$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: 2VUgtu9tcFyyQSYmUDjfUoj9NSCW1IWUdx6KMQ0JWT8= Subject key identifier: 55:76:94:34:34:FB:B4:7B:70:50:1A:9E:EA:2D:17:51:87:29:3F:87 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 15B2F72295508F60200573A4108A7EF072550088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0201 Signing time: Thu 21 Aug 2025 08:21:04 +0000 Manifest this update: Thu 21 Aug 2025 08:16:04 +0000 Manifest next update: Sun 24 Aug 2025 17:36:04 +0000 Files and hashes: 1: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 2: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 3: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 4: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 5: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 6: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 7: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 8: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 10: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: 2/DdR9G9OOxl/Xjx7ZD4bD90TkpCCXai8KS1oHxFqm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b2:f7:22:95:50:8f:60:20:05:73:a4:10:8a:7e:f0:72:55:00:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Aug 21 08:16:04 2025 GMT Not After : Aug 24 17:36:04 2025 GMT Subject: CN=5576943434FBB47B70501A9EEA2D175187293F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:fc:40:74:59:49:d0:dc:bf:b8:fb:9e:f7: 1a:9a:b6:95:e1:78:58:c2:cc:11:41:f0:70:b6:de: c1:ae:77:ef:82:62:f7:46:77:7e:99:17:91:f7:2d: 99:5c:9c:35:85:05:ad:49:1b:ce:3c:2c:02:c7:4d: 80:c6:20:56:5c:5c:47:87:99:89:dd:9d:4a:fb:6f: 71:25:8e:bc:d5:8c:34:a0:1a:28:8f:64:ee:bc:7c: 54:3d:62:2e:eb:0a:31:8a:db:05:c3:5e:1a:ac:7a: 92:38:d5:bd:7d:78:37:0a:4b:da:41:bc:0c:4a:90: ff:7e:62:0b:e4:e8:d8:12:1d:e1:fe:79:82:60:58: c9:3a:18:4f:b5:19:75:55:25:bc:01:01:0d:f9:90: 28:a9:e1:23:77:51:f5:b7:fa:bb:07:32:f1:de:8a: 3b:09:f0:35:6f:aa:16:8a:83:e7:7c:b3:4a:cd:39: 3e:14:80:d7:a8:6d:93:0e:33:9a:f9:0c:4b:99:b9: 37:28:73:ee:72:e5:12:7c:69:a0:b6:56:c2:82:5d: 1d:d2:5b:e4:7c:e4:19:54:b7:ab:b0:f2:57:f4:f9: 56:bb:f9:5a:d4:b8:a8:06:4b:16:20:68:00:62:ff: 9c:b2:72:a3:fb:36:ec:7a:37:f9:07:ed:c2:7a:12: 9d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:94:34:34:FB:B4:7B:70:50:1A:9E:EA:2D:17:51:87:29:3F:87 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b9:9c:d6:17:c0:0c:dc:ba:55:f6:30:2b:7b:f0:7b:50:16: 5d:cc:69:a2:65:cb:34:2a:32:f1:cf:3d:db:6b:c2:33:fd:16: eb:94:ed:91:f0:07:bf:b8:22:02:6a:ee:6f:8c:1b:e9:7b:14: 0d:13:c7:68:3a:df:2f:54:22:c1:ee:92:05:38:2f:52:54:95: a6:63:47:c2:df:ac:ae:8c:62:f2:d9:0e:47:df:dd:d0:a2:e4: be:d2:0b:75:47:06:02:94:f2:ab:41:2c:b6:c8:43:52:7c:02: 1c:a9:16:04:ef:e4:1f:40:5a:72:9a:9c:35:28:34:ed:33:eb: 4f:09:d5:9f:39:20:31:31:b5:91:8e:0f:53:0f:d1:58:24:64: d7:90:8f:e0:8c:29:c3:17:ca:c4:91:92:bc:e3:11:52:7f:72: 01:24:c7:6f:47:d5:b1:d6:d3:0f:c4:ee:3d:5f:03:6d:eb:2f: 9b:f5:35:30:c4:15:b0:1d:a7:46:19:3b:60:60:fc:27:78:04: 0a:7b:26:1a:85:62:14:1b:44:a6:fe:33:85:e3:97:cf:4c:2d: f3:cf:00:03:49:52:a8:5e:97:f6:c9:07:ff:aa:b5:12:28:9a: 70:7c:6f:0a:6f:57:11:95:fc:31:88:2f:f9:73:4e:1a:33:89: e8:d5:31:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbL3IpVQj2AgBXOkEIp+8HJVAIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA4MjEwODE2MDRaFw0yNTA4MjQxNzM2MDRaMDMxMTAvBgNV BAMTKDU1NzY5NDM0MzRGQkI0N0I3MDUwMUE5RUVBMkQxNzUxODcyOTNGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTfxAdFlJ0Ny/uPue9xqatpXh eFjCzBFB8HC23sGud++CYvdGd36ZF5H3LZlcnDWFBa1JG848LALHTYDGIFZcXEeH mYndnUr7b3EljrzVjDSgGiiPZO68fFQ9Yi7rCjGK2wXDXhqsepI41b19eDcKS9pB vAxKkP9+Ygvk6NgSHeH+eYJgWMk6GE+1GXVVJbwBAQ35kCip4SN3UfW3+rsHMvHe ijsJ8DVvqhaKg+d8s0rNOT4UgNeobZMOM5r5DEuZuTcoc+5y5RJ8aaC2VsKCXR3S W+R85BlUt6uw8lf0+Va7+VrUuKgGSxYgaABi/5yycqP7Nux6N/kH7cJ6Ep0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXaUNDT7tHtwUBqe6i0XUYcpP4cwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW5nNYXwAzculX2MCt78HtQFl3MaaJlyzQq MvHPPdtrwjP9FuuU7ZHwB7+4IgJq7m+MG+l7FA0Tx2g63y9UIsHukgU4L1JUlaZj R8LfrK6MYvLZDkff3dCi5L7SC3VHBgKU8qtBLLbIQ1J8AhypFgTv5B9AWnKanDUo NO0z608J1Z85IDExtZGOD1MP0VgkZNeQj+CMKcMXysSRkrzjEVJ/cgEkx29H1bHW 0w/E7j1fA23rL5v1NTDEFbAdp0YZO2Bg/Cd4BAp7JhqFYhQbRKb+M4Xjl89MLfPP AANJUqhel/bJB/+qtRIomnB8bwpvVxGV/DGIL/lzThoziejVMeA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:45 2025 by rpki-client