$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: M8G9CXSgGs1kzZPdOvhB10HQVJ3owKgN3Zqatzi8Tac= Subject key identifier: 04:D7:D1:DE:9E:9B:CA:39:04:17:8B:79:9A:F6:37:D0:25:F5:A8:31 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 6585860BEC6A328EE48C98A40EBB529B54383D19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 01F7 Signing time: Fri 22 Aug 2025 03:21:50 +0000 Manifest this update: Fri 22 Aug 2025 03:16:50 +0000 Manifest next update: Mon 25 Aug 2025 08:13:50 +0000 Files and hashes: 1: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 2: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 3: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 4: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 5: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 6: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 7: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: 3Nq/BRhHsRWHzXxr76YaJKsj9x0l7ZhNSu7i2kKRduE=) 8: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 9: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 10: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 11: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) 12: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 13: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 14: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 15: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 16: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 17: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:85:86:0b:ec:6a:32:8e:e4:8c:98:a4:0e:bb:52:9b:54:38:3d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Aug 22 03:16:50 2025 GMT Not After : Aug 25 08:13:50 2025 GMT Subject: CN=04D7D1DE9E9BCA3904178B799AF637D025F5A831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:8d:f6:5c:95:29:83:16:04:0c:aa:1b:02: 6b:b1:fe:98:44:35:de:83:69:bf:68:a9:0b:5d:f7: b9:c3:1b:e1:c7:d0:38:86:41:8d:af:32:a7:99:f8: d6:81:25:9b:e2:fd:19:a9:ea:04:c6:2c:7e:da:01: ac:60:c1:e3:6d:f1:37:8a:de:52:ec:66:cd:10:56: 66:bd:a3:b5:b4:9b:50:29:41:bf:53:07:c1:82:31: 99:75:3c:40:41:f1:d5:8b:a7:3c:d3:5f:19:95:92: ae:4c:00:97:7a:f9:03:58:f2:66:87:1d:b8:6b:b1: b2:2a:23:c3:c4:db:51:54:ee:95:75:6c:68:4a:11: c7:22:94:f2:f4:67:ea:ea:68:7d:16:d6:99:d9:ca: 21:5a:40:d0:64:e5:57:d4:cb:ce:54:0e:5d:b4:7b: 92:01:81:98:65:17:ee:45:76:20:af:cd:ef:95:88: ff:cf:1d:85:94:39:34:1b:97:06:f4:53:29:2e:58: 3c:8a:70:30:6e:83:95:9c:ef:cd:98:96:e5:49:4f: a7:10:0d:bb:d5:ca:47:a5:5d:b3:ba:69:92:3e:66: 8a:99:b1:fd:21:40:bd:5e:42:44:fa:35:87:84:41: c0:cc:d1:1c:04:9c:42:01:c4:6d:b8:80:6d:18:cf: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D7:D1:DE:9E:9B:CA:39:04:17:8B:79:9A:F6:37:D0:25:F5:A8:31 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b5:01:a9:2d:bd:e8:65:03:bd:f7:2c:91:dc:78:2a:bd:f4: c1:a4:1c:a8:9c:1a:40:5b:da:bb:19:ed:05:aa:6d:d2:a1:32: fa:ed:9d:af:00:61:47:9e:dd:8a:17:83:fc:08:d7:15:e6:56: df:31:b4:79:ec:d4:5f:61:aa:81:c6:c3:0e:82:c3:fa:fc:e9: 87:40:6d:21:98:62:f5:04:2e:c3:a2:f9:6f:7c:a2:a4:41:fa: ae:43:dd:59:df:56:47:f8:8b:ab:5b:f0:ab:d9:2c:6a:63:aa: ef:50:cd:0e:ed:20:1c:10:21:2d:01:59:68:db:d0:b1:54:46: f9:fa:25:5a:88:9a:c9:23:7b:29:46:43:bf:e1:b4:f0:04:fc: e5:da:29:fb:41:da:c0:52:6c:6e:03:8f:28:05:60:df:77:79: 72:88:b2:1a:42:9b:f1:ce:9f:42:09:0c:11:8d:0f:06:01:2b: ed:07:f8:df:5c:ef:52:59:f7:bc:13:3d:c7:e0:23:14:64:cb: 81:71:87:49:33:d5:15:79:e9:dd:25:9b:d3:c6:2d:04:c0:68: 03:07:36:d1:1d:67:ce:2b:3b:5b:5f:af:7a:4b:25:01:4c:61: b3:e8:06:f0:29:35:66:d4:3d:80:3c:8b:d9:24:1b:1c:6f:a7: 48:43:81:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZYWGC+xqMo7kjJikDrtSm1Q4PRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA4MjIwMzE2NTBaFw0yNTA4MjUwODEzNTBaMDMxMTAvBgNV BAMTKDA0RDdEMURFOUU5QkNBMzkwNDE3OEI3OTlBRjYzN0QwMjVGNUE4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8432XJUpgxYEDKobAmux/phE Nd6Dab9oqQtd97nDG+HH0DiGQY2vMqeZ+NaBJZvi/Rmp6gTGLH7aAaxgweNt8TeK 3lLsZs0QVma9o7W0m1ApQb9TB8GCMZl1PEBB8dWLpzzTXxmVkq5MAJd6+QNY8maH HbhrsbIqI8PE21FU7pV1bGhKEccilPL0Z+rqaH0W1pnZyiFaQNBk5VfUy85UDl20 e5IBgZhlF+5FdiCvze+ViP/PHYWUOTQblwb0UykuWDyKcDBug5Wc782YluVJT6cQ DbvVykelXbO6aZI+ZoqZsf0hQL1eQkT6NYeEQcDM0RwEnEIBxG24gG0Yz0CrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNfR3p6byjkEF4t5mvY30CX1qDEwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq1AaktvehlA733LJHceCq99MGkHKicGkBb 2rsZ7QWqbdKhMvrtna8AYUee3YoXg/wI1xXmVt8xtHns1F9hqoHGww6Cw/r86YdA bSGYYvUELsOi+W98oqRB+q5D3VnfVkf4i6tb8KvZLGpjqu9QzQ7tIBwQIS0BWWjb 0LFURvn6JVqImskjeylGQ7/htPAE/OXaKftB2sBSbG4DjygFYN93eXKIshpCm/HO n0IJDBGNDwYBK+0H+N9c71JZ97wTPcfgIxRky4Fxh0kz1RV56d0lm9PGLQTAaAMH NtEdZ84rO1tfr3pLJQFMYbPoBvApNWbUPYA8i9kkGxxvp0hDgaE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:53 2025 by rpki-client