$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: tUYPh1kPRDDz0N+Y8NzVAEY1eKDYXOGdWs4+vK04j0M= Subject key identifier: BF:D4:08:C2:EE:21:2E:DA:9B:43:C6:A9:28:8D:62:B8:8D:D6:0B:CF Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 6FF2D4EB5C44157F75A73BF3BD366FB9B838EF6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 04ED Signing time: Fri 06 Jun 2025 02:21:23 +0000 Manifest this update: Fri 06 Jun 2025 02:16:23 +0000 Manifest next update: Mon 09 Jun 2025 07:55:23 +0000 Files and hashes: 1: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=) 2: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: Gss2BFwCvkYMrYmTDPR8XZwGfdbzMzVTFBRvuPZp/uA=) 3: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: CwXU9VaKpcKaIL0+cwM5Fjr5bkAAawnd7hCNC9U00Bg=) 4: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=) 5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=) 6: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: INMvU5GcjxgxluHB2hdPWW+nwp9Ckp+QP4jDVp5id2w=) 7: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: e9uiS3KNGlZ+EQjSXY4m6NwJ9lRr8aifmafZU96mQ7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f2:d4:eb:5c:44:15:7f:75:a7:3b:f3:bd:36:6f:b9:b8:38:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Jun 6 02:16:23 2025 GMT Not After : Jun 9 07:55:23 2025 GMT Subject: CN=BFD408C2EE212EDA9B43C6A9288D62B88DD60BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:7d:1d:bb:86:e3:de:5d:6e:88:2a:2f:ce: c8:c3:7b:6f:56:de:c7:d6:e6:4d:2e:5b:4c:74:67: 8b:49:0a:c0:76:d8:50:40:7c:7b:27:8a:c5:85:e7: 95:eb:ca:ca:ec:23:e9:96:a3:98:ab:51:87:2e:1c: 3d:25:e0:ec:f4:a0:44:3b:25:d0:14:d5:7c:37:31: da:d2:6f:2c:d5:5a:8f:ce:93:8d:8c:24:e4:60:4c: 4a:f4:92:0e:12:77:9f:3d:57:91:c2:3d:6c:a1:f5: ba:51:2b:3e:64:79:66:f9:4f:a4:39:46:ae:bd:e8: b1:da:0a:3b:8f:92:d8:8c:53:d4:c6:45:48:64:ac: f2:b1:c0:fd:10:db:84:2f:b2:e6:30:20:8f:8d:7c: 84:6c:dd:5d:ea:c2:34:fb:8a:d6:0f:38:ee:44:9c: 2a:dc:2f:6a:4e:e6:b4:32:59:d3:47:3a:bf:84:99: ce:01:46:c2:ad:00:12:ed:b9:79:00:15:8a:72:e7: 88:98:43:3a:65:8d:be:15:2c:b4:4d:4f:78:4f:2a: 5f:b6:42:33:27:09:34:bd:e7:7b:23:97:92:d7:91: b1:f0:e5:1a:9b:60:21:d6:4a:b7:37:57:a7:6f:e8: f1:35:e8:98:41:a4:ca:4c:ed:c5:18:b6:25:ed:15: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:08:C2:EE:21:2E:DA:9B:43:C6:A9:28:8D:62:B8:8D:D6:0B:CF X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ef:9b:6c:37:19:8f:38:ca:68:ff:0f:4a:8d:9a:57:14:d5: 12:8f:ec:28:ea:4f:f0:42:f1:7e:0c:fa:c2:a2:5c:81:af:6d: bc:0f:ff:6b:7c:a5:80:07:80:2f:08:6f:f4:b6:f4:f1:02:2c: b5:f4:d4:26:cc:09:70:e3:08:85:52:79:ad:b8:97:c5:8a:8a: 7d:3e:2b:c0:6e:d8:83:95:e1:81:2e:ef:d6:b9:7b:37:57:79: 11:d8:06:5d:22:99:67:dd:ed:7a:03:e7:2d:8c:ea:c2:e8:3c: 19:48:95:14:9e:74:0b:64:65:fa:d6:8a:e4:79:73:34:6c:45: 0f:c9:db:34:68:99:18:13:c0:d9:1a:da:f9:7f:ec:ca:62:b1: e2:8e:cd:2e:63:44:a1:ad:18:ec:1e:2a:f9:2c:92:01:e9:5a: b5:8b:c8:48:2d:41:32:7b:b8:5b:f3:c4:4f:d3:57:63:d3:50: a7:78:c9:33:06:b5:75:03:0c:af:8b:65:4b:48:30:ba:3d:75: e2:ce:40:0a:57:06:9b:3e:1d:c4:8b:0e:d7:6c:28:24:b7:45: ba:75:e7:0d:95:d8:7b:49:07:56:eb:ce:85:c6:eb:d1:d8:ce: fb:8e:df:0d:39:65:6a:27:1e:ec:0f:8e:13:fa:37:7c:2a:ce: df:46:16:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/LU61xEFX91pzvzvTZvubg4724wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTA2MDYwMjE2MjNaFw0yNTA2MDkwNzU1MjNaMDMxMTAvBgNV BAMTKEJGRDQwOEMyRUUyMTJFREE5QjQzQzZBOTI4OEQ2MkI4OERENjBCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmT30du4bj3l1uiCovzsjDe29W 3sfW5k0uW0x0Z4tJCsB22FBAfHsnisWF55XrysrsI+mWo5irUYcuHD0l4Oz0oEQ7 JdAU1Xw3MdrSbyzVWo/Ok42MJORgTEr0kg4Sd589V5HCPWyh9bpRKz5keWb5T6Q5 Rq696LHaCjuPktiMU9TGRUhkrPKxwP0Q24QvsuYwII+NfIRs3V3qwjT7itYPOO5E nCrcL2pO5rQyWdNHOr+Emc4BRsKtABLtuXkAFYpy54iYQzpljb4VLLRNT3hPKl+2 QjMnCTS953sjl5LXkbHw5RqbYCHWSrc3V6dv6PE16JhBpMpM7cUYtiXtFTINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9QIwu4hLtqbQ8apKI1iuI3WC88wHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXvm2w3GY84ymj/D0qNmlcU1RKP7CjqT/BC 8X4M+sKiXIGvbbwP/2t8pYAHgC8Ib/S29PECLLX01CbMCXDjCIVSea24l8WKin0+ K8Bu2IOV4YEu79a5ezdXeRHYBl0imWfd7XoD5y2M6sLoPBlIlRSedAtkZfrWiuR5 czRsRQ/J2zRomRgTwNka2vl/7MpiseKOzS5jRKGtGOweKvkskgHpWrWLyEgtQTJ7 uFvzxE/TV2PTUKd4yTMGtXUDDK+LZUtIMLo9deLOQApXBps+HcSLDtdsKCS3Rbp1 5w2V2HtJB1brzoXG69HYzvuO3w05ZWonHuwPjhP6N3wqzt9GFkA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:01:37 2025 by rpki-client