$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: WyNf3R1uyi5jXHKVYsa30d56CMfK90sPl32p2odxjVg= Subject key identifier: BB:C7:9C:D2:42:D5:C3:A2:50:4B:2D:39:3C:FA:36:33:6D:65:37:38 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 69048BF8AE9984F4659144E519BEC053C3772777 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 91 Signing time: Thu 05 Jun 2025 20:11:32 +0000 Manifest this update: Thu 05 Jun 2025 20:06:32 +0000 Manifest next update: Sun 08 Jun 2025 22:28:32 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: H4Q8JmiAX6WBTqOXML6Rn0s4+jJCMJMmjFHAcIszN2E=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 3: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:04:8b:f8:ae:99:84:f4:65:91:44:e5:19:be:c0:53:c3:77:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Jun 5 20:06:32 2025 GMT Not After : Jun 8 22:28:32 2025 GMT Subject: CN=BBC79CD242D5C3A2504B2D393CFA36336D653738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:09:c7:71:34:e6:89:31:3d:0d:8b:12:29: fb:04:1b:28:47:19:e7:5c:ed:2a:7b:c7:2d:68:5c: 78:ee:17:04:b4:a2:f5:b4:d4:b7:2e:5f:36:45:05: f9:a9:d7:ad:00:6b:0b:bc:0e:6e:af:dc:7b:9a:a0: 98:d3:4a:34:46:fc:4b:fd:78:2b:71:c1:20:ba:2a: ac:c8:46:b9:56:ea:cb:39:14:db:e4:2c:3a:7a:f0: c5:e9:e0:f6:62:ef:ee:1c:c4:2c:14:cd:04:37:f6: 0f:3c:64:ed:ef:a7:65:c2:a9:f8:1e:e1:52:b2:b6: b3:49:b8:2b:34:90:cd:92:44:11:b2:e1:ef:74:eb: c3:bf:bf:5b:47:08:63:c1:dd:74:e1:78:13:c2:bd: cb:f3:ff:7d:27:07:6a:d0:ca:21:03:43:0a:53:0d: e8:4c:4b:b5:b2:2b:78:d1:f8:b4:fb:d9:8b:8c:c0: 49:40:29:42:f2:d1:0d:c0:db:9b:4d:b3:b7:72:ef: 59:41:09:c7:93:74:f4:4f:6f:e2:0d:f0:69:1c:cf: 39:12:f4:c9:4b:92:37:ad:d1:c9:70:55:5b:76:59: 35:ba:74:89:06:eb:db:79:1c:d6:10:58:c5:be:b1: 31:87:56:0f:06:8c:54:a8:d8:c1:21:40:35:ca:2b: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:9C:D2:42:D5:C3:A2:50:4B:2D:39:3C:FA:36:33:6D:65:37:38 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:00:57:aa:41:09:20:4e:46:b0:f0:eb:50:e8:63:87:aa:ff: 8e:be:12:4e:16:ce:5a:ad:3d:37:a7:0f:6a:6c:5d:23:13:e7: 1c:94:21:fa:17:8f:59:d8:aa:67:f6:2c:25:74:77:ab:68:ed: 57:c8:e0:b0:9a:8a:8d:53:14:ac:91:72:c8:d6:ea:f4:43:55: 7e:22:67:39:ac:4b:ac:6d:df:dd:02:41:d3:46:41:58:40:28: 5e:91:cb:1d:11:3f:f9:28:23:b6:eb:12:28:c7:8a:ca:85:de: 19:53:91:07:71:50:97:3b:b9:b7:4a:2a:66:23:2d:5b:3b:cd: 26:54:34:d7:c3:47:97:5f:99:38:ee:09:ca:c6:0c:28:8c:66: ec:62:f5:90:f1:da:be:0e:79:b6:23:9d:a2:f9:cd:c1:61:c1: 18:58:d3:71:54:ca:bf:d0:00:e1:50:5b:71:c8:9b:bc:95:52: 5b:bb:c8:54:7b:2e:f1:d5:4a:1a:68:60:e9:2c:96:f2:b5:a0: d8:78:c3:b5:05:cd:11:a6:18:e5:6c:dc:8e:46:90:51:e1:44: c7:f0:1f:f8:8b:ba:ae:98:a2:4f:86:ae:64:97:04:de:6d:0a: e0:bd:f7:58:c7:06:f4:c8:ef:bf:86:cf:73:3f:db:4b:41:7e: 17:a4:6f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQSL+K6ZhPRlkUTlGb7AU8N3J3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA2MDUyMDA2MzJaFw0yNTA2MDgyMjI4MzJaMDMxMTAvBgNV BAMTKEJCQzc5Q0QyNDJENUMzQTI1MDRCMkQzOTNDRkEzNjMzNkQ2NTM3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkwnHcTTmiTE9DYsSKfsEGyhH Gedc7Sp7xy1oXHjuFwS0ovW01LcuXzZFBfmp160Aawu8Dm6v3HuaoJjTSjRG/Ev9 eCtxwSC6KqzIRrlW6ss5FNvkLDp68MXp4PZi7+4cxCwUzQQ39g88ZO3vp2XCqfge 4VKytrNJuCs0kM2SRBGy4e9068O/v1tHCGPB3XTheBPCvcvz/30nB2rQyiEDQwpT DehMS7WyK3jR+LT72YuMwElAKULy0Q3A25tNs7dy71lBCceTdPRPb+IN8GkczzkS 9MlLkjet0clwVVt2WTW6dIkG69t5HNYQWMW+sTGHVg8GjFSo2MEhQDXKK5mBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8ec0kLVw6JQSy05PPo2M21lNzgwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsAV6pBCSBORrDw61DoY4eq/46+Ek4Wzlqt PTenD2psXSMT5xyUIfoXj1nYqmf2LCV0d6to7VfI4LCaio1TFKyRcsjW6vRDVX4i ZzmsS6xt390CQdNGQVhAKF6Ryx0RP/koI7brEijHisqF3hlTkQdxUJc7ubdKKmYj LVs7zSZUNNfDR5dfmTjuCcrGDCiMZuxi9ZDx2r4OebYjnaL5zcFhwRhY03FUyr/Q AOFQW3HIm7yVUlu7yFR7LvHVShpoYOkslvK1oNh4w7UFzRGmGOVs3I5GkFHhRMfw H/iLuq6Yok+GrmSXBN5tCuC991jHBvTI77+Gz3M/20tBfhekb2M= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:09 2025 by rpki-client