$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: HsfMS8uBxSPTXFt6PDorDzclkrJuNv9bahodJJCt9Gc= Subject key identifier: 1E:F6:06:BC:CB:F7:3C:B7:11:E2:67:FA:61:6B:47:18:A2:6B:42:DC Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 24857E8436E1C5386033E65AFC9408CE801CB39E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 033E Signing time: Mon 02 Jun 2025 02:44:58 +0000 Manifest this update: Mon 02 Jun 2025 02:39:58 +0000 Manifest next update: Thu 05 Jun 2025 07:37:58 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: j2LePaA0CyqbGJCuGkmdEIXhRL8HZ3RHNLz/rBR/g/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:85:7e:84:36:e1:c5:38:60:33:e6:5a:fc:94:08:ce:80:1c:b3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jun 2 02:39:58 2025 GMT Not After : Jun 5 07:37:58 2025 GMT Subject: CN=1EF606BCCBF73CB711E267FA616B4718A26B42DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:22:f5:ff:e3:99:c5:64:71:3b:9c:c8:a7: bf:04:1d:ba:73:ba:48:70:7a:8c:fe:fb:60:56:f0: 2a:a4:95:0a:a0:5b:70:dd:ef:64:4d:e4:d1:70:37: 33:1a:cf:6b:7f:85:13:50:0a:7c:18:8f:c2:f1:82: 30:c6:6c:ff:20:87:16:40:f2:07:83:d4:3a:11:5e: e7:58:75:75:fe:bb:1b:cb:0a:96:1f:bc:a3:e0:75: f5:ee:f6:6f:a1:4b:f1:32:65:bd:45:7c:48:82:71: 1a:24:2c:d6:f9:a6:66:2e:2b:b1:96:60:6c:02:fc: 05:eb:41:2f:b8:0d:2d:eb:ec:e2:40:ea:b8:e6:68: 16:3d:ec:1a:d6:e4:14:73:5a:fe:0a:8c:f1:48:92: 5d:30:82:51:14:a1:5e:cf:4d:09:4d:7b:16:9f:11: ad:17:eb:3b:4a:6b:1a:8b:c2:e1:ed:c7:01:1b:da: 45:6b:6b:97:c1:f4:53:2a:b9:a9:c0:36:f6:09:50: 70:c5:da:c5:8c:08:af:9c:5f:c8:82:0e:b5:f4:db: 5c:46:46:f7:22:f3:93:48:3a:39:0f:24:9a:b5:e2: 83:03:a8:b4:d5:8f:cf:22:cf:5a:fb:28:d7:ab:81: 53:5d:4a:87:db:52:68:2b:f2:c0:28:eb:40:de:c5: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F6:06:BC:CB:F7:3C:B7:11:E2:67:FA:61:6B:47:18:A2:6B:42:DC X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bf:1f:2b:b8:82:a8:3f:fd:9b:d9:6f:3a:58:a8:12:92:39: 45:8e:f0:6b:e2:26:56:81:94:5d:1a:5b:fc:fb:48:5e:87:14: a2:65:d0:3f:7f:f2:8c:57:d0:a2:57:b8:c5:2d:48:f5:e7:c3: 8e:fa:f6:49:71:4b:1b:f2:27:05:6d:62:a7:41:fd:3f:a0:57: 72:ab:48:1b:c1:f2:ab:89:42:69:be:c6:1d:7a:e0:c8:32:ff: 59:59:d5:38:79:b3:50:8e:82:66:e1:ef:a2:59:9d:ac:5d:27: fa:e8:3f:c7:fe:66:44:0d:5a:f5:74:c7:b4:db:0a:24:94:04: 7d:d2:87:30:5e:25:6e:97:1f:66:e9:28:f0:78:44:fa:7e:ec: e8:d6:16:01:1f:47:d3:98:67:18:8c:fe:ae:f5:d6:c5:8e:9e: a7:04:ae:ca:7d:01:97:0e:42:b1:d9:65:3b:0b:01:f5:22:71: 46:c9:b3:61:a3:86:eb:af:9e:fd:52:d7:bd:81:7f:bf:19:85: 58:7d:d7:77:75:74:a8:36:2e:89:9b:d1:85:5d:92:dd:fe:32: ab:b9:36:1a:53:9c:ea:29:54:8c:d5:de:88:bf:a9:2d:86:95: cd:c0:25:85:0f:16:60:b9:c6:0a:42:dc:77:22:96:26:b2:a6: 87:96:d6:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIV+hDbhxThgM+Za/JQIzoAcs54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA2MDIwMjM5NThaFw0yNTA2MDUwNzM3NThaMDMxMTAvBgNV BAMTKDFFRjYwNkJDQ0JGNzNDQjcxMUUyNjdGQTYxNkI0NzE4QTI2QjQyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnCL1/+OZxWRxO5zIp78EHbpz ukhweoz++2BW8CqklQqgW3Dd72RN5NFwNzMaz2t/hRNQCnwYj8LxgjDGbP8ghxZA 8geD1DoRXudYdXX+uxvLCpYfvKPgdfXu9m+hS/EyZb1FfEiCcRokLNb5pmYuK7GW YGwC/AXrQS+4DS3r7OJA6rjmaBY97BrW5BRzWv4KjPFIkl0wglEUoV7PTQlNexaf Ea0X6ztKaxqLwuHtxwEb2kVra5fB9FMquanANvYJUHDF2sWMCK+cX8iCDrX021xG Rvci85NIOjkPJJq14oMDqLTVj88iz1r7KNergVNdSofbUmgr8sAo60DexfWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvYGvMv3PLcR4mf6YWtHGKJrQtwwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK/Hyu4gqg//ZvZbzpYqBKSOUWO8GviJlaB lF0aW/z7SF6HFKJl0D9/8oxX0KJXuMUtSPXnw4769klxSxvyJwVtYqdB/T+gV3Kr SBvB8quJQmm+xh164Mgy/1lZ1Th5s1COgmbh76JZnaxdJ/roP8f+ZkQNWvV0x7Tb CiSUBH3ShzBeJW6XH2bpKPB4RPp+7OjWFgEfR9OYZxiM/q711sWOnqcErsp9AZcO QrHZZTsLAfUicUbJs2Gjhuuvnv1S172Bf78ZhVh913d1dKg2Lomb0YVdkt3+Mqu5 NhpTnOopVIzV3oi/qS2Glc3AJYUPFmC5xgpC3HciliaypoeW1s0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:22 2025 by rpki-client