$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: PH20xeiSbR8q+8UyE4hMYLMAC9mItlXyyfZi2x6kyVM= Subject key identifier: C3:FE:3B:16:E3:7E:32:4D:13:A4:B8:88:99:32:6B:1B:AA:01:22:FE Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 63AD46A30598F22D0272E86716B80FA157FDECFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: A1 Signing time: Thu 21 Aug 2025 21:52:08 +0000 Manifest this update: Thu 21 Aug 2025 21:47:08 +0000 Manifest next update: Mon 25 Aug 2025 07:29:08 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: BzZTpAmO/dF/h7zeaTB+O7Eco5Fyy5lcty6RwwCjSfU=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ad:46:a3:05:98:f2:2d:02:72:e8:67:16:b8:0f:a1:57:fd:ec:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Aug 21 21:47:08 2025 GMT Not After : Aug 25 07:29:08 2025 GMT Subject: CN=C3FE3B16E37E324D13A4B88899326B1BAA0122FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:34:7a:3c:de:a6:72:e6:58:cd:8b:e1:80: 09:83:19:08:de:a9:25:d2:dc:73:be:01:bf:b3:6d: 38:26:2d:4a:d0:01:c4:02:3d:ac:94:cc:a5:cd:d8: 0e:2e:43:34:1a:a0:44:d6:cf:b1:45:0d:c2:07:ea: 08:98:d0:a9:96:c1:66:c4:7a:78:46:e3:19:11:ba: 07:85:d2:f4:44:71:ec:ff:2f:ca:58:96:72:3d:ec: 6b:98:c5:c9:f6:84:76:7e:f7:a7:56:fd:4e:04:6b: 39:0a:77:f0:08:d2:23:1b:37:01:3b:91:75:87:ec: 9e:4b:76:dd:15:cd:ed:42:d6:8c:79:e8:18:7b:ca: 0f:2e:b8:3b:d4:b6:26:84:a7:fc:43:2c:92:e9:c7: 40:cf:02:3c:3e:af:f9:a1:2c:81:70:14:0d:74:b4: e0:68:0b:86:47:09:fa:f8:25:fd:91:36:03:0f:8a: 24:df:31:17:ab:09:ba:af:35:a1:e2:2d:9f:f9:e3: 7d:f9:30:b8:e0:96:81:1e:ff:ae:32:af:14:4e:f7: 7c:2f:d7:09:9b:b7:47:90:8e:fc:10:64:67:b0:2f: 3b:f4:ae:9b:e3:60:45:27:fe:a7:75:74:f1:ab:de: 54:5d:a2:b3:99:0c:f9:28:dc:ae:09:7a:98:3b:24: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FE:3B:16:E3:7E:32:4D:13:A4:B8:88:99:32:6B:1B:AA:01:22:FE X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:07:16:01:b4:c1:f4:c5:92:15:6e:e1:d6:4d:be:48:a7:8b: a9:41:1f:f5:ec:f7:4a:dc:c7:b9:2e:84:53:74:8e:03:5d:d5: 0a:6a:d5:47:f5:27:e9:ad:83:1b:c2:a4:32:d8:f2:2f:94:da: 69:b7:2e:3e:a4:19:3e:ca:e9:97:1a:25:9a:2d:6d:bb:da:e9: 16:7c:41:0b:2d:6e:71:a1:90:3f:d5:eb:88:06:c6:7a:82:42: ad:cb:0e:35:4c:c2:fe:ec:fc:be:f8:e4:db:55:10:6b:f6:af: 94:91:ea:66:0c:1a:bf:02:3e:db:74:0c:4b:c9:5c:41:27:2f: 75:fc:d2:5f:f0:9d:2c:d9:0b:d2:1c:7b:f6:24:2e:79:76:6b: ae:e3:37:75:5e:4f:80:46:82:39:63:54:7c:f8:83:ed:4d:5e: a9:0a:08:be:e4:20:60:39:d3:d8:61:c5:f6:06:c8:ef:f2:25: 8f:a5:8b:62:a7:ec:d0:6b:26:79:fa:cd:8c:e7:97:67:1e:16: 90:0d:98:0d:2f:18:13:04:2a:36:03:fe:41:0d:f7:13:46:2b: f8:7f:e9:8f:95:57:3e:f4:08:ff:42:89:1d:b1:de:d2:e6:ea: b7:92:e5:53:88:db:42:b8:6b:30:ab:ec:c4:fa:ca:8e:22:58: 1c:ef:c6:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY61GowWY8i0CcuhnFrgPoVf97P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA4MjEyMTQ3MDhaFw0yNTA4MjUwNzI5MDhaMDMxMTAvBgNV BAMTKEMzRkUzQjE2RTM3RTMyNEQxM0E0Qjg4ODk5MzI2QjFCQUEwMTIyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJjR6PN6mcuZYzYvhgAmDGQje qSXS3HO+Ab+zbTgmLUrQAcQCPayUzKXN2A4uQzQaoETWz7FFDcIH6giY0KmWwWbE enhG4xkRugeF0vREcez/L8pYlnI97GuYxcn2hHZ+96dW/U4EazkKd/AI0iMbNwE7 kXWH7J5Ldt0Vze1C1ox56Bh7yg8uuDvUtiaEp/xDLJLpx0DPAjw+r/mhLIFwFA10 tOBoC4ZHCfr4Jf2RNgMPiiTfMRerCbqvNaHiLZ/54335MLjgloEe/64yrxRO93wv 1wmbt0eQjvwQZGewLzv0rpvjYEUn/qd1dPGr3lRdorOZDPko3K4Jepg7JJ5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/47FuN+Mk0TpLiImTJrG6oBIv4wHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMHFgG0wfTFkhVu4dZNvkini6lBH/Xs90rc x7kuhFN0jgNd1Qpq1Uf1J+mtgxvCpDLY8i+U2mm3Lj6kGT7K6ZcaJZotbbva6RZ8 QQstbnGhkD/V64gGxnqCQq3LDjVMwv7s/L745NtVEGv2r5SR6mYMGr8CPtt0DEvJ XEEnL3X80l/wnSzZC9Ice/YkLnl2a67jN3VeT4BGgjljVHz4g+1NXqkKCL7kIGA5 09hhxfYGyO/yJY+li2Kn7NBrJnn6zYznl2ceFpANmA0vGBMEKjYD/kEN9xNGK/h/ 6Y+VVz70CP9CiR2x3tLm6reS5VOI20K4azCr7MT6yo4iWBzvxjE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:48 2025 by rpki-client