$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: Ky7/sgb57kbYDeSU8337Ktgf4HZ/9Gm4kl90PhR3mbQ= Subject key identifier: EB:8D:76:52:29:8C:C0:46:6E:6C:08:3C:37:19:37:7C:AE:2C:E4:ED Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 5930CC31BF2CE52C37879A69601EF54C8E18C362 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: BE Signing time: Fri 22 Aug 2025 13:30:36 +0000 Manifest this update: Fri 22 Aug 2025 13:25:36 +0000 Manifest next update: Mon 25 Aug 2025 15:12:36 +0000 Files and hashes: 1: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: L6uSE09E/nO1qh0kDlo7JdAL1TOprsKwAdf/cwsDlPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:30:cc:31:bf:2c:e5:2c:37:87:9a:69:60:1e:f5:4c:8e:18:c3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Aug 22 13:25:36 2025 GMT Not After : Aug 25 15:12:36 2025 GMT Subject: CN=EB8D7652298CC0466E6C083C3719377CAE2CE4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:0f:4c:f6:56:3a:76:f5:1a:11:f5:bf:52: 16:27:89:06:1f:ab:63:85:4f:81:da:63:37:79:7f: 28:a7:3e:e1:20:08:84:bb:70:49:bd:1a:19:53:fe: c0:51:d9:61:8f:f9:b0:10:0c:a8:dd:0b:9a:7c:40: 85:37:44:2b:f8:6f:92:6c:57:41:32:0e:0a:21:4b: 45:05:37:0c:d8:04:70:0b:e5:2d:d8:b5:b8:30:77: 4b:26:2f:c3:5d:8e:26:34:d0:87:0f:55:39:08:f3: 6c:35:6b:8e:9a:28:d3:6f:a9:fe:d8:5f:7b:ca:ce: 6e:4f:a7:76:ac:82:41:c0:29:cd:1b:26:aa:17:d4: da:9b:25:f2:b7:b1:79:de:12:77:2b:ba:38:f5:b4: 73:0f:5c:84:11:54:a7:4f:30:06:ba:00:5f:db:40: ea:f7:a5:63:ba:44:04:c9:f1:32:9d:08:d2:3c:eb: 04:04:9f:30:48:08:a0:be:a9:17:13:3a:2e:2e:53: 49:e1:3c:ff:5c:e8:76:69:b6:1e:cb:49:6d:34:fb: 73:ca:0a:9e:3f:ba:4d:f9:56:e9:44:9c:8f:02:a3: 88:fe:9f:ff:b0:d5:03:77:30:ac:b4:49:7a:f9:03: 19:77:a2:01:37:76:27:e0:10:d9:64:07:20:1c:cc: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8D:76:52:29:8C:C0:46:6E:6C:08:3C:37:19:37:7C:AE:2C:E4:ED X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7a:64:d7:44:0b:eb:5d:3a:55:b5:e1:e4:bb:b9:dd:35:ef: ce:ce:f3:c9:f2:e5:a5:25:58:71:de:93:30:76:58:d9:92:4f: c2:e1:99:6c:6d:5d:f1:bb:a5:3b:27:ef:7e:a3:e1:1f:c8:36: 82:8d:c8:52:08:2f:4f:14:20:fd:85:13:1f:30:56:7e:90:aa: 14:c7:ac:df:0f:2a:4e:76:f6:5f:b0:04:de:41:eb:d0:27:08: ca:7c:ae:c3:18:27:4d:c9:03:bc:cf:a2:d1:dc:4f:2c:b7:98: 41:bc:9b:df:62:40:26:02:dc:cd:81:fc:80:69:39:78:de:35: fb:93:fd:40:c4:d4:35:20:54:cf:2d:ef:f4:ee:a0:b8:98:3d: 60:b8:b7:65:00:b7:11:79:8e:6d:05:87:e7:b1:68:ec:98:62: 8d:c4:97:7b:15:44:58:74:92:b9:b0:bb:a8:31:7a:d4:e7:b4: 0b:21:f4:74:5e:a2:c2:fa:06:ca:e2:bb:64:46:96:ed:20:d6: a1:7a:4f:77:21:3d:ca:45:90:46:53:a6:fb:d2:1b:21:27:67: 62:15:2a:80:0b:c7:8e:c6:8b:28:4f:e4:00:68:bc:87:cf:b4: cb:13:c9:0d:91:f2:61:56:a8:71:69:bf:96:2e:0d:b0:03:a6: 66:e5:52:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTDMMb8s5Sw3h5ppYB71TI4Yw2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA4MjIxMzI1MzZaFw0yNTA4MjUxNTEyMzZaMDMxMTAvBgNV BAMTKEVCOEQ3NjUyMjk4Q0MwNDY2RTZDMDgzQzM3MTkzNzdDQUUyQ0U0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpw9M9lY6dvUaEfW/UhYniQYf q2OFT4HaYzd5fyinPuEgCIS7cEm9GhlT/sBR2WGP+bAQDKjdC5p8QIU3RCv4b5Js V0EyDgohS0UFNwzYBHAL5S3Ytbgwd0smL8NdjiY00IcPVTkI82w1a46aKNNvqf7Y X3vKzm5Pp3asgkHAKc0bJqoX1NqbJfK3sXneEncrujj1tHMPXIQRVKdPMAa6AF/b QOr3pWO6RATJ8TKdCNI86wQEnzBICKC+qRcTOi4uU0nhPP9c6HZpth7LSW00+3PK Cp4/uk35VulEnI8Co4j+n/+w1QN3MKy0SXr5Axl3ogE3difgENlkByAczLtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6412UimMwEZubAg8Nxk3fK4s5O0wHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI16ZNdEC+tdOlW14eS7ud01787O88ny5aUl WHHekzB2WNmST8LhmWxtXfG7pTsn736j4R/INoKNyFIIL08UIP2FEx8wVn6QqhTH rN8PKk529l+wBN5B69AnCMp8rsMYJ03JA7zPotHcTyy3mEG8m99iQCYC3M2B/IBp OXjeNfuT/UDE1DUgVM8t7/TuoLiYPWC4t2UAtxF5jm0Fh+exaOyYYo3El3sVRFh0 krmwu6gxetTntAsh9HReosL6Bsriu2RGlu0g1qF6T3chPcpFkEZTpvvSGyEnZ2IV KoALx47GiyhP5ABovIfPtMsTyQ2R8mFWqHFpv5YuDbADpmblUuU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:12:19 2025 by rpki-client