$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: JCUKv9K3WuiTxsure1FtVffBiDmsPGWyywiL1KXv/HQ= Subject key identifier: 52:98:BC:9A:1F:A1:C7:9B:02:C5:7E:49:E9:5F:C5:06:A0:FE:2E:D2 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 3909C56F33126DFB590A7E1A068D3537079DB954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: E9 Signing time: Thu 05 Jun 2025 12:52:16 +0000 Manifest this update: Thu 05 Jun 2025 12:47:16 +0000 Manifest next update: Sun 08 Jun 2025 21:39:16 +0000 Files and hashes: 1: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=) 2: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: pBej0DLdEFLY0pTckGDHm7FzA6ztIxEMXyqe8K/mktA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:09:c5:6f:33:12:6d:fb:59:0a:7e:1a:06:8d:35:37:07:9d:b9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Jun 5 12:47:16 2025 GMT Not After : Jun 8 21:39:16 2025 GMT Subject: CN=5298BC9A1FA1C79B02C57E49E95FC506A0FE2ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:07:ab:fe:96:8b:94:f3:c4:8a:83:cb:b7: ce:ec:81:6d:5c:8f:e2:55:17:65:d2:b4:68:d1:db: df:39:ec:d5:57:1c:96:45:aa:e1:05:7a:ab:8c:4d: 1c:aa:b8:cc:e8:2f:b5:6d:34:7e:80:f2:0b:6b:6c: c4:08:77:7f:7a:21:b1:09:f2:3a:17:48:00:03:fc: ef:8f:f7:7f:25:0a:a1:ac:1e:b7:37:1c:58:78:fa: d4:dd:bb:79:eb:62:49:6b:ad:5f:9e:7a:32:83:8c: cb:11:37:d8:51:cc:e4:0f:40:5a:6d:42:f2:e6:36: ea:1e:a0:37:d3:a3:2c:ed:4f:fe:30:0a:e2:b2:70: 2f:6a:0d:35:9c:a9:62:42:32:a3:65:a1:c7:16:ec: 6f:5b:ff:1b:ab:6b:f7:98:e6:d4:6e:70:7d:2b:14: 04:0a:05:33:5d:6c:b4:7e:91:97:11:c1:f7:21:b9: dd:fb:fa:88:cb:17:58:3d:f4:69:c5:4d:d3:6e:4f: 08:ef:f6:f4:7a:39:8f:11:1e:1a:38:ff:0f:59:a2: 8c:9c:81:41:da:9d:2f:1a:60:50:96:8c:db:ca:eb: 4f:9a:32:58:4b:b1:18:d0:38:43:46:e3:bc:5e:ad: 67:fb:21:0a:4e:b8:09:03:27:ee:cf:96:63:a5:08: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:BC:9A:1F:A1:C7:9B:02:C5:7E:49:E9:5F:C5:06:A0:FE:2E:D2 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:73:2a:4b:d4:89:47:58:f6:50:e5:f3:01:e3:47:bc:b7:41: 0e:fb:67:3a:b4:94:5a:08:c0:22:43:b8:a2:cb:a8:1e:e7:33: b0:bd:cd:69:fd:26:3e:12:85:f7:33:d6:1b:24:14:13:fb:ed: 30:b0:ba:d5:f3:f7:fa:2d:c9:55:88:2e:ed:41:74:bd:6b:3c: 9a:f3:7f:d6:e7:43:6c:c8:83:e5:9c:4d:d8:68:29:27:7e:47: 5c:a1:f2:3f:03:d6:2e:84:fd:4a:ca:7a:dd:8b:22:7d:0b:41: 77:57:ec:74:65:cb:ef:9c:b5:41:ae:2e:dd:c9:e7:6f:b6:2f: 40:cd:31:37:8d:7e:6c:fc:8d:73:08:b6:58:aa:1f:e6:a5:ee: 7d:d8:84:9e:20:f8:83:59:2d:65:2e:de:3c:04:94:7b:0a:b4: 3f:d2:f0:48:61:8a:e2:51:8d:a5:28:b5:9d:e0:fa:7e:9f:e3: 45:40:69:ff:c1:67:82:95:6f:03:c3:78:60:b2:40:69:c8:51: d0:77:19:ab:1b:63:3e:e2:e8:38:2d:6c:3c:59:fd:c8:7b:92: 62:e6:93:27:cd:fe:75:67:5f:01:a2:72:8d:f7:13:3c:34:ed: c0:37:6a:be:41:7d:2a:e9:fa:af:53:b4:66:df:a7:2d:0f:3f: 40:a8:52:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQnFbzMSbftZCn4aBo01NweduVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTA2MDUxMjQ3MTZaFw0yNTA2MDgyMTM5MTZaMDMxMTAvBgNV BAMTKDUyOThCQzlBMUZBMUM3OUIwMkM1N0U0OUU5NUZDNTA2QTBGRTJFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2Qer/paLlPPEioPLt87sgW1c j+JVF2XStGjR29857NVXHJZFquEFequMTRyquMzoL7VtNH6A8gtrbMQId396IbEJ 8joXSAAD/O+P938lCqGsHrc3HFh4+tTdu3nrYklrrV+eejKDjMsRN9hRzOQPQFpt QvLmNuoeoDfToyztT/4wCuKycC9qDTWcqWJCMqNloccW7G9b/xura/eY5tRucH0r FAQKBTNdbLR+kZcRwfchud37+ojLF1g99GnFTdNuTwjv9vR6OY8RHho4/w9Zooyc gUHanS8aYFCWjNvK60+aMlhLsRjQOENG47xerWf7IQpOuAkDJ+7PlmOlCHypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpi8mh+hx5sCxX5J6V/FBqD+LtIwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNzKkvUiUdY9lDl8wHjR7y3QQ77Zzq0lFoI wCJDuKLLqB7nM7C9zWn9Jj4Shfcz1hskFBP77TCwutXz9/otyVWILu1BdL1rPJrz f9bnQ2zIg+WcTdhoKSd+R1yh8j8D1i6E/UrKet2LIn0LQXdX7HRly++ctUGuLt3J 52+2L0DNMTeNfmz8jXMItliqH+al7n3YhJ4g+INZLWUu3jwElHsKtD/S8EhhiuJR jaUotZ3g+n6f40VAaf/BZ4KVbwPDeGCyQGnIUdB3GasbYz7i6DgtbDxZ/ch7kmLm kyfN/nVnXwGico33Ezw07cA3ar5BfSrp+q9TtGbfpy0PP0CoUpE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:40 2025 by rpki-client