$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: 7FC/diLoTHez42SKYq9kYq9R4kQRSEzEbBnYCmnNpgo= Subject key identifier: 54:E0:31:27:9E:1B:FB:1B:87:06:95:23:E3:DD:03:5E:C4:FA:EA:B7 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 5C382A2C5245DF9E9011F82068B9C6EC04CBCA28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0127 Signing time: Sat 23 Aug 2025 04:11:17 +0000 Manifest this update: Sat 23 Aug 2025 04:06:17 +0000 Manifest next update: Tue 26 Aug 2025 07:25:17 +0000 Files and hashes: 1: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: ypKZ+4FQZiXrd26y6E5EAxIPw5x404QEA6qQUE6L6Qo=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: MXfDIthgoWl0DB7t5bTdlNeO4VZUUfb84boo8bz76t8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:38:2a:2c:52:45:df:9e:90:11:f8:20:68:b9:c6:ec:04:cb:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Aug 23 04:06:17 2025 GMT Not After : Aug 26 07:25:17 2025 GMT Subject: CN=54E031279E1BFB1B87069523E3DD035EC4FAEAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:63:2b:bf:54:9c:de:84:88:85:f2:07:f6: 40:44:b9:46:bc:d4:df:7e:20:a3:a5:2b:4c:8b:97: e9:d4:f8:67:98:c8:c0:63:61:83:a4:e5:a0:d4:dc: 9b:79:f8:d2:a1:8b:4c:35:cb:84:42:a4:f3:b0:58: 58:bb:d3:64:a0:c5:06:aa:04:bf:13:3f:ff:8c:77: d0:80:dd:36:17:2e:42:ca:a3:0f:56:86:ab:d9:60: 2e:ea:4f:0b:73:36:6b:18:ab:c5:4d:05:fc:b1:ba: aa:e6:47:16:0a:24:3b:e6:9c:a8:7a:4b:ef:d0:bd: af:38:0a:76:7a:61:57:71:e5:86:fa:15:86:05:53: 41:1b:8c:fc:c0:e0:e4:4c:b8:4b:65:6c:14:be:68: 97:26:a2:23:f1:14:12:b1:9d:14:80:f8:f3:3c:a1: 7f:3f:a0:e5:da:82:db:d8:e1:08:3c:73:99:ea:ab: ab:87:67:2e:c1:27:91:09:7c:2c:8c:18:c1:c8:ae: 3a:ef:e4:c3:38:df:ac:ae:95:47:12:34:31:ab:bb: 83:6a:d3:55:a2:5a:b9:87:1b:fa:d4:23:e0:53:ae: 15:e1:44:07:fa:32:73:eb:e2:a8:7e:83:d5:b5:19: b2:66:10:12:85:69:e0:18:ae:7a:a6:93:86:62:37: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E0:31:27:9E:1B:FB:1B:87:06:95:23:E3:DD:03:5E:C4:FA:EA:B7 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:43:5b:e1:aa:93:5b:63:09:83:81:5b:5e:1d:ff:81:a9: 01:e1:07:3b:4c:7b:6e:33:f4:ec:7f:52:ca:6e:8c:23:b6:ec: 09:8a:33:58:4c:1b:64:17:10:55:5c:d5:c9:ab:7c:c7:c2:85: 28:5f:60:3d:09:de:25:7c:33:21:50:59:5d:a8:3b:f8:1f:96: 8a:a4:4a:15:06:af:11:f7:1b:21:27:4b:94:65:7c:c8:21:ad: 03:89:1c:2a:87:ca:ca:af:67:6e:e6:51:c9:17:8d:c4:8d:eb: 13:88:0a:a5:a0:a9:c8:52:38:7f:a2:b3:43:06:7c:ce:46:2e: 25:7a:a3:a2:2f:0a:7c:e8:14:da:64:a6:1d:61:e2:e9:8b:e2: 21:35:74:73:8d:83:b0:b4:f5:a7:8e:d1:c1:3e:08:2a:9b:f7: e3:9e:e4:2a:42:36:37:fd:9b:c6:33:55:4a:ab:97:66:15:e9: 60:3d:2b:01:cb:e4:ca:32:0b:e2:b4:f5:1b:c3:cf:fb:7b:27: 65:20:44:ee:cd:61:b7:af:0a:3c:d3:96:e1:89:da:28:c2:19: 96:87:08:2b:37:87:5c:88:a1:47:b4:58:1b:5b:b9:5a:c3:e8: 11:fa:47:75:8f:1a:ee:ab:30:7c:e1:96:be:b8:06:62:2d:07: 07:a5:1d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDgqLFJF356QEfggaLnG7ATLyigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNTA4MjMwNDA2MTdaFw0yNTA4MjYwNzI1MTdaMDMxMTAvBgNV BAMTKDU0RTAzMTI3OUUxQkZCMUI4NzA2OTUyM0UzREQwMzVFQzRGQUVBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uGMrv1Sc3oSIhfIH9kBEuUa8 1N9+IKOlK0yLl+nU+GeYyMBjYYOk5aDU3Jt5+NKhi0w1y4RCpPOwWFi702SgxQaq BL8TP/+Md9CA3TYXLkLKow9WhqvZYC7qTwtzNmsYq8VNBfyxuqrmRxYKJDvmnKh6 S+/Qva84CnZ6YVdx5Yb6FYYFU0EbjPzA4ORMuEtlbBS+aJcmoiPxFBKxnRSA+PM8 oX8/oOXagtvY4Qg8c5nqq6uHZy7BJ5EJfCyMGMHIrjrv5MM436yulUcSNDGru4Nq 01WiWrmHG/rUI+BTrhXhRAf6MnPr4qh+g9W1GbJmEBKFaeAYrnqmk4ZiN42jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOAxJ54b+xuHBpUj490DXsT66rcwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1KQ1vhqpNbYwmDgVteHf+BqQHhBztMe24z 9Ox/UspujCO27AmKM1hMG2QXEFVc1cmrfMfChShfYD0J3iV8MyFQWV2oO/gfloqk ShUGrxH3GyEnS5RlfMghrQOJHCqHysqvZ27mUckXjcSN6xOICqWgqchSOH+is0MG fM5GLiV6o6IvCnzoFNpkph1h4umL4iE1dHONg7C09aeO0cE+CCqb9+Oe5CpCNjf9 m8YzVUqrl2YV6WA9KwHL5MoyC+K09RvDz/t7J2UgRO7NYbevCjzTluGJ2ijCGZaH CCs3h1yIoUe0WBtbuVrD6BH6R3WPGu6rMHzhlr64BmItBwelHUo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:05 2025 by rpki-client