$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: 9vXldLoCXnirONWHIYyO/AqtaYKCH1Xs5VPY9viV9R4= Subject key identifier: E7:C9:AB:E3:5D:33:0B:B8:FA:A9:8B:F5:87:B6:0C:11:C1:46:5B:23 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 270B86ED9DF1475213DA5A02486DE4D35FFF6662 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 0177 Signing time: Thu 05 Jun 2025 01:11:17 +0000 Manifest this update: Thu 05 Jun 2025 01:06:17 +0000 Manifest next update: Sun 08 Jun 2025 06:20:17 +0000 Files and hashes: 1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) 2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: aE+88exc1FY867SV+GgMemRIuUOi69qJEsU8UY8+46I=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0b:86:ed:9d:f1:47:52:13:da:5a:02:48:6d:e4:d3:5f:ff:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Jun 5 01:06:17 2025 GMT Not After : Jun 8 06:20:17 2025 GMT Subject: CN=E7C9ABE35D330BB8FAA98BF587B60C11C1465B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:12:7b:ad:33:e1:0a:e1:58:03:c0:a2:dd: ec:39:92:49:4a:b9:02:98:fd:47:a0:9f:c0:c6:bd: 81:bf:f6:c1:18:ad:92:07:92:57:07:20:ff:fc:7f: 38:ba:3a:a5:cb:eb:cd:dc:14:43:ef:ba:f7:8a:aa: c4:5e:63:9e:a9:67:e1:44:00:cd:12:cc:80:55:22: 95:94:40:b2:d1:d1:ad:c2:ba:0a:d4:ac:cd:b3:7b: b2:59:48:06:ee:19:0f:7d:35:c7:c4:18:a6:d2:88: 18:df:40:70:d9:b9:97:f7:ce:a8:38:25:8b:85:9c: b1:c7:71:b4:b4:74:61:fe:ea:7c:42:58:28:c0:cb: c3:c4:b7:bc:eb:bc:1c:37:e4:97:d8:b3:f4:10:b4: bc:ed:1e:ca:91:e9:b6:8c:15:4f:81:2c:15:11:09: 3f:10:ed:fd:f9:f5:97:33:05:ac:f8:10:1c:e1:3e: 62:c4:fe:7b:80:6a:79:70:e5:4d:9d:e4:1e:bc:dc: 64:39:d7:03:b5:36:76:cc:da:57:91:b0:66:ed:13: 69:90:32:8b:42:46:5d:a8:59:05:b3:fb:87:85:e9: 0b:5a:10:64:ed:75:b2:12:39:06:b5:fa:03:2e:00: 74:14:99:fd:65:bd:34:f9:5a:f8:b7:11:52:f3:33: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C9:AB:E3:5D:33:0B:B8:FA:A9:8B:F5:87:B6:0C:11:C1:46:5B:23 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:92:93:cf:89:b4:64:72:43:e8:b5:85:3d:12:d8:48:11: b5:43:c6:ea:72:b8:a2:b5:29:c7:66:f9:fa:06:e0:14:16:3c: 48:76:61:47:c7:20:a3:2d:f8:97:33:a1:43:27:0c:c5:32:f3: 48:e8:6c:4e:c6:50:6d:e7:4a:7e:5c:92:4e:02:3e:cb:dc:a0: 64:0e:3c:9f:b8:9a:0c:07:5c:b8:91:74:cd:67:a1:9f:74:53: de:31:d5:92:a6:14:5b:a4:7c:6b:a3:5b:d5:19:50:f3:c7:dc: d4:b9:b2:98:f7:9b:97:1e:9e:11:8f:94:bc:c6:95:40:d6:f5: 8d:1f:41:0d:9e:b9:4f:ef:f0:b6:e4:96:61:79:a3:54:9f:4a: 9a:47:2b:f9:c2:fd:19:1f:ba:d0:d1:ec:ac:63:21:54:7e:ca: c3:b0:fd:f3:24:53:65:6d:6a:75:16:43:df:3a:be:7c:d8:6f: 9d:61:b3:04:a3:10:cb:8e:cc:04:66:b6:30:3f:d7:04:01:2f: f9:68:e8:e3:0d:55:7a:0d:e8:21:18:40:29:ef:01:c5:54:9d: 18:d7:aa:dd:3d:1a:a4:9a:c4:9a:b0:8c:cb:27:13:5b:3a:7d: 5d:c2:a9:0a:3e:11:0b:ea:6b:54:95:99:e3:f2:d0:80:4c:af: ce:b3:d6:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwuG7Z3xR1IT2loCSG3k01//ZmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA2MDUwMTA2MTdaFw0yNTA2MDgwNjIwMTdaMDMxMTAvBgNV BAMTKEU3QzlBQkUzNUQzMzBCQjhGQUE5OEJGNTg3QjYwQzExQzE0NjVCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcBJ7rTPhCuFYA8Ci3ew5kklK uQKY/Uegn8DGvYG/9sEYrZIHklcHIP/8fzi6OqXL683cFEPvuveKqsReY56pZ+FE AM0SzIBVIpWUQLLR0a3CugrUrM2ze7JZSAbuGQ99NcfEGKbSiBjfQHDZuZf3zqg4 JYuFnLHHcbS0dGH+6nxCWCjAy8PEt7zrvBw35JfYs/QQtLztHsqR6baMFU+BLBUR CT8Q7f359ZczBaz4EBzhPmLE/nuAanlw5U2d5B683GQ51wO1NnbM2leRsGbtE2mQ MotCRl2oWQWz+4eF6QtaEGTtdbISOQa1+gMuAHQUmf1lvTT5Wvi3EVLzM4EXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58mr410zC7j6qYv1h7YMEcFGWyMwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdGkpPPibRkckPotYU9EthIEbVDxupyuKK1 Kcdm+foG4BQWPEh2YUfHIKMt+JczoUMnDMUy80jobE7GUG3nSn5ckk4CPsvcoGQO PJ+4mgwHXLiRdM1noZ90U94x1ZKmFFukfGujW9UZUPPH3NS5spj3m5cenhGPlLzG lUDW9Y0fQQ2euU/v8LbklmF5o1SfSppHK/nC/RkfutDR7KxjIVR+ysOw/fMkU2Vt anUWQ986vnzYb51hswSjEMuOzARmtjA/1wQBL/lo6OMNVXoN6CEYQCnvAcVUnRjX qt09GqSaxJqwjMsnE1s6fV3CqQo+EQvqa1SVmePy0IBMr86z1p0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:41 2025 by rpki-client