$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: XmAHAbj9SOPegOn61mlCxCEbKSxgtMN+07pivkLuOD0= Subject key identifier: DE:7D:BE:87:E4:41:A5:EA:C7:46:E1:3D:93:36:35:3D:63:5F:62:E8 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 135C98966C053EB269862C0A09496B52C7046A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 8C Signing time: Sun 24 Aug 2025 03:50:05 +0000 Manifest this update: Sun 24 Aug 2025 03:45:05 +0000 Manifest next update: Wed 27 Aug 2025 11:56:05 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 2: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: 9jkDDUpvoSJz0CnG6qtERppcfPRRXY8KuNZ3FRdrfUQ=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 4: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5c:98:96:6c:05:3e:b2:69:86:2c:0a:09:49:6b:52:c7:04:6a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Aug 24 03:45:05 2025 GMT Not After : Aug 27 11:56:05 2025 GMT Subject: CN=DE7DBE87E441A5EAC746E13D9336353D635F62E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ea:0b:cf:3f:34:eb:68:cc:ad:2a:1b:ca:7b: 0e:4a:f5:b4:a9:14:8f:ba:fd:56:ac:bd:19:2c:69: 5e:42:32:12:10:38:fd:d6:72:13:72:95:7f:dc:0b: ca:22:64:ff:02:2d:72:11:84:49:f0:41:94:04:71: ae:c0:a7:54:95:3a:09:1f:de:7e:c2:04:d8:a3:ce: 7a:de:b9:5b:dd:81:12:84:09:1f:71:d9:ab:b5:91: 34:78:80:15:56:c1:75:69:53:de:d9:10:2d:4e:11: 0f:a6:67:38:9d:aa:bc:f7:9e:13:7d:2b:a4:61:e5: c7:9d:2d:0d:b5:43:13:e6:c3:d2:c9:76:21:27:d1: 7f:18:7c:1c:7f:48:83:4b:ed:41:89:11:0b:fc:92: 6f:06:92:7c:67:78:02:4c:4f:e0:a4:42:eb:a3:e5: 8c:1e:71:3e:98:91:83:ea:0f:78:dc:dc:18:93:15: b7:c1:90:4a:41:18:d4:99:6d:fb:c4:d7:8f:56:90: f4:d1:0d:fe:d9:79:a1:b8:82:7d:48:d5:f2:85:d2: c7:2c:aa:e1:89:42:75:3c:75:2b:fe:12:3f:b7:41: bb:ce:01:11:21:41:d1:8c:bc:35:92:04:7c:e3:ca: d4:6b:3b:b3:ae:06:ee:a1:b2:b7:22:2a:03:3b:1a: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7D:BE:87:E4:41:A5:EA:C7:46:E1:3D:93:36:35:3D:63:5F:62:E8 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:03:a7:46:e9:61:28:05:0a:2a:34:93:c6:a4:ab:d0:39:94: 32:36:11:1d:3d:6e:7e:4d:86:3f:63:f6:57:3f:f5:0a:37:23: 4e:a6:2a:fc:67:ea:fb:02:bc:bf:bf:05:90:c8:6f:82:88:a7: 56:94:92:9f:c5:fe:c6:bb:a3:2c:4a:e9:0a:77:30:09:7e:90: 27:5c:ec:34:89:f8:88:45:61:1d:d1:a8:ca:ba:b5:b8:e8:8e: 10:36:13:0e:1f:40:09:5d:b3:d1:9b:58:d5:8a:f1:10:04:c6: a3:72:ad:fe:55:7d:86:f7:85:7f:c0:70:0d:9e:26:91:25:67: bc:bb:d8:17:a5:74:ef:e0:9a:55:7a:f1:e6:7d:64:0a:01:b2: 73:07:92:07:07:1f:1b:bf:e3:33:6a:33:82:fe:84:1a:fd:fc: 14:30:b3:42:9e:f7:ba:0d:8d:02:19:8e:af:ea:ee:5d:11:23: 4b:8b:64:75:03:13:97:08:41:d1:c6:39:16:54:40:a1:40:b9: fe:42:00:5d:9c:85:e6:3a:d6:e2:cb:c4:f7:a3:06:cb:1f:f8: 2c:e2:94:8a:3b:e0:a6:df:aa:49:fc:dd:10:39:a3:c9:63:d6: 49:77:ae:9e:74:41:22:4f:a8:02:0b:2f:83:9c:50:82:33:d7: 5a:43:dd:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1yYlmwFPrJphiwKCUlrUscEaoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA4MjQwMzQ1MDVaFw0yNTA4MjcxMTU2MDVaMDMxMTAvBgNV BAMTKERFN0RCRTg3RTQ0MUE1RUFDNzQ2RTEzRDkzMzYzNTNENjM1RjYyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6gvPPzTraMytKhvKew5K9bSp FI+6/VasvRksaV5CMhIQOP3WchNylX/cC8oiZP8CLXIRhEnwQZQEca7Ap1SVOgkf 3n7CBNijznreuVvdgRKECR9x2au1kTR4gBVWwXVpU97ZEC1OEQ+mZzidqrz3nhN9 K6Rh5cedLQ21QxPmw9LJdiEn0X8YfBx/SINL7UGJEQv8km8GknxneAJMT+CkQuuj 5YwecT6YkYPqD3jc3BiTFbfBkEpBGNSZbfvE149WkPTRDf7ZeaG4gn1I1fKF0scs quGJQnU8dSv+Ej+3QbvOAREhQdGMvDWSBHzjytRrO7OuBu6hsrciKgM7GoSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3n2+h+RBperHRuE9kzY1PWNfYugwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABADp0bpYSgFCio0k8akq9A5lDI2ER09bn5N hj9j9lc/9Qo3I06mKvxn6vsCvL+/BZDIb4KIp1aUkp/F/sa7oyxK6Qp3MAl+kCdc 7DSJ+IhFYR3RqMq6tbjojhA2Ew4fQAlds9GbWNWK8RAExqNyrf5VfYb3hX/AcA2e JpElZ7y72BeldO/gmlV68eZ9ZAoBsnMHkgcHHxu/4zNqM4L+hBr9/BQws0Ke97oN jQIZjq/q7l0RI0uLZHUDE5cIQdHGORZUQKFAuf5CAF2cheY61uLLxPejBssf+Czi lIo74Kbfqkn83RA5o8lj1kl3rp50QSJPqAILL4OcUIIz11pD3W4= -----END CERTIFICATE-----Generated at Sun Aug 24 09:13:50 2025 by rpki-client