$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: PzwmhVEYxNPtTOuBU0aSbB0nXh3x5KbbIllnYZ9DAp4= Subject key identifier: CB:AF:44:E0:88:2B:D2:92:00:04:B9:2F:AD:02:DD:AC:1C:E5:BC:CC Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 0818F2841B2AE3513AA83D7F62E643A3F736941C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 01DF Signing time: Wed 04 Jun 2025 00:01:03 +0000 Manifest this update: Tue 03 Jun 2025 23:56:03 +0000 Manifest next update: Sat 07 Jun 2025 10:38:03 +0000 Files and hashes: 1: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 2: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 3: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 5: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 6: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: 0kJHlD8vHN/dvqPkyAImIyc1HqwjF6AaKiPEkDRkcKc=) 7: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 8: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 9: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 10: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:18:f2:84:1b:2a:e3:51:3a:a8:3d:7f:62:e6:43:a3:f7:36:94:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Jun 3 23:56:03 2025 GMT Not After : Jun 7 10:38:03 2025 GMT Subject: CN=CBAF44E0882BD2920004B92FAD02DDAC1CE5BCCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:e2:b3:7f:24:1f:f7:66:a9:1a:d6:1c:a3: b3:54:4c:1a:69:7c:6c:9e:27:c2:ab:63:de:e3:03: c0:4b:21:c8:ac:3e:31:9f:8f:b2:2c:34:57:9a:46: 46:57:5a:f0:c4:e4:be:68:b9:12:59:11:54:64:df: 95:61:57:6e:41:37:e6:c9:e2:14:c0:84:2e:5c:d8: b1:46:57:71:36:89:89:ea:b7:ad:59:40:bf:8f:b9: fc:87:2e:4a:ef:de:e0:37:2b:17:5b:0e:1c:2f:ba: 38:28:e5:77:9e:8a:bd:ef:1a:d9:b0:63:39:3c:f0: 77:02:71:b3:c7:e3:8a:e1:88:5c:23:ad:1a:24:fa: 2a:bb:4e:43:cf:bd:8b:27:7a:39:48:f5:01:f8:ef: 85:85:cd:48:ce:87:f0:b5:01:0f:33:48:d1:71:2e: 34:7f:17:7b:fe:5b:50:37:02:21:76:6d:6a:d6:dc: e0:38:1b:8a:d4:73:53:c5:f1:6b:8c:a6:bc:87:27: 81:4b:9f:ab:fd:b7:ab:55:9c:88:5c:d6:c4:88:51: ba:0c:8b:c1:19:f6:46:91:13:a7:86:d4:e6:ca:ea: fd:29:60:59:67:e1:39:26:c9:fd:6d:40:b9:bd:dc: 77:e8:80:71:38:5c:24:73:f2:e2:4e:09:14:63:83: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AF:44:E0:88:2B:D2:92:00:04:B9:2F:AD:02:DD:AC:1C:E5:BC:CC X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:12:3c:7f:f6:fd:30:4f:3e:2c:fc:5a:e7:f9:79:c8:d2:26: 4c:08:05:a4:59:77:e2:bc:15:31:fc:d9:c6:87:c2:12:ab:48: 26:39:06:42:19:e4:47:67:47:f3:17:d5:cf:0b:f3:0b:22:ac: 58:f7:e0:96:ea:e9:ac:6b:39:a1:3c:53:4d:51:9a:2c:e2:18: 27:8b:48:cf:6f:7c:0e:9a:ca:7a:34:56:77:b4:11:33:97:eb: 94:d3:7a:69:d7:c1:74:0d:6c:77:a0:60:a3:e8:b6:6c:79:f4: e9:32:cb:c4:a0:4c:c3:5c:6d:11:be:f5:12:a3:ee:b3:f3:7a: ad:f1:c5:1f:9b:6a:01:00:4c:ad:bf:54:50:91:e0:d5:61:b4: 00:4a:9f:4e:25:6b:f5:4b:38:af:cd:94:75:be:ff:d0:5c:0b: d1:01:c4:14:6a:2b:02:0d:6e:e1:0a:52:fb:5f:39:2f:d3:04: 31:66:24:08:11:df:12:3c:3a:10:c6:61:57:c6:35:89:fe:69: 2e:7a:bb:49:7d:59:9c:8f:aa:81:51:d9:1a:a5:f5:ca:67:2b: 39:5e:0c:1e:04:68:b2:b7:0b:e6:38:0c:e2:ac:a2:92:11:59: 8d:7d:08:aa:45:d5:6e:f7:4f:33:a1:f2:fa:40:7c:3a:05:ee: 7c:0a:78:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBjyhBsq41E6qD1/YuZDo/c2lBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA2MDMyMzU2MDNaFw0yNTA2MDcxMDM4MDNaMDMxMTAvBgNV BAMTKENCQUY0NEUwODgyQkQyOTIwMDA0QjkyRkFEMDJEREFDMUNFNUJDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQH+KzfyQf92apGtYco7NUTBpp fGyeJ8KrY97jA8BLIcisPjGfj7IsNFeaRkZXWvDE5L5ouRJZEVRk35VhV25BN+bJ 4hTAhC5c2LFGV3E2iYnqt61ZQL+PufyHLkrv3uA3KxdbDhwvujgo5Xeeir3vGtmw Yzk88HcCcbPH44rhiFwjrRok+iq7TkPPvYsnejlI9QH474WFzUjOh/C1AQ8zSNFx LjR/F3v+W1A3AiF2bWrW3OA4G4rUc1PF8WuMpryHJ4FLn6v9t6tVnIhc1sSIUboM i8EZ9kaRE6eG1ObK6v0pYFln4Tkmyf1tQLm93HfogHE4XCRz8uJOCRRjg77FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy69E4Igr0pIABLkvrQLdrBzlvMwwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGASPH/2/TBPPiz8Wuf5ecjSJkwIBaRZd+K8 FTH82caHwhKrSCY5BkIZ5EdnR/MX1c8L8wsirFj34Jbq6axrOaE8U01RmiziGCeL SM9vfA6ayno0Vne0ETOX65TTemnXwXQNbHegYKPotmx59Okyy8SgTMNcbRG+9RKj 7rPzeq3xxR+bagEATK2/VFCR4NVhtABKn04la/VLOK/NlHW+/9BcC9EBxBRqKwIN buEKUvtfOS/TBDFmJAgR3xI8OhDGYVfGNYn+aS56u0l9WZyPqoFR2Rql9cpnKzle DB4EaLK3C+Y4DOKsopIRWY19CKpF1W73TzOh8vpAfDoF7nwKePI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:59 2025 by rpki-client