$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: wlYQoVbSJS7fepZnguSi9sJ8M4HNkF82/RwzZ16UyNA= Subject key identifier: D1:1B:4A:E2:C9:90:F8:16:51:92:C5:A2:9A:63:89:78:9F:68:AC:66 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 6916AF14F5A99BD1A195456D2E8523976B05E651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04DE Signing time: Fri 06 Jun 2025 09:41:54 +0000 Manifest this update: Fri 06 Jun 2025 09:36:54 +0000 Manifest next update: Mon 09 Jun 2025 10:17:54 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 9LsLUdp8c72GIftuWt2PbRHqONSkK4ISlR3u7t1k76M=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:16:af:14:f5:a9:9b:d1:a1:95:45:6d:2e:85:23:97:6b:05:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Jun 6 09:36:54 2025 GMT Not After : Jun 9 10:17:54 2025 GMT Subject: CN=D11B4AE2C990F8165192C5A29A6389789F68AC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:d1:00:33:6b:ed:41:29:6a:d7:8d:db:e4: f3:e2:f0:25:64:26:9b:7c:e7:0b:78:e6:df:c5:37: cb:ea:dc:70:88:4c:36:ce:a6:21:03:2e:f1:2a:43: 39:64:ae:2f:d6:73:81:02:24:e7:99:0e:d1:56:52: 0a:0d:9f:7b:55:04:39:c1:16:f4:4b:21:1f:5e:4b: 1b:75:ea:e1:ed:44:41:27:1b:68:fe:04:ea:a0:8f: 4f:62:f8:5b:e2:d1:28:d3:75:d3:74:7e:11:42:63: 8a:62:7c:c0:e5:93:6d:ed:25:37:1d:ac:1d:b1:53: 82:cd:53:d1:89:c0:c1:5f:3d:72:52:70:e7:65:cc: cb:90:8a:33:00:7a:27:30:b4:8f:6c:80:0a:28:77: dd:cd:79:1e:b9:5e:ec:b6:fb:4e:4b:ef:06:a0:c2: 5d:53:1b:bb:bc:2a:eb:99:54:2f:87:cb:f0:31:a0: 92:3d:bb:3b:73:bf:af:05:3e:42:9b:37:ef:5f:34: 37:bd:13:85:18:21:cd:b3:e6:8d:86:56:bd:e8:29: 53:9c:63:ec:19:a4:89:3f:8d:92:a0:2f:11:7b:18: c1:35:e2:12:80:d5:fd:43:01:ef:77:48:33:ab:86: 94:e6:2f:00:e0:aa:35:ba:9b:35:8c:5f:e1:5e:59: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:4A:E2:C9:90:F8:16:51:92:C5:A2:9A:63:89:78:9F:68:AC:66 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c5:42:e6:70:65:37:4f:b3:52:0a:9f:36:3c:07:e0:71:5e: 4a:7f:15:79:db:f8:18:16:34:b0:00:50:dd:f0:ce:ab:fe:41: e5:ef:46:85:05:f2:87:c3:d3:9f:38:d7:c6:a9:2f:3e:3a:f4: ef:2f:d4:19:48:b3:ec:c3:32:38:18:78:6b:a9:b2:8e:9b:1e: a7:a9:31:93:10:e1:72:72:d8:21:1a:4d:da:3a:83:5d:f1:28: 6c:c4:84:ce:6d:bd:06:75:51:ed:33:c9:2d:5f:c9:33:4a:f3: b0:12:cd:ae:1c:23:c4:74:a3:77:de:b3:73:54:a6:30:5b:db: 6d:1e:29:21:2e:22:1b:f1:30:8b:8a:8f:cc:a7:2e:5a:3c:d7: 6e:26:e1:3a:00:d0:86:dc:f7:66:0a:d9:b3:57:cb:02:a7:6b: f7:5e:91:2e:40:b7:c8:33:41:39:10:74:e4:31:55:a8:99:f3: 7c:ce:e1:2a:74:20:97:3a:f6:1c:58:a4:ce:e2:92:c4:98:c3: 8a:09:c8:c3:d3:64:4f:5a:4b:19:b7:fa:9c:3e:91:41:d2:e1: c3:25:a5:85:e8:54:19:b7:fb:af:9d:40:d5:3d:aa:86:6f:50: 5e:ee:3d:71:94:7b:20:d4:dd:d9:d9:98:91:4e:d4:c0:5d:e2: e5:07:24:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRavFPWpm9GhlUVtLoUjl2sF5lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA2MDYwOTM2NTRaFw0yNTA2MDkxMDE3NTRaMDMxMTAvBgNV BAMTKEQxMUI0QUUyQzk5MEY4MTY1MTkyQzVBMjlBNjM4OTc4OUY2OEFDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKz9EAM2vtQSlq143b5PPi8CVk Jpt85wt45t/FN8vq3HCITDbOpiEDLvEqQzlkri/Wc4ECJOeZDtFWUgoNn3tVBDnB FvRLIR9eSxt16uHtREEnG2j+BOqgj09i+Fvi0SjTddN0fhFCY4pifMDlk23tJTcd rB2xU4LNU9GJwMFfPXJScOdlzMuQijMAeicwtI9sgAood93NeR65Xuy2+05L7wag wl1TG7u8KuuZVC+Hy/AxoJI9uztzv68FPkKbN+9fNDe9E4UYIc2z5o2GVr3oKVOc Y+wZpIk/jZKgLxF7GME14hKA1f1DAe93SDOrhpTmLwDgqjW6mzWMX+FeWdsnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0RtK4smQ+BZRksWimmOJeJ9orGYwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/FQuZwZTdPs1IKnzY8B+BxXkp/FXnb+BgW NLAAUN3wzqv+QeXvRoUF8ofD058418apLz469O8v1BlIs+zDMjgYeGupso6bHqep MZMQ4XJy2CEaTdo6g13xKGzEhM5tvQZ1Ue0zyS1fyTNK87ASza4cI8R0o3fes3NU pjBb220eKSEuIhvxMIuKj8ynLlo8124m4ToA0Ibc92YK2bNXywKna/dekS5At8gz QTkQdOQxVaiZ83zO4Sp0IJc69hxYpM7iksSYw4oJyMPTZE9aSxm3+pw+kUHS4cMl pYXoVBm3+6+dQNU9qoZvUF7uPXGUeyDU3dnZmJFO1MBd4uUHJDc= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:26 2025 by rpki-client