$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: 3AWYMGiL095PBeiBOySRbik1chOc7OSF5uAjbKppJAo= Subject key identifier: EE:09:54:3B:BA:AC:97:05:EA:7C:53:DE:3F:49:E6:C9:53:0C:4E:A7 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 2965F1596D421BFB63BE99BCA1AC788C832896AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 0373 Signing time: Thu 21 Aug 2025 13:40:53 +0000 Manifest this update: Thu 21 Aug 2025 13:35:53 +0000 Manifest next update: Mon 25 Aug 2025 00:26:53 +0000 Files and hashes: 1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: I0NF30ZUtrEqVoKrejwwbxE8K+DQnc8gW3DKbOL3hvw=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:65:f1:59:6d:42:1b:fb:63:be:99:bc:a1:ac:78:8c:83:28:96:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Aug 21 13:35:53 2025 GMT Not After : Aug 25 00:26:53 2025 GMT Subject: CN=EE09543BBAAC9705EA7C53DE3F49E6C9530C4EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:50:7c:dd:a7:ca:97:25:24:12:c0:c0:a0: 1a:1d:09:b7:94:63:8d:ed:37:b3:78:8d:ef:f9:13: 7f:e4:3b:c9:8c:04:69:6a:34:a4:f2:64:19:4f:49: ab:b9:91:ab:4a:df:d7:e5:13:7f:94:4c:36:c5:b8: 2c:38:37:13:2f:a2:51:d7:dd:0d:14:61:94:60:8c: 8a:45:85:5e:00:95:76:f8:19:16:1a:0b:54:1b:b5: 50:b7:a4:4e:23:96:4b:64:37:da:48:2a:41:15:da: cd:47:43:dc:20:be:1f:d8:27:a4:2a:9c:66:d5:1f: cb:b5:dc:e2:80:7e:49:69:8d:ea:9c:bb:f5:47:09: d2:ec:f0:74:38:b0:54:af:d3:7b:cc:d8:fa:d2:ca: 00:2c:04:ba:16:2c:97:1e:e3:4a:8b:59:94:aa:26: 4d:9d:f7:11:88:9e:7e:98:64:72:ea:1f:28:af:27: 45:94:7d:20:c7:3e:fa:58:3b:01:06:63:e0:41:02: b7:0d:af:0b:08:7b:7d:c8:59:f8:8e:97:f2:a6:ce: ef:b2:6b:f3:8e:a0:3c:ec:e5:e0:80:b1:ad:89:7d: b7:74:e0:54:7f:c5:25:a0:32:dd:9c:1b:37:7e:9e: 61:f9:07:f5:d9:92:cc:b9:3b:cc:63:b4:e2:ef:32: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:54:3B:BA:AC:97:05:EA:7C:53:DE:3F:49:E6:C9:53:0C:4E:A7 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:b6:a2:a0:e6:e7:35:9f:63:6c:24:5e:6c:5f:67:1c:1e: 99:7c:1f:a1:2c:e7:3f:25:29:50:72:29:a7:35:62:9e:6b:c7: 1e:3d:db:36:74:df:cf:6a:de:0a:e9:ae:f7:9e:cd:38:9b:7c: 30:48:f4:f0:03:74:bc:54:d2:38:91:8e:fc:3f:fb:88:80:78: 45:05:c9:78:52:5e:aa:09:f6:da:a0:7d:18:b5:f3:e0:9e:fb: 83:16:24:1d:21:70:24:4f:9a:ed:2a:69:84:8a:5b:34:64:bf: d9:40:77:57:8f:1c:6d:26:5b:64:6d:a8:7a:5d:f0:a8:07:d7: d0:72:a0:77:0a:b4:2e:9b:de:9f:7f:2a:91:bc:5e:cb:0e:a9: 94:87:ec:0b:30:ef:46:d5:af:65:6d:9f:d0:df:a7:13:77:1d: 49:60:2c:13:56:41:0f:ac:01:bd:84:21:31:af:4a:d4:d0:b5: 21:a0:cf:ed:97:7d:a3:1b:46:7a:3f:b8:26:16:ba:2e:d6:d6: ee:9e:41:aa:c1:be:ed:a3:65:2c:81:f5:87:a5:b1:5f:9c:fd: 9b:cb:81:17:a1:53:d9:ae:b5:d6:d4:25:8b:9f:6b:58:1a:25: 14:9a:3b:f5:4e:70:00:8a:c6:df:0a:25:94:42:a5:6b:bf:d4: 8c:4c:dc:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWXxWW1CG/tjvpm8oax4jIMolq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA4MjExMzM1NTNaFw0yNTA4MjUwMDI2NTNaMDMxMTAvBgNV BAMTKEVFMDk1NDNCQkFBQzk3MDVFQTdDNTNERTNGNDlFNkM5NTMwQzRFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/FB83afKlyUkEsDAoBodCbeU Y43tN7N4je/5E3/kO8mMBGlqNKTyZBlPSau5katK39flE3+UTDbFuCw4NxMvolHX 3Q0UYZRgjIpFhV4AlXb4GRYaC1QbtVC3pE4jlktkN9pIKkEV2s1HQ9wgvh/YJ6Qq nGbVH8u13OKAfklpjeqcu/VHCdLs8HQ4sFSv03vM2PrSygAsBLoWLJce40qLWZSq Jk2d9xGInn6YZHLqHyivJ0WUfSDHPvpYOwEGY+BBArcNrwsIe33IWfiOl/Kmzu+y a/OOoDzs5eCAsa2Jfbd04FR/xSWgMt2cGzd+nmH5B/XZksy5O8xjtOLvMgWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7glUO7qslwXqfFPeP0nmyVMMTqcwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH6tqKg5uc1n2NsJF5sX2ccHpl8H6Es5z8l KVByKac1Yp5rxx492zZ0389q3grprveezTibfDBI9PADdLxU0jiRjvw/+4iAeEUF yXhSXqoJ9tqgfRi18+Ce+4MWJB0hcCRPmu0qaYSKWzRkv9lAd1ePHG0mW2RtqHpd 8KgH19ByoHcKtC6b3p9/KpG8XssOqZSH7Asw70bVr2Vtn9DfpxN3HUlgLBNWQQ+s Ab2EITGvStTQtSGgz+2XfaMbRno/uCYWui7W1u6eQarBvu2jZSyB9YelsV+c/ZvL gRehU9mutdbUJYufa1gaJRSaO/VOcACKxt8KJZRCpWu/1IxM3Fk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:33 2025 by rpki-client