$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: kbc/uxxfaAhYkHWbP/ci6mX6o9NwRtnAH7RBHB95qdU= Subject key identifier: 05:AC:70:F5:99:2C:F4:E6:29:6C:D7:83:FE:C1:5D:E8:43:51:82:3E Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 56C7FF9A7F041761205C9131A8C596BEADCBC6AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: AB Signing time: Fri 06 Jun 2025 00:21:09 +0000 Manifest this update: Fri 06 Jun 2025 00:16:09 +0000 Manifest next update: Mon 09 Jun 2025 05:20:09 +0000 Files and hashes: 1: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 3: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: LfMgH4uo+d1uQI+Zj/CeyF68FOBZ2Ii5wJ1NbgMzjqE=) 4: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c7:ff:9a:7f:04:17:61:20:5c:91:31:a8:c5:96:be:ad:cb:c6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Jun 6 00:16:09 2025 GMT Not After : Jun 9 05:20:09 2025 GMT Subject: CN=05AC70F5992CF4E6296CD783FEC15DE84351823E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:98:69:93:76:88:15:fb:83:6c:e8:10:be: 36:88:44:90:e3:ab:93:aa:04:c1:23:7b:f9:de:2e: 23:d0:a9:23:a1:10:30:a8:40:b9:68:c9:6b:f0:9e: 59:7c:ad:46:0b:e3:30:e3:8d:cf:5c:3e:f6:67:0d: b7:6f:38:7b:88:b2:ce:9d:5d:13:25:74:7e:64:b5: c0:18:4c:46:c6:88:91:c4:c7:de:84:cb:97:a7:30: e3:82:1f:82:ea:64:8a:12:8c:3a:52:59:f5:f4:d9: 60:fe:9c:74:1b:3c:48:ea:e0:17:1f:ff:8d:76:d5: 4d:5b:bd:b9:10:19:95:71:66:15:7b:ea:a1:b5:e6: be:33:de:16:f7:15:78:c4:1d:1e:c5:7e:80:1a:cb: 99:a8:86:9e:45:1a:27:f4:1b:9e:ee:1f:12:ae:59: 60:eb:6a:ee:a7:bf:99:f2:a7:ce:6e:95:7d:bb:0b: 12:a5:33:0d:49:2c:0d:ae:84:5a:ab:d9:36:d4:79: 61:fa:a7:9d:40:61:01:e8:30:fa:8d:3f:47:be:c7: ad:ff:f8:59:59:98:33:83:47:c7:05:f6:2a:20:59: c5:c6:6c:69:eb:dd:42:c0:88:9a:17:36:12:9c:12: d0:41:ee:2b:e4:88:ee:ef:f9:7a:25:27:ff:bf:63: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:70:F5:99:2C:F4:E6:29:6C:D7:83:FE:C1:5D:E8:43:51:82:3E X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:67:9e:e4:b8:ff:af:83:cd:b4:43:13:3c:04:a3:b6:cf: 91:28:c1:bf:0e:f9:41:c3:ac:b4:25:4f:14:49:3c:65:a6:0a: 23:fc:5f:8b:d8:67:69:a8:be:2b:43:ba:87:51:70:93:77:94: b2:95:aa:2d:86:cb:69:15:d7:27:ce:eb:c9:7a:f2:21:03:9d: b3:84:cb:eb:d9:33:e1:70:58:7f:fe:54:f5:27:55:0f:cf:ed: a1:0e:48:a2:16:26:d3:27:df:e3:32:4a:ef:ce:1d:14:6f:c6: 87:8e:e4:60:37:a3:7b:94:0c:7a:bb:47:85:a1:11:58:c2:3d: b4:56:f6:d8:77:cb:81:05:4b:40:ca:aa:55:55:35:d5:96:5c: 62:51:1c:67:6d:5e:de:d6:c2:7c:0a:98:02:5e:d5:29:5f:a4: 82:27:5e:90:14:d4:db:19:8c:7f:5c:31:9c:7e:ec:bc:2e:64: 00:22:24:d8:e3:1b:37:0d:46:85:4f:37:93:30:ba:17:b9:b6: 95:da:fc:83:be:0a:01:eb:49:3b:74:01:56:38:60:11:60:4c: 92:57:ac:73:f3:bf:64:a8:b0:6c:0a:39:29:5b:d8:e2:90:ad: 9f:de:11:40:08:8b:c5:c9:a2:10:ac:44:d2:70:05:fd:f5:b7: 03:ff:ec:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsf/mn8EF2EgXJExqMWWvq3Lxq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTA2MDYwMDE2MDlaFw0yNTA2MDkwNTIwMDlaMDMxMTAvBgNV BAMTKDA1QUM3MEY1OTkyQ0Y0RTYyOTZDRDc4M0ZFQzE1REU4NDM1MTgyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7Zhpk3aIFfuDbOgQvjaIRJDj q5OqBMEje/neLiPQqSOhEDCoQLloyWvwnll8rUYL4zDjjc9cPvZnDbdvOHuIss6d XRMldH5ktcAYTEbGiJHEx96Ey5enMOOCH4LqZIoSjDpSWfX02WD+nHQbPEjq4Bcf /4121U1bvbkQGZVxZhV76qG15r4z3hb3FXjEHR7FfoAay5mohp5FGif0G57uHxKu WWDrau6nv5nyp85ulX27CxKlMw1JLA2uhFqr2TbUeWH6p51AYQHoMPqNP0e+x63/ +FlZmDODR8cF9iogWcXGbGnr3ULAiJoXNhKcEtBB7ivkiO7v+XolJ/+/Y3YzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBaxw9Zks9OYpbNeD/sFd6ENRgj4wHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJAZ57kuP+vg820QxM8BKO2z5Eowb8O+UHD rLQlTxRJPGWmCiP8X4vYZ2movitDuodRcJN3lLKVqi2Gy2kV1yfO68l68iEDnbOE y+vZM+FwWH/+VPUnVQ/P7aEOSKIWJtMn3+MySu/OHRRvxoeO5GA3o3uUDHq7R4Wh EVjCPbRW9th3y4EFS0DKqlVVNdWWXGJRHGdtXt7WwnwKmAJe1SlfpIInXpAU1NsZ jH9cMZx+7LwuZAAiJNjjGzcNRoVPN5Mwuhe5tpXa/IO+CgHrSTt0AVY4YBFgTJJX rHPzv2SosGwKOSlb2OKQrZ/eEUAIi8XJohCsRNJwBf31twP/7MM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:45 2025 by rpki-client