$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: rh40O0uw5TFWf5mxO/lmaPsZPiyy1aY9Grh+vvvGR/g= Subject key identifier: 0E:2E:D4:A5:EC:77:C7:5D:52:44:D5:72:53:EA:83:14:BD:67:16:DC Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 6C4ABB29B7E876AFBEC78044BA047418A87DF006 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 01C9 Signing time: Wed 04 Jun 2025 12:11:35 +0000 Manifest this update: Wed 04 Jun 2025 12:06:35 +0000 Manifest next update: Sat 07 Jun 2025 23:35:35 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: 8+WxaxXT0Yp72DzijxMOi4hVS+hTBApJNu0/dqnk3ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4a:bb:29:b7:e8:76:af:be:c7:80:44:ba:04:74:18:a8:7d:f0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jun 4 12:06:35 2025 GMT Not After : Jun 7 23:35:35 2025 GMT Subject: CN=0E2ED4A5EC77C75D5244D57253EA8314BD6716DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:5a:e4:79:45:e6:59:cd:ba:89:ea:4b:34: 65:e1:2c:6e:d5:4f:50:1e:75:0a:28:c9:30:52:4f: d7:e7:12:29:01:33:18:56:18:53:55:68:d7:38:5e: ce:77:c4:4c:aa:b5:70:bc:1d:41:46:6f:1a:e4:ae: 2f:c7:f7:e0:8f:fc:0e:21:c3:7f:c1:71:bf:b6:99: d6:94:27:e2:85:16:f7:fd:72:83:5e:55:64:ec:37: c9:8e:e0:a6:d9:73:b7:e1:20:a4:27:a5:60:04:20: 62:62:27:30:50:b4:10:1d:e1:77:2b:b3:d9:18:e0: 2a:a0:ea:54:bc:71:58:ed:41:cb:80:e1:c7:c5:4e: 60:e2:0b:77:46:07:f6:21:6d:11:76:a7:29:58:0e: 11:4d:a1:62:04:eb:c8:e4:03:8f:c7:e7:ec:e8:b3: e1:e1:a4:f2:01:1f:45:98:4f:71:b5:5d:0d:84:07: fc:0f:86:6c:b3:84:f2:bd:6a:bc:47:c2:78:22:23: 00:f9:0a:60:31:06:4d:b5:c2:ad:1b:88:fc:3c:15: 82:a5:a8:9b:8e:93:03:4d:82:c7:df:3c:53:f5:05: c3:a1:82:68:4a:4e:9f:e5:9e:0e:6b:1d:db:09:20: e7:0b:6f:6a:ab:e7:f3:e8:c6:53:f3:79:45:40:6a: 0b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:D4:A5:EC:77:C7:5D:52:44:D5:72:53:EA:83:14:BD:67:16:DC X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:4c:04:ff:f7:70:af:c6:a3:3e:ad:75:a3:5b:62:d5:f6: d9:cd:bd:90:0d:6e:03:cd:53:9c:7a:0a:36:6c:06:6b:65:10: 81:7e:37:33:f1:a7:e1:e8:5c:35:63:bb:2d:22:2b:b8:4f:d9: 52:ac:f3:77:cf:20:4c:98:45:8c:24:d4:6b:09:5d:ff:f6:91: be:35:94:96:74:fe:9b:1e:57:96:6a:0d:4c:91:81:9d:a1:20: 7e:89:78:74:cc:cb:2d:d3:f5:ae:70:b4:fb:27:5f:0f:90:2f: 33:9d:ae:39:0e:31:1d:d0:7c:92:2b:30:55:ca:55:0d:60:ad: 0f:3d:a3:0f:6d:df:b1:17:16:88:0f:c1:1e:f4:c8:06:74:34: 6d:00:29:36:85:dc:71:a2:e5:29:e0:07:7d:ae:0d:df:82:c2: 3c:00:97:87:0f:2d:4b:50:29:2e:50:c6:35:cf:a0:ca:73:5f: 72:9d:d4:5f:da:7a:de:6d:8e:fa:70:b2:9d:0c:ee:c5:e5:64: 58:b4:83:a0:7d:d1:b7:3e:1c:b8:4e:79:ed:66:b2:ce:dd:58: f3:5f:c5:3b:f5:2e:41:45:4b:ce:58:2a:49:eb:4c:04:15:56: db:74:62:ff:d9:a0:4e:50:a3:63:2f:d9:6c:16:4c:b4:16:ee: a7:69:7b:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEq7Kbfodq++x4BEugR0GKh98AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTA2MDQxMjA2MzVaFw0yNTA2MDcyMzM1MzVaMDMxMTAvBgNV BAMTKDBFMkVENEE1RUM3N0M3NUQ1MjQ0RDU3MjUzRUE4MzE0QkQ2NzE2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94lrkeUXmWc26iepLNGXhLG7V T1AedQooyTBST9fnEikBMxhWGFNVaNc4Xs53xEyqtXC8HUFGbxrkri/H9+CP/A4h w3/Bcb+2mdaUJ+KFFvf9coNeVWTsN8mO4KbZc7fhIKQnpWAEIGJiJzBQtBAd4Xcr s9kY4Cqg6lS8cVjtQcuA4cfFTmDiC3dGB/YhbRF2pylYDhFNoWIE68jkA4/H5+zo s+HhpPIBH0WYT3G1XQ2EB/wPhmyzhPK9arxHwngiIwD5CmAxBk21wq0biPw8FYKl qJuOkwNNgsffPFP1BcOhgmhKTp/lng5rHdsJIOcLb2qr5/PoxlPzeUVAaguBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDi7Upex3x11SRNVyU+qDFL1nFtwwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPmTAT/93CvxqM+rXWjW2LV9tnNvZANbgPN U5x6CjZsBmtlEIF+NzPxp+HoXDVjuy0iK7hP2VKs83fPIEyYRYwk1GsJXf/2kb41 lJZ0/pseV5ZqDUyRgZ2hIH6JeHTMyy3T9a5wtPsnXw+QLzOdrjkOMR3QfJIrMFXK VQ1grQ89ow9t37EXFogPwR70yAZ0NG0AKTaF3HGi5SngB32uDd+CwjwAl4cPLUtQ KS5QxjXPoMpzX3Kd1F/aet5tjvpwsp0M7sXlZFi0g6B90bc+HLhOee1mss7dWPNf xTv1LkFFS85YKknrTAQVVtt0Yv/ZoE5Qo2Mv2WwWTLQW7qdpe0g= -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:28 2025 by rpki-client