$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: RVuQY4AefW36q/a/gT+QCEeezLmfmgOKJwwP3BiE0fU= Subject key identifier: C3:73:B7:04:23:E8:6D:07:36:B9:29:78:EF:5D:7C:8E:A3:F8:66:DD Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 1BC86513B27FB8B526F604663DD2E10CD0757258 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 7F Signing time: Fri 22 Aug 2025 11:30:47 +0000 Manifest this update: Fri 22 Aug 2025 11:25:47 +0000 Manifest next update: Mon 25 Aug 2025 16:42:47 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: R1FVxVPXsUO/RjttzZKh2QJf6qgxi1qPVPg27weH6rY=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) 4: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c8:65:13:b2:7f:b8:b5:26:f6:04:66:3d:d2:e1:0c:d0:75:72:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Aug 22 11:25:47 2025 GMT Not After : Aug 25 16:42:47 2025 GMT Subject: CN=C373B70423E86D0736B92978EF5D7C8EA3F866DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:7e:04:2a:86:21:d9:4c:67:6b:fa:6e:a2: 4b:7d:41:a9:ce:24:d3:89:a4:e1:d9:b9:7c:45:dd: 3d:85:c2:0b:0f:1b:b6:a8:55:44:3f:7e:67:02:52: 1d:88:21:9f:7d:7a:3d:27:6f:0f:d6:a7:9b:96:c1: ef:1a:e1:2a:a7:9c:8f:a9:4d:fb:21:60:40:58:2d: 81:bb:37:35:49:f9:ba:1e:46:af:9e:e9:6e:01:b9: 46:26:32:e6:25:8c:85:b9:a8:68:52:ad:59:e5:10: 4e:bd:8d:10:83:6d:20:8c:2c:84:1f:43:d2:f1:21: 63:37:fa:ac:37:c7:a0:02:e7:86:24:bb:76:1c:34: 41:28:74:0d:4c:64:ed:78:05:fc:e8:60:21:3e:8a: 96:f0:88:94:a7:0e:94:fd:cb:bd:6e:c2:c9:da:ff: af:3b:bb:fa:20:aa:7f:63:cd:bb:8b:06:03:57:00: 3d:af:55:5b:e8:08:75:62:0e:c4:66:cd:73:6b:5a: 3f:23:e2:06:d4:ce:d1:ad:a7:be:3b:2b:8e:8b:9c: 58:ea:5c:36:03:cd:2d:c1:e2:04:93:1d:61:09:ff: 18:4b:70:c9:63:d4:e6:01:94:d5:05:e1:94:61:0c: 94:59:a8:cf:2e:23:2b:f1:6a:6d:3c:95:9d:e0:7a: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:73:B7:04:23:E8:6D:07:36:B9:29:78:EF:5D:7C:8E:A3:F8:66:DD X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:72:a9:b2:70:03:cc:5b:7c:33:2a:4e:f7:94:1f:34:1e:b4: 00:31:f7:88:ff:a1:2f:63:f8:05:4a:45:61:c7:8a:18:de:81: 6e:99:fd:97:8d:96:15:3e:2e:6f:4b:b5:ce:e7:87:25:1b:eb: ef:88:ac:a9:ec:ec:81:2f:77:fa:22:d7:d1:24:35:cd:ea:bb: d2:45:07:98:b9:68:9a:9c:7e:97:b2:3c:6f:b4:04:62:03:6a: f9:2f:1a:d4:9b:27:d3:00:35:5b:e9:ed:00:46:a7:1a:35:e1: b3:7d:86:e0:71:5e:c7:de:9a:11:02:56:d5:17:76:e6:17:5f: 9a:78:b3:33:c0:95:76:1f:21:83:31:e4:b4:ef:74:0d:b1:c6: 56:e2:71:fa:e3:b7:1a:84:f7:be:33:05:dc:90:7b:18:f4:9a: a9:d0:3f:2b:76:73:66:0e:25:0b:3a:7c:b2:e6:32:38:0f:74: 44:d9:39:d6:4e:cc:c2:a3:47:89:11:c5:57:78:f6:1b:51:f6: 12:5f:ae:33:62:07:d5:2b:f4:dc:a7:a7:c0:2b:c0:64:6d:39: f0:62:fa:65:69:26:7e:15:bd:02:c6:2a:6a:a9:a6:ca:5d:6c: 73:1a:03:14:d1:f6:40:ce:c0:e7:70:77:12:e3:b8:69:cc:61: bd:06:5a:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8hlE7J/uLUm9gRmPdLhDNB1clgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA4MjIxMTI1NDdaFw0yNTA4MjUxNjQyNDdaMDMxMTAvBgNV BAMTKEMzNzNCNzA0MjNFODZEMDczNkI5Mjk3OEVGNUQ3QzhFQTNGODY2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkH4EKoYh2Uxna/puokt9QanO JNOJpOHZuXxF3T2FwgsPG7aoVUQ/fmcCUh2IIZ99ej0nbw/Wp5uWwe8a4SqnnI+p TfshYEBYLYG7NzVJ+boeRq+e6W4BuUYmMuYljIW5qGhSrVnlEE69jRCDbSCMLIQf Q9LxIWM3+qw3x6AC54Yku3YcNEEodA1MZO14BfzoYCE+ipbwiJSnDpT9y71uwsna /687u/ogqn9jzbuLBgNXAD2vVVvoCHViDsRmzXNrWj8j4gbUztGtp747K46LnFjq XDYDzS3B4gSTHWEJ/xhLcMlj1OYBlNUF4ZRhDJRZqM8uIyvxam08lZ3geghpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw3O3BCPobQc2uSl47118jqP4Zt0wHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlyqbJwA8xbfDMqTveUHzQetAAx94j/oS9j +AVKRWHHihjegW6Z/ZeNlhU+Lm9Ltc7nhyUb6++IrKns7IEvd/oi19EkNc3qu9JF B5i5aJqcfpeyPG+0BGIDavkvGtSbJ9MANVvp7QBGpxo14bN9huBxXsfemhECVtUX duYXX5p4szPAlXYfIYMx5LTvdA2xxlbicfrjtxqE974zBdyQexj0mqnQPyt2c2YO JQs6fLLmMjgPdETZOdZOzMKjR4kRxVd49htR9hJfrjNiB9Ur9Nynp8ArwGRtOfBi +mVpJn4VvQLGKmqppspdbHMaAxTR9kDOwOdwdxLjuGnMYb0GWoM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:01:56 2025 by rpki-client