$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: L49zxZcELebuqAHwOOqkbDkqR4sQG2ZStlPSLay/+fE= Subject key identifier: 3C:C9:E0:C2:22:C2:C1:88:6F:BC:C4:47:82:7D:BB:37:4E:60:59:0A Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 395BCB8259852C0CC60204864A569E3D29393BC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: 57 Signing time: Thu 05 Jun 2025 23:11:20 +0000 Manifest this update: Thu 05 Jun 2025 23:06:20 +0000 Manifest next update: Mon 09 Jun 2025 06:39:20 +0000 Files and hashes: 1: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: 4FYGfvKBSaekJPvOp04q3e+5YQ4tmk08e77jWMbUVaw=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5b:cb:82:59:85:2c:0c:c6:02:04:86:4a:56:9e:3d:29:39:3b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Jun 5 23:06:20 2025 GMT Not After : Jun 9 06:39:20 2025 GMT Subject: CN=3CC9E0C222C2C1886FBCC447827DBB374E60590A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:6a:ec:ae:25:89:c6:6e:b8:79:27:d9:2a: f0:b1:5f:d2:d2:a0:79:1f:2d:bf:50:22:e5:b6:5f: a2:82:84:c5:91:21:85:6b:e6:71:a7:77:6c:e0:52: eb:4c:5a:6b:af:4a:60:b2:44:51:09:44:99:bb:5c: 01:53:0c:93:cd:56:4b:06:b5:21:b2:e4:9b:53:95: 50:1a:b7:f2:c4:5c:5a:66:fd:f1:2e:b7:c7:49:5c: 08:f4:05:43:fb:95:73:41:75:79:34:0f:90:e2:97: e2:66:a8:7e:9b:93:6d:5d:8d:e4:53:7d:23:5a:70: 36:76:d8:51:8c:87:3d:4b:23:c0:3c:f2:7b:82:b8: 1a:8b:43:59:bc:9f:c8:8c:9e:09:6e:48:00:9a:9c: 45:10:da:89:74:3a:37:54:af:2b:fa:44:49:f3:91: c5:9a:02:cd:37:a1:fd:65:a4:e4:9c:04:4e:68:4a: 35:f1:20:e9:48:ee:27:88:e2:fa:d6:cc:87:b7:8e: be:53:ed:f5:ce:15:77:fd:81:57:18:76:14:ce:2d: 83:67:8a:47:bc:a4:74:4f:b7:b8:ab:3a:a8:31:ab: bc:df:ef:6c:f6:01:c1:0a:fb:15:9b:ca:4d:83:73: 9b:e7:12:b9:fe:f4:00:d0:a6:1e:34:15:0f:7b:a9: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C9:E0:C2:22:C2:C1:88:6F:BC:C4:47:82:7D:BB:37:4E:60:59:0A X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:73:0c:52:ac:6c:18:b2:4d:62:ab:36:88:b4:72:9e:36: d5:16:d9:5a:09:f6:6a:8b:35:ce:ed:ca:85:04:42:2a:4b:f6: f9:93:32:a2:02:aa:df:75:93:83:33:60:44:34:3b:fd:54:4d: 47:b3:d2:34:97:b2:06:00:57:ec:f6:3c:0f:f2:6e:95:70:39: 64:b1:15:cd:49:fa:fb:e4:25:14:86:4a:8b:4e:75:61:07:e8: d0:c2:5d:ba:cb:b5:d1:40:d2:b0:94:62:fa:f3:bf:eb:f0:d2: ac:cb:f6:e8:64:6b:61:ab:83:45:d1:f6:77:0f:c6:d1:06:97: 73:42:2e:b6:a2:9b:a3:9d:79:88:cd:60:9f:bc:58:6a:82:a3: 36:b4:32:39:25:34:7f:ad:96:94:90:96:d1:4f:39:43:c7:73: 1a:8d:de:1c:1d:2a:ab:af:03:eb:b3:25:e3:de:d6:7e:3a:17: a6:b5:88:e4:d4:49:61:f4:42:c2:5c:16:73:23:46:9d:13:87: 30:9b:6f:db:80:2b:57:f8:df:54:70:2b:76:32:9c:6d:20:5c: 35:31:c2:e2:16:e8:fe:2d:be:bd:44:cf:80:f5:88:6c:10:0a: de:c1:1d:cc:1a:e3:1e:69:22:51:6e:dd:42:40:5f:93:3b:21: 1a:7f:b6:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVvLglmFLAzGAgSGSlaePSk5O8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTA2MDUyMzA2MjBaFw0yNTA2MDkwNjM5MjBaMDMxMTAvBgNV BAMTKDNDQzlFMEMyMjJDMkMxODg2RkJDQzQ0NzgyN0RCQjM3NEU2MDU5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKGrsriWJxm64eSfZKvCxX9LS oHkfLb9QIuW2X6KChMWRIYVr5nGnd2zgUutMWmuvSmCyRFEJRJm7XAFTDJPNVksG tSGy5JtTlVAat/LEXFpm/fEut8dJXAj0BUP7lXNBdXk0D5Dil+JmqH6bk21djeRT fSNacDZ22FGMhz1LI8A88nuCuBqLQ1m8n8iMngluSACanEUQ2ol0OjdUryv6REnz kcWaAs03of1lpOScBE5oSjXxIOlI7ieI4vrWzIe3jr5T7fXOFXf9gVcYdhTOLYNn ike8pHRPt7irOqgxq7zf72z2AcEK+xWbyk2Dc5vnErn+9ADQph40FQ97qaCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMngwiLCwYhvvMRHgn27N05gWQowHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACivcwxSrGwYsk1iqzaItHKeNtUW2VoJ9mqL Nc7tyoUEQipL9vmTMqICqt91k4MzYEQ0O/1UTUez0jSXsgYAV+z2PA/ybpVwOWSx Fc1J+vvkJRSGSotOdWEH6NDCXbrLtdFA0rCUYvrzv+vw0qzL9uhka2Grg0XR9ncP xtEGl3NCLraim6OdeYjNYJ+8WGqCoza0MjklNH+tlpSQltFPOUPHcxqN3hwdKquv A+uzJePe1n46F6a1iOTUSWH0QsJcFnMjRp0ThzCbb9uAK1f431RwK3YynG0gXDUx wuIW6P4tvr1Ez4D1iGwQCt7BHcwa4x5pIlFu3UJAX5M7IRp/tlY= -----END CERTIFICATE-----Generated at Sat Jun 7 22:59:40 2025 by rpki-client