$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: DRNPh/xxqBnIyZI+0KZtEEDWferdmBACGnUs7/1V5aw= Subject key identifier: 2A:7B:B8:A0:39:50:A1:6C:64:F9:33:FD:D7:7F:53:F6:A3:BE:43:9B Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 1E55FAEE1748164A764D810F6968027E8CC0C27B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: AD Signing time: Tue 03 Jun 2025 19:12:15 +0000 Manifest this update: Tue 03 Jun 2025 19:07:14 +0000 Manifest next update: Fri 06 Jun 2025 19:47:14 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: vnsW1oh/9uNqG+mECkrXW28XdMGZKOhXphgw6yhbmak=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:55:fa:ee:17:48:16:4a:76:4d:81:0f:69:68:02:7e:8c:c0:c2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Jun 3 19:07:14 2025 GMT Not After : Jun 6 19:47:14 2025 GMT Subject: CN=2A7BB8A03950A16C64F933FDD77F53F6A3BE439B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:2e:57:4b:e0:d0:a0:03:70:0b:03:5a:05: f7:0e:91:80:73:41:a5:7c:7b:5b:c2:9d:c3:67:bb: 78:bf:f6:d9:1a:86:ea:01:e3:4a:fa:65:59:ce:8e: 44:e7:42:83:5d:53:fe:dd:72:f1:a3:f7:20:5a:c7: 98:19:8a:62:b3:44:0f:a6:5b:74:9b:2e:f8:84:4f: f3:ac:08:1c:95:7e:20:75:5d:35:b1:74:df:be:42: ac:ae:2a:8a:f2:49:0e:fc:51:2d:e0:35:6c:f3:09: 73:dc:13:e1:80:51:82:e1:3a:77:18:de:53:45:02: a3:7b:d1:15:8a:d2:d6:bd:25:86:00:6f:84:4c:1e: 19:e6:85:43:ae:02:65:b5:85:d9:53:ba:b5:b8:1d: c6:7f:37:27:09:38:e7:48:43:35:df:f1:0b:35:d6: af:47:d3:d4:9d:c5:dc:57:3d:f9:72:b5:6b:8d:61: 7e:3f:94:12:bf:54:ea:e5:e6:5f:de:c3:9f:49:5d: 5d:6f:f3:32:da:c6:90:a6:cd:01:34:eb:9a:79:fa: b9:2c:24:af:27:c0:6d:00:41:53:50:41:c2:bd:2b: e2:ab:d6:49:03:19:e5:a6:80:0c:ac:3a:19:ad:fd: 28:25:aa:c2:ad:18:14:dc:a7:09:c9:b1:54:93:fe: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:B8:A0:39:50:A1:6C:64:F9:33:FD:D7:7F:53:F6:A3:BE:43:9B X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:56:9a:3c:b7:dc:b8:f4:ca:ef:96:42:02:44:6a:e9:c3: 39:a4:2e:f7:a0:9b:2d:98:88:80:71:57:9b:1b:3a:b5:ef:8a: 21:90:d1:3c:3d:48:87:e6:7e:db:4a:35:40:3c:7f:74:e1:c8: 39:7a:e2:29:10:62:86:58:ab:87:70:69:e4:a8:39:56:c3:22: 03:49:a9:0c:02:85:c7:72:31:fe:51:6d:92:8e:72:c8:6a:3d: f6:64:ba:18:8d:fe:a6:a4:7d:b6:7b:a3:b3:37:5b:ea:ee:ab: 56:c1:e6:7d:b7:dc:15:da:0e:6d:50:c2:92:cb:a0:d7:35:d4: d9:c5:85:5e:da:f5:bb:d9:32:4a:d2:87:99:d4:02:ee:a7:7a: 65:db:01:57:ff:42:0a:1e:ac:e6:63:4f:b5:94:82:dd:ad:42: 95:0d:29:1d:8c:7d:9b:21:1d:fd:f2:02:65:44:fc:2f:a4:ed: 32:89:97:15:3c:0a:b7:42:27:59:58:77:b2:07:fd:b4:de:10: 75:e3:ed:e8:b7:d4:27:61:a0:6e:fa:0e:80:c3:80:82:90:17: 4e:34:76:32:f4:c2:91:6b:b9:f2:b0:c1:cc:41:73:b7:e2:55: b8:2b:97:6e:2f:2a:c2:cf:b6:05:7b:0f:42:ed:d6:c8:62:25: 55:b2:04:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlX67hdIFkp2TYEPaWgCfozAwnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA2MDMxOTA3MTRaFw0yNTA2MDYxOTQ3MTRaMDMxMTAvBgNV BAMTKDJBN0JCOEEwMzk1MEExNkM2NEY5MzNGREQ3N0Y1M0Y2QTNCRTQzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwi5XS+DQoANwCwNaBfcOkYBz QaV8e1vCncNnu3i/9tkahuoB40r6ZVnOjkTnQoNdU/7dcvGj9yBax5gZimKzRA+m W3SbLviET/OsCByVfiB1XTWxdN++QqyuKorySQ78US3gNWzzCXPcE+GAUYLhOncY 3lNFAqN70RWK0ta9JYYAb4RMHhnmhUOuAmW1hdlTurW4HcZ/NycJOOdIQzXf8Qs1 1q9H09SdxdxXPflytWuNYX4/lBK/VOrl5l/ew59JXV1v8zLaxpCmzQE065p5+rks JK8nwG0AQVNQQcK9K+Kr1kkDGeWmgAysOhmt/SglqsKtGBTcpwnJsVST/ju3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnu4oDlQoWxk+TP9139T9qO+Q5swHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwgVpo8t9y49MrvlkICRGrpwzmkLvegmy2Y iIBxV5sbOrXviiGQ0Tw9SIfmfttKNUA8f3ThyDl64ikQYoZYq4dwaeSoOVbDIgNJ qQwChcdyMf5RbZKOcshqPfZkuhiN/qakfbZ7o7M3W+ruq1bB5n233BXaDm1QwpLL oNc11NnFhV7a9bvZMkrSh5nUAu6nemXbAVf/QgoerOZjT7WUgt2tQpUNKR2MfZsh Hf3yAmVE/C+k7TKJlxU8CrdCJ1lYd7IH/bTeEHXj7ei31CdhoG76DoDDgIKQF040 djL0wpFrufKwwcxBc7fiVbgrl24vKsLPtgV7D0Lt1shiJVWyBCs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:43 2025 by rpki-client