$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: dMkYryCcrfgKGjXsLHYTw29nIaSZ7choutH6R+D4DdU= Subject key identifier: 5E:32:47:F3:05:1F:72:F2:DA:AB:B1:0C:FE:C5:F1:8F:84:B9:BC:18 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 7F0AB229543CB4EEC9DE84EAE8A7A1986F2072B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 012C Signing time: Thu 21 Aug 2025 21:00:40 +0000 Manifest this update: Thu 21 Aug 2025 20:55:40 +0000 Manifest next update: Sun 24 Aug 2025 22:23:40 +0000 Files and hashes: 1: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) 3: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: PNljQLHlwvmh9JeZG4jrYaPI/AdNfZx15WPIOmeI2c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0a:b2:29:54:3c:b4:ee:c9:de:84:ea:e8:a7:a1:98:6f:20:72:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Aug 21 20:55:40 2025 GMT Not After : Aug 24 22:23:40 2025 GMT Subject: CN=5E3247F3051F72F2DAABB10CFEC5F18F84B9BC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:18:30:e4:34:8a:75:6d:6b:dd:17:76:59: c8:61:94:8c:f9:42:02:28:9f:6a:d7:18:f1:59:47: 89:0f:c5:2b:a6:63:d9:b1:bc:a4:92:58:54:45:43: 96:8a:7c:20:06:d2:e5:9a:51:23:56:48:73:96:f1: 4d:28:34:f1:9a:e8:66:0d:b8:49:41:ae:0e:9e:f5: 94:23:fa:0e:e5:a8:22:35:01:55:66:45:aa:aa:2f: 74:d9:93:c0:c8:37:ae:c3:dc:6b:e1:23:99:56:df: 0e:ae:e1:7e:4d:5d:ee:8d:34:aa:a6:21:a5:dd:35: 6e:19:f0:af:cc:3d:93:5f:79:c4:4d:ad:50:79:8b: 6f:89:01:ca:a3:24:1b:5b:82:a9:70:f1:a4:bf:db: 58:81:19:b2:24:4c:20:3d:a7:9b:2f:c7:d0:f5:f9: 7b:fc:44:fc:b0:40:c8:75:2f:b1:34:80:91:76:2f: 82:d5:85:21:f4:fe:66:1f:18:d0:c8:cb:ee:0a:5c: c5:0a:44:50:ca:ed:a2:2d:c0:9a:04:95:2c:e7:d4: 91:09:3c:51:79:55:d6:70:81:c3:59:43:30:22:72: 5f:8b:ff:3b:44:49:fa:4e:2a:0e:6d:b4:c8:8a:ee: 6c:08:6a:ec:77:63:89:2b:ac:f9:14:53:82:59:65: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:47:F3:05:1F:72:F2:DA:AB:B1:0C:FE:C5:F1:8F:84:B9:BC:18 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:11:56:42:a1:d5:b6:3b:11:a1:95:b8:ad:74:3f:a1:c1:39: 2b:06:95:3b:cc:e0:4e:63:29:f1:4e:91:77:bd:ab:a1:4c:62: 35:cf:dd:29:52:1e:4a:33:06:51:20:eb:fa:95:5e:c0:f2:87: 1c:40:c7:4d:7c:a0:d4:0c:3d:7a:c7:9e:19:09:01:ab:bb:a1: 36:51:71:96:cf:a3:00:28:74:08:71:28:86:9d:f5:1b:6d:ff: e3:93:0b:12:79:65:50:f8:f9:3c:e8:be:cf:bb:5d:77:65:22: 4b:c3:3d:68:06:33:eb:ad:37:60:44:c5:e8:9c:6a:35:f6:08: 24:b9:ca:93:da:dc:f9:25:c6:2e:4e:7b:59:f4:02:4b:9b:b5: 39:b2:48:9f:b1:1d:fa:05:da:bb:47:13:31:f1:94:40:d1:12: a7:89:3c:a3:31:76:9e:cc:c0:9a:ba:46:e4:bb:99:a0:ec:e4: 50:39:5a:26:6e:8a:13:dc:b6:5c:f9:d2:64:da:cf:60:58:00: ca:d9:62:cd:73:eb:37:36:b3:17:1a:6a:26:a2:53:f9:59:20: 15:3c:f1:35:73:ec:3d:e7:b9:17:37:99:71:fe:e3:7c:85:9d: f2:8c:89:fe:ff:77:c5:91:5f:d8:e1:a3:d3:9f:99:23:c7:ef: f2:f3:92:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwqyKVQ8tO7J3oTq6KehmG8gcrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA4MjEyMDU1NDBaFw0yNTA4MjQyMjIzNDBaMDMxMTAvBgNV BAMTKDVFMzI0N0YzMDUxRjcyRjJEQUFCQjEwQ0ZFQzVGMThGODRCOUJDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzhgw5DSKdW1r3Rd2WchhlIz5 QgIon2rXGPFZR4kPxSumY9mxvKSSWFRFQ5aKfCAG0uWaUSNWSHOW8U0oNPGa6GYN uElBrg6e9ZQj+g7lqCI1AVVmRaqqL3TZk8DIN67D3GvhI5lW3w6u4X5NXe6NNKqm IaXdNW4Z8K/MPZNfecRNrVB5i2+JAcqjJBtbgqlw8aS/21iBGbIkTCA9p5svx9D1 +Xv8RPywQMh1L7E0gJF2L4LVhSH0/mYfGNDIy+4KXMUKRFDK7aItwJoElSzn1JEJ PFF5VdZwgcNZQzAicl+L/ztESfpOKg5ttMiK7mwIaux3Y4krrPkUU4JZZYnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjJH8wUfcvLaq7EM/sXxj4S5vBgwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwRVkKh1bY7EaGVuK10P6HBOSsGlTvM4E5j KfFOkXe9q6FMYjXP3SlSHkozBlEg6/qVXsDyhxxAx018oNQMPXrHnhkJAau7oTZR cZbPowAodAhxKIad9Rtt/+OTCxJ5ZVD4+Tzovs+7XXdlIkvDPWgGM+utN2BExeic ajX2CCS5ypPa3Pklxi5Oe1n0AkubtTmySJ+xHfoF2rtHEzHxlEDREqeJPKMxdp7M wJq6RuS7maDs5FA5WiZuihPctlz50mTaz2BYAMrZYs1z6zc2sxcaaiaiU/lZIBU8 8TVz7D3nuRc3mXH+43yFnfKMif7/d8WRX9jho9OfmSPH7/LzksM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:45 2025 by rpki-client