$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: CZVEFjB3F1UvQT6CfGUCDjeTfJJkKZwxks7hDMgAxFI= Subject key identifier: AA:B9:15:25:12:3D:AB:3B:32:8E:00:D8:36:C9:E0:E6:C8:3A:25:E1 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 2F0D697E0A85F06D2CB06115E89FF1E040A45A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 9C Signing time: Fri 06 Jun 2025 03:20:50 +0000 Manifest this update: Fri 06 Jun 2025 03:15:50 +0000 Manifest next update: Mon 09 Jun 2025 07:08:50 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) 2: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) 3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: ny/O+UUnC2c7hiXhHcCNc4CvBwKZMm2aIKXC4n8AnDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0d:69:7e:0a:85:f0:6d:2c:b0:61:15:e8:9f:f1:e0:40:a4:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Jun 6 03:15:50 2025 GMT Not After : Jun 9 07:08:50 2025 GMT Subject: CN=AAB91525123DAB3B328E00D836C9E0E6C83A25E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:3c:bc:31:e0:28:9a:3d:8a:c1:eb:f5:ec: bd:02:d3:45:f2:38:19:f9:d1:b4:8c:8a:5c:bf:10: 56:3e:d4:f9:5a:f6:2e:34:b6:f3:b7:b8:dc:64:f7: d1:df:2c:1e:54:b0:b7:1d:b9:17:23:34:3e:33:be: 4c:37:ab:f6:cc:53:76:b5:1c:45:72:f0:40:f8:2a: 1b:e7:8b:ad:6d:95:9d:43:46:71:09:26:b5:9d:39: b6:2d:0c:6d:df:d7:37:1a:a7:7f:ca:2e:37:ff:c6: cf:f6:6d:e1:7a:d6:5a:35:dc:53:d4:c8:18:84:71: 11:c2:89:36:b2:b5:7a:83:0d:e0:0d:1c:f1:8b:11: cf:5c:4b:a1:d2:0e:27:1a:11:ab:c0:98:81:96:ff: 12:83:46:1a:88:04:41:18:aa:b6:22:08:e1:70:fe: a9:04:b0:54:2d:ab:cc:eb:e7:2d:e9:d4:cf:70:e4: 99:c2:03:ac:77:a8:3f:a9:14:0c:8b:b9:3a:be:4c: dc:02:d5:ee:c8:5f:6b:fe:ac:e1:72:ca:c5:6a:38: fd:1f:52:c2:3e:31:d1:53:fb:92:84:16:5e:15:5b: 70:d3:5c:de:4a:63:8a:07:f6:bb:d4:15:b3:5a:f4: 69:85:2f:a2:e4:1e:3e:fd:2c:37:45:08:41:35:35: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B9:15:25:12:3D:AB:3B:32:8E:00:D8:36:C9:E0:E6:C8:3A:25:E1 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8e:b8:f2:42:66:60:36:43:a0:0d:03:96:60:b4:13:17:d3: 02:87:e2:ab:4a:4e:60:59:da:bd:c3:13:40:df:33:43:18:95: d7:5f:c1:f8:00:3b:e5:ec:fe:eb:de:c8:32:0a:00:1f:c3:27: 0c:0a:3a:cd:e1:aa:77:c3:37:b6:eb:ed:5b:56:86:4a:ba:f6: 60:f9:4d:0a:fb:4e:f1:00:53:8d:b5:fa:eb:71:9d:5f:29:25: a6:e9:9f:10:75:16:da:95:f2:f2:28:4e:72:f0:11:d8:0a:a3: 13:60:cf:19:0c:81:56:30:0e:22:de:75:d3:1f:7b:6a:75:ff: 2e:75:93:a5:dd:96:e8:bb:87:f2:13:42:38:e9:f5:19:d2:ec: f1:55:d5:d2:36:91:4d:fb:9e:59:6a:fd:2b:b8:c4:86:2c:ad: 93:7c:d4:e7:1a:a2:2c:02:6a:10:db:d4:34:3d:ed:d7:13:97: 9a:6f:66:b5:a2:2f:68:82:b6:d1:8f:da:d2:dc:95:cc:33:91: fb:60:70:46:74:7e:be:95:2e:2e:ab:b7:e8:0a:81:84:ad:06: a7:b9:bf:b8:1d:16:d5:f9:12:5a:64:38:b0:a4:c0:c9:bd:ec: 8f:03:33:78:86:37:1d:4e:b1:a1:56:a9:4b:88:20:39:59:25: 4e:fe:3b:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULw1pfgqF8G0ssGEV6J/x4ECkWkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA2MDYwMzE1NTBaFw0yNTA2MDkwNzA4NTBaMDMxMTAvBgNV BAMTKEFBQjkxNTI1MTIzREFCM0IzMjhFMDBEODM2QzlFMEU2QzgzQTI1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Yzy8MeAomj2Kwev17L0C00Xy OBn50bSMily/EFY+1Pla9i40tvO3uNxk99HfLB5UsLcduRcjND4zvkw3q/bMU3a1 HEVy8ED4Khvni61tlZ1DRnEJJrWdObYtDG3f1zcap3/KLjf/xs/2beF61lo13FPU yBiEcRHCiTaytXqDDeANHPGLEc9cS6HSDicaEavAmIGW/xKDRhqIBEEYqrYiCOFw /qkEsFQtq8zr5y3p1M9w5JnCA6x3qD+pFAyLuTq+TNwC1e7IX2v+rOFyysVqOP0f UsI+MdFT+5KEFl4VW3DTXN5KY4oH9rvUFbNa9GmFL6LkHj79LDdFCEE1NTyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrkVJRI9qzsyjgDYNsng5sg6JeEwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKOuPJCZmA2Q6ANA5ZgtBMX0wKH4qtKTmBZ 2r3DE0DfM0MYlddfwfgAO+Xs/uveyDIKAB/DJwwKOs3hqnfDN7br7VtWhkq69mD5 TQr7TvEAU421+utxnV8pJabpnxB1FtqV8vIoTnLwEdgKoxNgzxkMgVYwDiLeddMf e2p1/y51k6Xdlui7h/ITQjjp9RnS7PFV1dI2kU37nllq/Su4xIYsrZN81OcaoiwC ahDb1DQ97dcTl5pvZrWiL2iCttGP2tLclcwzkftgcEZ0fr6VLi6rt+gKgYStBqe5 v7gdFtX5ElpkOLCkwMm97I8DM3iGNx1OsaFWqUuIIDlZJU7+O9k= -----END CERTIFICATE-----Generated at Fri Jun 6 18:24:01 2025 by rpki-client