$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: 8SDZk6RFoi9I/pli23WS3j1sRETESetaI8qRvSQh1hk= Subject key identifier: F2:3B:98:AC:ED:40:80:14:89:DE:94:79:D3:89:DF:A4:A8:77:5E:17 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 45FC4A8C3DFAAACB35C153ABFF6CBDC4028969EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 53 Signing time: Fri 06 Jun 2025 01:51:31 +0000 Manifest this update: Fri 06 Jun 2025 01:46:31 +0000 Manifest next update: Mon 09 Jun 2025 13:36:31 +0000 Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: /0RFs9SswA3HsGNbCyOFCdJxGeUWiGweSJJIpSBdMDY=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fc:4a:8c:3d:fa:aa:cb:35:c1:53:ab:ff:6c:bd:c4:02:89:69:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Jun 6 01:46:31 2025 GMT Not After : Jun 9 13:36:31 2025 GMT Subject: CN=F23B98ACED40801489DE9479D389DFA4A8775E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:2c:03:a6:3f:6a:a8:4d:53:e4:86:75:cb: 76:51:e7:23:3c:a4:05:d6:8e:a3:7f:5d:7f:78:d1: 07:b2:3a:5e:13:88:e2:f7:a5:8f:2a:0b:9c:97:60: a9:c0:9f:12:05:a0:3c:a2:60:b5:00:8a:83:da:8b: 97:88:f9:29:44:be:1d:e6:58:91:be:b5:1f:90:b0: a9:05:6b:a0:de:0a:9a:a4:d3:38:c9:ba:c2:11:90: e4:17:f9:25:ff:40:72:be:c4:68:3c:91:08:6e:a3: cb:23:33:2c:f8:24:5d:17:f4:11:01:89:ec:e2:33: 8c:db:93:b3:42:57:0a:83:d9:e0:53:8b:5a:17:3c: 9f:3e:ae:3f:9c:e0:2d:4a:1f:7e:f2:3d:a5:6e:e9: a1:21:7d:95:99:5e:99:de:87:5a:c2:a0:8b:1e:55: 3c:40:fb:6b:08:6e:ff:fa:31:d0:cf:c0:f0:00:6d: 13:0c:ff:95:54:f9:be:68:91:d7:c1:49:86:a1:9d: ea:df:81:84:d8:11:3c:9a:7a:3e:1f:fb:79:6a:18: c9:30:fc:80:37:c7:fb:59:0c:38:dd:5a:a4:20:a8: 1d:78:16:e4:75:e4:46:b2:59:68:ff:98:f6:bf:f7: 08:35:a5:c1:3e:4c:9e:54:5b:ca:04:8e:fb:a6:a5: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:98:AC:ED:40:80:14:89:DE:94:79:D3:89:DF:A4:A8:77:5E:17 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:62:7d:a3:57:f4:b2:7f:d4:49:91:78:ae:96:b7:f5:42: 27:11:c3:7f:ce:75:d5:45:cc:2f:41:5a:7d:cd:bc:b2:ca:da: 77:31:77:09:5c:69:ed:fa:79:ec:52:84:bc:84:88:d7:f9:3a: 09:ea:31:e0:80:67:f6:78:4d:c9:22:12:cf:bd:84:f5:67:50: 24:2b:19:35:30:4e:f4:4e:5a:8b:7b:aa:57:b3:38:fe:04:48: 59:8a:33:8b:e5:fe:2d:59:3d:1c:dc:a0:d6:ee:75:7b:0d:ef: f5:c0:11:98:e2:57:9d:18:32:af:92:0e:d9:ea:03:76:76:10: b3:7a:9d:68:7c:28:92:7a:c5:a0:86:70:ef:1d:93:b7:d0:34: e7:6f:46:ac:bd:4d:0d:7e:c9:be:8a:a0:f3:ad:46:e7:d9:43: ae:e9:fa:06:75:eb:80:0e:d8:0d:23:7c:82:ac:5b:fd:c1:fd: 11:ba:70:69:1c:73:8f:fb:2c:95:96:7c:53:ee:1d:74:c8:be: 9a:d2:ce:79:02:8b:c0:42:1f:b1:52:10:95:3e:71:74:1b:13: 3f:64:57:d1:99:d3:af:84:93:a0:5c:8c:1d:4e:51:e5:07:39: 05:6b:56:ca:46:04:0a:40:31:25:0a:5f:48:19:31:dd:dd:22: 24:df:81:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfxKjD36qss1wVOr/2y9xAKJaewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA2MDYwMTQ2MzFaFw0yNTA2MDkxMzM2MzFaMDMxMTAvBgNV BAMTKEYyM0I5OEFDRUQ0MDgwMTQ4OURFOTQ3OUQzODlERkE0QTg3NzVFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+CwDpj9qqE1T5IZ1y3ZR5yM8 pAXWjqN/XX940QeyOl4TiOL3pY8qC5yXYKnAnxIFoDyiYLUAioPai5eI+SlEvh3m WJG+tR+QsKkFa6DeCpqk0zjJusIRkOQX+SX/QHK+xGg8kQhuo8sjMyz4JF0X9BEB ieziM4zbk7NCVwqD2eBTi1oXPJ8+rj+c4C1KH37yPaVu6aEhfZWZXpneh1rCoIse VTxA+2sIbv/6MdDPwPAAbRMM/5VU+b5okdfBSYahnerfgYTYETyaej4f+3lqGMkw /IA3x/tZDDjdWqQgqB14FuR15EayWWj/mPa/9wg1pcE+TJ5UW8oEjvumpUA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8juYrO1AgBSJ3pR504nfpKh3XhcwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKi7Yn2jV/Syf9RJkXiulrf1QicRw3/OddVF zC9BWn3NvLLK2ncxdwlcae36eexShLyEiNf5OgnqMeCAZ/Z4TckiEs+9hPVnUCQr GTUwTvROWot7qlezOP4ESFmKM4vl/i1ZPRzcoNbudXsN7/XAEZjiV50YMq+SDtnq A3Z2ELN6nWh8KJJ6xaCGcO8dk7fQNOdvRqy9TQ1+yb6KoPOtRufZQ67p+gZ164AO 2A0jfIKsW/3B/RG6cGkcc4/7LJWWfFPuHXTIvprSznkCi8BCH7FSEJU+cXQbEz9k V9GZ06+Ek6BcjB1OUeUHOQVrVspGBApAMSUKX0gZMd3dIiTfgUs= -----END CERTIFICATE-----Generated at Sun Jun 8 01:45:42 2025 by rpki-client