$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: 8D2gHF9/iEcnXITAx4TtVCZmDErAqWyKwNSBbeawF6M= Subject key identifier: 95:02:FA:F4:7B:FC:58:07:BC:34:0C:08:D4:4D:72:19:2C:74:DD:34 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 30AD683493B76C5E2EB975D73FDA99E24C4CB4CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 017E Signing time: Sun 01 Jun 2025 19:40:49 +0000 Manifest this update: Sun 01 Jun 2025 19:35:49 +0000 Manifest next update: Thu 05 Jun 2025 02:55:49 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) 2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: S58wMwSIN19d8QT3pjjD8ZpZA+U/I1WUo4uFJgwEEMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ad:68:34:93:b7:6c:5e:2e:b9:75:d7:3f:da:99:e2:4c:4c:b4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Jun 1 19:35:49 2025 GMT Not After : Jun 5 02:55:49 2025 GMT Subject: CN=9502FAF47BFC5807BC340C08D44D72192C74DD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:2d:49:1b:c2:2b:2f:43:76:f4:6c:c1:84: e0:91:7a:23:29:66:79:f8:61:70:d1:9e:27:63:c0: 5f:88:52:fb:c1:8f:c3:6b:83:09:76:ff:49:e5:ea: 94:e6:da:25:19:98:00:5a:c6:19:3f:ce:67:44:02: 72:c3:76:f2:55:62:0b:5e:78:dd:59:e8:a3:13:ef: 27:fb:bb:e4:19:68:9c:ea:2c:f3:44:f5:11:f2:12: fc:8d:6b:0c:48:47:e8:65:3f:f5:99:1e:fb:25:c6: dc:62:17:e5:14:3e:6f:59:c2:02:d5:74:62:9c:af: 38:d2:1e:6a:0d:4d:56:b4:b8:b1:1b:60:3d:32:c6: 5e:a2:21:45:9e:7e:ea:ae:6b:a5:63:e7:e9:38:a7: b9:4b:d5:50:ab:9b:cc:ed:e5:87:83:35:65:2c:67: ef:02:d4:81:41:9b:99:b1:f8:28:c9:7e:0d:20:d3: 58:81:98:d6:71:89:3a:f4:2c:cf:d1:f9:cb:20:c1: 21:38:e8:ba:ea:65:dc:b0:49:70:ae:5f:11:f5:a9: 94:6d:52:88:67:a5:22:cd:ce:cc:00:be:1e:82:aa: dc:d9:5a:0d:ce:61:3c:ba:11:d0:9f:02:0f:ba:2f: 79:c7:dc:8c:32:7f:f7:a4:0b:4b:12:3f:6b:e5:85: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:02:FA:F4:7B:FC:58:07:BC:34:0C:08:D4:4D:72:19:2C:74:DD:34 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ed:51:4d:0a:bc:20:f6:53:5c:8c:33:0f:f3:74:51:e5:ec: 04:00:c8:41:1c:3c:90:56:83:69:35:ed:93:dd:48:14:95:1a: 2c:a7:32:57:8b:f1:ac:0b:90:5c:45:18:6f:71:b9:54:99:3e: 5a:38:2d:d8:4c:4c:d3:89:da:b5:1b:5e:f8:f5:55:1c:ca:a7: 04:54:d9:a6:cd:ef:46:5a:0c:07:3b:58:c3:60:b6:20:dd:45: b8:5b:0d:92:f0:79:ea:99:e6:dc:79:fb:03:62:a4:40:17:ff: 48:11:0d:a3:d5:88:ab:2b:f0:ef:20:b9:5d:a1:e0:e6:f5:46: 2d:44:e8:b8:d1:d0:85:b8:13:bb:b6:da:df:e1:91:4a:cf:fd: 1e:b9:6c:95:b2:2e:f6:e2:c3:8e:c9:b1:3f:96:be:99:dd:6c: 87:ae:be:47:57:1b:a4:7f:be:a7:ed:cd:3a:9b:de:44:34:6e: 13:16:3e:8c:0e:7a:1d:50:d2:7d:42:46:48:91:51:3d:d2:e2: 92:11:de:37:6f:d9:eb:85:aa:3a:da:a3:e4:0c:5b:32:3a:58: 97:e3:d6:53:04:79:3a:1b:a7:da:24:25:24:a0:a2:f3:fa:9c: 58:b3:9f:d8:cc:3f:9f:16:16:0c:84:9e:8e:0a:96:46:d5:bd: d4:21:75:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMK1oNJO3bF4uuXXXP9qZ4kxMtM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA2MDExOTM1NDlaFw0yNTA2MDUwMjU1NDlaMDMxMTAvBgNV BAMTKDk1MDJGQUY0N0JGQzU4MDdCQzM0MEMwOEQ0NEQ3MjE5MkM3NEREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVC1JG8IrL0N29GzBhOCReiMp Znn4YXDRnidjwF+IUvvBj8Nrgwl2/0nl6pTm2iUZmABaxhk/zmdEAnLDdvJVYgte eN1Z6KMT7yf7u+QZaJzqLPNE9RHyEvyNawxIR+hlP/WZHvslxtxiF+UUPm9ZwgLV dGKcrzjSHmoNTVa0uLEbYD0yxl6iIUWefuqua6Vj5+k4p7lL1VCrm8zt5YeDNWUs Z+8C1IFBm5mx+CjJfg0g01iBmNZxiTr0LM/R+csgwSE46LrqZdywSXCuXxH1qZRt UohnpSLNzswAvh6CqtzZWg3OYTy6EdCfAg+6L3nH3Iwyf/ekC0sSP2vlhRAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQL69Hv8WAe8NAwI1E1yGSx03TQwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPtUU0KvCD2U1yMMw/zdFHl7AQAyEEcPJBW g2k17ZPdSBSVGiynMleL8awLkFxFGG9xuVSZPlo4LdhMTNOJ2rUbXvj1VRzKpwRU 2abN70ZaDAc7WMNgtiDdRbhbDZLweeqZ5tx5+wNipEAX/0gRDaPViKsr8O8guV2h 4Ob1Ri1E6LjR0IW4E7u22t/hkUrP/R65bJWyLvbiw47JsT+WvpndbIeuvkdXG6R/ vqftzTqb3kQ0bhMWPowOeh1Q0n1CRkiRUT3S4pIR3jdv2euFqjrao+QMWzI6WJfj 1lMEeTobp9okJSSgovP6nFizn9jMP58WFgyEno4KlkbVvdQhddg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:26 2025 by rpki-client