$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: XzRcEzTRANZ3MsFtR74bm8ucWWSXqgg7O68SOoukOgw= Subject key identifier: 95:B2:61:E8:D9:75:5D:60:B0:AF:09:26:5A:38:09:32:1E:9B:F2:B9 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 4993B0FF9FFA67022D0E5B503CACD47F806117CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0501 Signing time: Thu 21 Aug 2025 20:52:04 +0000 Manifest this update: Thu 21 Aug 2025 20:47:04 +0000 Manifest next update: Sun 24 Aug 2025 23:05:04 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 2: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: 42d/2JtCnOidv06L5xf/lD9wTP4HUwEaJlE3iXTrV80=) 3: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:93:b0:ff:9f:fa:67:02:2d:0e:5b:50:3c:ac:d4:7f:80:61:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Aug 21 20:47:04 2025 GMT Not After : Aug 24 23:05:04 2025 GMT Subject: CN=95B261E8D9755D60B0AF09265A3809321E9BF2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:a2:24:04:0b:76:6d:6f:5a:3c:63:e0:12: 43:5c:e9:d5:dd:6e:02:94:b4:35:4e:2f:e1:a7:63: 86:61:1c:d3:af:db:43:61:e3:62:12:b9:e4:5c:e4: c6:9b:82:f4:4c:41:fa:93:37:c0:bd:23:99:7c:08: 18:66:f9:50:a7:5b:ab:23:a6:4c:ce:24:74:fa:76: 0d:86:a2:bd:fa:c9:f8:37:01:ef:d5:a3:82:8b:94: 13:1d:dc:b2:b0:31:e5:22:76:2d:9d:f1:2b:89:56: 75:f3:a6:e7:fa:d3:8e:32:5b:78:54:a6:9b:f7:f0: 72:ec:bd:83:1a:28:ec:7d:5c:88:2e:d4:c0:68:ae: 67:84:99:09:7b:e9:c3:33:3a:c8:93:94:71:ef:71: b5:fe:a5:36:ad:49:f3:59:73:b6:7f:bc:ae:45:e2: cb:14:dd:db:16:da:8b:15:bc:c8:a1:11:39:de:62: b5:11:26:71:13:fb:46:e5:c7:d5:f3:66:47:5a:99: 5f:67:21:a5:e3:fd:eb:17:43:75:a3:a9:97:a9:43: c3:2d:fc:11:6e:50:0f:8b:af:b1:d8:39:85:65:1e: 4b:e7:77:0e:56:dc:8c:c4:48:fb:17:b8:95:38:c1: 24:73:d5:28:28:49:bd:51:15:03:73:86:33:5e:18: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B2:61:E8:D9:75:5D:60:B0:AF:09:26:5A:38:09:32:1E:9B:F2:B9 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5d:a1:22:8f:2d:bd:8e:70:d3:a0:7c:e4:71:9f:b8:5b:20: 95:9f:5d:e3:c1:93:8c:1f:45:52:7e:e4:73:ad:7d:85:ea:63: c5:9d:d4:f8:c9:90:fe:49:68:95:e3:b2:11:51:f7:e3:3c:9a: b7:94:37:06:d2:d8:a0:87:06:e6:d9:56:8c:5c:65:c4:32:e4: 3e:65:09:ea:91:39:76:f7:08:9a:e5:49:05:7b:2d:ee:d0:9e: b4:e7:e9:2d:33:94:2b:01:f5:44:81:fc:8e:1d:6b:3f:92:3e: af:89:47:43:b8:cf:4f:76:86:a4:d6:a8:68:a7:9a:61:a6:35: b6:8f:59:29:58:c2:6d:32:24:2b:c5:aa:ef:85:e1:09:78:66: 00:10:75:4b:8d:01:76:3e:da:f3:68:3c:cb:da:0a:95:2f:ac: ca:1b:21:df:d2:fb:ea:f7:2f:a0:af:9a:7d:87:da:78:72:a4: 4c:6b:1a:a7:cb:b4:a8:1d:56:b6:6e:60:e0:b6:e4:02:8b:40: a4:45:09:1b:a0:ae:3e:dd:55:c1:86:10:b9:a6:65:6e:c6:bd: e7:0e:76:ce:55:23:b1:ed:6b:45:d0:65:43:6d:c4:6e:d8:11: 92:56:47:58:82:17:a5:a8:6d:57:e6:ee:c4:40:41:40:31:5c: 2b:ef:5f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZOw/5/6ZwItDltQPKzUf4BhF8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA4MjEyMDQ3MDRaFw0yNTA4MjQyMzA1MDRaMDMxMTAvBgNV BAMTKDk1QjI2MUU4RDk3NTVENjBCMEFGMDkyNjVBMzgwOTMyMUU5QkYyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBKIkBAt2bW9aPGPgEkNc6dXd bgKUtDVOL+GnY4ZhHNOv20Nh42ISueRc5MabgvRMQfqTN8C9I5l8CBhm+VCnW6sj pkzOJHT6dg2Gor36yfg3Ae/Vo4KLlBMd3LKwMeUidi2d8SuJVnXzpuf6044yW3hU ppv38HLsvYMaKOx9XIgu1MBormeEmQl76cMzOsiTlHHvcbX+pTatSfNZc7Z/vK5F 4ssU3dsW2osVvMihETneYrURJnET+0blx9XzZkdamV9nIaXj/esXQ3WjqZepQ8Mt /BFuUA+Lr7HYOYVlHkvndw5W3IzESPsXuJU4wSRz1SgoSb1RFQNzhjNeGClzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlbJh6Nl1XWCwrwkmWjgJMh6b8rkwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKddoSKPLb2OcNOgfORxn7hbIJWfXePBk4wf RVJ+5HOtfYXqY8Wd1PjJkP5JaJXjshFR9+M8mreUNwbS2KCHBubZVoxcZcQy5D5l CeqROXb3CJrlSQV7Le7QnrTn6S0zlCsB9USB/I4daz+SPq+JR0O4z092hqTWqGin mmGmNbaPWSlYwm0yJCvFqu+F4Ql4ZgAQdUuNAXY+2vNoPMvaCpUvrMobId/S++r3 L6Cvmn2H2nhypExrGqfLtKgdVrZuYOC25AKLQKRFCRugrj7dVcGGELmmZW7GvecO ds5VI7Hta0XQZUNtxG7YEZJWR1iCF6WobVfm7sRAQUAxXCvvX+c= -----END CERTIFICATE-----Generated at Sat Aug 23 21:44:59 2025 by rpki-client