$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: ry0MB4hT+ouoyhrznBjE8vQp+e21TtfJLb/hqmNq4zA= Subject key identifier: 1A:C5:4C:A5:FF:67:A2:F4:AD:51:A8:18:4B:E0:99:0B:9F:CB:D3:20 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 342DC480A8FC202B37B7ED4BE78337159D028B1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 5D Signing time: Fri 06 Jun 2025 14:30:45 +0000 Manifest this update: Fri 06 Jun 2025 14:25:45 +0000 Manifest next update: Mon 09 Jun 2025 19:52:45 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) 2: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: 6GvaCi1aikIJhvCd/wZLOZzA4Qsl0JV2x2xkhHJ9+80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2d:c4:80:a8:fc:20:2b:37:b7:ed:4b:e7:83:37:15:9d:02:8b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Jun 6 14:25:45 2025 GMT Not After : Jun 9 19:52:45 2025 GMT Subject: CN=1AC54CA5FF67A2F4AD51A8184BE0990B9FCBD320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:73:f9:c3:1b:2f:94:0d:9b:7a:54:ac:6f: 1a:03:c0:59:5c:62:30:8a:1e:04:84:2d:07:64:1c: f9:67:98:5f:3a:d0:90:bb:ca:7d:50:c1:c1:50:85: 4a:07:74:28:7a:5f:89:30:fd:a7:5f:22:45:a0:c0: ab:da:f3:a0:65:31:0b:8b:16:77:f7:e9:26:ad:ba: bd:79:e5:f2:08:71:58:d6:39:58:63:62:17:8e:d3: b7:41:f7:19:ef:40:21:96:7f:4d:24:96:df:6d:c7: b7:63:71:a3:3b:46:87:8d:9a:e4:cf:e3:85:95:f1: 6b:f1:91:62:09:f9:e4:34:12:12:83:8f:c0:0c:20: 7e:76:b2:48:a0:1f:95:1a:40:18:59:e5:b0:de:b7: 89:95:56:49:4a:a7:c6:0b:35:2a:7f:90:ea:bd:40: 0e:42:07:ce:6f:02:6b:86:44:f2:cc:6c:cd:b9:99: f0:b0:e0:41:4e:62:ad:c0:1a:d0:d9:bf:7f:1b:50: 8c:fe:10:11:65:bc:ce:5e:af:47:62:94:e2:58:92: 5a:3d:c7:70:7a:b5:46:6a:b4:7f:06:46:cd:59:84: 81:cc:2d:27:ea:3f:ad:87:61:b3:af:1b:d7:18:22: f9:e8:76:95:bb:e6:cd:98:38:44:1b:5e:3a:15:ee: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C5:4C:A5:FF:67:A2:F4:AD:51:A8:18:4B:E0:99:0B:9F:CB:D3:20 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:17:8b:74:4e:b6:fa:1f:05:6c:03:6c:9e:74:c1:41:83: e2:ed:41:36:e5:d9:59:31:f2:76:99:b3:a6:9f:74:49:62:a1: ca:6b:dc:c4:d9:59:37:7c:b3:b3:ea:9f:22:ad:ae:b6:6c:b6: 58:1a:f0:da:57:22:f2:d0:d0:fb:20:f1:80:32:fa:de:51:44: 42:26:ec:70:5e:33:3a:91:e4:73:bd:e7:4c:09:b0:34:62:ee: 0f:cd:51:3c:bd:fb:62:77:7e:7f:84:9f:4e:ee:77:bc:3a:46: 57:15:9a:d8:30:d6:44:31:19:99:17:22:92:9c:c5:c7:54:09: a9:86:44:e0:a5:be:db:d3:3b:61:57:65:0a:98:4b:26:56:46: df:4d:3d:f4:21:99:ef:a1:f0:57:1b:5c:68:bb:dd:09:6f:cb: 54:59:a5:dc:f7:65:7f:09:3c:02:6d:52:8b:c5:1f:87:a3:8b: be:98:7f:8e:ab:ff:14:6f:e8:a5:10:9c:62:50:4f:34:11:9e: 1e:a3:9f:36:5a:60:80:8e:2c:d5:a3:08:69:14:42:69:1b:ba: a8:c2:bf:cc:4e:19:6e:91:50:19:f3:c7:73:a8:76:fe:7a:96: e2:d0:d2:66:cd:fd:ad:26:0d:aa:10:b9:c8:3d:f4:a1:42:bd: 96:4c:f7:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNC3EgKj8ICs3t+1L54M3FZ0CixswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA2MDYxNDI1NDVaFw0yNTA2MDkxOTUyNDVaMDMxMTAvBgNV BAMTKDFBQzU0Q0E1RkY2N0EyRjRBRDUxQTgxODRCRTA5OTBCOUZDQkQzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlnP5wxsvlA2belSsbxoDwFlc YjCKHgSELQdkHPlnmF860JC7yn1QwcFQhUoHdCh6X4kw/adfIkWgwKva86BlMQuL Fnf36Satur155fIIcVjWOVhjYheO07dB9xnvQCGWf00klt9tx7djcaM7RoeNmuTP 44WV8WvxkWIJ+eQ0EhKDj8AMIH52skigH5UaQBhZ5bDet4mVVklKp8YLNSp/kOq9 QA5CB85vAmuGRPLMbM25mfCw4EFOYq3AGtDZv38bUIz+EBFlvM5er0dilOJYklo9 x3B6tUZqtH8GRs1ZhIHMLSfqP62HYbOvG9cYIvnodpW75s2YOEQbXjoV7ngPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsVMpf9novStUagYS+CZC5/L0yAwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoFF4t0Trb6HwVsA2yedMFBg+LtQTbl2Vkx 8naZs6afdEliocpr3MTZWTd8s7PqnyKtrrZstlga8NpXIvLQ0Psg8YAy+t5RREIm 7HBeMzqR5HO950wJsDRi7g/NUTy9+2J3fn+En07ud7w6RlcVmtgw1kQxGZkXIpKc xcdUCamGROClvtvTO2FXZQqYSyZWRt9NPfQhme+h8FcbXGi73Qlvy1RZpdz3ZX8J PAJtUovFH4eji76Yf46r/xRv6KUQnGJQTzQRnh6jnzZaYICOLNWjCGkUQmkbuqjC v8xOGW6RUBnzx3Oodv56luLQ0mbN/a0mDaoQucg99KFCvZZM9yM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:54:38 2025 by rpki-client