$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: kDuJ8iKDw1MvHEaBkMQJQOH/KWYku4bNmQpT3hDO+rM= Subject key identifier: 2E:E4:30:1F:AC:47:80:64:59:A4:09:50:0B:D6:5E:3C:06:DE:03:F6 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 03580888B681C560062EA71B179B483AAE541620 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: A0 Signing time: Wed 04 Jun 2025 10:51:27 +0000 Manifest this update: Wed 04 Jun 2025 10:46:27 +0000 Manifest next update: Sat 07 Jun 2025 11:27:27 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: OFsgwBZk+9JveBcqzDBG7xOlUyb3Hx+cggm0ATBC40s=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:58:08:88:b6:81:c5:60:06:2e:a7:1b:17:9b:48:3a:ae:54:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Jun 4 10:46:27 2025 GMT Not After : Jun 7 11:27:27 2025 GMT Subject: CN=2EE4301FAC47806459A409500BD65E3C06DE03F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:fd:17:7d:1f:5c:e8:ad:29:a5:9a:ea:30: 9c:27:1e:f7:b4:07:7a:5e:a9:f6:cb:63:54:4c:0b: b7:c2:c8:8b:c9:42:11:b9:da:bc:2b:45:54:4c:a7: ae:de:43:60:00:aa:ab:e7:25:dd:d6:4e:25:0f:24: 40:f2:99:fc:6d:1d:a2:22:3c:93:de:9e:ed:1d:15: ef:b4:6c:ab:0a:20:a0:98:98:ad:dd:c4:3f:31:ef: 9b:96:8f:b1:01:ae:81:de:56:0b:7b:d9:b4:eb:d1: b0:83:8d:5f:5d:77:ee:64:65:60:c7:f3:6d:d9:00: 6f:fb:6b:f7:5b:70:63:a2:e6:67:de:2f:cd:36:36: 55:05:22:11:f2:0e:61:04:00:67:c9:8f:88:c1:b2: 60:b2:f6:dd:cf:d2:d1:ea:b3:0d:88:8a:24:db:d9: d2:2b:b0:56:2a:ed:2a:f7:e7:7a:31:e5:21:d9:dc: 6d:e6:87:f5:49:89:28:22:b0:94:3e:d0:32:c3:9c: 13:d5:a5:93:d9:11:f8:66:bd:27:53:9d:ce:4c:c0: 48:86:26:78:e4:6f:03:9c:c6:05:be:e5:2e:bf:a4: 63:65:63:32:3e:23:a3:79:96:24:17:b7:a3:16:64: 45:33:f0:63:a1:7c:bb:c9:77:82:46:cc:51:87:9b: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:30:1F:AC:47:80:64:59:A4:09:50:0B:D6:5E:3C:06:DE:03:F6 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bb:6b:e1:0f:48:ec:f5:10:c5:18:d4:c1:2a:3d:ad:d3:21: f0:36:18:cc:22:42:c5:95:bd:f1:30:69:55:45:16:d7:66:e5: d0:1e:c0:69:64:e7:cd:c8:32:f6:20:6d:b9:e4:0b:f5:9d:1f: c5:96:b4:63:f5:11:7f:de:c0:20:45:68:b3:14:37:d8:0d:eb: 75:43:30:9b:1d:5f:94:f8:95:f7:4b:73:20:41:bb:55:bb:3d: 84:8f:61:60:68:24:ca:46:7b:c9:44:df:98:f1:a6:35:2d:66: 5b:6d:3f:dd:38:1d:ab:33:c1:06:1d:a6:84:08:06:95:a2:72: b8:fd:e3:5a:b5:09:84:c8:da:a5:a2:6b:f1:ae:9f:ed:a9:47: c3:35:22:b5:06:d8:09:7a:58:9b:e5:bd:ec:d8:56:2e:d8:aa: 10:49:52:3b:7a:4e:7f:ce:7b:b4:67:1e:5a:94:93:c3:7d:f6: f9:d4:90:3e:d5:de:f4:10:e2:c4:f6:c3:25:6f:88:3d:97:27: d7:09:b8:6c:a0:83:04:8d:17:92:2e:67:65:6d:fc:da:e3:c3: 20:ba:76:bd:64:95:fc:5c:0d:62:a5:c9:da:a7:5d:ac:cd:21: e1:cf:d9:a2:cc:03:6a:f3:57:cc:43:75:09:12:ab:9f:f8:0f: 13:00:32:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1gIiLaBxWAGLqcbF5tIOq5UFiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA2MDQxMDQ2MjdaFw0yNTA2MDcxMTI3MjdaMDMxMTAvBgNV BAMTKDJFRTQzMDFGQUM0NzgwNjQ1OUE0MDk1MDBCRDY1RTNDMDZERTAzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWf0XfR9c6K0ppZrqMJwnHve0 B3peqfbLY1RMC7fCyIvJQhG52rwrRVRMp67eQ2AAqqvnJd3WTiUPJEDymfxtHaIi PJPenu0dFe+0bKsKIKCYmK3dxD8x75uWj7EBroHeVgt72bTr0bCDjV9dd+5kZWDH 823ZAG/7a/dbcGOi5mfeL802NlUFIhHyDmEEAGfJj4jBsmCy9t3P0tHqsw2IiiTb 2dIrsFYq7Sr353ox5SHZ3G3mh/VJiSgisJQ+0DLDnBPVpZPZEfhmvSdTnc5MwEiG JnjkbwOcxgW+5S6/pGNlYzI+I6N5liQXt6MWZEUz8GOhfLvJd4JGzFGHm69PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULuQwH6xHgGRZpAlQC9ZePAbeA/YwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG67a+EPSOz1EMUY1MEqPa3TIfA2GMwiQsWV vfEwaVVFFtdm5dAewGlk583IMvYgbbnkC/WdH8WWtGP1EX/ewCBFaLMUN9gN63VD MJsdX5T4lfdLcyBBu1W7PYSPYWBoJMpGe8lE35jxpjUtZlttP904HaszwQYdpoQI BpWicrj941q1CYTI2qWia/Gun+2pR8M1IrUG2Al6WJvlvezYVi7YqhBJUjt6Tn/O e7RnHlqUk8N99vnUkD7V3vQQ4sT2wyVviD2XJ9cJuGyggwSNF5IuZ2Vt/NrjwyC6 dr1klfxcDWKlydqnXazNIeHP2aLMA2rzV8xDdQkSq5/4DxMAMsE= -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:40 2025 by rpki-client