$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: B9vhKpFfgG9du4SdFYsy9/7tSWNaX72V+zUX8tcKFWk= Subject key identifier: 6A:82:13:91:94:FE:B7:94:4D:FC:03:B3:32:29:F3:2E:4C:B7:57:8D Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 1A4EB2CC61FD26EE6B3DA282964D2E2E2C87D9A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 02:04:55 +0000 Manifest this update: Mon 02 Jun 2025 01:59:55 +0000 Manifest next update: Thu 05 Jun 2025 11:48:55 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: RQ1RtKPlDvJQXSYBZY2iowBvrxN3g7Eu4nVh5SpJv8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4e:b2:cc:61:fd:26:ee:6b:3d:a2:82:96:4d:2e:2e:2c:87:d9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jun 2 01:59:55 2025 GMT Not After : Jun 5 11:48:55 2025 GMT Subject: CN=6A82139194FEB7944DFC03B33229F32E4CB7578D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:55:ea:d0:ba:09:07:ce:92:f2:3c:08:f1:01: 4b:2f:24:82:bc:0b:48:33:2c:71:56:e3:ce:fd:89: 05:cd:17:37:3f:8b:46:d0:4f:dd:0f:7e:0f:e3:d3: 75:9a:26:8c:19:cc:d3:fd:08:46:41:5c:da:21:96: 17:be:58:b0:de:cb:42:88:ca:18:0e:2d:14:f6:66: 26:65:8f:f0:15:a0:23:a7:7a:f6:1d:d4:ea:d0:70: d9:a3:37:8b:d4:1c:02:e2:98:69:f1:7b:a7:3d:3c: b6:c5:51:f4:13:50:32:c7:71:f7:09:a1:e6:09:e9: c7:fd:4f:58:ef:a2:df:f1:a7:12:0d:14:4b:53:b5: 44:b6:e8:15:f2:11:3e:46:55:e3:bb:3c:93:a6:b8: 4b:60:e5:6b:7f:72:a5:27:e6:fa:c7:78:be:c7:6f: ed:a9:43:ba:84:a7:2a:b5:46:5c:78:19:e4:19:4f: 20:f2:15:50:01:44:ac:2c:fa:fe:4e:a3:b5:a9:ac: f5:72:42:1b:f5:2b:71:76:d0:85:d1:f0:da:5a:ed: 39:2e:cf:cf:9e:91:95:e6:0d:e1:f8:85:c1:57:76: 8d:73:a3:c2:4c:29:67:0d:ae:a8:7b:8e:da:b3:62: 92:36:c5:55:8d:9d:46:9c:28:3e:ce:40:a2:fb:11: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:82:13:91:94:FE:B7:94:4D:FC:03:B3:32:29:F3:2E:4C:B7:57:8D X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:73:da:17:02:6e:30:1a:98:5b:cc:0d:f7:38:43:cf:89:79: aa:04:85:3c:37:ae:f2:b0:df:6b:b3:17:04:87:02:a1:bb:11: 90:f0:95:2e:6c:20:3b:55:c3:a4:c9:29:dd:2d:fb:8e:47:13: 09:c9:be:e4:3d:f2:6a:95:a4:32:e3:07:54:74:43:eb:db:09: 26:b0:a9:df:20:d7:5d:a0:63:d3:f5:e2:ae:ea:39:53:71:73: 90:20:04:c4:83:27:8b:87:2d:c1:4a:94:f7:0e:ab:82:2c:d7: 09:23:8b:69:8c:f2:42:b1:b0:03:52:ae:7c:9f:ac:54:a4:20: 6f:b4:ad:2e:f8:20:2b:91:ef:79:0e:dc:93:5f:98:f9:1b:94: 63:71:6e:16:cd:ce:98:2d:83:2b:58:91:75:8e:86:25:90:13: 8a:d5:59:07:30:32:bc:71:c0:36:d6:5f:f8:2c:d6:73:c6:17: 84:be:12:d9:03:ff:b6:1f:d3:81:a1:7b:6b:41:65:9c:b2:1c: 37:8f:43:8c:47:68:8c:2d:6e:c4:fb:a7:e6:7c:aa:da:03:74: d3:25:37:cb:0c:20:c6:c1:c9:ac:ce:7e:53:f0:09:b2:02:bd: 8b:44:e2:24:ac:e1:08:e6:07:9b:90:45:1c:a6:d2:fb:6b:2b: d8:62:0c:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGk6yzGH9Ju5rPaKClk0uLiyH2aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA2MDIwMTU5NTVaFw0yNTA2MDUxMTQ4NTVaMDMxMTAvBgNV BAMTKDZBODIxMzkxOTRGRUI3OTQ0REZDMDNCMzMyMjlGMzJFNENCNzU3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVerQugkHzpLyPAjxAUsvJIK8 C0gzLHFW4879iQXNFzc/i0bQT90Pfg/j03WaJowZzNP9CEZBXNohlhe+WLDey0KI yhgOLRT2ZiZlj/AVoCOnevYd1OrQcNmjN4vUHALimGnxe6c9PLbFUfQTUDLHcfcJ oeYJ6cf9T1jvot/xpxINFEtTtUS26BXyET5GVeO7PJOmuEtg5Wt/cqUn5vrHeL7H b+2pQ7qEpyq1Rlx4GeQZTyDyFVABRKws+v5Oo7WprPVyQhv1K3F20IXR8Npa7Tku z8+ekZXmDeH4hcFXdo1zo8JMKWcNrqh7jtqzYpI2xVWNnUacKD7OQKL7ESUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoITkZT+t5RN/AOzMinzLky3V40wHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZz2hcCbjAamFvMDfc4Q8+JeaoEhTw3rvKw 32uzFwSHAqG7EZDwlS5sIDtVw6TJKd0t+45HEwnJvuQ98mqVpDLjB1R0Q+vbCSaw qd8g112gY9P14q7qOVNxc5AgBMSDJ4uHLcFKlPcOq4Is1wkji2mM8kKxsANSrnyf rFSkIG+0rS74ICuR73kO3JNfmPkblGNxbhbNzpgtgytYkXWOhiWQE4rVWQcwMrxx wDbWX/gs1nPGF4S+EtkD/7Yf04Ghe2tBZZyyHDePQ4xHaIwtbsT7p+Z8qtoDdNMl N8sMIMbByazOflPwCbICvYtE4iSs4QjmB5uQRRym0vtrK9hiDJ8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:29 2025 by rpki-client