$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json) Hash identifier: cH9fPsiNgfBaFTREO1rJwPY8Sq1B2df5YVKuh+AwtO0= Subject key identifier: 1C:A8:99:43:0F:2C:B1:36:76:94:1C:0C:B7:9D:EF:6A:DB:4E:B5:35 Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 09D61B800FE4BF0DF87063F1B1698F91B41398A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft Manifest number: 87 Signing time: Mon 02 Jun 2025 14:01:16 +0000 Manifest this update: Mon 02 Jun 2025 13:56:16 +0000 Manifest next update: Thu 05 Jun 2025 18:51:16 +0000 Files and hashes: 1: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: Ekx0iWJwrYBhidQj+5fGiMW4AlGJejd3Ge/dRPMnPJA=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: BmedSLLZ/Ar+kKVmJ8+lQwWqOCXWS7bTElyxdgv4frU=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2T3B+WlxteLj6OogHAOLwZBUdlPJwilxf6sGLSkZU2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d6:1b:80:0f:e4:bf:0d:f8:70:63:f1:b1:69:8f:91:b4:13:98:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Jun 2 13:56:16 2025 GMT Not After : Jun 5 18:51:16 2025 GMT Subject: CN=1CA899430F2CB13676941C0CB79DEF6ADB4EB535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:ee:20:4b:6b:d4:b8:59:be:c6:95:50:7c: ac:c8:8b:04:89:0e:ef:6c:27:02:49:63:0c:cf:9d: 62:a5:d7:d6:d9:d2:b2:a0:81:0e:2c:e3:69:c9:de: 6c:4c:07:a8:be:eb:7d:ad:4f:e1:40:5a:af:ca:4c: 29:b7:08:42:fb:64:7a:ae:99:2d:5e:e0:ba:8b:a4: 89:26:0e:d5:d3:6e:8b:d3:27:db:a6:8c:80:68:56: 41:70:2c:1c:c7:e4:b2:13:66:3e:4c:73:09:e7:85: fa:ac:f2:06:53:08:62:2e:f1:cd:d5:22:06:9a:9e: 91:8e:b8:8c:bb:7f:83:fb:88:b5:58:4e:59:ff:4a: 09:e2:9f:be:29:d3:3a:8d:7e:7a:e3:ac:37:b9:24: 9c:13:bd:95:45:cc:8f:4b:12:e9:15:fe:91:57:b0: 6d:72:0f:f8:22:00:6c:df:ed:2c:1d:fd:ca:e5:bb: 1d:8a:d8:3f:04:27:2b:36:f0:f9:23:d0:85:73:64: 3e:ce:90:b5:7a:90:b0:f1:9d:09:9d:14:ec:59:04: 3b:47:38:48:6d:66:7a:69:69:45:64:dc:5a:07:b7: 61:9e:29:db:5c:14:fe:ed:cd:8f:f5:c9:9d:f3:47: b9:c2:d9:f6:02:ff:1d:62:8e:75:7c:b8:6f:64:75: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:99:43:0F:2C:B1:36:76:94:1C:0C:B7:9D:EF:6A:DB:4E:B5:35 X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ca:a3:17:41:86:c9:2e:55:dd:89:8d:65:f4:9e:77:ea:60: d9:89:b5:73:10:16:54:58:38:de:9f:e0:2e:b6:d8:71:01:0b: 77:d7:5e:80:d3:ec:fc:d4:02:bd:0d:37:f0:1f:fa:fe:b3:4d: d6:22:b9:d1:e1:dc:80:9a:9f:76:1c:0a:a6:14:71:54:42:25: 94:17:72:25:eb:3e:34:f3:3c:8d:3e:18:34:1f:5d:02:e1:79: 67:f1:db:39:14:7e:79:5b:ce:1f:2c:6d:2b:67:51:de:e1:62: 73:85:39:8f:6f:58:df:df:18:3d:24:27:11:9d:1f:96:af:cb: a3:73:72:87:b5:58:00:8e:07:1b:c5:1c:14:6f:71:cd:d6:ab: 34:88:91:a2:2d:ee:2c:93:7e:8e:c8:44:aa:4e:45:f9:ca:ea: e7:52:f5:c7:4a:ca:3a:e5:9e:cf:a4:73:4e:fe:5f:1c:b5:1c: 87:bb:b3:11:02:d0:50:84:d5:f1:c5:d7:93:f1:7f:43:05:ef: f0:4b:f2:7f:d4:47:44:b1:29:f7:1e:cd:74:62:80:1f:de:00: 42:21:ed:c7:45:40:ce:fc:aa:85:b1:7c:2a:a0:1d:4a:62:84: fa:16:a4:c9:68:7f:9e:cb:26:f1:5f:0f:d3:75:9f:3e:33:5f: 93:17:72:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdYbgA/kvw34cGPxsWmPkbQTmKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTA2MDIxMzU2MTZaFw0yNTA2MDUxODUxMTZaMDMxMTAvBgNV BAMTKDFDQTg5OTQzMEYyQ0IxMzY3Njk0MUMwQ0I3OURFRjZBREI0RUI1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2u4gS2vUuFm+xpVQfKzIiwSJ Du9sJwJJYwzPnWKl19bZ0rKggQ4s42nJ3mxMB6i+632tT+FAWq/KTCm3CEL7ZHqu mS1e4LqLpIkmDtXTbovTJ9umjIBoVkFwLBzH5LITZj5Mcwnnhfqs8gZTCGIu8c3V IgaanpGOuIy7f4P7iLVYTln/Sgnin74p0zqNfnrjrDe5JJwTvZVFzI9LEukV/pFX sG1yD/giAGzf7Swd/crlux2K2D8EJys28Pkj0IVzZD7OkLV6kLDxnQmdFOxZBDtH OEhtZnppaUVk3FoHt2GeKdtcFP7tzY/1yZ3zR7nC2fYC/x1ijnV8uG9kdSVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKiZQw8ssTZ2lBwMt53vattOtTUwHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMy RjYzMUM4RDc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXKoxdBhskuVd2JjWX0nnfqYNmJtXMQFlRY ON6f4C622HEBC3fXXoDT7PzUAr0NN/Af+v6zTdYiudHh3ICan3YcCqYUcVRCJZQX ciXrPjTzPI0+GDQfXQLheWfx2zkUfnlbzh8sbStnUd7hYnOFOY9vWN/fGD0kJxGd H5avy6Nzcoe1WACOBxvFHBRvcc3WqzSIkaIt7iyTfo7IRKpORfnK6udS9cdKyjrl ns+kc07+Xxy1HIe7sxEC0FCE1fHF15Pxf0MF7/BL8n/UR0SxKfcezXRigB/eAEIh 7cdFQM78qoWxfCqgHUpihPoWpMlof57LJvFfD9N1nz4zX5MXcjs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:15 2025 by rpki-client