:40:be:66:fc:9e:90:e5: f9:c8:94:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZP63mF8qwHgEeT7b94gU7pAGWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA2MDQwMjI1MDFaFw0yNTA2MDcxMDIzMDFaMDMxMTAvBgNV BAMTKDJCQTIwNjgzNjAwQTA5REVCNDUzOTQ5QTQ4NDAxMjA0NDI2NzQwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDG/x2lQa1NeX03lRFPbJT+3li 4BPKH464aRjsvvwXJ3URL0OGvM+Cu1CDtY7cPFCJyn/mrlNNomtmfd/76wfo10Kb 4xxBZN4fGsQzP+3lZx5gyCdccqyuYdl5qIZt4q/PnCpz1TSXxf9LsNRZIihJHRId Au6c24XzFScTzUThjwrOIeooWhnIsJMdFzBJNhV+K7zrEUVJ6988Q8Ho/XIYuzwS kbrq1cxpxVa8ZVlTPQ0VKZ6hgoV65hau7Cv70KPpUZIu9/BCZQoBcu1Fq/HOAZUP I8B9ZDHLV3jP40W4VVXeh6Yk31eEij63dGBTvo2w+jYVp+XimbdJRvOOP/F7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6IGg2AKCd60U5SaSEASBEJnQH8wHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOTM+RFg3koBkKzpDaHpWFEapcH1026XFWV cV4kU5pQdYBx7ioDhnzTqVdbn+28oCU+vMI8G0aFP5Q0f07I6MW0FwJmIoJtFU6v DKfM6N6o8vc9AwdWsubCUb8y7SSMqWvQ+0hW9jLpXinI69HrVvg2urfo/T3NFJ9x 7wMBP2Ft+7YUAg9auiqukrFmLyktF9y1Uo8FXaNu7/kbrEO3HgJWNtvN5G/OMPrG XDlRtm/KFx/e0/ODoJjDgAGCXSlFhf5DIjmSIRh+xxCwlvTO1j9XdvFDCNORqRWc 0hU5LpdvgQapd9ryDvrOjvXo9camhK2YeBpCQL5m/J6Q5fnIlNI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:30 2025 by rpki-client