$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: OzqHLTWe2/dKi3VYSt6hKOqtq/IFy8LEGAeAGBc5+I4= Subject key identifier: D5:49:EA:EC:C6:B0:52:19:82:DE:D4:9A:37:1B:E3:EA:31:8F:5B:01 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 5596655541D2DF7D401F297C8185D5BA7C38247A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: AE Signing time: Wed 04 Jun 2025 03:31:13 +0000 Manifest this update: Wed 04 Jun 2025 03:26:13 +0000 Manifest next update: Sat 07 Jun 2025 06:52:13 +0000 Files and hashes: 1: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: 0yFnbGF5qFcjy4GCl0IQsJl9iQYJUef1Mbuu/Bj1fOE=) 2: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 4: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:96:65:55:41:d2:df:7d:40:1f:29:7c:81:85:d5:ba:7c:38:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Jun 4 03:26:13 2025 GMT Not After : Jun 7 06:52:13 2025 GMT Subject: CN=D549EAECC6B0521982DED49A371BE3EA318F5B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:70:ac:a1:e6:38:b0:62:2b:6c:3c:17:e0:dd: 84:cb:cf:05:40:0f:7a:1c:b5:ad:90:14:16:c3:60: 4e:07:51:d7:15:0e:3c:9b:09:8c:3f:b9:a8:e2:85: 90:fe:3b:cf:92:a0:75:8e:c7:0d:6f:a7:cb:c3:ed: b1:2f:44:7f:84:b5:7c:49:41:3f:a8:23:63:65:36: 89:5f:7e:29:60:7d:ab:6f:e0:3c:82:a4:9d:e4:02: a7:a0:e6:d5:bf:8f:89:23:46:0f:3a:97:ef:c3:b5: 3c:49:56:30:77:1c:d9:04:34:c8:64:77:d6:8e:bd: 31:bc:a7:06:79:10:22:5f:98:d9:1b:45:5c:9c:94: fd:ce:f6:9b:bf:cd:6a:49:c2:a0:0a:ef:83:fc:29: cc:d0:0d:f8:6e:bf:e2:2b:21:74:58:20:17:97:d3: 5f:f1:d2:af:fe:f6:0c:83:ec:34:b1:ec:dc:47:4a: f8:ce:b9:6a:f0:29:6c:79:91:c6:3a:5f:02:2c:55: 18:1e:38:4d:ba:2b:4c:d3:55:24:12:b7:c0:dd:fd: 39:e8:6a:e2:70:22:11:b8:d0:39:5b:4f:4c:8f:d1: 66:77:93:81:fd:a6:d7:ef:a7:ae:8d:c8:7d:1b:ba: 5e:00:a0:47:9d:53:1e:2d:9a:11:d8:f4:09:35:6a: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:EA:EC:C6:B0:52:19:82:DE:D4:9A:37:1B:E3:EA:31:8F:5B:01 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:97:61:fd:51:dd:48:fb:8b:bf:46:49:ef:78:e8:75:f6:c0: d3:38:70:89:35:e0:07:aa:3c:eb:5f:ff:52:88:ec:7f:c9:a6: 68:27:7b:9b:78:ed:af:b0:fb:15:90:cc:57:99:89:48:de:37: d3:73:c9:c5:c1:93:59:52:41:6b:a0:f4:c8:2a:0e:a5:70:3f: bb:fd:d4:54:b2:45:a6:5f:44:92:95:f7:d1:4b:d9:df:4f:6f: 11:25:88:56:92:37:26:fb:e0:ad:9d:93:8a:c0:0c:9f:4a:33: e7:aa:78:ae:4c:19:a0:98:a3:95:4b:cf:b2:06:bf:53:3f:1b: ee:fc:de:8c:41:29:31:f7:54:3a:70:a2:c9:0f:c2:64:3f:4d: 5b:44:04:06:fe:22:53:49:ab:af:e6:7d:61:85:80:73:06:ef: b3:56:d1:bb:45:75:9b:31:46:e9:a0:e8:c2:15:4e:8e:04:6f: 5b:13:f0:2c:fa:09:63:95:2e:0a:be:fc:62:89:40:8a:77:22: dc:e0:b3:a1:7f:ee:e6:12:fb:1b:1f:ce:89:44:c9:5f:39:d8: be:0e:9b:c8:27:05:be:d9:42:b1:43:7a:16:42:f7:51:61:3a: bf:62:da:b6:da:97:ae:12:02:06:38:77:29:17:9f:00:2c:17: a9:d7:a3:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZZlVUHS331AHyl8gYXVunw4JHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA2MDQwMzI2MTNaFw0yNTA2MDcwNjUyMTNaMDMxMTAvBgNV BAMTKEQ1NDlFQUVDQzZCMDUyMTk4MkRFRDQ5QTM3MUJFM0VBMzE4RjVCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtcKyh5jiwYitsPBfg3YTLzwVA D3octa2QFBbDYE4HUdcVDjybCYw/uajihZD+O8+SoHWOxw1vp8vD7bEvRH+EtXxJ QT+oI2NlNolffilgfatv4DyCpJ3kAqeg5tW/j4kjRg86l+/DtTxJVjB3HNkENMhk d9aOvTG8pwZ5ECJfmNkbRVyclP3O9pu/zWpJwqAK74P8KczQDfhuv+IrIXRYIBeX 01/x0q/+9gyD7DSx7NxHSvjOuWrwKWx5kcY6XwIsVRgeOE26K0zTVSQSt8Dd/Tno auJwIhG40DlbT0yP0WZ3k4H9ptfvp66NyH0bul4AoEedUx4tmhHY9Ak1ahFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Unq7MawUhmC3tSaNxvj6jGPWwEwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+XYf1R3Uj7i79GSe946HX2wNM4cIk14Aeq POtf/1KI7H/Jpmgne5t47a+w+xWQzFeZiUjeN9NzycXBk1lSQWug9MgqDqVwP7v9 1FSyRaZfRJKV99FL2d9PbxEliFaSNyb74K2dk4rADJ9KM+eqeK5MGaCYo5VLz7IG v1M/G+783oxBKTH3VDpwoskPwmQ/TVtEBAb+IlNJq6/mfWGFgHMG77NW0btFdZsx Rumg6MIVTo4Eb1sT8Cz6CWOVLgq+/GKJQIp3Itzgs6F/7uYS+xsfzolEyV852L4O m8gnBb7ZQrFDehZC91FhOr9i2rbal64SAgY4dykXnwAsF6nXo6M= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:58 2025 by rpki-client