$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: cX7ab5f5T9txgSOZ9VoVq+jMIn1jxtSvCpu74e4mwAU= Subject key identifier: FF:7A:46:E1:8A:DF:A4:5D:85:69:C6:87:19:E7:FC:90:37:BF:48:75 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 16742C055DC747CD4E5EE695EF11A1894249A556 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 010A Signing time: Sat 07 Jun 2025 02:40:38 +0000 Manifest this update: Sat 07 Jun 2025 02:35:38 +0000 Manifest next update: Tue 10 Jun 2025 03:12:38 +0000 Files and hashes: 1: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 2: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: tiFqLOzyEbRSX0UvEsAQv1RLq+0nQ6AKLeCznaizTnE=) 3: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:2c:05:5d:c7:47:cd:4e:5e:e6:95:ef:11:a1:89:42:49:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Jun 7 02:35:38 2025 GMT Not After : Jun 10 03:12:38 2025 GMT Subject: CN=FF7A46E18ADFA45D8569C68719E7FC9037BF4875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:5c:52:b5:81:ff:9a:39:ed:c8:a7:f6:21: 16:bb:4e:22:f2:86:ff:1c:5e:66:9e:d6:0e:60:fd: d5:0d:1a:63:ee:3e:39:3d:39:c0:40:2e:e2:62:2a: ac:e6:1e:67:13:09:7b:12:01:79:3c:03:91:61:4c: 25:63:ad:94:c9:46:f6:40:cb:d5:e2:7b:45:f8:4d: 9c:c7:65:f7:1b:5a:11:0c:55:e8:4e:6f:4c:69:17: 00:e8:6f:ee:aa:5d:76:ce:f9:8c:8c:22:1f:a2:72: 22:22:36:5d:1c:a7:9e:8d:a2:37:eb:fb:0f:5f:af: d4:df:26:23:a1:24:7f:6c:f1:f8:eb:24:90:2e:4f: d0:cd:7f:11:7b:78:89:8c:80:ef:1f:97:66:3f:d8: 3b:ba:92:75:59:42:01:a9:4f:6d:08:cd:51:cb:4a: 11:76:8d:2f:31:64:c3:6b:9a:1c:7e:83:1b:8a:c6: 36:bc:ec:9c:d1:0b:8a:90:bf:40:cf:c8:e6:78:46: 1c:a9:15:3f:1f:73:34:86:32:3b:9d:86:e2:58:53: 32:f0:52:ef:43:f3:aa:d6:6d:a1:cf:cc:52:39:11: b7:56:dc:4d:05:4f:ca:34:ac:a4:b7:6b:fb:7e:97: 48:2d:9c:01:c1:04:bb:f8:67:50:eb:01:5a:83:f8: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7A:46:E1:8A:DF:A4:5D:85:69:C6:87:19:E7:FC:90:37:BF:48:75 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e4:17:6d:c4:68:5e:bf:7c:5d:d6:6a:d6:58:72:b2:8b:9a: d8:91:c3:12:32:58:9f:76:d3:36:dd:53:e0:3c:2a:b7:ea:f8: 08:b5:57:8b:14:16:cc:8a:4b:fe:63:fc:c2:8c:da:6b:1a:1f: 93:c0:03:ba:21:2e:d2:e8:03:5e:20:cc:dc:67:d2:1d:1a:17: ad:40:f1:b8:eb:93:8d:11:2a:cb:3d:dd:5d:54:11:b8:60:52: 76:f9:1c:2a:26:7c:82:31:9c:f8:f3:d3:a4:25:38:80:2d:44: eb:48:0b:de:d1:2e:81:87:19:a0:b4:c6:fd:5e:af:48:5e:73: 20:11:94:79:2d:89:bb:87:3b:f0:6b:2e:e8:79:01:4f:47:6e: bd:7e:c5:04:39:fb:04:ef:3f:36:64:85:e9:83:89:15:6c:44: 0e:23:71:f9:87:59:98:d0:dc:6a:54:89:cc:9c:be:d3:50:9f: fc:98:de:20:da:3d:9d:dc:97:30:87:86:37:a0:62:51:46:3c: de:68:e0:82:61:03:32:e1:cb:09:8a:40:20:10:f9:9d:cf:40: 1c:b7:86:78:0e:ae:9d:13:64:c1:07:12:71:a7:b5:b6:6a:83: 11:36:3a:1a:de:56:d6:a6:c6:89:2d:bd:1b:90:2c:25:be:2e: 5b:64:68:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnQsBV3HR81OXuaV7xGhiUJJpVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA2MDcwMjM1MzhaFw0yNTA2MTAwMzEyMzhaMDMxMTAvBgNV BAMTKEZGN0E0NkUxOEFERkE0NUQ4NTY5QzY4NzE5RTdGQzkwMzdCRjQ4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl1xStYH/mjntyKf2IRa7TiLy hv8cXmae1g5g/dUNGmPuPjk9OcBALuJiKqzmHmcTCXsSAXk8A5FhTCVjrZTJRvZA y9Xie0X4TZzHZfcbWhEMVehOb0xpFwDob+6qXXbO+YyMIh+iciIiNl0cp56Nojfr +w9fr9TfJiOhJH9s8fjrJJAuT9DNfxF7eImMgO8fl2Y/2Du6knVZQgGpT20IzVHL ShF2jS8xZMNrmhx+gxuKxja87JzRC4qQv0DPyOZ4RhypFT8fczSGMjudhuJYUzLw Uu9D86rWbaHPzFI5EbdW3E0FT8o0rKS3a/t+l0gtnAHBBLv4Z1DrAVqD+NhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3pG4YrfpF2FacaHGef8kDe/SHUwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTkF23EaF6/fF3WatZYcrKLmtiRwxIyWJ92 0zbdU+A8Krfq+Ai1V4sUFsyKS/5j/MKM2msaH5PAA7ohLtLoA14gzNxn0h0aF61A 8bjrk40RKss93V1UEbhgUnb5HComfIIxnPjz06QlOIAtROtIC97RLoGHGaC0xv1e r0hecyARlHktibuHO/BrLuh5AU9Hbr1+xQQ5+wTvPzZkhemDiRVsRA4jcfmHWZjQ 3GpUicycvtNQn/yY3iDaPZ3clzCHhjegYlFGPN5o4IJhAzLhywmKQCAQ+Z3PQBy3 hngOrp0TZMEHEnGntbZqgxE2OhreVtamxoktvRuQLCW+LltkaGw= -----END CERTIFICATE-----Generated at Sat Jun 7 19:52:41 2025 by rpki-client