$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: JFwwE7HmmYJJ1ishokLhT/1tS66TbIWGZ7nPS5jBCis= Subject key identifier: 87:31:88:63:68:72:96:40:4B:40:03:D0:0A:7D:F4:3E:65:35:E9:A5 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 1AA75E0E51410ADB4F601AFB50E964B12FE3131F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 9B Signing time: Thu 05 Jun 2025 19:02:43 +0000 Manifest this update: Thu 05 Jun 2025 18:57:43 +0000 Manifest next update: Sun 08 Jun 2025 19:53:43 +0000 Files and hashes: 1: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: tRZszR2wXYI2jbVBidxTi18Hwe/uNGUjchrs7KeYNr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a7:5e:0e:51:41:0a:db:4f:60:1a:fb:50:e9:64:b1:2f:e3:13:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Jun 5 18:57:43 2025 GMT Not After : Jun 8 19:53:43 2025 GMT Subject: CN=87318863687296404B4003D00A7DF43E6535E9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:5f:f2:0b:38:37:b3:90:89:3b:38:27:94: e1:77:00:e6:16:8f:ae:f3:76:7b:cc:3e:81:56:b8: f3:b2:01:91:ef:a2:1f:c3:47:90:e6:61:64:d1:42: 74:42:0e:6f:09:86:fa:03:e5:8b:3e:39:ba:b5:81: bb:52:d1:0c:22:6d:00:9f:00:31:0f:6f:02:ee:24: 4e:59:6a:11:92:b8:48:c5:27:a4:5c:5b:e0:5b:48: f1:49:65:33:39:01:3d:8f:53:14:e9:69:eb:10:3c: 77:03:24:04:14:ba:45:ad:87:36:9e:af:d0:fb:28: 74:da:d3:73:d3:f5:e9:11:ff:60:df:48:3c:af:16: 36:55:49:66:42:94:d1:49:b2:9d:ad:49:55:2a:92: 25:b1:9e:df:8b:21:55:41:13:a7:06:68:f1:f8:08: c1:8c:48:18:96:33:f0:f8:c6:6f:79:56:ee:34:d0: 11:af:e1:c4:a1:6b:1e:59:25:76:93:9e:04:22:90: bc:29:b3:9f:51:7d:3a:af:e3:58:0d:7e:c4:14:88: 12:2a:4a:d2:64:1f:f5:03:c5:77:d6:f0:a3:fc:44: cc:f0:b9:fc:9d:55:b5:11:1e:d5:98:5f:9d:2d:c2: 0e:ae:e7:48:54:5e:08:50:b3:de:6b:72:ed:0f:37: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:31:88:63:68:72:96:40:4B:40:03:D0:0A:7D:F4:3E:65:35:E9:A5 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ab:29:6d:ec:ec:c1:78:d0:69:7d:c3:30:1b:89:dc:a5:24: 43:c5:fe:da:0f:cc:d3:cf:74:38:35:57:30:db:ab:de:ad:5d: b9:32:ec:2d:37:52:bb:83:35:92:51:50:f8:c8:71:db:80:16: 3d:8d:e4:c8:c4:26:b6:b5:68:d9:cb:98:ff:55:20:2b:8d:dc: 56:3b:2c:bc:f6:12:dd:1b:19:c9:9e:36:ca:81:85:5a:2e:04: 05:f4:1f:c3:db:ec:3c:05:de:f2:62:09:59:21:71:3d:8f:8a: a5:94:e6:85:4a:0d:63:b0:37:b1:9a:ea:c5:fb:0a:fa:bb:94: bd:e7:eb:96:3d:43:82:ee:d5:38:2b:e5:06:db:88:10:c8:41: 16:4d:cb:65:42:fb:6d:72:9c:89:ce:3e:ae:17:60:4a:c7:9f: 81:2b:6e:ba:31:3c:38:3d:6c:21:cb:db:48:05:aa:eb:c8:9e: 6f:58:ea:2b:9e:aa:73:f2:b4:99:82:68:b4:ef:3a:0d:0f:2a: 52:3e:82:5b:8c:c3:b0:84:ae:e0:85:89:11:6b:bd:d1:b8:db: 87:12:a4:79:25:67:d8:cf:fd:d4:d0:9a:5f:24:1d:da:51:aa: dc:0c:8e:dc:da:d2:00:18:85:24:5f:77:16:68:c2:df:ca:33: 57:f9:d1:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqdeDlFBCttPYBr7UOlksS/jEx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA2MDUxODU3NDNaFw0yNTA2MDgxOTUzNDNaMDMxMTAvBgNV BAMTKDg3MzE4ODYzNjg3Mjk2NDA0QjQwMDNEMDBBN0RGNDNFNjUzNUU5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDig1/yCzg3s5CJOzgnlOF3AOYW j67zdnvMPoFWuPOyAZHvoh/DR5DmYWTRQnRCDm8JhvoD5Ys+Obq1gbtS0QwibQCf ADEPbwLuJE5ZahGSuEjFJ6RcW+BbSPFJZTM5AT2PUxTpaesQPHcDJAQUukWthzae r9D7KHTa03PT9ekR/2DfSDyvFjZVSWZClNFJsp2tSVUqkiWxnt+LIVVBE6cGaPH4 CMGMSBiWM/D4xm95Vu400BGv4cShax5ZJXaTngQikLwps59RfTqv41gNfsQUiBIq StJkH/UDxXfW8KP8RMzwufydVbURHtWYX50twg6u50hUXghQs95rcu0PN9AxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzGIY2hylkBLQAPQCn30PmU16aUwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCrKW3s7MF40Gl9wzAbidylJEPF/toPzNPP dDg1VzDbq96tXbky7C03UruDNZJRUPjIcduAFj2N5MjEJra1aNnLmP9VICuN3FY7 LLz2Et0bGcmeNsqBhVouBAX0H8Pb7DwF3vJiCVkhcT2PiqWU5oVKDWOwN7Ga6sX7 Cvq7lL3n65Y9Q4Lu1Tgr5QbbiBDIQRZNy2VC+21ynInOPq4XYErHn4ErbroxPDg9 bCHL20gFquvInm9Y6iueqnPytJmCaLTvOg0PKlI+gluMw7CEruCFiRFrvdG424cS pHklZ9jP/dTQml8kHdpRqtwMjtza0gAYhSRfdxZowt/KM1f50Xg= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:45 2025 by rpki-client