$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: AJWVmv3DmZIEkV5yVQhYm5nTwvTX2B9ULd4PCGFZKuU= Subject key identifier: B5:54:DD:91:B9:49:48:F0:95:D3:E0:92:82:83:F3:93:B8:AC:74:AD Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 3EAF75A10815D346BA4044097EAC444E234A6B5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: BF Signing time: Sat 23 Aug 2025 16:00:51 +0000 Manifest this update: Sat 23 Aug 2025 15:55:51 +0000 Manifest next update: Wed 27 Aug 2025 02:17:51 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) 2: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: CNATJbf5t7XeboDAd0+fePXeDOG9nyrqNzNwKahM6lo=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:af:75:a1:08:15:d3:46:ba:40:44:09:7e:ac:44:4e:23:4a:6b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Aug 23 15:55:51 2025 GMT Not After : Aug 27 02:17:51 2025 GMT Subject: CN=B554DD91B94948F095D3E0928283F393B8AC74AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:d3:db:c8:47:fc:ea:cb:6b:d6:42:05:0c: 26:11:7f:92:ed:90:8b:a9:4e:1a:b7:7c:a6:ee:5f: 59:03:28:9b:b4:e5:a4:29:b1:a8:63:ba:d4:18:d1: 80:15:ba:62:18:04:80:b9:1b:b8:68:83:ab:5f:bc: c0:1a:ed:37:cf:2e:ef:a0:f5:17:e9:05:8c:ae:ec: cc:bc:94:c7:c5:e6:d0:55:7a:4d:80:d6:ea:e7:6c: de:45:1c:ea:c6:43:29:f7:17:f6:f1:c1:63:94:76: 3d:64:20:30:4e:2f:68:a7:55:64:e3:f0:d0:b2:f8: dc:20:09:94:6f:a4:05:a2:3a:24:4b:51:62:6e:e2: f8:89:03:c3:8f:f2:13:af:1a:89:1c:cf:f3:65:6b: 05:99:a6:d1:12:5e:9c:0e:8b:2a:a3:86:4b:b4:fa: 9c:92:39:a4:51:96:99:8a:54:67:30:be:94:05:7b: ca:18:0a:82:14:d5:fb:b1:a7:ad:d9:5c:08:68:97: 7a:19:2e:ac:f2:53:a1:38:f1:7d:62:6a:6f:47:37: a0:1b:93:9d:58:3c:f4:40:9f:6a:c5:2b:df:d0:b4: 7a:e2:e2:35:61:3e:88:ba:0d:e8:27:19:9f:e7:66: b2:f5:07:f4:ce:9a:69:ab:0b:e3:6a:b2:b9:0f:f2: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:DD:91:B9:49:48:F0:95:D3:E0:92:82:83:F3:93:B8:AC:74:AD X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ad:33:9e:e1:8f:65:f2:3e:8c:22:95:44:8b:83:18:81:d2: c1:08:1c:f4:eb:6e:d7:0f:10:af:ca:7f:22:74:f3:c8:b7:90: 09:4c:c0:1d:1f:99:e4:45:f9:7d:7d:f2:01:c1:dc:e2:38:dc: 97:12:50:4d:b5:3b:ca:88:8b:eb:0f:f9:d1:c0:79:fc:13:5b: 64:d3:50:91:84:ea:24:e7:d7:76:b0:b3:18:a8:35:ce:26:2e: d4:75:ba:ad:5c:48:bb:6a:ea:5d:a5:c4:d2:cd:db:55:fd:82: d9:2f:4c:57:7b:c2:f1:75:ee:13:e7:d7:52:2f:13:bd:f3:c1: 72:56:68:be:70:68:9c:3b:5d:8c:ca:23:0e:8a:d2:a0:6c:37: 5a:1f:df:50:c8:ef:22:9f:fd:61:a5:34:e5:9f:78:e7:e5:e1: ce:74:dc:bb:a7:eb:8f:81:67:9f:91:f2:99:46:d1:0b:a7:c5: 3e:4e:38:92:0d:bd:24:da:5b:f3:d8:53:6e:8f:d2:30:43:e9: a2:2e:cb:be:f8:5c:a0:e8:4f:2a:af:e6:aa:2c:87:ad:8b:1e: 6d:1d:7d:f4:36:66:59:93:7e:e9:cd:48:a5:26:bc:2b:ce:b8: be:55:10:16:e9:86:73:8b:77:47:1b:7e:e7:29:26:45:54:5a: 7c:79:46:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPq91oQgV00a6QEQJfqxETiNKa1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA4MjMxNTU1NTFaFw0yNTA4MjcwMjE3NTFaMDMxMTAvBgNV BAMTKEI1NTRERDkxQjk0OTQ4RjA5NUQzRTA5MjgyODNGMzkzQjhBQzc0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJNPbyEf86str1kIFDCYRf5Lt kIupThq3fKbuX1kDKJu05aQpsahjutQY0YAVumIYBIC5G7hog6tfvMAa7TfPLu+g 9RfpBYyu7My8lMfF5tBVek2A1urnbN5FHOrGQyn3F/bxwWOUdj1kIDBOL2inVWTj 8NCy+NwgCZRvpAWiOiRLUWJu4viJA8OP8hOvGokcz/NlawWZptESXpwOiyqjhku0 +pySOaRRlpmKVGcwvpQFe8oYCoIU1fuxp63ZXAhol3oZLqzyU6E48X1iam9HN6Ab k51YPPRAn2rFK9/QtHri4jVhPoi6DegnGZ/nZrL1B/TOmmmrC+NqsrkP8sCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVTdkblJSPCV0+CSgoPzk7isdK0wHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFStM57hj2XyPowilUSLgxiB0sEIHPTrbtcP EK/KfyJ088i3kAlMwB0fmeRF+X198gHB3OI43JcSUE21O8qIi+sP+dHAefwTW2TT UJGE6iTn13awsxioNc4mLtR1uq1cSLtq6l2lxNLN21X9gtkvTFd7wvF17hPn11Iv E73zwXJWaL5waJw7XYzKIw6K0qBsN1of31DI7yKf/WGlNOWfeOfl4c503Lun64+B Z5+R8plG0QunxT5OOJINvSTaW/PYU26P0jBD6aIuy774XKDoTyqv5qosh62LHm0d ffQ2ZlmTfunNSKUmvCvOuL5VEBbphnOLd0cbfucpJkVUWnx5Rsg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:40 2025 by rpki-client