$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: F4M1aDfXOO337gjO8Vq/2MXpxSqk8YXm1Tq9h2CiTAw= Subject key identifier: 88:D8:44:75:80:F5:FA:85:D5:64:7F:56:62:69:0C:D8:35:4F:18:D8 Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 2495FE60911B2260FBA60723D2B32A4600549EAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 04FF Signing time: Sat 23 Aug 2025 09:51:38 +0000 Manifest this update: Sat 23 Aug 2025 09:46:38 +0000 Manifest next update: Tue 26 Aug 2025 21:03:38 +0000 Files and hashes: 1: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: Z8RqW67niVh5gvKSvndr6IKEJNN6vE9y6gfyt1NIliQ=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 21:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:95:fe:60:91:1b:22:60:fb:a6:07:23:d2:b3:2a:46:00:54:9e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Aug 23 09:46:38 2025 GMT Not After : Aug 26 21:03:38 2025 GMT Subject: CN=88D8447580F5FA85D5647F5662690CD8354F18D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:e7:ca:ee:53:ba:25:e4:69:a1:c9:14:13: 57:f7:d1:f3:f4:8a:7c:43:58:36:aa:4f:f9:80:40: 64:7e:7b:74:79:a0:ed:eb:75:9a:16:c0:dc:b7:c9: a0:d0:65:70:74:8e:61:46:9a:08:c2:d7:ba:93:00: 68:7b:8a:e7:20:8a:c1:a3:8a:79:ea:a0:68:f6:66: 60:70:c1:17:fb:3a:a7:42:f6:fa:96:88:91:bd:49: bb:f6:5d:9e:d0:4e:1b:15:c8:76:4e:e4:4d:14:12: 05:2c:34:1d:97:c2:89:40:32:08:a0:f2:1e:4a:26: ee:d1:ae:27:48:38:bc:37:74:c4:5e:7e:5a:f5:ff: 20:3a:33:ad:23:f1:16:88:bf:5d:be:bd:d4:1e:ef: 51:3f:8a:7f:b2:07:a8:22:e8:ae:ed:97:6f:69:da: e2:d7:31:e3:79:83:67:4d:b9:52:6b:04:b2:ce:39: b4:0d:83:dd:3a:3d:00:6c:d3:8a:56:22:69:cc:0a: ac:4f:28:fd:6c:ed:83:3d:9a:93:37:24:04:6c:2a: 06:b4:3e:fe:9f:21:ba:65:a2:a8:53:42:55:c7:ad: 4a:bd:4e:d6:17:c2:e9:65:f5:2c:48:a0:a4:df:6d: f9:fa:ab:72:06:40:e5:15:b6:3a:c2:37:5b:c2:5e: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:44:75:80:F5:FA:85:D5:64:7F:56:62:69:0C:D8:35:4F:18:D8 X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:30:ce:bf:f3:30:1f:36:a4:65:20:7a:b9:a2:e2:09:1d:a3: 8a:60:93:15:1e:fb:4d:8e:bb:be:19:1f:e4:27:a0:f9:09:ed: 59:b7:04:30:0c:e7:01:42:9c:61:48:c3:a6:f5:c3:1a:cf:b2: ac:0e:ff:17:91:ee:ad:9e:3d:6d:c2:fd:54:ed:6f:22:13:59: 9c:bf:11:90:d4:68:41:3a:68:40:13:9b:25:95:ed:b1:fc:33: d2:94:6e:47:e4:e8:61:7d:27:22:4c:99:59:da:07:28:59:6a: ca:75:48:78:17:75:26:96:35:bd:db:eb:58:01:95:50:96:39: 45:d0:64:b4:4c:c7:6b:b4:26:76:f0:a4:be:14:f1:ce:8b:19: e0:55:36:2c:9d:d2:a4:63:30:81:83:c8:b9:45:30:cb:66:7f: ba:1f:19:74:00:13:fa:3f:d2:22:64:2c:d1:36:84:97:e3:fe: 7b:58:d0:1d:91:f0:f2:1a:83:2c:17:d3:5e:64:30:bc:e9:5c: 3d:d5:af:7d:e2:91:52:6e:9b:e0:28:b1:c8:d7:00:e2:9b:fa: eb:03:de:af:62:71:2e:e6:ea:7c:46:0a:d3:6d:86:b0:39:b8: ff:b8:3f:55:b5:9b:e6:7a:39:a1:f1:fa:f6:18:b7:95:54:41: 6e:0e:b8:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJX+YJEbImD7pgcj0rMqRgBUnqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTA4MjMwOTQ2MzhaFw0yNTA4MjYyMTAzMzhaMDMxMTAvBgNV BAMTKDg4RDg0NDc1ODBGNUZBODVENTY0N0Y1NjYyNjkwQ0Q4MzU0RjE4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EefK7lO6JeRpockUE1f30fP0 inxDWDaqT/mAQGR+e3R5oO3rdZoWwNy3yaDQZXB0jmFGmgjC17qTAGh7iucgisGj innqoGj2ZmBwwRf7OqdC9vqWiJG9Sbv2XZ7QThsVyHZO5E0UEgUsNB2XwolAMgig 8h5KJu7RridIOLw3dMReflr1/yA6M60j8RaIv12+vdQe71E/in+yB6gi6K7tl29p 2uLXMeN5g2dNuVJrBLLOObQNg906PQBs04pWImnMCqxPKP1s7YM9mpM3JARsKga0 Pv6fIbploqhTQlXHrUq9TtYXwull9SxIoKTfbfn6q3IGQOUVtjrCN1vCXrcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNhEdYD1+oXVZH9WYmkM2DVPGNgwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4wzr/zMB82pGUgermi4gkdo4pgkxUe+02O u74ZH+QnoPkJ7Vm3BDAM5wFCnGFIw6b1wxrPsqwO/xeR7q2ePW3C/VTtbyITWZy/ EZDUaEE6aEATmyWV7bH8M9KUbkfk6GF9JyJMmVnaByhZasp1SHgXdSaWNb3b61gB lVCWOUXQZLRMx2u0JnbwpL4U8c6LGeBVNiyd0qRjMIGDyLlFMMtmf7ofGXQAE/o/ 0iJkLNE2hJfj/ntY0B2R8PIagywX015kMLzpXD3Vr33ikVJum+AoscjXAOKb+usD 3q9icS7m6nxGCtNthrA5uP+4P1W1m+Z6OaHx+vYYt5VUQW4OuFo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:40 2025 by rpki-client