$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: qjwZ8FeeqCN9udZWAwpZKipsV6zyZeHstrHEpXMgFYQ= Subject key identifier: 08:35:79:AC:5D:FB:48:74:B7:B5:36:E4:2D:32:A0:F4:83:2B:78:E2 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 32E019DD1583C89F2AF69AA8C2B0CB9B8FC6FC0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 018E Signing time: Fri 22 Aug 2025 19:11:48 +0000 Manifest this update: Fri 22 Aug 2025 19:06:48 +0000 Manifest next update: Mon 25 Aug 2025 19:32:48 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: fk+SbmhUkYz9xu1D9CDYicqs67kmszQzVOHH2fWTbCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:19:dd:15:83:c8:9f:2a:f6:9a:a8:c2:b0:cb:9b:8f:c6:fc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Aug 22 19:06:48 2025 GMT Not After : Aug 25 19:32:48 2025 GMT Subject: CN=083579AC5DFB4874B7B536E42D32A0F4832B78E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:7d:35:b5:2b:bf:f6:1d:41:a1:0e:e9:20: cc:02:bb:d6:85:77:1f:ad:d7:93:bd:b2:a1:14:64: ca:84:f0:27:69:b0:67:60:93:70:96:09:26:7f:a1: f1:df:af:50:82:dc:0f:69:78:cc:a6:0c:49:6f:0d: e9:20:ed:b9:78:5a:58:b1:6a:3a:8b:67:cb:f5:72: 6d:0c:a2:97:47:01:a7:66:a0:1f:a3:a0:ed:23:a7: 48:ff:8a:b7:8b:05:ab:dd:75:42:4a:ba:fe:2d:fd: 0d:ec:61:6f:ac:48:c8:3a:ee:56:b8:26:fe:20:1e: 43:c1:25:54:8f:ee:03:3e:a5:21:1e:ae:f3:58:14: f2:90:34:51:fb:79:49:b8:fd:cf:93:09:80:97:f6: bc:79:5f:c6:92:43:59:27:f8:7e:e6:3d:c0:3a:9f: 74:ab:dd:bc:42:f5:42:3f:cf:d9:cc:fd:ac:2e:c4: 99:7f:7c:32:c9:f0:bb:b7:30:d0:c9:b3:d4:0b:c9: a8:38:ac:82:28:06:c3:57:f2:53:35:24:77:fc:9a: e4:03:cc:58:f6:de:70:10:f7:ca:4c:b0:4f:73:b1: 9a:17:44:33:47:7e:5d:81:25:58:38:0e:4c:41:78: ae:25:ba:3a:9b:5a:d3:6d:bb:77:8d:41:1f:36:81: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:35:79:AC:5D:FB:48:74:B7:B5:36:E4:2D:32:A0:F4:83:2B:78:E2 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:99:b4:c6:75:98:97:ff:4e:bc:99:eb:7c:86:56:7b:37:4a: 44:30:65:24:5a:9f:38:c3:e0:9b:bd:e2:2f:d8:64:f4:f8:a5: 59:8d:fb:35:e2:1e:43:ae:85:38:b2:75:69:53:20:11:ae:d3: a9:36:01:1c:e6:19:22:ab:9c:05:a7:df:2e:3a:84:91:0b:00: f4:0d:73:c5:96:af:40:77:6e:d0:26:c9:1d:6a:f0:ea:8a:03: 63:73:67:8f:b0:1c:c3:67:cb:6e:45:df:b4:13:eb:4d:c6:9c: 94:9f:36:08:46:46:5b:f4:5e:1a:80:0c:16:c9:d0:35:3a:54: 76:a0:f9:d8:77:00:19:2e:6a:33:f5:78:5d:63:bc:5f:8d:5d: ca:8e:8e:86:e4:2b:97:84:0c:24:44:fc:7d:c7:c4:e6:9c:d6: 36:0f:f1:ce:04:cd:ff:d8:55:4f:de:02:4c:7d:cd:a8:c6:67: 92:e8:cb:ab:f3:f2:ca:44:1b:1b:7f:7c:1c:32:59:9c:1c:6d: c0:07:04:4b:0d:32:53:a8:da:07:d2:29:bd:b3:e1:4b:ea:5f: 28:66:53:79:59:6a:7d:f4:9c:8d:d8:70:ae:7f:eb:31:21:68: c9:21:15:9b:8f:25:e6:77:76:31:2e:eb:3a:33:9b:80:d1:6b: eb:6b:e1:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuAZ3RWDyJ8q9pqowrDLm4/G/AswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA4MjIxOTA2NDhaFw0yNTA4MjUxOTMyNDhaMDMxMTAvBgNV BAMTKDA4MzU3OUFDNURGQjQ4NzRCN0I1MzZFNDJEMzJBMEY0ODMyQjc4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66H01tSu/9h1BoQ7pIMwCu9aF dx+t15O9sqEUZMqE8CdpsGdgk3CWCSZ/ofHfr1CC3A9peMymDElvDekg7bl4Wlix ajqLZ8v1cm0MopdHAadmoB+joO0jp0j/ireLBavddUJKuv4t/Q3sYW+sSMg67la4 Jv4gHkPBJVSP7gM+pSEervNYFPKQNFH7eUm4/c+TCYCX9rx5X8aSQ1kn+H7mPcA6 n3Sr3bxC9UI/z9nM/awuxJl/fDLJ8Lu3MNDJs9QLyag4rIIoBsNX8lM1JHf8muQD zFj23nAQ98pMsE9zsZoXRDNHfl2BJVg4DkxBeK4lujqbWtNtu3eNQR82gc0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDV5rF37SHS3tTbkLTKg9IMreOIwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOZtMZ1mJf/TryZ63yGVns3SkQwZSRanzjD 4Ju94i/YZPT4pVmN+zXiHkOuhTiydWlTIBGu06k2ARzmGSKrnAWn3y46hJELAPQN c8WWr0B3btAmyR1q8OqKA2NzZ4+wHMNny25F37QT603GnJSfNghGRlv0XhqADBbJ 0DU6VHag+dh3ABkuajP1eF1jvF+NXcqOjobkK5eEDCRE/H3HxOac1jYP8c4Ezf/Y VU/eAkx9zajGZ5Loy6vz8spEGxt/fBwyWZwcbcAHBEsNMlOo2gfSKb2z4UvqXyhm U3lZan30nI3YcK5/6zEhaMkhFZuPJeZ3djEu6zozm4DRa+tr4dE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:37 2025 by rpki-client