$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: imIfOuZKuZPiOUSOp/Zm/HC0tW3u0YQZ5+Z9T5ZP4pg= Subject key identifier: 31:61:66:7C:15:E2:7B:5F:8D:A3:1E:AF:F5:31:3B:54:D5:96:70:FD Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 604073D1A32A50125C8B04A5F3078D9282EB683F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: BC Signing time: Sat 23 Aug 2025 03:21:18 +0000 Manifest this update: Sat 23 Aug 2025 03:16:18 +0000 Manifest next update: Tue 26 Aug 2025 06:37:18 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: U/SAP8qv51wNs5BF58tRdsX+DkLiSuRbYY1bUsz6Hdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:40:73:d1:a3:2a:50:12:5c:8b:04:a5:f3:07:8d:92:82:eb:68:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Aug 23 03:16:18 2025 GMT Not After : Aug 26 06:37:18 2025 GMT Subject: CN=3161667C15E27B5F8DA31EAFF5313B54D59670FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:b2:e5:26:ec:2a:ef:bf:b9:7b:b4:14:d1: 0f:fa:fd:1e:5a:ff:75:27:27:c3:10:7b:be:35:29: 29:98:00:1d:a1:2c:04:ab:f1:80:27:61:13:28:c7: da:b1:82:2a:84:ac:cb:34:4c:87:56:17:6c:3f:4f: e1:7c:8f:c2:5a:28:22:0b:22:4c:bf:44:72:8e:ab: 29:b4:fa:47:50:75:05:00:ca:22:51:e0:90:69:2a: f8:49:25:cf:1f:98:c6:fe:bb:94:ad:38:e1:a0:e2: 69:47:8d:dd:e5:c5:b6:e1:4c:47:1d:aa:7f:bb:f9: df:b0:88:86:61:c3:9c:30:4c:cf:a7:5a:b4:a2:d3: c1:a1:be:01:7d:b6:7b:67:9a:70:87:a7:ab:b4:1e: 0f:a1:67:b9:fc:b7:6d:80:eb:02:03:ed:db:7d:ea: 1c:be:d6:c4:e9:f9:24:e9:4a:b2:a0:ba:a8:36:75: da:e2:de:30:bc:59:3a:8b:64:90:48:07:ce:fb:4c: 5a:b6:64:aa:b0:3f:49:ed:c8:87:3b:1d:5a:e3:3b: 48:5f:c7:91:02:87:6d:44:2d:10:2a:71:6e:74:44: 03:e2:7f:d2:f2:4e:69:07:ae:93:22:b0:bb:ff:c4: 09:eb:93:e9:a0:71:87:5d:39:fd:e6:c4:33:39:ea: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:61:66:7C:15:E2:7B:5F:8D:A3:1E:AF:F5:31:3B:54:D5:96:70:FD X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:66:52:44:65:56:99:b6:db:ee:f6:95:7c:3e:51:a1:34:dc: 24:b1:cf:ec:8c:e6:03:22:64:ae:dc:98:66:f5:8b:79:05:cf: ac:22:b2:94:00:4e:44:74:8a:38:30:52:e2:33:85:f6:00:07: bc:e9:5f:67:5a:10:48:0b:5e:d5:06:86:48:e3:c1:33:54:a5: 44:25:fe:27:4c:f4:87:a9:3a:03:83:d5:d8:ee:a9:8b:ef:32: e7:2f:bd:16:d4:52:49:a6:5f:51:48:a3:46:7a:d4:88:41:5a: 08:3d:fc:b8:c8:11:a4:09:a4:97:97:67:40:54:3a:2e:6d:57: cc:df:00:a5:fc:29:4f:3c:3d:b0:7b:be:73:66:b4:62:d5:c0: 38:6f:68:20:00:48:0c:03:c7:59:d6:ba:14:d0:2f:5a:8a:ab: 7f:24:e1:5d:61:4b:7e:48:e8:25:85:92:f7:e8:2b:e2:d0:24: ee:3a:11:4e:e3:a6:83:9e:bb:81:ac:16:a5:1b:70:4b:4b:96: 88:7f:1b:90:7b:15:19:98:3f:78:3e:2d:6d:b7:9d:fe:e7:37: d5:ce:33:81:44:4e:43:0e:90:91:aa:80:d3:83:24:6a:1f:3f: d0:f6:4b:ba:30:77:d0:5c:d6:52:62:64:8d:4b:ad:c0:b0:2a: eb:e0:1c:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEBz0aMqUBJciwSl8weNkoLraD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTA4MjMwMzE2MThaFw0yNTA4MjYwNjM3MThaMDMxMTAvBgNV BAMTKDMxNjE2NjdDMTVFMjdCNUY4REEzMUVBRkY1MzEzQjU0RDU5NjcwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5arLlJuwq77+5e7QU0Q/6/R5a /3UnJ8MQe741KSmYAB2hLASr8YAnYRMox9qxgiqErMs0TIdWF2w/T+F8j8JaKCIL Iky/RHKOqym0+kdQdQUAyiJR4JBpKvhJJc8fmMb+u5StOOGg4mlHjd3lxbbhTEcd qn+7+d+wiIZhw5wwTM+nWrSi08GhvgF9tntnmnCHp6u0Hg+hZ7n8t22A6wID7dt9 6hy+1sTp+STpSrKguqg2ddri3jC8WTqLZJBIB877TFq2ZKqwP0ntyIc7HVrjO0hf x5ECh21ELRAqcW50RAPif9LyTmkHrpMisLv/xAnrk+mgcYddOf3mxDM56lklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWFmfBXie1+Nox6v9TE7VNWWcP0wHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9mUkRlVpm22+72lXw+UaE03CSxz+yM5gMi ZK7cmGb1i3kFz6wispQATkR0ijgwUuIzhfYAB7zpX2daEEgLXtUGhkjjwTNUpUQl /idM9IepOgOD1djuqYvvMucvvRbUUkmmX1FIo0Z61IhBWgg9/LjIEaQJpJeXZ0BU Oi5tV8zfAKX8KU88PbB7vnNmtGLVwDhvaCAASAwDx1nWuhTQL1qKq38k4V1hS35I 6CWFkvfoK+LQJO46EU7jpoOeu4GsFqUbcEtLloh/G5B7FRmYP3g+LW23nf7nN9XO M4FETkMOkJGqgNODJGofP9D2S7owd9Bc1lJiZI1LrcCwKuvgHFg= -----END CERTIFICATE-----Generated at Sun Aug 24 00:38:50 2025 by rpki-client