$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: 7wKlO5vJdHAdyh8n0BP0DpUCxjNcf7horyUWAlYZkrY= Subject key identifier: D4:D0:64:35:C2:52:89:DF:37:2C:AA:B4:0C:22:48:28:C2:58:99:43 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 6E4EBAAF136921DCBDCC9FA5B68BD108A0DF33C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: F6 Signing time: Tue 03 Jun 2025 14:41:13 +0000 Manifest this update: Tue 03 Jun 2025 14:36:13 +0000 Manifest next update: Fri 06 Jun 2025 17:47:13 +0000 Files and hashes: 1: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) 2: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) 3: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: pwmWN65QoK2XPBxx1a1iijzddC3Cvl9oLTuaCYrlV48=) 4: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: ri6zVldaGRpOaYEv3osVBPZnxBBgRNJX89+3uDFPHP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4e:ba:af:13:69:21:dc:bd:cc:9f:a5:b6:8b:d1:08:a0:df:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Jun 3 14:36:13 2025 GMT Not After : Jun 6 17:47:13 2025 GMT Subject: CN=D4D06435C25289DF372CAAB40C224828C2589943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:14:db:7c:07:b5:14:c0:72:fc:6c:25:cd: 98:c8:02:d7:cd:90:db:63:d0:22:d0:b7:5c:2a:3c: 98:9a:bb:b9:b3:66:9a:a0:45:30:b6:02:83:b8:00: 1d:7e:53:e9:38:8e:f2:e8:5e:90:2b:f1:af:7e:7d: 2a:bf:f8:78:c6:dd:78:e7:3b:5b:40:ae:6d:b9:21: 96:70:2f:e0:aa:24:24:16:24:d1:dc:e0:48:dd:43: c3:b8:00:a0:9c:32:b2:af:52:3b:d7:35:8a:33:49: 94:ec:47:33:f6:6e:3b:a0:dc:98:2a:6e:2d:97:95: a3:d9:ad:59:bc:2c:c7:9b:ef:20:4b:c1:12:91:ae: 18:49:0c:8c:5d:38:5d:c9:e2:fb:d4:0c:9e:73:3b: 0f:3a:73:ad:93:1e:27:c7:26:be:52:5b:89:2d:df: 46:2c:84:4b:4f:17:da:46:31:8a:d0:6e:81:de:74: e2:9b:c3:79:cd:7f:25:e5:fa:ed:5b:17:1f:4c:12: 9a:78:cf:42:c9:5c:5e:b7:2a:99:63:cb:19:4a:78: 44:87:13:b0:2b:c1:bd:e5:34:cf:d9:11:72:5d:f3: 90:a6:df:53:8d:6b:fa:fb:f9:f5:03:be:80:5d:81: c9:89:d6:e4:1d:2a:06:e5:81:b2:2e:0c:98:38:c5: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:64:35:C2:52:89:DF:37:2C:AA:B4:0C:22:48:28:C2:58:99:43 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:94:29:d8:eb:cf:e1:45:ca:67:56:05:e1:16:e8:9e:c2:a5: 29:25:c9:99:7e:76:e4:f8:a8:5f:50:5a:63:ed:45:60:53:4d: 7e:c6:7d:68:79:71:78:e2:fc:e2:c3:77:43:c9:ba:71:9c:3c: 18:da:d8:02:77:0f:2f:5d:ec:6f:dc:32:58:27:7f:20:cb:6b: f3:1b:40:28:fd:0c:14:c7:ec:4d:2d:4e:fc:39:30:88:57:e5: 40:00:be:ca:40:48:59:1e:b6:57:aa:25:e9:ec:52:fb:f6:34: f9:78:5e:bd:1e:ed:8e:9c:93:b5:64:4c:3e:ad:72:29:df:44: a0:2f:c7:55:ba:b5:4c:8d:5b:c4:33:04:14:46:40:59:07:d6: 6b:4a:e5:54:50:5a:35:83:69:17:79:5e:91:0b:fe:0d:f5:50: a1:3c:6d:25:85:8e:39:07:24:63:3e:f1:33:d9:5b:88:14:ea: 2b:e4:0f:23:92:93:09:aa:6b:d8:0e:50:5c:99:0b:09:e1:32: bf:e1:f7:42:39:45:83:8f:67:62:17:ac:10:1e:f0:9d:48:d7: cb:cb:29:81:ba:df:98:b1:42:86:c2:ff:bd:52:14:41:86:d3: 24:4b:bb:ad:a3:8c:f1:98:29:23:8d:5c:43:ed:e1:96:e9:c0: 3f:65:43:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbk66rxNpIdy9zJ+ltovRCKDfM8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA2MDMxNDM2MTNaFw0yNTA2MDYxNzQ3MTNaMDMxMTAvBgNV BAMTKEQ0RDA2NDM1QzI1Mjg5REYzNzJDQUFCNDBDMjI0ODI4QzI1ODk5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHhTbfAe1FMBy/GwlzZjIAtfN kNtj0CLQt1wqPJiau7mzZpqgRTC2AoO4AB1+U+k4jvLoXpAr8a9+fSq/+HjG3Xjn O1tArm25IZZwL+CqJCQWJNHc4EjdQ8O4AKCcMrKvUjvXNYozSZTsRzP2bjug3Jgq bi2XlaPZrVm8LMeb7yBLwRKRrhhJDIxdOF3J4vvUDJ5zOw86c62THifHJr5SW4kt 30YshEtPF9pGMYrQboHedOKbw3nNfyXl+u1bFx9MEpp4z0LJXF63KpljyxlKeESH E7Arwb3lNM/ZEXJd85Cm31ONa/r7+fUDvoBdgcmJ1uQdKgblgbIuDJg4xVX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NBkNcJSid83LKq0DCJIKMJYmUMwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6UKdjrz+FFymdWBeEW6J7CpSklyZl+duT4 qF9QWmPtRWBTTX7GfWh5cXji/OLDd0PJunGcPBja2AJ3Dy9d7G/cMlgnfyDLa/Mb QCj9DBTH7E0tTvw5MIhX5UAAvspASFketleqJensUvv2NPl4Xr0e7Y6ck7VkTD6t cinfRKAvx1W6tUyNW8QzBBRGQFkH1mtK5VRQWjWDaRd5XpEL/g31UKE8bSWFjjkH JGM+8TPZW4gU6ivkDyOSkwmqa9gOUFyZCwnhMr/h90I5RYOPZ2IXrBAe8J1I18vL KYG635ixQobC/71SFEGG0yRLu62jjPGYKSONXEPt4ZbpwD9lQ00= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:10 2025 by rpki-client