$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: SK1POLxcYYzDvHWlq6AR4PKEg1QaXIa3fOZunv6Ur0Q= Subject key identifier: 52:70:B5:94:17:0A:47:28:B4:BC:73:2E:0D:5B:57:17:37:24:A8:F2 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 7AB1F7E36D0182E12657BD8DC7C19EA059534863 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 01D5 Signing time: Fri 06 Jun 2025 11:11:48 +0000 Manifest this update: Fri 06 Jun 2025 11:06:48 +0000 Manifest next update: Mon 09 Jun 2025 19:23:48 +0000 Files and hashes: 1: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 2: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: 5s3l2hrGdmYDW1PHReUuU7Fqv4Et0HiHJvkMW6lmVec=) 3: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 4: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 5: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 7: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 8: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 9: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 10: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 11: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 12: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 13: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) 14: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 15: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 16: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 17: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b1:f7:e3:6d:01:82:e1:26:57:bd:8d:c7:c1:9e:a0:59:53:48:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jun 6 11:06:48 2025 GMT Not After : Jun 9 19:23:48 2025 GMT Subject: CN=5270B594170A4728B4BC732E0D5B57173724A8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:3a:fc:8f:c9:9b:f6:02:03:3e:13:0e:80: c3:df:7d:99:98:c5:6c:6e:5f:21:46:ac:d8:3a:75: bd:a7:31:a4:a0:1a:cb:ff:3a:43:58:c8:a8:ae:ee: 38:78:8b:f1:eb:0b:87:84:2e:a9:40:d5:11:88:94: d3:18:f4:8a:b1:3a:8e:98:e7:a2:a4:43:f9:b5:c2: 6f:e9:c2:d3:6d:16:29:7a:4b:7c:73:e0:3c:d0:3e: 6a:af:d2:5b:28:c1:fa:f2:81:65:4f:8f:a3:21:65: c7:95:90:6e:b0:33:94:12:ff:d8:e6:4b:fd:d6:e5: e2:b4:d3:7f:43:18:95:62:20:b9:a0:4a:39:3e:2e: fd:88:72:f6:20:f8:6e:7e:e2:37:2d:8d:15:09:db: e3:6e:f7:45:ac:35:c7:93:e4:af:5e:a9:68:28:4f: 38:2c:d3:d1:32:b8:8b:d4:86:0b:b7:c0:02:3b:bf: dd:27:f9:66:e0:2d:3e:96:1e:db:87:bb:67:b0:cc: 6f:62:73:9f:6e:44:cd:a9:08:bb:ba:86:6e:7a:6e: 3c:00:04:28:6a:5d:1e:3b:a2:a5:20:11:c3:76:00: 8e:cb:c5:61:14:40:79:1e:25:10:44:c4:6a:87:d6: d3:db:78:eb:66:47:84:dc:19:5c:b1:27:7b:36:a5: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:70:B5:94:17:0A:47:28:B4:BC:73:2E:0D:5B:57:17:37:24:A8:F2 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:fb:44:ac:bf:ef:31:c4:24:44:48:81:d1:31:b8:cc:0b: 32:cf:f7:fb:2d:56:3c:14:77:29:fa:73:e8:1c:a2:f0:ad:e4: 73:c9:1f:64:c7:7a:d7:57:4c:5a:29:b5:24:48:83:75:ec:a7: ba:1e:39:77:5f:c1:4e:75:df:fc:43:4f:b9:8a:8f:3b:d7:27: 79:d8:03:0b:56:c4:9b:ed:d7:08:b9:61:1a:4b:4d:f5:3b:d4: 72:1c:e9:7c:6b:59:dd:c8:a7:94:67:1c:6a:0e:63:7b:8b:37: c7:18:1c:4d:e5:3d:e7:d5:6e:92:b9:1b:8e:24:c1:91:4f:72: 0a:42:d3:3b:3e:ac:f3:4a:c1:b3:64:04:0c:c3:c6:bd:70:48: 1e:b1:c6:52:e7:69:a2:8b:91:2c:fb:97:5a:c6:e5:f6:8e:2d: 6c:36:fc:ef:21:0a:93:13:34:49:4b:2c:15:96:56:9d:1d:98: 77:ed:e8:50:c6:20:82:8d:07:95:53:c1:10:e4:9e:91:9f:f1: a1:58:f4:b0:38:4a:24:bf:aa:78:7a:c8:0d:7b:37:97:c7:1f: 6c:94:1a:24:5f:24:90:ba:84:76:9c:6a:25:e1:39:b6:58:41: 99:75:84:72:d0:3f:ed:b5:82:c6:e2:de:33:a8:03:20:d7:6e: fd:93:68:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerH3420BguEmV72Nx8GeoFlTSGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA2MDYxMTA2NDhaFw0yNTA2MDkxOTIzNDhaMDMxMTAvBgNV BAMTKDUyNzBCNTk0MTcwQTQ3MjhCNEJDNzMyRTBENUI1NzE3MzcyNEE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvDr8j8mb9gIDPhMOgMPffZmY xWxuXyFGrNg6db2nMaSgGsv/OkNYyKiu7jh4i/HrC4eELqlA1RGIlNMY9IqxOo6Y 56KkQ/m1wm/pwtNtFil6S3xz4DzQPmqv0lsowfrygWVPj6MhZceVkG6wM5QS/9jm S/3W5eK0039DGJViILmgSjk+Lv2IcvYg+G5+4jctjRUJ2+Nu90WsNceT5K9eqWgo Tzgs09EyuIvUhgu3wAI7v90n+WbgLT6WHtuHu2ewzG9ic59uRM2pCLu6hm56bjwA BChqXR47oqUgEcN2AI7LxWEUQHkeJRBExGqH1tPbeOtmR4TcGVyxJ3s2pc+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnC1lBcKRyi0vHMuDVtXFzckqPIwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3V+0Ssv+8xxCRESIHRMbjMCzLP9/stVjwU dyn6c+gcovCt5HPJH2THetdXTFoptSRIg3Xsp7oeOXdfwU513/xDT7mKjzvXJ3nY AwtWxJvt1wi5YRpLTfU71HIc6XxrWd3Ip5RnHGoOY3uLN8cYHE3lPefVbpK5G44k wZFPcgpC0zs+rPNKwbNkBAzDxr1wSB6xxlLnaaKLkSz7l1rG5faOLWw2/O8hCpMT NElLLBWWVp0dmHft6FDGIIKNB5VTwRDknpGf8aFY9LA4SiS/qnh6yA17N5fHH2yU GiRfJJC6hHacaiXhObZYQZl1hHLQP+21gsbi3jOoAyDXbv2TaLk= -----END CERTIFICATE-----Generated at Sun Jun 8 04:13:40 2025 by rpki-client