$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: PLxkJ94f0/HqdxjVYtolZlnlwKimMpsR3S7itIqA/ek= Subject key identifier: 00:39:E4:C9:52:70:D7:E9:32:B5:DE:65:1B:33:CC:2F:88:4A:D8:E1 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 218EA1E94ECD96B40A0923E10C68E8839D6549D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: C9 Signing time: Thu 05 Jun 2025 04:50:44 +0000 Manifest this update: Thu 05 Jun 2025 04:45:44 +0000 Manifest next update: Sun 08 Jun 2025 12:43:44 +0000 Files and hashes: 1: 08435803278DC5796EE67697996454D656195D4C.crl (hash: VCYoewS8AmqlPyVgtHKy0vmFd9YK874RF8Z4yffvNaU=) 2: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8e:a1:e9:4e:cd:96:b4:0a:09:23:e1:0c:68:e8:83:9d:65:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Jun 5 04:45:44 2025 GMT Not After : Jun 8 12:43:44 2025 GMT Subject: CN=0039E4C95270D7E932B5DE651B33CC2F884AD8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f4:b0:ad:2e:36:0d:25:71:35:fd:54:9b:f2: 0c:40:dc:eb:2b:55:5b:94:13:4e:6d:97:4b:47:e2: a2:dc:bf:d5:ec:67:0c:4f:5e:d8:b4:28:d3:0d:91: 3e:57:b3:a9:c8:61:ef:f5:22:1f:34:a1:d7:48:a2: 16:fd:1c:70:a6:07:ff:67:83:ce:99:b6:a3:c7:9b: 1b:b4:3f:f0:0c:e3:23:b8:f7:63:78:73:6e:87:7c: b1:58:61:c0:e1:f8:c0:72:7f:a9:11:1e:0c:4c:13: 0a:6b:48:72:99:b3:e5:6c:d8:bd:9e:c7:32:23:71: 0f:76:78:b0:84:89:f0:49:35:44:0f:a8:24:f5:23: 38:f3:d3:c1:d8:87:2e:af:3f:ac:f4:9d:23:96:6e: 26:90:74:a3:57:6b:12:e5:8d:94:e5:af:ba:7b:cc: 7c:a8:67:3e:aa:d5:1f:52:4b:69:d4:e4:e1:29:18: 3c:d0:ca:4d:77:c2:0a:af:ed:50:f0:bf:c4:2a:e5: 4b:36:8f:d5:8e:02:20:77:92:3c:2e:a3:f6:13:68: 5d:eb:24:d1:3c:b9:bf:69:51:d6:58:27:a4:b1:d0: f7:a4:f8:d3:21:a2:75:ce:5c:ad:5f:6c:5c:45:b2: 84:79:fe:b4:71:25:68:a4:cb:12:73:6e:89:dd:0c: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:E4:C9:52:70:D7:E9:32:B5:DE:65:1B:33:CC:2F:88:4A:D8:E1 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9f:21:b2:92:1a:a9:08:78:81:2e:5a:a1:ab:58:48:18:9f: 8b:dd:74:90:b7:3c:7b:c2:1d:b4:8a:28:2f:15:d1:3e:6c:6e: 28:6b:28:04:26:de:27:7e:9a:df:b4:09:83:33:18:f9:a8:a3: 87:26:97:8f:e8:87:3b:36:47:78:35:49:86:7c:3a:1c:8a:59: 07:d6:d0:f6:a4:98:36:16:cb:11:6a:7e:e0:cf:60:be:18:24: ae:d0:90:ed:28:c7:4b:4a:4c:3e:09:ce:fe:2a:07:fb:b5:b4: 86:64:22:32:95:8b:35:55:b0:3c:3a:fc:12:af:cc:de:b7:ce: c6:0d:12:2a:52:af:80:70:f4:ac:c3:eb:59:8b:45:e4:b4:f6: 7b:19:f9:54:30:96:38:f4:da:c9:0a:88:a2:da:bd:04:c3:e1: ff:00:63:49:df:ba:73:7e:a3:db:0d:0e:04:0c:46:e7:14:41: 68:ea:0c:a9:27:30:c5:1c:a4:bb:6e:1d:ba:40:15:e3:80:4d: 45:5b:45:a8:2d:56:52:7e:05:9f:33:6d:28:69:f1:ff:89:3b: 16:11:f5:28:4c:79:a4:d7:0b:be:f4:1c:f2:00:07:7d:ec:a2: 3d:b3:bc:7e:03:a5:61:e7:ad:3b:91:95:4c:cb:91:bd:27:1b: fb:2b:61:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIY6h6U7NlrQKCSPhDGjog51lSdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTA2MDUwNDQ1NDRaFw0yNTA2MDgxMjQzNDRaMDMxMTAvBgNV BAMTKDAwMzlFNEM5NTI3MEQ3RTkzMkI1REU2NTFCMzNDQzJGODg0QUQ4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9LCtLjYNJXE1/VSb8gxA3Osr VVuUE05tl0tH4qLcv9XsZwxPXti0KNMNkT5Xs6nIYe/1Ih80oddIohb9HHCmB/9n g86ZtqPHmxu0P/AM4yO492N4c26HfLFYYcDh+MByf6kRHgxMEwprSHKZs+Vs2L2e xzIjcQ92eLCEifBJNUQPqCT1Izjz08HYhy6vP6z0nSOWbiaQdKNXaxLljZTlr7p7 zHyoZz6q1R9SS2nU5OEpGDzQyk13wgqv7VDwv8Qq5Us2j9WOAiB3kjwuo/YTaF3r JNE8ub9pUdZYJ6Sx0Pek+NMhonXOXK1fbFxFsoR5/rRxJWikyxJzbondDFVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADnkyVJw1+kytd5lGzPML4hK2OEwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKafIbKSGqkIeIEuWqGrWEgYn4vddJC3PHvC HbSKKC8V0T5sbihrKAQm3id+mt+0CYMzGPmoo4cml4/ohzs2R3g1SYZ8OhyKWQfW 0PakmDYWyxFqfuDPYL4YJK7QkO0ox0tKTD4Jzv4qB/u1tIZkIjKVizVVsDw6/BKv zN63zsYNEipSr4Bw9KzD61mLReS09nsZ+VQwljj02skKiKLavQTD4f8AY0nfunN+ o9sNDgQMRucUQWjqDKknMMUcpLtuHbpAFeOATUVbRagtVlJ+BZ8zbShp8f+JOxYR 9ShMeaTXC770HPIAB33soj2zvH4DpWHnrTuRlUzLkb0nG/srYYc= -----END CERTIFICATE-----Generated at Thu Jun 5 19:12:58 2025 by rpki-client