$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: o3i0a1ZXFetHJHtX0sznvvM71cRL00vHLqbvsHsxREo= Subject key identifier: E1:29:1F:61:AA:79:85:DA:7C:C8:18:0B:CB:CA:2F:11:52:14:AA:92 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 49563523C0BAE34FB9B10C2F329930A86DB732FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 9B Signing time: Wed 04 Jun 2025 22:20:35 +0000 Manifest this update: Wed 04 Jun 2025 22:15:35 +0000 Manifest next update: Sun 08 Jun 2025 10:15:35 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: m+35hyOj2Nnoj6pj71T7+3XP5y/lbF8MsVayMmQM9SM=) 2: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: /g3fevIQek/vxhOvrAxmRZYa9htXulnmBSZ3dNDN9o8=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: S37RXDSRwFckaVAXXa2L/pmaBR5uDTckFqN12JhVmHQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: oFpzvK/Po5EcbGA/2a5hh8S0BSXSuROMsPqn6lKBhiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:56:35:23:c0:ba:e3:4f:b9:b1:0c:2f:32:99:30:a8:6d:b7:32:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Jun 4 22:15:35 2025 GMT Not After : Jun 8 10:15:35 2025 GMT Subject: CN=E1291F61AA7985DA7CC8180BCBCA2F115214AA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:25:3a:f1:c8:3a:d7:bf:db:09:e2:e0:82: 85:0a:dc:9f:bc:1f:a9:61:a2:a0:c3:bd:7a:28:66: f1:a6:f1:6e:46:6a:c4:4b:ac:10:fe:ec:3c:a8:4c: 5e:c9:f8:a2:d3:93:1c:ee:6e:51:e2:53:dc:9b:31: a5:bd:44:25:36:11:7c:fd:19:50:4a:28:9a:62:e3: 9c:5d:b5:b4:3b:4a:0e:99:d8:d5:b0:94:40:a8:d4: dc:ac:db:1a:c5:2f:e0:58:e8:34:21:b7:cc:3b:89: 74:dc:4b:b8:69:e4:12:3c:8e:50:50:9a:97:57:31: db:55:dc:ac:52:ac:aa:4a:f8:70:08:5c:10:26:9a: f9:09:c0:8c:46:fd:00:7b:42:a8:a2:fd:97:4c:17: 0b:8f:9e:27:1a:53:9f:e5:7b:d0:6e:d0:15:d5:f0: c9:98:43:71:c8:a9:33:66:e2:97:0d:da:7b:a0:f1: 44:f8:82:5d:96:92:23:f7:45:ab:e3:11:c8:63:67: af:11:cf:a0:07:7a:3c:d6:89:41:92:7c:02:4d:56: 54:f4:84:e2:45:51:ae:86:31:5d:7e:92:4d:9f:e1: 7e:a6:b2:97:08:04:a8:a4:9f:22:61:99:8c:db:19: b5:2c:97:12:6f:e1:61:12:93:50:8f:72:82:b7:ed: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:1F:61:AA:79:85:DA:7C:C8:18:0B:CB:CA:2F:11:52:14:AA:92 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d0:11:0b:e9:ca:b2:51:c6:3d:49:dd:03:a5:15:03:1a:d5: 37:64:33:59:60:9c:75:28:5d:65:e6:ff:7f:aa:03:98:fa:20: 07:b4:76:80:12:7f:cc:98:a8:e2:51:54:df:f8:b9:93:e2:ca: 36:54:31:13:36:dd:b4:c1:87:9b:37:e4:1f:aa:a3:ce:7c:fa: cb:ea:21:05:08:73:84:03:0c:f5:9f:e8:48:86:d9:11:47:c6: cc:94:2e:2e:5f:32:31:3b:9f:d9:82:cb:7f:f6:0b:0f:1b:c7: 42:21:d4:6a:3b:f3:e1:95:0d:9b:4b:0b:17:aa:b7:17:fd:01: 11:57:0d:75:93:28:69:5b:48:a7:ad:80:3e:78:b7:56:3b:e0: bc:9c:dd:30:85:b8:cc:ad:58:32:89:1b:b6:59:f0:7f:26:4f: a9:01:db:b3:08:4b:3a:52:6e:74:a8:f4:3b:02:74:ed:47:85: 3b:80:4b:20:e9:a9:91:ee:ea:6a:fa:13:30:a0:6d:c0:d3:18: 62:9d:78:49:05:10:4c:27:25:49:fe:96:03:5a:5c:96:bc:5b: 33:3e:9d:f9:01:c2:35:6a:de:6d:a8:27:14:cc:11:82:f5:47: de:ff:97:a8:8c:e1:6e:11:46:2a:c9:27:b8:47:14:85:26:34: e4:83:65:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVY1I8C640+5sQwvMpkwqG23Mv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA2MDQyMjE1MzVaFw0yNTA2MDgxMDE1MzVaMDMxMTAvBgNV BAMTKEUxMjkxRjYxQUE3OTg1REE3Q0M4MTgwQkNCQ0EyRjExNTIxNEFBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddSU68cg617/bCeLggoUK3J+8 H6lhoqDDvXooZvGm8W5GasRLrBD+7DyoTF7J+KLTkxzublHiU9ybMaW9RCU2EXz9 GVBKKJpi45xdtbQ7Sg6Z2NWwlECo1Nys2xrFL+BY6DQht8w7iXTcS7hp5BI8jlBQ mpdXMdtV3KxSrKpK+HAIXBAmmvkJwIxG/QB7Qqii/ZdMFwuPnicaU5/le9Bu0BXV 8MmYQ3HIqTNm4pcN2nug8UT4gl2WkiP3RavjEchjZ68Rz6AHejzWiUGSfAJNVlT0 hOJFUa6GMV1+kk2f4X6mspcIBKiknyJhmYzbGbUslxJv4WESk1CPcoK37alZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4SkfYap5hdp8yBgLy8ovEVIUqpIwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvQEQvpyrJRxj1J3QOlFQMa1TdkM1lgnHUo XWXm/3+qA5j6IAe0doASf8yYqOJRVN/4uZPiyjZUMRM23bTBh5s35B+qo858+svq IQUIc4QDDPWf6EiG2RFHxsyULi5fMjE7n9mCy3/2Cw8bx0Ih1Go78+GVDZtLCxeq txf9ARFXDXWTKGlbSKetgD54t1Y74Lyc3TCFuMytWDKJG7ZZ8H8mT6kB27MISzpS bnSo9DsCdO1HhTuASyDpqZHu6mr6EzCgbcDTGGKdeEkFEEwnJUn+lgNaXJa8WzM+ nfkBwjVq3m2oJxTMEYL1R97/l6iM4W4RRirJJ7hHFIUmNOSDZag= -----END CERTIFICATE-----Generated at Fri Jun 6 18:24:06 2025 by rpki-client