$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: kmmlZhPwZJEvwr24ynBuRbP1oFP7+frEnLWb1eIQDns= Subject key identifier: 03:D1:25:3F:E2:6C:BE:B6:A9:20:E1:D1:BE:4E:C9:F0:E5:C2:CF:40 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 311A5FD772B9DCFA5934CA1D13C59EC529909AE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 6B Signing time: Tue 03 Jun 2025 06:01:20 +0000 Manifest this update: Tue 03 Jun 2025 05:56:20 +0000 Manifest next update: Fri 06 Jun 2025 17:28:20 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: 8e3k48LXz0WktrfYS5y6xaUEcvs0Ly1ZEZ6IsPnS5uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:5f:d7:72:b9:dc:fa:59:34:ca:1d:13:c5:9e:c5:29:90:9a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Jun 3 05:56:20 2025 GMT Not After : Jun 6 17:28:20 2025 GMT Subject: CN=03D1253FE26CBEB6A920E1D1BE4EC9F0E5C2CF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:4b:bc:35:a5:49:ff:ad:12:8e:91:15:4b: 79:ea:2e:02:b3:2c:d4:6a:af:5e:68:a6:e6:6f:34: 21:96:cd:ba:1f:c3:57:41:a6:97:9c:ba:f2:7a:6d: f1:41:31:50:62:49:63:9c:bb:4b:a9:2a:24:81:a7: 6e:a3:01:ad:ee:25:73:bd:10:5a:9e:76:31:65:2a: d2:a7:0e:a6:ae:e2:ca:4e:83:d8:f7:ac:90:c1:1b: 71:14:e8:3c:58:16:6f:53:d6:8a:2f:61:61:22:90: 84:aa:b3:6a:ca:5a:f8:88:9d:96:1a:4e:5a:64:d9: 3c:a7:50:48:1b:97:d3:ec:6c:1a:f7:67:0b:0a:e9: 51:25:c8:67:1a:66:3e:a2:34:41:fd:91:90:e7:2e: 9b:e2:68:38:dc:30:0b:99:ab:2d:15:24:9b:16:7f: a7:26:85:f6:02:c2:ed:3d:70:3b:6b:40:84:75:41: 0c:d9:4a:cb:f9:4d:e1:ab:07:d5:df:b7:86:89:90: e1:d1:36:1b:11:94:c1:4c:f2:22:ae:cf:22:65:a8: 48:e5:57:3b:60:ea:be:2f:5d:ae:7d:aa:c7:ed:bc: 29:2e:ba:4b:00:33:7e:c2:2d:8a:80:d9:99:9a:d7: cb:31:0c:ae:fe:05:fa:2b:3b:d6:54:0f:54:f9:8e: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D1:25:3F:E2:6C:BE:B6:A9:20:E1:D1:BE:4E:C9:F0:E5:C2:CF:40 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:59:65:cf:d6:f5:39:98:d3:54:35:08:f1:f7:d8:5f:49: 3b:77:21:5b:40:17:22:31:cb:7f:fa:4c:b4:5b:6b:e3:62:3d: 1b:c0:99:d6:1c:8c:fb:69:1e:f5:14:64:aa:bd:9b:4c:2c:da: 4e:55:c1:1b:85:97:71:28:39:6f:0f:1f:ec:a2:71:66:a2:e3: 4b:47:b2:5c:b4:dd:7f:da:f5:b8:22:70:9e:cd:45:89:e1:10: 38:7f:c8:8e:25:14:b4:e7:b1:b7:3b:40:d5:c2:4b:a2:ee:63: 07:3f:b1:a3:88:75:49:25:c4:ac:1c:a4:ff:1c:cc:bd:18:db: e0:90:95:95:51:03:7b:25:5d:d7:76:6a:ae:d2:10:0f:c6:9f: 32:f6:dc:c3:fc:27:31:20:72:b9:2e:8a:b0:02:59:ba:4b:64: 63:0b:01:88:95:e7:c8:8f:88:19:d2:ea:70:27:5a:93:23:91: e5:1c:2f:6b:c5:12:51:b3:d1:b6:1f:a0:b9:55:2a:14:29:07: 3e:5e:ee:fe:3a:e4:93:c2:e1:eb:ed:ae:f8:c9:d5:d2:75:52: e0:39:8d:ad:82:19:e0:00:a7:41:e8:7a:f4:a6:6b:1c:75:e8: 12:70:59:f7:4f:10:4e:1e:25:55:76:3b:c1:52:77:5d:21:c4: fd:54:0b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRpf13K53PpZNModE8WexSmQmuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA2MDMwNTU2MjBaFw0yNTA2MDYxNzI4MjBaMDMxMTAvBgNV BAMTKDAzRDEyNTNGRTI2Q0JFQjZBOTIwRTFEMUJFNEVDOUYwRTVDMkNGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8ku8NaVJ/60SjpEVS3nqLgKz LNRqr15opuZvNCGWzbofw1dBppecuvJ6bfFBMVBiSWOcu0upKiSBp26jAa3uJXO9 EFqedjFlKtKnDqau4spOg9j3rJDBG3EU6DxYFm9T1oovYWEikISqs2rKWviInZYa Tlpk2TynUEgbl9PsbBr3ZwsK6VElyGcaZj6iNEH9kZDnLpviaDjcMAuZqy0VJJsW f6cmhfYCwu09cDtrQIR1QQzZSsv5TeGrB9Xft4aJkOHRNhsRlMFM8iKuzyJlqEjl Vztg6r4vXa59qsftvCkuuksAM37CLYqA2Zma18sxDK7+BforO9ZUD1T5jhxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9ElP+JsvrapIOHRvk7J8OXCz0AwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu3WWXP1vU5mNNUNQjx99hfSTt3IVtAFyIx y3/6TLRba+NiPRvAmdYcjPtpHvUUZKq9m0ws2k5VwRuFl3EoOW8PH+yicWai40tH sly03X/a9bgicJ7NRYnhEDh/yI4lFLTnsbc7QNXCS6LuYwc/saOIdUklxKwcpP8c zL0Y2+CQlZVRA3slXdd2aq7SEA/GnzL23MP8JzEgcrkuirACWbpLZGMLAYiV58iP iBnS6nAnWpMjkeUcL2vFElGz0bYfoLlVKhQpBz5e7v465JPC4evtrvjJ1dJ1UuA5 ja2CGeAAp0HoevSmaxx16BJwWfdPEE4eJVV2O8FSd10hxP1UCxk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:41 2025 by rpki-client