$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: 7jF3Vva7PLgBa7nyeGrOEWl7JnsnMXqPmM8Zy4hCeyA= Subject key identifier: 0C:15:2C:4A:3D:A0:AA:07:12:B4:1F:7B:DF:D9:D2:B4:A6:A2:E2:4F Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 07D9ADC661625E4565EBEAE7CF338DA831E86770 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 87 Signing time: Sun 08 Jun 2025 20:40:00 +0000 Manifest this update: Sun 08 Jun 2025 20:35:00 +0000 Manifest next update: Wed 11 Jun 2025 23:17:00 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: 1H3IKAx7UXRMU3wtvDvmP+OHRrM19D65H1BvyoXZOOA=) 2: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: CBQ7BcTAX1WXp7Ylcc4yi/0Cf14WakzZ7YKG6S9yjVU=) 3: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: WdZyFn5A7sgJjqFP/l/6nJAn+QMzXj7r7aTiyUUsllM=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1k/F9QvhsWyHzMYSAMED8rAGgh3NCF/Y7RiQpGt2sak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d9:ad:c6:61:62:5e:45:65:eb:ea:e7:cf:33:8d:a8:31:e8:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Jun 8 20:35:00 2025 GMT Not After : Jun 11 23:17:00 2025 GMT Subject: CN=0C152C4A3DA0AA0712B41F7BDFD9D2B4A6A2E24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:44:1d:58:75:3e:13:73:5a:86:65:38:cb: 88:69:c0:fa:04:8c:1f:07:ee:79:5d:36:a1:49:4f: 53:ae:d3:6d:52:30:a9:50:7e:7e:78:e6:1f:ec:54: 36:00:5a:b0:ef:87:05:4c:b4:69:d7:77:33:ab:b1: 28:47:96:bd:12:90:ca:f6:30:43:e5:85:a0:9d:3a: f6:98:dc:7d:f6:13:85:8d:ec:99:62:08:91:07:a1: f0:0f:3e:82:73:c3:8c:df:c8:50:b9:e3:81:cd:59: 86:53:5f:a0:2c:7b:2d:25:a8:a0:b8:af:02:7c:ad: ca:c5:b7:8e:3b:4b:d3:82:d0:7f:9f:7e:71:11:a0: 2a:f0:24:84:a6:89:57:ff:a1:de:39:d7:44:b2:34: 1e:4b:93:47:e0:ed:68:d4:fd:39:54:d2:3b:e3:ee: 0d:fe:e6:f5:39:62:23:83:f6:bf:3b:73:67:dd:f3: 71:8f:6c:1b:d1:5d:2a:9d:ed:f1:45:d8:d2:6a:11: de:56:c5:dc:32:33:ea:35:7e:86:bc:c9:26:3c:7f: 53:e2:9e:57:bf:a2:b7:90:cc:02:3c:cf:53:00:58: a9:35:77:cf:d6:24:5a:1c:b2:2f:19:be:fc:10:4c: 72:0a:d2:c5:d8:37:ff:c6:96:30:e0:42:22:c7:31: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:2C:4A:3D:A0:AA:07:12:B4:1F:7B:DF:D9:D2:B4:A6:A2:E2:4F X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:df:65:f2:f7:9e:82:93:e1:d9:e8:3d:a3:5e:7d:34:b2:a8: bb:16:bf:12:f2:e3:74:96:c6:92:64:af:36:16:39:e9:1b:bc: b2:88:5d:e9:38:c0:5f:b0:bf:3a:64:36:c2:1d:a6:ea:37:6d: 58:dc:c5:06:72:5f:24:2d:be:bc:2b:b5:86:5e:af:2e:8f:f6: 84:67:e4:9a:ea:16:fc:d5:d5:39:16:ee:aa:1a:7c:a1:19:22: 89:7f:ef:84:60:32:8c:82:27:bf:fd:e4:3b:dd:5d:f4:be:8a: 43:2b:69:59:a6:7e:cc:5a:fd:d9:6a:3b:3b:cd:73:7b:6d:23: 01:bd:0b:0a:a1:24:f1:33:f9:ee:4d:f9:df:29:26:ea:f6:40: a9:41:67:a2:0d:e6:7b:18:ac:2e:c5:c1:ea:8b:7f:1f:d2:83: 01:51:20:a4:81:78:eb:f6:0c:0a:01:70:37:2c:e5:57:a0:41: ef:7d:fe:86:a8:7a:88:90:10:f5:72:f6:45:8f:87:fa:27:28: 54:a3:e1:d2:4a:af:d1:15:6b:64:ec:b8:19:d7:03:75:6b:ce: 7a:cb:6f:1f:61:88:6e:df:e0:cb:21:ab:ff:7f:9c:b9:c0:30: 22:79:2e:e3:b6:94:22:44:2f:71:1a:92:93:dd:94:b3:f2:11: e0:2f:0a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9mtxmFiXkVl6+rnzzONqDHoZ3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTA2MDgyMDM1MDBaFw0yNTA2MTEyMzE3MDBaMDMxMTAvBgNV BAMTKDBDMTUyQzRBM0RBMEFBMDcxMkI0MUY3QkRGRDlEMkI0QTZBMkUyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UUQdWHU+E3NahmU4y4hpwPoE jB8H7nldNqFJT1Ou021SMKlQfn545h/sVDYAWrDvhwVMtGnXdzOrsShHlr0SkMr2 MEPlhaCdOvaY3H32E4WN7JliCJEHofAPPoJzw4zfyFC544HNWYZTX6Asey0lqKC4 rwJ8rcrFt447S9OC0H+ffnERoCrwJISmiVf/od4510SyNB5Lk0fg7WjU/TlU0jvj 7g3+5vU5YiOD9r87c2fd83GPbBvRXSqd7fFF2NJqEd5WxdwyM+o1foa8ySY8f1Pi nle/oreQzAI8z1MAWKk1d8/WJFocsi8ZvvwQTHIK0sXYN//GljDgQiLHMdClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBUsSj2gqgcStB9739nStKai4k8wHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXfZfL3noKT4dnoPaNefTSyqLsWvxLy43SW xpJkrzYWOekbvLKIXek4wF+wvzpkNsIdpuo3bVjcxQZyXyQtvrwrtYZery6P9oRn 5JrqFvzV1TkW7qoafKEZIol/74RgMoyCJ7/95DvdXfS+ikMraVmmfsxa/dlqOzvN c3ttIwG9CwqhJPEz+e5N+d8pJur2QKlBZ6IN5nsYrC7FweqLfx/SgwFRIKSBeOv2 DAoBcDcs5VegQe99/oaoeoiQEPVy9kWPh/onKFSj4dJKr9EVa2TsuBnXA3VrznrL bx9hiG7f4Mshq/9/nLnAMCJ5LuO2lCJEL3EakpPdlLPyEeAvCnU= -----END CERTIFICATE-----Generated at Tue Jun 10 15:31:59 2025 by rpki-client