$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: BPQdQk1sPWxTcWwZ4aSpvRJKyH9gQDLr4q15pQX56Qw= Subject key identifier: 36:E3:BC:D3:12:EB:77:43:36:C1:6D:27:DD:54:54:64:1C:29:AC:84 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 5020A52B9E6BF0E0A055B32AD090454D9F809B6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 015E Signing time: Thu 21 Aug 2025 12:40:35 +0000 Manifest this update: Thu 21 Aug 2025 12:35:35 +0000 Manifest next update: Sun 24 Aug 2025 18:52:35 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: RQ4sfxHZJxW//76RNModz2sWLO6caiXNNznvL9mNc5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:20:a5:2b:9e:6b:f0:e0:a0:55:b3:2a:d0:90:45:4d:9f:80:9b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Aug 21 12:35:35 2025 GMT Not After : Aug 24 18:52:35 2025 GMT Subject: CN=36E3BCD312EB774336C16D27DD5454641C29AC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:62:bd:5a:1f:b8:0f:60:10:64:28:85:6b: d0:60:60:33:bf:a2:9f:59:5e:25:0c:7a:bd:28:e4: 7d:3f:a6:07:d3:1e:9a:e9:64:0d:4c:5a:51:04:9a: 13:06:4f:cc:51:8c:48:72:82:19:f5:a2:a5:a4:44: 5a:51:7a:27:c6:af:ce:b0:b0:1f:9d:80:08:f5:c5: aa:62:72:e3:4d:4a:72:ed:56:68:c6:60:2e:b3:7b: 00:b4:b2:4c:a9:b2:b3:42:58:41:49:12:c2:a3:7d: 25:76:36:e7:40:80:5a:f5:e3:d6:83:26:0c:05:2a: f9:f2:e6:5a:2a:ad:b1:ff:3e:44:64:9a:e0:a7:44: e2:16:52:b2:01:7d:0a:6b:cd:b5:b2:18:97:9e:ba: c2:5b:69:35:c1:c8:dd:e1:92:4e:93:e5:e7:ce:05: da:f7:91:13:72:a0:70:ee:3d:ba:53:d1:c6:2b:7d: 88:86:b6:b2:c6:4c:da:a0:bb:e7:a4:43:0f:a6:77: da:37:c0:75:0d:13:bb:a8:c9:18:17:2e:17:ce:75: 30:d1:71:ff:84:1e:1f:0a:e0:53:91:93:33:81:a2: 5d:1a:25:7f:df:40:eb:51:03:fc:50:82:8a:22:44: 4f:d5:0f:34:7a:dd:5e:d9:8a:94:e9:9b:17:e6:56: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:BC:D3:12:EB:77:43:36:C1:6D:27:DD:54:54:64:1C:29:AC:84 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:89:56:93:17:75:5e:44:49:44:74:f2:34:9d:06:48:ed:f6: d6:09:cf:9d:e9:67:40:bb:6a:ca:d7:53:22:fe:67:71:d2:d8: 41:63:27:7e:97:e5:6c:d9:3c:59:2c:76:e3:85:3d:97:e5:f2: 74:69:3a:eb:f3:34:7a:c6:f6:9c:ae:12:d5:e1:14:77:7b:f3: 50:c5:d0:02:ba:5c:96:98:e8:5d:84:a3:24:9f:12:10:f6:55: 7d:a1:3b:0d:72:57:4e:e1:b5:d9:95:65:ea:6c:0e:61:df:60: dd:f9:d7:4f:6b:53:61:76:c3:a5:83:07:5f:49:dd:e0:28:e3: f3:c7:d4:5a:c1:1f:23:cf:21:7a:53:8c:38:1a:0b:83:5f:a9: bd:f2:90:b6:aa:f3:de:4f:55:dd:36:fe:05:dc:f3:69:36:f2: c9:2f:64:68:5d:17:15:95:e5:22:65:39:b8:a3:48:a3:bc:0a: 9e:cc:a5:91:23:4d:98:0f:64:36:bb:ae:0a:b3:a7:c3:fc:52: 3c:e3:14:ee:a9:f2:53:30:88:eb:e9:6e:6b:d3:9a:4c:e9:d4: fb:65:0e:6a:a5:8c:46:3f:ee:3a:67:62:45:d5:16:14:ad:84: 80:24:c3:23:1e:aa:7d:42:d7:58:4a:69:22:2c:fd:0d:ac:a0: 4b:73:db:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCClK55r8OCgVbMq0JBFTZ+Am2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA4MjExMjM1MzVaFw0yNTA4MjQxODUyMzVaMDMxMTAvBgNV BAMTKDM2RTNCQ0QzMTJFQjc3NDMzNkMxNkQyN0RENTQ1NDY0MUMyOUFDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3mK9Wh+4D2AQZCiFa9BgYDO/ op9ZXiUMer0o5H0/pgfTHprpZA1MWlEEmhMGT8xRjEhyghn1oqWkRFpReifGr86w sB+dgAj1xapicuNNSnLtVmjGYC6zewC0skypsrNCWEFJEsKjfSV2NudAgFr149aD JgwFKvny5loqrbH/PkRkmuCnROIWUrIBfQprzbWyGJeeusJbaTXByN3hkk6T5efO Bdr3kRNyoHDuPbpT0cYrfYiGtrLGTNqgu+ekQw+md9o3wHUNE7uoyRgXLhfOdTDR cf+EHh8K4FORkzOBol0aJX/fQOtRA/xQgooiRE/VDzR63V7ZipTpmxfmVsURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNuO80xLrd0M2wW0n3VRUZBwprIQwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOJVpMXdV5ESUR08jSdBkjt9tYJz53pZ0C7 asrXUyL+Z3HS2EFjJ36X5WzZPFksduOFPZfl8nRpOuvzNHrG9pyuEtXhFHd781DF 0AK6XJaY6F2EoySfEhD2VX2hOw1yV07htdmVZepsDmHfYN35109rU2F2w6WDB19J 3eAo4/PH1FrBHyPPIXpTjDgaC4Nfqb3ykLaq895PVd02/gXc82k28skvZGhdFxWV 5SJlObijSKO8Cp7MpZEjTZgPZDa7rgqzp8P8UjzjFO6p8lMwiOvpbmvTmkzp1Ptl DmqljEY/7jpnYkXVFhSthIAkwyMeqn1C11hKaSIs/Q2soEtz2zk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:28 2025 by rpki-client