$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: AomK966wCmUGAnjH1MeGEKgtkX8G1XttkP2gpYZIwqc= Subject key identifier: 18:37:A8:29:D9:3F:8B:8A:A6:D5:68:D8:F1:E6:C9:6D:D3:AB:DF:63 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 51497A3494068E8EDF6AB8196BEB1C8BC67A8AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 17:30:01 +0000 Manifest this update: Thu 21 Aug 2025 17:25:01 +0000 Manifest next update: Mon 25 Aug 2025 02:01:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: eZQWR4KUlxDa8GdcTnPG+Ubl7ECc304o5bkS6fIJQuI=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:49:7a:34:94:06:8e:8e:df:6a:b8:19:6b:eb:1c:8b:c6:7a:8a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Aug 21 17:25:01 2025 GMT Not After : Aug 25 02:01:01 2025 GMT Subject: CN=1837A829D93F8B8AA6D568D8F1E6C96DD3ABDF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:25:45:f4:1b:db:8f:f4:0c:f0:93:11:0b: 16:0d:cc:05:c1:17:ae:81:23:25:e7:4a:97:12:8d: 5b:dc:11:8e:e8:a0:1a:71:10:0f:35:25:8e:21:8a: 07:2c:d7:0d:cf:c2:97:02:dd:9f:1f:3e:85:8f:6d: e0:52:64:58:51:96:e8:91:ad:cb:fa:ff:82:4f:93: 81:9c:e3:1d:ed:49:6c:5b:2c:87:2b:72:b3:03:27: a1:39:68:dc:9a:c1:53:43:1d:a9:8c:dc:d6:47:bf: 17:8c:88:fe:09:7b:73:3e:97:74:ec:6e:5a:f2:4a: 1d:e5:19:90:fb:ea:ce:ee:24:ec:92:3c:4d:5b:0e: 58:ea:8d:31:6b:a1:1e:7e:e3:4d:39:b6:57:6a:1f: ba:31:41:a6:0b:23:7e:38:ae:b0:7f:06:80:2f:2d: bd:a5:7a:ae:f5:61:4e:46:95:ab:57:5f:2e:a2:8f: 7b:3d:44:66:c4:0c:24:23:3f:42:03:16:a3:8f:a0: 25:72:a1:c6:13:3c:39:2f:05:6e:a7:4d:68:a9:6e: 21:e8:dc:06:0d:2e:99:ba:e2:3d:7f:83:4c:0b:86: 78:6c:de:41:d9:59:b5:26:b8:47:87:20:9f:00:58: 20:71:ea:ff:44:bb:87:69:e0:99:8f:44:9a:05:fe: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:37:A8:29:D9:3F:8B:8A:A6:D5:68:D8:F1:E6:C9:6D:D3:AB:DF:63 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:20:22:99:a8:93:b3:c6:b4:31:8e:8b:e9:6d:29:26:fa: da:ed:a1:3d:bb:02:90:9a:9b:58:7e:21:ec:9d:23:82:3e:d8: 8a:68:2e:03:21:bc:6f:b2:3a:5f:71:53:cc:aa:ef:2c:cf:24: eb:f3:90:d4:6f:6e:b0:0f:0e:d6:4c:c3:b8:5a:e1:37:4c:b4: da:77:c9:bf:33:fa:34:20:23:b6:71:12:7d:a7:90:fb:8f:e1: fc:7a:ad:6b:ed:c8:09:36:b6:da:7b:9b:f6:a1:5a:de:88:17: 3c:c3:ef:2f:84:a6:69:93:b7:1c:16:df:00:7b:9e:79:f8:cd: 1b:10:9d:72:2d:ae:96:82:2e:a0:82:fb:76:0f:39:0b:ce:9d: d3:fd:30:9b:01:a4:c5:ce:98:ac:5e:08:4f:35:69:11:8b:8b: cd:fa:61:21:57:f7:da:40:66:3b:53:b9:c8:1b:b5:54:22:3e: 95:67:2c:8b:ec:d8:31:34:bb:2b:f1:0a:b3:fe:90:58:30:23: 8e:63:b6:94:83:2f:70:a1:4f:4f:88:d9:83:45:87:17:f6:a1: b0:97:66:59:1e:6b:f2:07:33:1f:73:65:22:6b:f8:62:9c:0e: 7f:5d:be:8d:a4:03:7f:f8:a0:f3:06:77:b1:a3:07:9e:fc:5c: 04:a7:73:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUl6NJQGjo7fargZa+sci8Z6irQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA4MjExNzI1MDFaFw0yNTA4MjUwMjAxMDFaMDMxMTAvBgNV BAMTKDE4MzdBODI5RDkzRjhCOEFBNkQ1NjhEOEYxRTZDOTZERDNBQkRGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjCVF9Bvbj/QM8JMRCxYNzAXB F66BIyXnSpcSjVvcEY7ooBpxEA81JY4higcs1w3PwpcC3Z8fPoWPbeBSZFhRluiR rcv6/4JPk4Gc4x3tSWxbLIcrcrMDJ6E5aNyawVNDHamM3NZHvxeMiP4Je3M+l3Ts blrySh3lGZD76s7uJOySPE1bDljqjTFroR5+4005tldqH7oxQaYLI344rrB/BoAv Lb2leq71YU5GlatXXy6ij3s9RGbEDCQjP0IDFqOPoCVyocYTPDkvBW6nTWipbiHo 3AYNLpm64j1/g0wLhnhs3kHZWbUmuEeHIJ8AWCBx6v9Eu4dp4JmPRJoF/h/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDeoKdk/i4qm1WjY8ebJbdOr32MwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjaICKZqJOzxrQxjovpbSkm+trtoT27ApCa m1h+IeydI4I+2IpoLgMhvG+yOl9xU8yq7yzPJOvzkNRvbrAPDtZMw7ha4TdMtNp3 yb8z+jQgI7ZxEn2nkPuP4fx6rWvtyAk2ttp7m/ahWt6IFzzD7y+EpmmTtxwW3wB7 nnn4zRsQnXItrpaCLqCC+3YPOQvOndP9MJsBpMXOmKxeCE81aRGLi836YSFX99pA ZjtTucgbtVQiPpVnLIvs2DE0uyvxCrP+kFgwI45jtpSDL3ChT0+I2YNFhxf2obCX Zlkea/IHMx9zZSJr+GKcDn9dvo2kA3/4oPMGd7GjB578XASnc6w= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:24 2025 by rpki-client