$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: ZDJWI8+1QXjiRGXa0mQdbdnCyWvXu0u7qATrCMzQMi0= Subject key identifier: B3:15:DF:F0:28:72:76:12:6A:D5:6E:F1:82:A6:FB:3C:36:D7:2C:79 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 1BDB69F2F54AB5A527E46154232FF3DD0F36A07E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 7F Signing time: Thu 05 Jun 2025 21:42:16 +0000 Manifest this update: Thu 05 Jun 2025 21:37:16 +0000 Manifest next update: Sun 08 Jun 2025 22:15:16 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: 6IP2wnTiFOKdwCkSOErg1ytozXKPLoYi4YYuu2rWRv8=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:db:69:f2:f5:4a:b5:a5:27:e4:61:54:23:2f:f3:dd:0f:36:a0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Jun 5 21:37:16 2025 GMT Not After : Jun 8 22:15:16 2025 GMT Subject: CN=B315DFF0287276126AD56EF182A6FB3C36D72C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:45:9a:19:43:3b:7a:fd:80:69:38:31:96: b3:78:61:7d:d3:b0:19:f9:37:4a:90:cd:e3:6b:0e: c1:71:9a:aa:fa:b6:aa:4b:98:38:6e:76:0f:b1:59: 65:91:fa:da:bc:53:f2:1b:cb:02:68:4d:81:65:b5: 51:e4:08:09:78:08:62:92:a1:05:8f:1f:2d:8c:92: 00:5e:c4:ad:a2:2d:4e:09:1a:97:de:33:a4:a6:9b: ab:6f:9e:c8:f3:35:5e:a5:d9:7c:ba:dc:6a:b3:0d: f1:a1:7e:b8:67:a2:cc:c7:4e:84:80:68:5a:2b:a1: 02:2f:0b:97:ec:0f:cb:b4:c1:d4:f1:93:c5:21:e0: 0c:17:77:89:19:ef:d9:4f:03:e3:82:00:5a:fa:78: bf:7e:66:77:0e:6c:c3:8f:25:44:c9:91:2f:b1:4f: a4:13:46:24:32:da:4f:09:88:21:ed:b2:c2:6d:4e: 31:8b:a4:46:25:55:da:80:e2:5f:0e:3f:e3:80:c3: 09:95:92:52:e2:cc:28:cd:2d:62:4f:ff:11:c7:39: 5a:00:f5:2a:f3:d4:3d:2b:b9:38:0b:d4:f8:03:ee: 00:d7:7c:7c:6f:2c:a9:59:23:a6:36:97:76:d7:bd: 65:2b:fb:20:ec:6b:06:5a:ba:86:14:4a:1c:ba:e8: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:DF:F0:28:72:76:12:6A:D5:6E:F1:82:A6:FB:3C:36:D7:2C:79 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8f:40:75:7d:03:b0:86:8d:dd:2b:76:52:08:56:b5:7f:dc: 3b:50:93:9a:16:9f:31:16:e4:a4:81:ff:29:6a:0f:d1:5e:49: 1d:c9:03:59:dd:9c:05:ae:2a:ed:f0:6b:74:e4:3b:bb:b5:c0: 1d:93:ee:7f:73:1b:b0:72:52:0d:99:45:99:ee:a3:c4:2d:df: e1:36:6a:e8:ca:6c:34:ce:f0:d9:23:da:f6:87:10:15:a2:ef: 51:11:5b:88:82:ec:cc:a6:24:ee:47:84:3b:ea:27:bc:fa:73: 0c:4c:d3:4b:c7:9c:c4:a0:63:bb:5f:97:29:de:47:d7:20:24: 81:ed:db:59:7c:4e:d9:23:9a:8b:ae:b9:49:4c:71:d7:71:ae: 97:58:18:aa:46:83:93:cb:37:19:ac:19:77:6d:ee:dc:c5:2d: 38:4b:bb:92:d8:05:b7:7d:cf:9d:a1:00:14:cc:84:56:66:1a: ee:2e:9f:51:de:17:8e:0e:23:27:73:e6:81:39:72:63:86:c1: 2c:81:48:e5:ad:54:4b:6c:8a:c4:ad:98:45:2e:d8:31:71:6a: c8:c6:06:8d:86:c9:fe:bd:e9:0f:6f:f5:1d:3c:f2:9b:7c:f5: 7f:43:dd:57:f5:21:48:f4:b0:13:95:28:b7:ca:62:95:5a:f0: 34:47:5f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9tp8vVKtaUn5GFUIy/z3Q82oH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA2MDUyMTM3MTZaFw0yNTA2MDgyMjE1MTZaMDMxMTAvBgNV BAMTKEIzMTVERkYwMjg3Mjc2MTI2QUQ1NkVGMTgyQTZGQjNDMzZENzJDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CEWaGUM7ev2AaTgxlrN4YX3T sBn5N0qQzeNrDsFxmqr6tqpLmDhudg+xWWWR+tq8U/IbywJoTYFltVHkCAl4CGKS oQWPHy2MkgBexK2iLU4JGpfeM6Smm6tvnsjzNV6l2Xy63GqzDfGhfrhnoszHToSA aForoQIvC5fsD8u0wdTxk8Uh4AwXd4kZ79lPA+OCAFr6eL9+ZncObMOPJUTJkS+x T6QTRiQy2k8JiCHtssJtTjGLpEYlVdqA4l8OP+OAwwmVklLizCjNLWJP/xHHOVoA 9Srz1D0ruTgL1PgD7gDXfHxvLKlZI6Y2l3bXvWUr+yDsawZauoYUShy66K2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxXf8ChydhJq1W7xgqb7PDbXLHkwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqPQHV9A7CGjd0rdlIIVrV/3DtQk5oWnzEW 5KSB/ylqD9FeSR3JA1ndnAWuKu3wa3TkO7u1wB2T7n9zG7ByUg2ZRZnuo8Qt3+E2 aujKbDTO8Nkj2vaHEBWi71ERW4iC7MymJO5HhDvqJ7z6cwxM00vHnMSgY7tflyne R9cgJIHt21l8TtkjmouuuUlMcddxrpdYGKpGg5PLNxmsGXdt7tzFLThLu5LYBbd9 z52hABTMhFZmGu4un1HeF44OIydz5oE5cmOGwSyBSOWtVEtsisStmEUu2DFxasjG Bo2Gyf696Q9v9R088pt89X9D3Vf1IUj0sBOVKLfKYpVa8DRHX4Y= -----END CERTIFICATE-----Generated at Fri Jun 6 17:01:13 2025 by rpki-client