$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: 8Hiz/i9PrKh2mRsbJiPS7qSGpMoDfS/5GOFww4C0Tu0= Subject key identifier: 01:2B:7D:2B:8D:CB:A7:27:DD:20:84:B6:09:AB:54:FC:CE:71:EA:82 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 663F1340BAF5FAA075129F89D97B31442E32AEFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: C3 Signing time: Fri 06 Jun 2025 20:12:20 +0000 Manifest this update: Fri 06 Jun 2025 20:07:20 +0000 Manifest next update: Tue 10 Jun 2025 04:57:20 +0000 Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) 2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: KvOqDsRyGK0oam0vdv28/F+WyqIDi+NQ8GIub0epZQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3f:13:40:ba:f5:fa:a0:75:12:9f:89:d9:7b:31:44:2e:32:ae:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Jun 6 20:07:20 2025 GMT Not After : Jun 10 04:57:20 2025 GMT Subject: CN=012B7D2B8DCBA727DD2084B609AB54FCCE71EA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:83:06:d7:af:00:21:0d:36:21:5d:cc:61: cb:86:de:80:e4:0c:b2:07:1f:0d:7b:14:a2:76:52: ce:52:ad:e3:73:42:d8:38:cb:0a:32:ee:b5:a6:36: d0:b3:d2:8b:a2:d7:e1:72:81:7b:f8:21:c7:04:35: 0e:57:a3:19:c1:16:4e:6f:64:31:b7:66:4d:ab:6e: 31:30:5f:ae:0c:fd:b6:bb:7e:54:37:15:e6:54:1f: 4f:f7:a1:a1:a4:b5:c5:7b:a1:71:b0:a9:7c:40:34: 70:4b:cd:18:49:50:ed:a8:16:4e:a8:aa:3c:5f:78: 66:df:67:35:12:49:69:24:82:7b:2e:77:5e:fe:e0: b3:e7:28:f4:b0:cf:1d:c4:51:fc:fc:c7:c7:7e:96: 9b:23:b5:8a:7c:9c:c1:a1:dc:55:ef:f4:e8:dd:95: 4f:a0:40:b2:f1:5e:78:a5:82:41:e4:bc:83:1a:3c: 22:2b:34:d8:a1:8b:2c:9f:88:d9:00:0a:1d:e5:5f: af:6a:61:48:05:a7:90:a1:68:67:59:12:4c:4a:96: e4:0a:d1:25:20:fa:8e:8a:da:94:e5:31:61:01:85: 93:14:0f:f9:b8:d4:39:81:ab:83:41:ff:41:cd:08: 26:d0:5e:f3:e1:3c:bc:02:b4:2d:24:d1:29:a2:c0: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2B:7D:2B:8D:CB:A7:27:DD:20:84:B6:09:AB:54:FC:CE:71:EA:82 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:38:15:87:c4:6b:c1:b7:12:cd:54:76:75:6b:c8:2e:31:09: 04:aa:01:ee:a4:44:17:e0:af:6a:d2:2c:df:8d:27:ac:db:d7: e2:44:4d:ae:1c:c9:1e:70:2c:07:ca:bf:9c:16:e9:32:3d:80: 3b:16:0b:ee:db:88:98:5c:f9:89:6e:13:a5:1a:dc:d3:7d:ac: 62:64:f7:e7:56:a8:3c:9f:61:4b:fe:0b:df:b9:76:13:2d:bd: ad:df:25:f4:ba:70:44:a3:1e:24:a4:c7:74:0c:4c:9b:50:6f: b5:5f:6e:2e:32:47:84:58:1f:79:e9:fd:75:7e:4e:21:6b:df: 1a:3d:08:67:51:cc:54:6f:d2:4e:0f:02:75:d8:4c:34:d5:50: 18:f6:32:ab:0a:e1:24:be:12:45:d0:12:93:b0:12:a0:2e:67: 59:60:c1:a6:a9:cd:e0:11:1f:a1:5c:99:6f:b5:97:85:bc:22: ba:fa:34:f0:ee:0b:fc:e1:cb:31:b6:8e:9a:6e:62:57:69:ed: 37:51:93:80:39:83:ef:bb:21:87:79:44:80:13:e1:bb:5e:8b: 9b:84:79:b8:10:86:59:92:46:ba:48:c3:fe:95:6f:ae:2e:22: 98:96:e3:9f:c6:07:5c:2b:99:c1:bb:e9:4f:83:51:30:d4:23: 59:3f:67:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZj8TQLr1+qB1Ep+J2XsxRC4yrv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTA2MDYyMDA3MjBaFw0yNTA2MTAwNDU3MjBaMDMxMTAvBgNV BAMTKDAxMkI3RDJCOERDQkE3MjdERDIwODRCNjA5QUI1NEZDQ0U3MUVBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSIMG168AIQ02IV3MYcuG3oDk DLIHHw17FKJ2Us5SreNzQtg4ywoy7rWmNtCz0oui1+FygXv4IccENQ5XoxnBFk5v ZDG3Zk2rbjEwX64M/ba7flQ3FeZUH0/3oaGktcV7oXGwqXxANHBLzRhJUO2oFk6o qjxfeGbfZzUSSWkkgnsud17+4LPnKPSwzx3EUfz8x8d+lpsjtYp8nMGh3FXv9Ojd lU+gQLLxXnilgkHkvIMaPCIrNNihiyyfiNkACh3lX69qYUgFp5ChaGdZEkxKluQK 0SUg+o6K2pTlMWEBhZMUD/m41DmBq4NB/0HNCCbQXvPhPLwCtC0k0SmiwBVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASt9K43LpyfdIIS2CatU/M5x6oIwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg4FYfEa8G3Es1UdnVryC4xCQSqAe6kRBfg r2rSLN+NJ6zb1+JETa4cyR5wLAfKv5wW6TI9gDsWC+7biJhc+YluE6Ua3NN9rGJk 9+dWqDyfYUv+C9+5dhMtva3fJfS6cESjHiSkx3QMTJtQb7Vfbi4yR4RYH3np/XV+ TiFr3xo9CGdRzFRv0k4PAnXYTDTVUBj2MqsK4SS+EkXQEpOwEqAuZ1lgwaapzeAR H6FcmW+1l4W8Irr6NPDuC/zhyzG2jppuYldp7TdRk4A5g++7IYd5RIAT4btei5uE ebgQhlmSRrpIw/6Vb64uIpiW45/GB1wrmcG76U+DUTDUI1k/Z8U= -----END CERTIFICATE-----Generated at Sat Jun 7 04:10:46 2025 by rpki-client