$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: mbsibXDVddyHM4CA2nJGCLmCDiLm859R1lYeEQJhEuA= Subject key identifier: 49:14:8D:DE:7E:AB:82:97:7A:34:5B:6F:97:9A:E9:EF:B2:00:14:89 Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 19AAE2F3E946E921C22385BE7C5B80DF95850584 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 01A2 Signing time: Mon 02 Jun 2025 23:32:48 +0000 Manifest this update: Mon 02 Jun 2025 23:27:48 +0000 Manifest next update: Fri 06 Jun 2025 11:00:48 +0000 Files and hashes: 1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: JFWaX345X2XL6W3xsnZKLhTIBZSoCNyK/HfTgeBVfq0=) 2: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) 3: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:aa:e2:f3:e9:46:e9:21:c2:23:85:be:7c:5b:80:df:95:85:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Jun 2 23:27:48 2025 GMT Not After : Jun 6 11:00:48 2025 GMT Subject: CN=49148DDE7EAB82977A345B6F979AE9EFB2001489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:4f:7e:db:c1:93:0b:de:65:c1:81:45:81: 28:60:c7:5f:05:99:5e:13:0f:c0:b3:f7:37:b4:78: e0:4b:1d:07:c5:48:4b:34:7d:d1:bc:b1:e7:95:73: 3b:9b:ea:1f:60:4d:dc:ab:9a:5c:1e:10:32:cd:00: 41:a4:ca:9b:42:f8:ff:36:06:d6:0d:5b:bd:6a:29: b6:27:af:97:63:ed:1c:a7:46:d2:d3:a7:05:01:6e: ca:0d:e8:2f:66:48:4f:1e:cd:a1:20:c2:49:86:1d: 9d:e6:0d:34:0c:6e:65:28:47:df:49:be:06:b8:4b: 60:9e:ea:8c:b0:c0:42:12:4e:74:eb:2e:e6:39:86: 98:28:0f:76:55:4f:72:b5:f1:e7:70:1f:bb:af:2c: c1:0a:70:72:d8:b4:76:e5:f5:4c:c3:12:88:d4:c8: ad:c5:0c:29:b9:b3:41:e8:6f:b0:9b:29:86:1c:f2: 8e:24:ba:8e:01:d5:38:8c:7c:9a:e4:a7:47:21:a7: 57:59:c3:f6:29:fd:8f:87:6a:3d:45:c2:2a:ed:fe: 7f:77:ed:11:67:16:b5:a7:b7:1d:19:c9:29:98:40: f5:d8:d2:49:14:13:07:70:66:c6:8c:a5:ba:4e:a8: 1e:b8:22:ee:7b:86:7d:47:86:88:48:2c:2c:fb:a9: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:14:8D:DE:7E:AB:82:97:7A:34:5B:6F:97:9A:E9:EF:B2:00:14:89 X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:94:fb:ae:c6:c3:96:ea:00:1e:82:53:44:54:4a:98:7f:a1: e0:21:3d:4e:e8:84:26:86:40:72:fb:46:36:22:cb:b0:7b:ec: f7:e0:a5:95:1f:0a:83:a7:4d:20:23:7a:49:25:e2:7b:7b:89: 4c:2a:a8:81:8b:9d:78:5e:10:ec:56:cd:8f:ea:72:4f:2c:02: 9f:8e:60:38:f3:f2:0d:96:af:7a:5d:b2:fb:fa:f2:15:f3:d7: 3d:51:87:4d:bf:d3:5d:a4:e5:3f:78:76:a8:aa:23:b5:90:b7: 24:b4:47:9e:c8:53:8c:b5:41:0b:26:99:31:4e:84:da:b4:59: d6:0f:a4:81:1c:ca:f9:11:42:61:4e:bd:c5:ce:06:05:e7:a9: 21:8a:fc:da:ac:cf:8b:46:a3:64:8d:44:d3:db:fb:61:a4:dc: 20:69:10:8b:25:03:e6:2c:9e:7a:7e:de:07:c8:c2:6f:0a:b4: b8:fb:12:5c:2c:41:30:9d:7d:c4:ff:fb:1a:e1:c1:66:fb:0a: 14:50:12:b6:5a:1b:d6:27:83:75:56:ed:9f:ce:0d:f9:ff:99: 27:ce:2f:94:9d:0d:13:8e:d4:d5:ea:19:15:1c:28:be:6a:59: 74:1f:27:f5:4d:42:c4:59:0e:88:22:93:cd:e2:b8:fb:9f:1b: a1:ac:91:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGari8+lG6SHCI4W+fFuA35WFBYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA2MDIyMzI3NDhaFw0yNTA2MDYxMTAwNDhaMDMxMTAvBgNV BAMTKDQ5MTQ4RERFN0VBQjgyOTc3QTM0NUI2Rjk3OUFFOUVGQjIwMDE0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwU9+28GTC95lwYFFgShgx18F mV4TD8Cz9ze0eOBLHQfFSEs0fdG8seeVczub6h9gTdyrmlweEDLNAEGkyptC+P82 BtYNW71qKbYnr5dj7RynRtLTpwUBbsoN6C9mSE8ezaEgwkmGHZ3mDTQMbmUoR99J vga4S2Ce6oywwEISTnTrLuY5hpgoD3ZVT3K18edwH7uvLMEKcHLYtHbl9UzDEojU yK3FDCm5s0Hob7CbKYYc8o4kuo4B1TiMfJrkp0chp1dZw/Yp/Y+Haj1Fwirt/n93 7RFnFrWntx0ZySmYQPXY0kkUEwdwZsaMpbpOqB64Iu57hn1HhohILCz7qfxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRSN3n6rgpd6NFtvl5rp77IAFIkwHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqU+67Gw5bqAB6CU0RUSph/oeAhPU7ohCaG QHL7RjYiy7B77PfgpZUfCoOnTSAjekkl4nt7iUwqqIGLnXheEOxWzY/qck8sAp+O YDjz8g2Wr3pdsvv68hXz1z1Rh02/012k5T94dqiqI7WQtyS0R57IU4y1QQsmmTFO hNq0WdYPpIEcyvkRQmFOvcXOBgXnqSGK/Nqsz4tGo2SNRNPb+2Gk3CBpEIslA+Ys nnp+3gfIwm8KtLj7ElwsQTCdfcT/+xrhwWb7ChRQErZaG9Yng3VW7Z/ODfn/mSfO L5SdDROO1NXqGRUcKL5qWXQfJ/VNQsRZDogik83iuPufG6GskdM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:56 2025 by rpki-client