$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: VnfDQI6WI3K7piO5p07/OdP9w3YO6RNRuQAkh7Hbk6I= Subject key identifier: 63:0D:53:2E:7D:88:FB:8B:0A:B6:DC:5E:F7:C6:E1:43:F4:46:91:E7 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 224F83B30CF22EE256E7E9DD325F9D2FCD32BE13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 0283 Signing time: Sat 23 Aug 2025 03:00:39 +0000 Manifest this update: Sat 23 Aug 2025 02:55:39 +0000 Manifest next update: Tue 26 Aug 2025 06:10:39 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: r7lDwjWvqw52irhidoVckkD2DWzv0Wfk9bGd3wnwvK8=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: L7LqVXyoSRg8DgNZpOS04vg4NVwWiWJGcA0KRd2HUBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4f:83:b3:0c:f2:2e:e2:56:e7:e9:dd:32:5f:9d:2f:cd:32:be:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Aug 23 02:55:39 2025 GMT Not After : Aug 26 06:10:39 2025 GMT Subject: CN=630D532E7D88FB8B0AB6DC5EF7C6E143F44691E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:5b:6a:85:c2:43:55:e7:6f:e2:a7:6f:8a: 77:40:6e:11:e5:c3:d1:6c:ff:d3:33:b9:0e:0a:bb: 17:92:61:af:f0:da:e5:a8:4d:3b:51:be:80:9a:7a: 7f:33:5f:82:98:3a:e5:d4:9c:36:3d:d1:2b:87:9e: 15:ab:db:0e:0b:be:99:3a:d7:b3:cc:3f:0e:aa:37: cb:8d:b5:c3:a3:e4:e6:44:96:3e:d7:76:41:7f:e8: 8b:0c:59:1a:6e:4e:03:eb:2b:58:16:a7:16:4c:38: dc:83:a2:25:bc:9d:32:b9:ce:0d:a7:a7:93:a9:95: d1:a4:29:51:56:db:a6:be:57:bc:a8:ab:e2:7b:8f: 36:3c:dd:53:45:3a:c8:34:7e:cc:e3:a1:d1:96:82: 85:79:73:a0:f3:e7:d0:9d:78:18:10:dc:db:e2:6e: d3:a5:5c:1a:fa:a6:33:4d:fc:1b:f7:6a:b2:c9:a9: 4c:d3:fc:32:82:d9:af:5b:77:8f:9a:54:39:ca:1a: 31:a9:cb:97:f3:0b:b0:62:10:7d:e7:25:9f:24:a2: 88:2c:fe:ca:e0:30:53:67:55:63:36:68:cc:2a:e2: 45:af:30:3a:3d:1f:e4:10:f3:3c:0b:c3:dc:2c:24: 44:1b:25:ed:86:05:43:70:47:76:0d:d4:fa:b6:31: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0D:53:2E:7D:88:FB:8B:0A:B6:DC:5E:F7:C6:E1:43:F4:46:91:E7 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:32:0e:c9:80:db:a1:98:1b:25:91:7d:d0:37:88:3f:fc:d1: c7:2c:3c:8c:81:39:4c:0a:5d:2c:26:ba:e5:38:08:d0:32:03: e7:12:c4:ab:06:aa:9b:8f:ab:1b:e1:30:f3:40:f1:c2:4c:b8: 09:da:d7:3a:8d:5d:d9:30:48:25:f8:ce:17:25:d0:a6:74:be: 09:73:d0:81:5f:b0:f8:c2:fc:cf:9b:17:39:74:3d:1e:a4:c3: d7:9d:c5:4c:e7:bc:12:59:89:ec:68:19:5f:ff:37:b1:68:d9: 27:00:bc:5e:fa:97:cf:31:1b:6c:70:f8:09:63:e2:7f:4d:6f: a5:f2:5c:f3:5b:53:7d:ff:d8:18:a2:92:b1:34:22:cf:3a:aa: 63:49:b2:46:22:87:65:67:10:96:dd:d5:11:db:39:1f:d8:07: e7:7f:64:73:59:0f:9c:34:22:b1:be:1b:71:b8:65:0e:4f:16: 50:d1:e9:98:b1:ee:f1:ff:9d:30:c1:21:47:38:ec:e6:17:13: c9:91:47:b8:a7:a9:79:7e:eb:8e:f4:7a:30:0d:c5:1b:8c:fc: 8a:e8:b3:f9:c6:4f:fa:98:f9:42:36:e3:b9:de:8c:ef:31:25: 35:0b:50:26:a3:b1:0f:2d:21:8f:d3:7c:30:bf:49:66:ab:8f: b3:39:51:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk+DswzyLuJW5+ndMl+dL80yvhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTA4MjMwMjU1MzlaFw0yNTA4MjYwNjEwMzlaMDMxMTAvBgNV BAMTKDYzMEQ1MzJFN0Q4OEZCOEIwQUI2REM1RUY3QzZFMTQzRjQ0NjkxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUi1tqhcJDVedv4qdvindAbhHl w9Fs/9MzuQ4KuxeSYa/w2uWoTTtRvoCaen8zX4KYOuXUnDY90SuHnhWr2w4Lvpk6 17PMPw6qN8uNtcOj5OZElj7XdkF/6IsMWRpuTgPrK1gWpxZMONyDoiW8nTK5zg2n p5OpldGkKVFW26a+V7yoq+J7jzY83VNFOsg0fszjodGWgoV5c6Dz59CdeBgQ3Nvi btOlXBr6pjNN/Bv3arLJqUzT/DKC2a9bd4+aVDnKGjGpy5fzC7BiEH3nJZ8koogs /srgMFNnVWM2aMwq4kWvMDo9H+QQ8zwLw9wsJEQbJe2GBUNwR3YN1Pq2MdsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYw1TLn2I+4sKttxe98bhQ/RGkecwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoyDsmA26GYGyWRfdA3iD/80ccsPIyBOUwK XSwmuuU4CNAyA+cSxKsGqpuPqxvhMPNA8cJMuAna1zqNXdkwSCX4zhcl0KZ0vglz 0IFfsPjC/M+bFzl0PR6kw9edxUznvBJZiexoGV//N7Fo2ScAvF76l88xG2xw+Alj 4n9Nb6XyXPNbU33/2BiikrE0Is86qmNJskYih2VnEJbd1RHbOR/YB+d/ZHNZD5w0 IrG+G3G4ZQ5PFlDR6Zix7vH/nTDBIUc47OYXE8mRR7inqXl+6470ejANxRuM/Iro s/nGT/qY+UI247nejO8xJTULUCajsQ8tIY/TfDC/SWarj7M5URU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:20 2025 by rpki-client