$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: pG+sOhjSAM0Lk0yqiHlibXQVLrDDlloFa6KvXC9dkRE= Subject key identifier: BE:CC:CB:5B:74:91:92:37:35:12:E4:22:62:6C:7F:0D:5B:A3:F4:B4 Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 79B435642DFC51000384120EF3E3ED8FBF695205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 0197 Signing time: Sat 07 Jun 2025 00:12:08 +0000 Manifest this update: Sat 07 Jun 2025 00:07:08 +0000 Manifest next update: Tue 10 Jun 2025 02:10:08 +0000 Files and hashes: 1: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 2: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) 3: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: zXH1wi+LbeRcba2jCfvMAeGTxiUFmIXdIVdq8s3PLbs=) 4: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b4:35:64:2d:fc:51:00:03:84:12:0e:f3:e3:ed:8f:bf:69:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Jun 7 00:07:08 2025 GMT Not After : Jun 10 02:10:08 2025 GMT Subject: CN=BECCCB5B749192373512E422626C7F0D5BA3F4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:eb:05:cd:b4:c1:d4:09:aa:0f:6e:25:c9: 8f:7d:6c:2f:1f:28:6b:33:d6:53:8b:1c:f0:29:8a: 82:fe:71:8a:15:54:fe:55:e9:67:99:38:49:f8:e1: 5d:b2:88:72:2f:ed:15:0d:c5:bb:d1:40:0e:65:d4: 47:2a:4d:7d:41:b6:bd:f3:99:b7:c3:c1:35:0b:ef: 37:65:54:7f:0d:40:c4:14:55:60:d6:7c:2c:22:c8: bc:e3:99:5d:1d:fb:8b:c0:d2:ae:e4:06:1b:06:06: 3f:cc:1f:d0:09:88:54:a2:a1:56:a0:a1:d2:96:22: 16:68:78:19:79:0a:e9:1d:e8:26:ab:db:a1:5a:61: a2:14:70:f4:80:dd:fa:ba:45:83:07:ac:dc:f3:6e: 47:dc:80:5a:7a:c6:46:d4:25:fd:db:24:c1:89:0e: d1:77:02:d9:cf:a7:18:84:4d:cb:cd:76:96:f1:40: 9e:b8:c9:71:5f:32:2f:11:43:9c:92:72:47:85:00: cb:ab:07:aa:d0:5e:eb:63:12:c6:ca:8a:ea:4a:7a: 96:e2:8b:41:20:dc:33:94:c6:fa:8e:69:c3:0c:e4: 06:08:78:6f:ac:f7:b6:51:a6:42:fb:e9:22:7b:33: 0a:59:9c:39:37:84:52:8b:a4:01:07:56:b5:3e:4e: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CC:CB:5B:74:91:92:37:35:12:E4:22:62:6C:7F:0D:5B:A3:F4:B4 X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a9:80:e2:90:99:64:25:32:c5:19:b6:5d:69:e2:87:00:42: 65:0e:98:3c:3c:dc:72:43:ce:01:59:9e:4b:ec:03:a9:a1:b7: e5:7b:50:ba:cb:cf:c3:55:20:0a:cb:1c:83:e6:b9:49:91:73: 57:d1:2d:5b:a4:b7:2b:a5:eb:bc:67:3a:60:03:1a:fd:2c:d8: 62:a0:59:23:a9:01:d2:6f:9c:cb:bb:f7:23:70:e9:86:58:81: 51:1c:41:b5:f4:e9:49:21:8e:32:c4:ed:dd:f9:b9:57:06:ea: d7:42:22:0d:cd:5f:8a:5c:6b:a1:04:a9:ea:3a:9b:bd:a8:3e: 44:4b:c9:6e:5b:ba:71:64:c8:5c:e6:51:c7:36:95:aa:48:00: 42:b0:7f:54:45:cb:cd:0f:58:bb:df:2e:e8:ca:4e:86:cd:58: b1:6b:cd:d6:6a:20:49:bd:ab:4d:02:f8:f6:5a:8b:f5:c4:ed: 11:0b:1a:75:c2:c2:5b:c3:c4:5a:a4:9f:6f:af:ec:3a:8a:e4: e5:cb:f2:27:3a:47:0b:82:61:0a:dd:65:54:57:63:a6:2a:14: 9d:59:b7:2b:37:f5:f3:d0:7d:f7:7a:ad:8c:d0:cf:2d:ee:ac: a4:45:aa:b5:eb:2a:dc:4e:53:c2:4a:18:89:fb:16:6a:f1:5d: 34:c5:73:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebQ1ZC38UQADhBIO8+Ptj79pUgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTA2MDcwMDA3MDhaFw0yNTA2MTAwMjEwMDhaMDMxMTAvBgNV BAMTKEJFQ0NDQjVCNzQ5MTkyMzczNTEyRTQyMjYyNkM3RjBENUJBM0Y0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCae+sFzbTB1AmqD24lyY99bC8f KGsz1lOLHPApioL+cYoVVP5V6WeZOEn44V2yiHIv7RUNxbvRQA5l1EcqTX1Btr3z mbfDwTUL7zdlVH8NQMQUVWDWfCwiyLzjmV0d+4vA0q7kBhsGBj/MH9AJiFSioVag odKWIhZoeBl5Cukd6Car26FaYaIUcPSA3fq6RYMHrNzzbkfcgFp6xkbUJf3bJMGJ DtF3AtnPpxiETcvNdpbxQJ64yXFfMi8RQ5ySckeFAMurB6rQXutjEsbKiupKepbi i0Eg3DOUxvqOacMM5AYIeG+s97ZRpkL76SJ7MwpZnDk3hFKLpAEHVrU+Tg29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvszLW3SRkjc1EuQiYmx/DVuj9LQwHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWpgOKQmWQlMsUZtl1p4ocAQmUOmDw83HJD zgFZnkvsA6mht+V7ULrLz8NVIArLHIPmuUmRc1fRLVuktyul67xnOmADGv0s2GKg WSOpAdJvnMu79yNw6YZYgVEcQbX06UkhjjLE7d35uVcG6tdCIg3NX4pca6EEqeo6 m72oPkRLyW5bunFkyFzmUcc2lapIAEKwf1RFy80PWLvfLujKTobNWLFrzdZqIEm9 q00C+PZai/XE7RELGnXCwlvDxFqkn2+v7DqK5OXL8ic6RwuCYQrdZVRXY6YqFJ1Z tys39fPQffd6rYzQzy3urKRFqrXrKtxOU8JKGIn7FmrxXTTFc0Y= -----END CERTIFICATE-----Generated at Sun Jun 8 05:23:44 2025 by rpki-client