$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: W1KiOV77r2l9LBpULXQqw3o+ywx/T4dVueTZ6Lrqszs= Subject key identifier: A0:96:D7:40:24:A2:6A:A1:7D:EC:01:E6:6F:97:7E:1A:2C:38:79:A4 Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 5821A013C8D5BBA1DA7403437D0366923AF05A14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 0420 Signing time: Mon 02 Jun 2025 11:42:02 +0000 Manifest this update: Mon 02 Jun 2025 11:37:02 +0000 Manifest next update: Thu 05 Jun 2025 22:14:02 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: ewCBabRckmqGo20vuJlVUjzYlXv74c7indZXgw7TNh0=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: SleQnUegZrn9t/Esz5KijLNSBfhEPCbzYWCC+8Yfuac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:21:a0:13:c8:d5:bb:a1:da:74:03:43:7d:03:66:92:3a:f0:5a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Jun 2 11:37:02 2025 GMT Not After : Jun 5 22:14:02 2025 GMT Subject: CN=A096D74024A26AA17DEC01E66F977E1A2C3879A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:9f:76:a5:fa:8a:d7:cc:a6:18:62:6a:50: 1e:d1:26:58:74:06:d2:fd:31:13:39:c0:42:2f:3b: fa:cb:51:ea:5e:df:b0:9d:3c:72:db:3a:29:38:07: 17:2b:65:c8:6b:16:2a:81:47:76:7a:c5:36:6f:38: 8c:fa:f0:25:bf:dd:ad:4d:de:00:75:3a:e0:05:02: 27:17:14:43:b1:c4:43:05:11:1f:10:34:59:5b:5a: 32:ea:8e:8c:c7:5e:de:f5:3b:65:5f:56:f3:5d:75: 8a:ef:75:92:24:80:8e:72:97:8f:52:3f:40:53:27: 28:db:14:07:b0:ec:03:e7:a9:d9:86:12:44:f8:2f: ee:26:35:80:5e:a2:ee:1c:d0:9f:62:49:79:f0:a3: 31:30:8b:8d:06:54:05:80:13:79:f4:02:0d:20:31: 8f:68:04:e2:54:ea:29:80:7d:ec:2e:d3:9d:a4:bd: 68:e9:1c:34:fc:ac:ef:b1:15:8e:13:8d:0d:57:d9: e1:09:a3:01:a7:54:7d:74:2e:d2:40:9f:de:12:c4: 5a:fa:16:47:41:6c:0d:97:ad:51:0f:01:bd:d9:11: a9:35:72:48:78:4b:79:41:f3:1c:06:11:06:fd:7d: 94:11:36:46:b6:32:21:6d:cd:2c:da:89:18:b4:e2: 98:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:D7:40:24:A2:6A:A1:7D:EC:01:E6:6F:97:7E:1A:2C:38:79:A4 X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:e6:00:2c:c5:bd:c3:5b:26:4f:41:1b:b0:70:09:a4:ff: dc:09:54:8c:ee:7d:2c:04:11:81:46:bb:d8:b0:54:60:13:42: e2:04:10:3b:6b:ba:b6:22:07:03:d5:04:f6:94:92:30:87:c1: 30:c4:14:dd:37:8f:07:16:c7:80:a5:8e:cb:1a:1b:04:d5:f0: fe:07:03:63:0d:ce:54:19:37:24:f7:01:38:63:60:15:18:50: f5:a9:53:81:81:53:45:b0:78:6f:55:70:d1:c6:48:3f:40:13: 3a:51:35:6d:8e:43:cd:cb:26:45:21:25:7d:da:83:4a:ee:30: fa:e4:3e:52:25:e8:17:9a:0c:14:4d:82:d8:54:2d:6f:41:4d: 90:a0:52:a2:8d:41:d0:22:42:4c:0b:27:b1:95:8a:98:b9:50: ff:4a:ac:b2:ba:f4:6a:97:71:b6:24:b5:da:23:65:82:15:0e: bc:7d:11:f1:47:cb:dc:c5:ca:7d:4d:06:21:36:0e:d7:d6:6c: 83:36:85:9d:92:48:19:9a:a9:48:13:c8:97:a0:8e:19:e8:db: 70:8c:eb:5a:c9:3a:50:4e:e6:72:55:69:12:28:ff:25:7d:75: 05:d2:4e:fa:6d:56:15:dd:94:41:d5:63:4d:d5:45:c5:44:95: ec:8c:fc:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCGgE8jVu6HadANDfQNmkjrwWhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTA2MDIxMTM3MDJaFw0yNTA2MDUyMjE0MDJaMDMxMTAvBgNV BAMTKEEwOTZENzQwMjRBMjZBQTE3REVDMDFFNjZGOTc3RTFBMkMzODc5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4w592pfqK18ymGGJqUB7RJlh0 BtL9MRM5wEIvO/rLUepe37CdPHLbOik4BxcrZchrFiqBR3Z6xTZvOIz68CW/3a1N 3gB1OuAFAicXFEOxxEMFER8QNFlbWjLqjozHXt71O2VfVvNddYrvdZIkgI5yl49S P0BTJyjbFAew7APnqdmGEkT4L+4mNYBeou4c0J9iSXnwozEwi40GVAWAE3n0Ag0g MY9oBOJU6imAfewu052kvWjpHDT8rO+xFY4TjQ1X2eEJowGnVH10LtJAn94SxFr6 FkdBbA2XrVEPAb3ZEak1ckh4S3lB8xwGEQb9fZQRNka2MiFtzSzaiRi04pgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJbXQCSiaqF97AHmb5d+Giw4eaQwHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhv5gAsxb3DWyZPQRuwcAmk/9wJVIzufSwE EYFGu9iwVGATQuIEEDtrurYiBwPVBPaUkjCHwTDEFN03jwcWx4CljssaGwTV8P4H A2MNzlQZNyT3AThjYBUYUPWpU4GBU0WweG9VcNHGSD9AEzpRNW2OQ83LJkUhJX3a g0ruMPrkPlIl6BeaDBRNgthULW9BTZCgUqKNQdAiQkwLJ7GVipi5UP9KrLK69GqX cbYktdojZYIVDrx9EfFHy9zFyn1NBiE2DtfWbIM2hZ2SSBmaqUgTyJegjhno23CM 61rJOlBO5nJVaRIo/yV9dQXSTvptVhXdlEHVY03VRcVEleyM/Ds= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:31 2025 by rpki-client