$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: oHX9uSXSQki5A+1ictKIhk1Fb33AKOVRiH47kxYTtEY= Subject key identifier: 2B:AC:A2:A8:C5:82:6C:D6:2A:A6:54:0A:13:D9:FF:F3:EE:73:9C:97 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 072EFAA15457AFD21A46B002EF9CD310B95040A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: D1 Signing time: Fri 22 Aug 2025 17:11:01 +0000 Manifest this update: Fri 22 Aug 2025 17:06:01 +0000 Manifest next update: Mon 25 Aug 2025 20:43:01 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: BXRXmWqzgoR2h7sGmvedJPoEDD/4Cn6/Dk6D9CbUs44=) 2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 3: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2e:fa:a1:54:57:af:d2:1a:46:b0:02:ef:9c:d3:10:b9:50:40:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Aug 22 17:06:01 2025 GMT Not After : Aug 25 20:43:01 2025 GMT Subject: CN=2BACA2A8C5826CD62AA6540A13D9FFF3EE739C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:a8:d9:2c:ff:02:14:27:a9:e1:66:ad:b8: 97:fd:eb:83:c1:22:e9:cf:4c:84:38:74:7c:0d:8b: 1f:4e:b7:a5:3b:dc:06:26:45:d9:f1:7f:4c:32:1a: d7:be:9e:fd:ce:94:10:6e:c6:c7:3a:52:db:59:7d: 4f:b2:29:82:80:dd:65:07:01:9e:ff:3d:4e:9d:96: 78:66:38:a2:cb:ff:cf:7f:30:42:e7:8f:25:f7:b4: 54:97:46:5d:43:14:25:e2:57:63:22:d7:37:a9:0d: 1f:aa:74:18:0a:9c:41:f9:ce:3d:7f:b4:07:31:4a: 9b:24:c7:6f:c7:cb:83:44:33:1c:59:6c:08:5b:89: 8a:df:ca:40:96:b7:42:8c:b7:c0:3d:a7:36:59:b9: 67:d5:13:8e:58:49:c0:be:52:09:11:0f:6f:3d:e3: 4b:4c:77:85:36:4c:86:aa:44:fa:d0:fc:a1:ec:b6: 1c:97:21:23:fe:69:73:83:1d:3e:b2:77:b2:dc:8e: 69:64:15:06:bc:ab:6e:61:94:16:60:dd:9d:fb:62: d8:00:c4:b5:ab:af:43:9c:4f:ed:92:a6:07:34:de: 1b:8c:30:97:54:12:c7:86:b6:2f:5a:69:62:79:38: 45:ed:3e:e4:c5:63:36:8e:b5:6a:89:82:fc:ad:49: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AC:A2:A8:C5:82:6C:D6:2A:A6:54:0A:13:D9:FF:F3:EE:73:9C:97 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:ec:e3:f0:6e:e7:c2:a6:84:de:a9:a9:c3:84:bf:e9:5e: 71:cb:51:37:15:78:9d:48:eb:fe:77:86:d4:b5:34:45:86:71: 50:83:71:5f:a4:c6:f5:21:a8:7a:0a:a4:d2:30:50:d8:f7:b3: dd:2d:77:73:3f:2b:e2:10:99:c1:1e:66:61:40:85:5e:fe:b8: a4:f2:12:5d:b3:2b:a5:94:7d:d3:da:8d:41:83:34:a9:e9:82: 80:de:aa:5c:f8:3d:4a:71:22:36:8b:e1:53:f9:7d:bd:81:e0: d5:3a:2f:20:82:fd:44:99:36:60:9d:5c:27:8c:2f:ee:15:fd: 61:84:a1:dc:35:76:58:69:da:79:90:9d:33:ce:96:1e:e3:49: 57:91:7c:3d:fc:00:ab:f4:ef:05:c3:34:00:73:9a:8a:46:50: 26:e4:4c:02:b7:f0:30:0b:06:35:e0:e9:af:62:3f:8e:2b:b6: 55:4f:0b:e3:e6:82:16:21:61:af:f7:38:b9:1a:58:d2:8d:22: 9a:05:e5:41:8c:d9:5b:42:9d:f6:1f:4a:6c:7e:53:75:da:d3: 64:c8:96:db:f0:ed:19:7e:b4:81:95:c7:e8:25:71:5c:9a:01: 2b:a5:9b:52:22:ec:3f:f5:a9:62:d3:e9:58:44:99:b8:82:f4: af:03:b3:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBy76oVRXr9IaRrAC75zTELlQQKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA4MjIxNzA2MDFaFw0yNTA4MjUyMDQzMDFaMDMxMTAvBgNV BAMTKDJCQUNBMkE4QzU4MjZDRDYyQUE2NTQwQTEzRDlGRkYzRUU3MzlDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TKjZLP8CFCep4WatuJf964PB IunPTIQ4dHwNix9Ot6U73AYmRdnxf0wyGte+nv3OlBBuxsc6UttZfU+yKYKA3WUH AZ7/PU6dlnhmOKLL/89/MELnjyX3tFSXRl1DFCXiV2Mi1zepDR+qdBgKnEH5zj1/ tAcxSpskx2/Hy4NEMxxZbAhbiYrfykCWt0KMt8A9pzZZuWfVE45YScC+UgkRD289 40tMd4U2TIaqRPrQ/KHsthyXISP+aXODHT6yd7LcjmlkFQa8q25hlBZg3Z37YtgA xLWrr0OcT+2Spgc03huMMJdUEseGti9aaWJ5OEXtPuTFYzaOtWqJgvytSR95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6yiqMWCbNYqplQKE9n/8+5znJcwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwu7OPwbufCpoTeqanDhL/pXnHLUTcVeJ1I 6/53htS1NEWGcVCDcV+kxvUhqHoKpNIwUNj3s90td3M/K+IQmcEeZmFAhV7+uKTy El2zK6WUfdPajUGDNKnpgoDeqlz4PUpxIjaL4VP5fb2B4NU6LyCC/USZNmCdXCeM L+4V/WGEodw1dlhp2nmQnTPOlh7jSVeRfD38AKv07wXDNABzmopGUCbkTAK38DAL BjXg6a9iP44rtlVPC+PmghYhYa/3OLkaWNKNIpoF5UGM2VtCnfYfSmx+U3Xa02TI ltvw7Rl+tIGVx+glcVyaASulm1Ii7D/1qWLT6VhEmbiC9K8Ds4Y= -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:52 2025 by rpki-client