$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: R3DKo3r6kYdBMky09AwoPq/3bHBUydPInNCQ6omKjIY= Subject key identifier: EC:C1:1B:4F:65:AC:0F:4E:57:60:FD:D9:32:CE:7B:1A:78:56:C9:F4 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 28E9622BB0534C0B718E1771AED33614193EA9F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: B8 Signing time: Fri 22 Aug 2025 09:10:05 +0000 Manifest this update: Fri 22 Aug 2025 09:05:05 +0000 Manifest next update: Mon 25 Aug 2025 11:05:05 +0000 Files and hashes: 1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: xzFPAGle40mAj+l6CkqKU5ncQDiNjrpgbYI0a2tcOyo=) 2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e9:62:2b:b0:53:4c:0b:71:8e:17:71:ae:d3:36:14:19:3e:a9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Aug 22 09:05:05 2025 GMT Not After : Aug 25 11:05:05 2025 GMT Subject: CN=ECC11B4F65AC0F4E5760FDD932CE7B1A7856C9F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:a0:29:f5:81:62:3a:63:f7:c5:a9:43:1c: a5:c6:6d:4f:36:0c:77:40:ba:66:31:c5:35:e6:7e: ba:eb:eb:58:62:0c:91:6d:da:f3:d1:c9:be:e9:5d: 91:69:a1:b0:84:6f:55:40:11:b4:a3:d9:3a:e4:5a: 51:3b:38:4e:0b:e8:c8:57:49:8a:f4:95:89:fa:6c: 16:cd:b3:31:b4:fd:cc:96:8e:7e:06:f3:4d:1d:d8: cf:02:69:52:f2:c1:13:6d:20:cc:37:52:f6:cc:2a: 03:23:a4:1c:70:14:62:f7:96:7a:ef:cc:81:4e:9f: b1:06:28:9e:2b:cf:58:fa:69:fc:b3:52:9c:58:f8: 25:56:cc:7d:48:8f:9a:67:ca:a4:6c:2b:59:6f:bf: 50:b0:10:c7:57:a8:c4:73:0e:0b:22:2e:06:03:63: 16:10:90:f4:41:f5:f7:93:0f:e2:0b:e9:be:7b:9a: d3:02:88:77:62:ec:6c:45:9b:4e:b4:5e:6d:e2:49: 7d:ff:4f:60:6e:e0:76:45:ce:e0:74:8e:f3:3b:34: 0b:3d:13:b9:af:bd:78:c5:bc:fb:3a:9e:73:28:1c: d7:4b:cf:8a:3d:85:a0:99:4a:00:8f:b7:a1:56:f3: 85:d4:df:5e:78:4e:c8:13:fd:d8:5e:cb:ae:70:f3: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:1B:4F:65:AC:0F:4E:57:60:FD:D9:32:CE:7B:1A:78:56:C9:F4 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:95:b1:2e:e7:e3:ff:87:62:5e:9f:02:c1:42:80:c0:e7:3b: 7a:66:2f:b0:cd:13:00:06:29:a7:c8:80:cc:41:89:ad:17:d7: 46:2f:73:32:f4:64:d3:b2:21:22:e9:a2:2e:37:ba:5c:6f:74: c2:a0:b9:db:90:dd:04:05:1f:a7:db:74:5b:e2:01:d6:91:6a: 16:0a:44:ca:76:3a:e5:5e:08:e2:82:e9:d1:a7:c7:f7:4b:90: 68:78:78:cb:60:96:7c:86:f0:5c:46:aa:c1:31:27:84:b2:80: 58:4b:17:e3:13:c5:ce:17:c8:f2:37:0a:82:a8:3c:d2:99:09: 9f:da:cb:95:7c:97:8d:74:33:13:83:e5:76:df:d3:e7:8a:76: 29:90:43:e4:cd:fe:79:e8:23:28:b9:80:f4:d8:59:b0:b4:83: b2:30:16:16:02:65:9c:c7:01:8b:61:42:e6:fb:9d:d3:b5:3c: bf:36:49:6a:c0:22:05:d2:d7:bb:cf:22:50:07:90:cc:be:3b: ee:69:68:91:51:e3:92:20:f6:cf:d1:db:63:74:d0:b1:2f:95: ec:ad:bd:a2:11:3d:27:7a:12:1c:68:cb:6c:b8:ba:6e:31:75: 56:f4:ec:00:b2:0a:0f:d3:d5:8b:50:5b:96:39:80:41:7e:65: 69:3e:ed:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOliK7BTTAtxjhdxrtM2FBk+qfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTA4MjIwOTA1MDVaFw0yNTA4MjUxMTA1MDVaMDMxMTAvBgNV BAMTKEVDQzExQjRGNjVBQzBGNEU1NzYwRkREOTMyQ0U3QjFBNzg1NkM5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbE6Ap9YFiOmP3xalDHKXGbU82 DHdAumYxxTXmfrrr61hiDJFt2vPRyb7pXZFpobCEb1VAEbSj2TrkWlE7OE4L6MhX SYr0lYn6bBbNszG0/cyWjn4G800d2M8CaVLywRNtIMw3UvbMKgMjpBxwFGL3lnrv zIFOn7EGKJ4rz1j6afyzUpxY+CVWzH1Ij5pnyqRsK1lvv1CwEMdXqMRzDgsiLgYD YxYQkPRB9feTD+IL6b57mtMCiHdi7GxFm060Xm3iSX3/T2Bu4HZFzuB0jvM7NAs9 E7mvvXjFvPs6nnMoHNdLz4o9haCZSgCPt6FW84XU3154TsgT/dhey65w8+h1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MEbT2WsD05XYP3ZMs57GnhWyfQwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWVsS7n4/+HYl6fAsFCgMDnO3pmL7DNEwAG KafIgMxBia0X10YvczL0ZNOyISLpoi43ulxvdMKguduQ3QQFH6fbdFviAdaRahYK RMp2OuVeCOKC6dGnx/dLkGh4eMtglnyG8FxGqsExJ4SygFhLF+MTxc4XyPI3CoKo PNKZCZ/ay5V8l410MxOD5Xbf0+eKdimQQ+TN/nnoIyi5gPTYWbC0g7IwFhYCZZzH AYthQub7ndO1PL82SWrAIgXS17vPIlAHkMy+O+5paJFR45Ig9s/R22N00LEvleyt vaIRPSd6Ehxoy2y4um4xdVb07ACyCg/T1YtQW5Y5gEF+ZWk+7Z4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:50 2025 by rpki-client