$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: IDy6sjV6GkxJRMVIL8DICDI2+cWpw8YXFv9DCYp8SIA= Subject key identifier: FD:92:DB:93:09:94:EE:C0:5B:3B:0E:E7:75:0E:66:D0:82:01:B4:00 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 0663DC53E87CF1F2EF7A98A4F19EF352B3635F28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: 98 Signing time: Sat 07 Jun 2025 18:10:04 +0000 Manifest this update: Sat 07 Jun 2025 18:05:04 +0000 Manifest next update: Tue 10 Jun 2025 23:42:04 +0000 Files and hashes: 1: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: r+7Y1z1uipo4A2pi8zuJ1RAxuoAwyMODjbN/SCxRYgo=) 2: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: Nt9qLfTDr0UpJAVtWSyKuAtUsz1EA6jNL3P3TZGVw9Y=) 3: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: McNi6uIe5Axf6tBtLxMOSaRGdTnkzxQvhnQV75cvKKU=) 4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: nALNOd2M4Ypyg+e26YPaQ5ppKocXSpgBvFiHxaD0J/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:63:dc:53:e8:7c:f1:f2:ef:7a:98:a4:f1:9e:f3:52:b3:63:5f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Jun 7 18:05:04 2025 GMT Not After : Jun 10 23:42:04 2025 GMT Subject: CN=FD92DB930994EEC05B3B0EE7750E66D08201B400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:37:f1:f0:16:99:84:d3:0d:69:04:f7:d8: ff:41:0e:0f:76:46:eb:08:15:8c:bc:96:c6:7e:ca: 43:e4:1b:e4:8e:b5:dd:01:ce:88:91:70:fd:eb:81: f8:6b:43:9e:49:ec:0e:ec:37:bc:45:aa:d0:8b:a5: ac:62:7a:3d:01:10:0c:12:fd:99:b0:69:ad:1e:0a: db:98:f6:8a:88:bb:c7:65:ef:a4:bb:46:37:ae:65: 78:db:9b:1a:b9:da:71:87:d1:46:99:7b:2f:c5:b8: ad:ae:ea:68:7a:e8:1c:00:6d:37:87:cf:9a:9a:60: f4:f7:97:2b:fb:53:77:34:a5:34:03:0f:2c:f7:6e: 4d:c5:58:4a:ed:67:a0:d8:fb:47:3c:ad:05:37:3b: 13:0b:72:13:8c:a7:e5:8f:71:20:3a:0c:72:42:d8: 0b:c7:11:4a:98:58:50:78:ce:d2:5f:24:ea:fa:fb: 08:1a:44:dd:35:82:72:06:5f:26:91:1b:45:83:5c: 2e:fa:c2:bf:34:aa:69:2f:fe:3b:f2:71:07:09:e6: 51:5d:ae:ff:a6:83:e6:4d:96:0e:cd:3b:8a:b0:35: 9d:e6:9d:83:10:6a:16:9a:01:a4:23:fb:0d:0a:62: 9d:bc:96:6c:ba:a8:af:f3:61:5e:b2:70:9a:62:a7: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:DB:93:09:94:EE:C0:5B:3B:0E:E7:75:0E:66:D0:82:01:B4:00 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:6b:24:d8:fb:25:f7:61:8d:3f:a2:45:d8:59:eb:8c:67: e8:1c:23:11:72:73:84:3d:35:b3:38:21:b2:b9:a1:a0:f5:39: 05:bc:b7:a0:a0:3e:5c:16:2c:4f:6f:80:be:29:48:9b:da:bc: ee:1c:97:68:65:2a:75:a8:4c:cf:b1:38:42:43:71:22:c8:4e: 97:1f:8a:b7:6f:e0:e2:f1:1c:9a:61:2e:b7:98:71:59:89:24: f6:8c:09:d6:f9:aa:38:3b:c4:89:43:31:6f:cf:54:52:91:ff: 59:d8:5b:66:d9:6e:f3:5d:f1:61:68:d6:cc:1c:1a:bd:70:06: 8a:f5:2e:d0:6a:33:3f:21:78:28:b2:0d:09:85:af:8d:0f:4d: f2:0d:85:c5:74:3a:4a:fd:99:00:3d:f8:ba:a2:cd:95:32:a1: 69:19:23:70:a8:eb:17:c5:30:df:b8:bb:60:5b:82:59:92:ce: 7b:54:ee:25:49:b7:b8:be:e9:2d:e3:b7:c5:4c:e5:22:32:fb: ad:7c:18:be:74:7d:e4:54:f9:4d:f3:be:83:c0:8b:19:6b:b4: 36:ae:0f:8b:62:8b:e5:b9:f8:46:88:81:e8:ed:3a:b5:34:29: d2:b0:2b:91:41:3e:8d:b8:ee:c0:a2:c1:cf:06:4c:d1:ca:e2: 75:b2:3c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmPcU+h88fLvepik8Z7zUrNjXygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTA2MDcxODA1MDRaFw0yNTA2MTAyMzQyMDRaMDMxMTAvBgNV BAMTKEZEOTJEQjkzMDk5NEVFQzA1QjNCMEVFNzc1MEU2NkQwODIwMUI0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bDfx8BaZhNMNaQT32P9BDg92 RusIFYy8lsZ+ykPkG+SOtd0BzoiRcP3rgfhrQ55J7A7sN7xFqtCLpaxiej0BEAwS /Zmwaa0eCtuY9oqIu8dl76S7RjeuZXjbmxq52nGH0UaZey/FuK2u6mh66BwAbTeH z5qaYPT3lyv7U3c0pTQDDyz3bk3FWErtZ6DY+0c8rQU3OxMLchOMp+WPcSA6DHJC 2AvHEUqYWFB4ztJfJOr6+wgaRN01gnIGXyaRG0WDXC76wr80qmkv/jvycQcJ5lFd rv+mg+ZNlg7NO4qwNZ3mnYMQahaaAaQj+w0KYp28lmy6qK/zYV6ycJpip2dNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ZLbkwmU7sBbOw7ndQ5m0IIBtAAwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGohayTY+yX3YY0/okXYWeuMZ+gcIxFyc4Q9 NbM4IbK5oaD1OQW8t6CgPlwWLE9vgL4pSJvavO4cl2hlKnWoTM+xOEJDcSLITpcf irdv4OLxHJphLreYcVmJJPaMCdb5qjg7xIlDMW/PVFKR/1nYW2bZbvNd8WFo1swc Gr1wBor1LtBqMz8heCiyDQmFr40PTfINhcV0Okr9mQA9+LqizZUyoWkZI3Co6xfF MN+4u2BbglmSzntU7iVJt7i+6S3jt8VM5SIy+618GL50feRU+U3zvoPAixlrtDau D4tii+W5+EaIgejtOrU0KdKwK5FBPo247sCiwc8GTNHK4nWyPAY= -----END CERTIFICATE-----Generated at Sun Jun 8 04:07:01 2025 by rpki-client