$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: zkf+WN+lVNk4yuGiLKSvjXZgifWA5U14BHmnNrfk508= Subject key identifier: B4:F8:F4:C9:11:B3:4A:10:E6:05:2E:79:81:40:90:25:54:77:F9:1D Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 2D481A906124E2F8136890469DC967F67A1E79E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: A9 Signing time: Thu 21 Aug 2025 04:10:36 +0000 Manifest this update: Thu 21 Aug 2025 04:05:36 +0000 Manifest next update: Sun 24 Aug 2025 15:41:36 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: WZzbSD+TMfCBhjlvRsSzpwTQgFwcFdIiV253Z3CzIBY=) 2: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) 3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:1a:90:61:24:e2:f8:13:68:90:46:9d:c9:67:f6:7a:1e:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Aug 21 04:05:36 2025 GMT Not After : Aug 24 15:41:36 2025 GMT Subject: CN=B4F8F4C911B34A10E6052E79814090255477F91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:f9:8c:e3:3b:51:ef:7f:46:1b:bf:e3:ee: 13:17:69:bb:f6:38:5f:4a:4c:3c:5e:c2:e3:0d:4e: f3:56:d8:67:aa:5b:f1:a4:3b:60:62:a7:a1:18:99: f5:d6:56:61:4d:fc:9f:20:12:df:ec:45:71:5f:f8: 5a:86:ae:dc:e1:7f:75:7a:2a:5d:76:fe:c2:09:dd: 9d:0f:84:74:f5:a7:4a:14:f8:3f:2c:88:6c:08:96: 88:ed:4e:51:a1:52:40:d0:bf:16:ae:1c:d1:36:02: 37:2e:d4:ac:76:a7:a0:6d:df:c7:fa:df:1f:cd:44: 61:cb:c7:99:a8:87:a9:94:dc:7f:1f:9f:aa:7e:06: 1e:1a:d0:9c:33:17:c8:c7:4d:ca:84:77:41:ef:aa: ae:da:f7:e9:61:0c:47:98:ea:3e:57:3c:ab:11:12: 35:98:13:46:a3:21:dc:d3:46:21:ad:8a:c5:47:47: 90:f4:12:c2:6c:e1:d1:6f:61:9b:8a:fa:3b:15:5b: 1f:a5:ce:e1:39:35:b5:b7:11:ba:c2:cd:e3:5a:7b: 37:09:2a:1e:5c:58:fa:ee:99:e8:e4:8a:2b:b9:17: a2:9a:78:ad:2c:15:04:7d:54:ec:e3:56:84:00:6b: 46:f0:1f:6a:61:fb:ee:9c:93:a7:4c:bc:e5:99:51: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F8:F4:C9:11:B3:4A:10:E6:05:2E:79:81:40:90:25:54:77:F9:1D X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:81:91:86:39:a0:11:d6:4c:65:ce:d1:c6:f9:ff:76:90:28: 6f:86:28:fd:b7:a2:ad:91:cc:f4:61:80:a7:ac:41:5f:24:ee: 42:e1:8d:64:e1:3e:4d:32:97:3d:87:c0:c1:de:a5:b4:4d:ab: 4e:7a:43:25:52:fd:8f:a9:e9:ac:19:36:dc:9f:cd:e4:9a:1e: 00:ce:69:79:ff:64:b7:67:a9:e0:07:37:2c:12:35:2f:fa:cc: 93:fd:32:0c:8b:9e:74:36:67:20:6b:92:3c:dc:d7:28:d4:6a: d2:8d:cf:38:bc:d6:05:97:58:d7:e6:c1:ab:ba:d5:bf:32:f4: 7a:72:a1:8d:62:46:2a:3e:23:06:f8:14:b2:c0:57:76:33:c8: b0:5b:de:54:b3:2b:f7:47:17:56:1a:b9:d5:e8:a9:04:89:db: 35:a9:87:63:8f:0a:c4:65:65:85:aa:24:8d:ef:3f:03:c2:ca: 1b:1f:ba:f6:89:bd:89:c7:2f:5e:a4:ed:85:88:39:89:d6:91: bb:4e:7c:85:49:85:72:15:68:2c:ce:e4:cb:19:4f:e7:d0:08: a6:d9:77:33:b3:ec:9d:aa:c9:e1:c2:0f:da:46:cc:77:d0:72: 78:4b:34:8f:98:59:06:22:e0:4f:99:d5:ff:85:4d:fe:9e:67: 97:23:34:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUgakGEk4vgTaJBGncln9noeeeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA4MjEwNDA1MzZaFw0yNTA4MjQxNTQxMzZaMDMxMTAvBgNV BAMTKEI0RjhGNEM5MTFCMzRBMTBFNjA1MkU3OTgxNDA5MDI1NTQ3N0Y5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9fmM4ztR739GG7/j7hMXabv2 OF9KTDxewuMNTvNW2GeqW/GkO2Bip6EYmfXWVmFN/J8gEt/sRXFf+FqGrtzhf3V6 Kl12/sIJ3Z0PhHT1p0oU+D8siGwIlojtTlGhUkDQvxauHNE2Ajcu1Kx2p6Bt38f6 3x/NRGHLx5moh6mU3H8fn6p+Bh4a0JwzF8jHTcqEd0Hvqq7a9+lhDEeY6j5XPKsR EjWYE0ajIdzTRiGtisVHR5D0EsJs4dFvYZuK+jsVWx+lzuE5NbW3EbrCzeNaezcJ Kh5cWPrumejkiiu5F6KaeK0sFQR9VOzjVoQAa0bwH2ph++6ck6dMvOWZUU17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtPj0yRGzShDmBS55gUCQJVR3+R0wHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiBkYY5oBHWTGXO0cb5/3aQKG+GKP23oq2R zPRhgKesQV8k7kLhjWThPk0ylz2HwMHepbRNq056QyVS/Y+p6awZNtyfzeSaHgDO aXn/ZLdnqeAHNywSNS/6zJP9MgyLnnQ2ZyBrkjzc1yjUatKNzzi81gWXWNfmwau6 1b8y9HpyoY1iRio+Iwb4FLLAV3YzyLBb3lSzK/dHF1YaudXoqQSJ2zWph2OPCsRl ZYWqJI3vPwPCyhsfuvaJvYnHL16k7YWIOYnWkbtOfIVJhXIVaCzO5MsZT+fQCKbZ dzOz7J2qyeHCD9pGzHfQcnhLNI+YWQYi4E+Z1f+FTf6eZ5cjNKU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:08 2025 by rpki-client