$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: BEjBA9YOGQ8RTJ+C3AXC/RXKZ7MYJLNCZHDDOEr0Y48= Subject key identifier: 14:97:11:A2:C5:D0:33:82:6A:06:28:62:E8:49:DB:80:DC:53:18:3C Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 2444160119813DABB02989DC0BB14ABA10DA8A2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 020B Signing time: Fri 22 Aug 2025 16:20:00 +0000 Manifest this update: Fri 22 Aug 2025 16:15:00 +0000 Manifest next update: Mon 25 Aug 2025 18:49:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: VNhMDGA63iYuoy+lACXsmCkPBZSRMqYR8tgZg/3i3kU=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:44:16:01:19:81:3d:ab:b0:29:89:dc:0b:b1:4a:ba:10:da:8a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Aug 22 16:15:00 2025 GMT Not After : Aug 25 18:49:00 2025 GMT Subject: CN=149711A2C5D033826A062862E849DB80DC53183C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:ef:1c:ac:73:c6:9e:e3:e1:f9:ac:27:fe: fd:f7:9a:07:de:5a:da:da:c0:63:18:74:53:02:11: 63:1a:50:65:46:c3:42:d5:cc:79:23:cb:b3:4b:b3: df:67:7b:09:85:24:58:0b:12:56:ea:9d:8f:83:13: 03:bf:9a:f3:7f:4c:1e:25:7c:01:e2:96:cd:46:fb: 7c:27:c2:07:2f:2d:07:fa:c7:18:46:04:df:78:45: 34:49:32:42:e6:99:13:41:bf:76:11:08:65:3e:45: d6:b6:dc:f3:6e:3f:e4:de:ff:1a:50:ff:57:8d:1f: d3:03:cb:1e:5b:77:6b:8a:b0:c1:91:3f:cc:e9:21: a5:0d:0b:b7:09:03:09:ab:e0:d0:bf:91:a3:c1:b7: 66:af:9c:0e:4d:7e:89:b6:7a:c1:81:b7:41:83:cf: 72:64:2e:7a:e6:40:cc:a0:cd:a4:f4:26:24:d1:3e: ca:ac:1d:62:78:41:0b:dd:d1:d7:21:59:ba:68:b5: bc:fd:67:b2:87:e1:63:4b:44:03:7b:41:41:e4:cb: 4c:86:61:d9:41:28:83:87:0e:9d:f2:81:ab:e5:f7: 91:80:a7:8c:29:00:06:47:e0:ae:13:84:1c:a0:2c: 2a:4d:80:cd:73:ca:2c:0c:61:60:c5:2b:33:6c:d5: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:97:11:A2:C5:D0:33:82:6A:06:28:62:E8:49:DB:80:DC:53:18:3C X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7d:89:31:3b:03:85:6c:7c:bf:36:a3:4f:ec:92:45:32:91: 24:71:73:1e:67:b6:04:34:b1:9c:e8:65:e7:fd:d8:e9:8d:a6: d5:0f:5d:c1:43:14:21:f5:6e:43:84:8f:cf:a7:ef:ae:09:de: 0f:2f:fe:c2:b6:1f:d7:08:6f:05:e3:9a:07:1c:51:21:c8:68: 58:28:22:d2:85:a2:e3:67:ef:ac:1c:5a:ae:b0:b9:f4:24:f8: 30:88:c3:9d:39:79:17:aa:ae:48:54:b0:28:d0:3b:8f:78:70: df:19:38:9c:85:da:0e:63:69:94:6e:d0:b2:8c:81:3d:94:33: 39:2f:db:5b:58:a3:b8:30:87:dc:fe:56:e2:db:56:64:7d:92: ed:01:11:07:4d:ef:a8:88:c3:b6:23:58:b7:8a:9f:da:f5:fe: f5:2a:84:88:52:dc:51:d8:c4:8b:f5:7f:36:33:47:e4:83:7f: e9:ed:86:2f:30:26:c7:56:d7:45:c3:5a:a0:18:ec:0e:f9:20: 13:6d:59:ab:05:bb:6b:bc:09:7c:f5:cc:94:f2:1e:e6:3e:4c: 1d:20:61:e3:d4:25:74:df:c3:00:c9:5b:e6:19:18:ac:44:d3: 0a:3e:4d:94:d8:c3:6c:d1:13:fb:b5:c5:dc:27:9c:dd:bc:6b: 19:e5:16:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEQWARmBPauwKYncC7FKuhDaii0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA4MjIxNjE1MDBaFw0yNTA4MjUxODQ5MDBaMDMxMTAvBgNV BAMTKDE0OTcxMUEyQzVEMDMzODI2QTA2Mjg2MkU4NDlEQjgwREM1MzE4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNu8crHPGnuPh+awn/v33mgfe WtrawGMYdFMCEWMaUGVGw0LVzHkjy7NLs99newmFJFgLElbqnY+DEwO/mvN/TB4l fAHils1G+3wnwgcvLQf6xxhGBN94RTRJMkLmmRNBv3YRCGU+Rda23PNuP+Te/xpQ /1eNH9MDyx5bd2uKsMGRP8zpIaUNC7cJAwmr4NC/kaPBt2avnA5Nfom2esGBt0GD z3JkLnrmQMygzaT0JiTRPsqsHWJ4QQvd0dchWbpotbz9Z7KH4WNLRAN7QUHky0yG YdlBKIOHDp3ygavl95GAp4wpAAZH4K4ThBygLCpNgM1zyiwMYWDFKzNs1civAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJcRosXQM4JqBihi6EnbgNxTGDwwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV9iTE7A4VsfL82o0/skkUykSRxcx5ntgQ0 sZzoZef92OmNptUPXcFDFCH1bkOEj8+n764J3g8v/sK2H9cIbwXjmgccUSHIaFgo ItKFouNn76wcWq6wufQk+DCIw505eReqrkhUsCjQO494cN8ZOJyF2g5jaZRu0LKM gT2UMzkv21tYo7gwh9z+VuLbVmR9ku0BEQdN76iIw7YjWLeKn9r1/vUqhIhS3FHY xIv1fzYzR+SDf+nthi8wJsdW10XDWqAY7A75IBNtWasFu2u8CXz1zJTyHuY+TB0g YePUJXTfwwDJW+YZGKxE0wo+TZTYw2zRE/u1xdwnnN28axnlFnc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:15 2025 by rpki-client