$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: 0hUyWLOAA0EXu7VpsFTvKtMdpspeYCdM3sVTeCo0V+c= Subject key identifier: F2:CE:36:12:BC:7B:08:54:46:59:9A:70:E0:60:20:1E:F3:2B:A7:2A Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 2EACE3845156308CE43E737B81F3EA197AFF2273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 0350 Signing time: Wed 04 Jun 2025 20:50:51 +0000 Manifest this update: Wed 04 Jun 2025 20:45:51 +0000 Manifest next update: Sat 07 Jun 2025 21:33:51 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: TVIYNCs9LwsXDIQDWSt6xRoQHfKQNgBzhYnM+osJZAU=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ac:e3:84:51:56:30:8c:e4:3e:73:7b:81:f3:ea:19:7a:ff:22:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Jun 4 20:45:51 2025 GMT Not After : Jun 7 21:33:51 2025 GMT Subject: CN=F2CE3612BC7B085446599A70E060201EF32BA72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:97:ad:de:aa:23:6e:71:c1:1d:6f:8f:4c: 45:e7:fc:53:8d:a8:ec:a4:a2:01:44:31:36:de:5f: ca:c9:e2:6d:9d:44:80:7f:e7:ee:8b:f4:6c:db:d6: a6:ee:b1:fe:30:ae:c1:93:8b:36:80:5b:66:cc:43: 37:6b:9e:e9:98:3e:72:27:17:ec:94:b7:6d:90:9c: ac:2d:24:5d:55:94:cd:ac:23:a5:6b:35:93:78:bc: c7:f4:cb:11:2f:4b:b0:07:64:2d:ba:5c:0c:b7:e0: 8f:4f:cb:4a:f1:ef:3a:62:51:a3:06:46:24:bc:90: 18:ad:f7:27:1a:c5:48:7b:9d:d7:98:e8:ba:ed:fb: b3:6a:d2:9b:8e:24:37:40:86:79:07:2d:9c:d0:ae: f7:7e:91:1b:13:c6:23:b3:ef:fc:b5:21:0a:29:16: 86:be:89:f5:dd:b1:5c:78:25:9b:5d:1f:81:fb:5f: 1d:70:a8:25:04:20:cb:a9:0d:7f:1c:58:dc:37:db: 32:11:07:8b:9e:b7:ae:12:07:04:ad:98:33:31:98: f0:15:a9:ae:90:5f:6a:9d:8f:79:3f:d5:ff:2a:05: b5:2d:da:38:3d:ed:18:c4:c8:cb:46:8a:ab:cb:bb: 76:45:10:e0:9c:97:fb:29:84:46:9a:aa:7f:e1:bd: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CE:36:12:BC:7B:08:54:46:59:9A:70:E0:60:20:1E:F3:2B:A7:2A X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:a3:8d:4a:01:c7:06:2d:34:5d:50:95:38:14:7b:e8:9f: df:97:ab:42:d0:1c:ba:4a:56:94:f2:b8:75:7f:3e:e3:89:c0: 97:28:d6:7f:48:8f:e9:8c:d2:0f:e9:b9:56:57:1d:25:09:ba: 0f:f3:05:ab:59:3a:09:0a:24:da:b7:16:6c:d7:06:06:a0:af: c2:e9:ac:82:59:88:6e:8c:57:f3:0f:89:26:be:26:55:32:08: cd:56:d5:ea:43:d7:aa:3a:4c:b1:65:52:23:f9:0b:71:60:b6: ef:95:c1:69:60:ce:89:7c:e8:d7:58:0a:55:79:a4:18:14:fd: 1d:85:a0:2d:3e:db:9e:8e:82:16:7f:71:cd:19:a6:c4:07:f3: 59:83:0d:23:0e:b7:55:fe:d2:12:5c:c1:65:08:38:f4:7f:12: 43:14:53:5a:89:6f:a8:19:6c:d5:60:4f:61:2c:a5:6e:fe:95: ca:2a:5c:05:d8:b0:14:d5:3e:1e:89:5c:70:dc:0a:c4:4d:e2: a2:17:ca:aa:76:57:29:de:9a:86:e5:f6:c4:12:6a:eb:49:c2: 3a:41:92:bb:9a:3b:b2:9c:8b:73:22:70:65:56:04:8c:04:4b: ea:ab:33:38:1f:ad:4d:91:fe:50:04:9a:95:7d:e2:80:e7:2a: 9d:d7:cb:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqzjhFFWMIzkPnN7gfPqGXr/InMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA2MDQyMDQ1NTFaFw0yNTA2MDcyMTMzNTFaMDMxMTAvBgNV BAMTKEYyQ0UzNjEyQkM3QjA4NTQ0NjU5OUE3MEUwNjAyMDFFRjMyQkE3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Epet3qojbnHBHW+PTEXn/FON qOykogFEMTbeX8rJ4m2dRIB/5+6L9Gzb1qbusf4wrsGTizaAW2bMQzdrnumYPnIn F+yUt22QnKwtJF1VlM2sI6VrNZN4vMf0yxEvS7AHZC26XAy34I9Py0rx7zpiUaMG RiS8kBit9ycaxUh7ndeY6Lrt+7Nq0puOJDdAhnkHLZzQrvd+kRsTxiOz7/y1IQop Foa+ifXdsVx4JZtdH4H7Xx1wqCUEIMupDX8cWNw32zIRB4uet64SBwStmDMxmPAV qa6QX2qdj3k/1f8qBbUt2jg97RjEyMtGiqvLu3ZFEOCcl/sphEaaqn/hvY1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8s42Erx7CFRGWZpw4GAgHvMrpyowHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKxo41KAccGLTRdUJU4FHvon9+Xq0LQHLpK VpTyuHV/PuOJwJco1n9Ij+mM0g/puVZXHSUJug/zBatZOgkKJNq3FmzXBgagr8Lp rIJZiG6MV/MPiSa+JlUyCM1W1epD16o6TLFlUiP5C3Fgtu+VwWlgzol86NdYClV5 pBgU/R2FoC0+256OghZ/cc0ZpsQH81mDDSMOt1X+0hJcwWUIOPR/EkMUU1qJb6gZ bNVgT2EspW7+lcoqXAXYsBTVPh6JXHDcCsRN4qIXyqp2Vynemobl9sQSautJwjpB kruaO7Kci3MicGVWBIwES+qrMzgfrU2R/lAEmpV94oDnKp3Xy9c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:32 2025 by rpki-client