$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: w0f5vXkbxWnpToHtQW2+VzDz/FINzjrORUGptxFizLE= Subject key identifier: 84:DF:C9:01:C1:23:1D:1F:D4:12:06:97:85:10:AC:0A:0A:95:2A:48 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 3C9874CD120EEC75525137786A386921ED5B9DB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 0265 Signing time: Sat 07 Jun 2025 13:21:06 +0000 Manifest this update: Sat 07 Jun 2025 13:16:06 +0000 Manifest next update: Tue 10 Jun 2025 16:25:06 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) 2: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: DQHjGXiamk6fUP7uWsozjSi9j0yIIdGD+DV9w1cW1m0=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 4: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) 5: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) 6: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 7: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:98:74:cd:12:0e:ec:75:52:51:37:78:6a:38:69:21:ed:5b:9d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Jun 7 13:16:06 2025 GMT Not After : Jun 10 16:25:06 2025 GMT Subject: CN=84DFC901C1231D1FD41206978510AC0A0A952A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:31:51:3c:6f:22:3c:d7:fa:30:da:7b:ec: 63:4b:7d:53:41:74:b3:cc:14:b8:46:16:2c:97:82: b6:74:d1:bb:81:3d:4e:d6:d6:08:f3:28:4b:b5:91: 8f:d7:df:f4:19:3b:14:fc:ad:a6:04:9d:38:b8:1b: 1a:58:18:13:07:1e:6e:37:22:07:65:a2:9a:cf:8a: 15:49:20:1f:fd:8f:61:f0:fc:fa:04:8b:25:a1:a5: c7:0d:e9:e3:fc:35:33:c7:b5:18:2d:f3:5d:e3:27: fa:b5:97:7e:85:ce:0a:0c:6c:27:a0:f9:78:50:a3: ee:99:a7:3b:44:ef:a9:b9:35:f2:c3:86:bc:ad:1c: 52:16:b7:68:01:da:22:05:f7:a2:ef:26:a9:c3:51: 1a:9c:8e:5f:7d:6a:29:0a:18:d5:18:ae:2d:c5:c0: 45:3b:07:e1:2a:f2:44:37:b6:62:cd:f5:8e:ec:48: f8:2d:cd:ae:5e:26:36:85:20:69:50:11:1d:30:8c: 3f:91:ec:5f:47:c0:e7:55:42:32:52:2e:85:c2:41: 4b:4e:71:82:3f:32:96:98:0f:c0:93:34:e9:20:c3: e1:14:99:0d:85:71:37:19:59:1a:23:42:5e:48:a8: f7:d9:77:f5:d8:03:08:61:f5:cd:fc:25:fb:f6:30: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:C9:01:C1:23:1D:1F:D4:12:06:97:85:10:AC:0A:0A:95:2A:48 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2d:f7:34:bf:5f:69:c8:18:3a:61:41:ad:93:62:12:e5:27: 44:d9:05:9c:de:60:c0:14:9b:6d:98:90:0c:73:ec:c0:e8:7c: a3:f7:e5:fd:45:23:78:dd:d2:2a:09:14:44:50:d3:5c:58:0b: 90:04:0e:fc:67:5c:df:77:ef:3f:a8:fa:67:40:39:2a:36:00: 24:63:1a:5a:df:47:77:fc:c8:74:b4:9e:29:7b:52:31:87:c5: f3:dd:65:a9:fc:53:aa:fb:bb:fc:06:8f:00:75:55:3e:6a:a9: ec:e4:3c:b9:18:07:c1:47:28:17:53:0e:08:dd:70:d2:53:ec: 81:e5:87:24:75:72:1b:98:59:44:ca:80:f8:09:d4:b4:90:75: bb:b7:d6:7d:01:71:1f:9d:9f:6b:46:33:19:cf:86:43:5b:a5: 7a:3c:e5:3a:9b:e3:cc:14:ec:ed:6b:43:c5:0f:db:b6:d4:f0: 0a:3c:ca:ce:6d:09:ec:33:e1:50:e0:71:aa:be:78:03:c3:15: 91:df:fa:fa:73:7c:f4:1f:fb:63:b8:ac:11:b0:6b:e6:6b:a7: 6b:ac:b5:7c:62:d5:40:4f:9c:4e:1b:28:15:83:31:82:b6:65: f4:9c:76:04:2f:a1:03:d8:06:fc:89:9c:14:f0:99:f8:4a:5c: ed:5d:14:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJh0zRIO7HVSUTd4ajhpIe1bnbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA2MDcxMzE2MDZaFw0yNTA2MTAxNjI1MDZaMDMxMTAvBgNV BAMTKDg0REZDOTAxQzEyMzFEMUZENDEyMDY5Nzg1MTBBQzBBMEE5NTJBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaDFRPG8iPNf6MNp77GNLfVNB dLPMFLhGFiyXgrZ00buBPU7W1gjzKEu1kY/X3/QZOxT8raYEnTi4GxpYGBMHHm43 IgdloprPihVJIB/9j2Hw/PoEiyWhpccN6eP8NTPHtRgt813jJ/q1l36FzgoMbCeg +XhQo+6ZpztE76m5NfLDhrytHFIWt2gB2iIF96LvJqnDURqcjl99aikKGNUYri3F wEU7B+Eq8kQ3tmLN9Y7sSPgtza5eJjaFIGlQER0wjD+R7F9HwOdVQjJSLoXCQUtO cYI/MpaYD8CTNOkgw+EUmQ2FcTcZWRojQl5IqPfZd/XYAwhh9c38Jfv2MEjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhN/JAcEjHR/UEgaXhRCsCgqVKkgwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIst9zS/X2nIGDphQa2TYhLlJ0TZBZzeYMAU m22YkAxz7MDofKP35f1FI3jd0ioJFERQ01xYC5AEDvxnXN937z+o+mdAOSo2ACRj GlrfR3f8yHS0nil7UjGHxfPdZan8U6r7u/wGjwB1VT5qqezkPLkYB8FHKBdTDgjd cNJT7IHlhyR1chuYWUTKgPgJ1LSQdbu31n0BcR+dn2tGMxnPhkNbpXo85Tqb48wU 7O1rQ8UP27bU8Ao8ys5tCewz4VDgcaq+eAPDFZHf+vpzfPQf+2O4rBGwa+Zrp2us tXxi1UBPnE4bKBWDMYK2ZfScdgQvoQPYBvyJnBTwmfhKXO1dFDg= -----END CERTIFICATE-----Generated at Sun Jun 8 04:21:20 2025 by rpki-client