$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: VfCEGa4Kh8k8hRpMkNHhtQae7IdnCNYFfN8AoLIgfvY= Subject key identifier: 91:6E:56:85:0D:01:CB:4F:4B:E9:A4:BD:1A:05:7B:17:EE:35:32:3F Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 665B6A1888EAA8FB2C27D9DF39E1C7F89A60F002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 01D7 Signing time: Fri 04 Jul 2025 21:11:33 +0000 Manifest this update: Fri 04 Jul 2025 21:06:33 +0000 Manifest next update: Tue 08 Jul 2025 08:15:33 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: zTsW1ygb+WlvyGvLgmIbZLWOTYNlz9irZ5+eoGr9/hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5b:6a:18:88:ea:a8:fb:2c:27:d9:df:39:e1:c7:f8:9a:60:f0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jul 4 21:06:33 2025 GMT Not After : Jul 8 08:15:33 2025 GMT Subject: CN=916E56850D01CB4F4BE9A4BD1A057B17EE35323F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5e:3a:47:13:1d:93:84:51:b5:74:bb:25:73: 05:05:bc:ed:0f:f9:53:c0:09:04:a5:5a:8b:e8:19: 65:2f:ab:ea:6d:18:e4:07:cc:18:9d:db:cf:78:43: 4f:04:0e:32:24:51:ac:ad:9c:54:af:71:71:8b:dc: 4b:bd:34:b1:5a:3f:86:c1:b1:b8:87:28:a2:21:dc: 47:a0:7c:ad:f1:3c:e5:43:7a:c2:2e:da:f6:fb:89: e6:bb:f2:7c:99:91:16:12:61:b5:3a:a4:4d:09:9d: 88:db:d3:d7:fd:5a:e3:c7:10:3d:04:50:a5:32:43: 2c:5a:a6:78:6d:1f:64:21:e0:a9:e2:85:86:6a:98: a9:42:5e:b4:64:e0:87:06:7a:f9:0c:0b:5c:0a:40: 78:88:fd:3a:43:62:d8:86:49:71:7a:40:52:f9:b4: 28:0e:15:f7:f5:85:42:dd:6c:e7:37:81:e6:99:dc: a3:ac:0c:06:78:e8:db:ea:ef:ba:da:b9:51:b1:17: 2e:f6:48:e9:49:5c:6d:72:14:1c:2a:77:87:09:d6: b1:22:01:55:5b:98:cb:fd:12:2e:49:5b:06:c4:da: 3e:5f:55:b9:a1:9e:9d:41:d1:93:87:17:20:61:17: 27:8a:d1:46:c6:fd:81:11:36:a2:5c:68:c3:5c:ad: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:56:85:0D:01:CB:4F:4B:E9:A4:BD:1A:05:7B:17:EE:35:32:3F X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e1:b5:41:5a:f6:1c:b9:b1:91:17:e8:a3:f9:66:b4:08:e6: 48:05:85:35:04:ba:67:d0:45:dd:4f:72:9f:f3:01:f0:59:d0: 6e:69:8c:30:55:36:eb:54:ec:41:85:a9:56:53:00:76:14:7b: 33:be:f7:62:28:48:f6:d1:0e:f9:16:23:2d:04:ef:7b:27:b2: a9:96:9b:31:37:c5:b7:35:08:6b:b8:36:82:de:ef:97:c6:19: dd:84:97:36:19:8e:c2:42:30:a3:fc:d2:21:93:34:b0:bf:84: ff:9c:79:8f:08:62:81:92:cc:43:01:a0:4d:f8:b8:4b:35:b9: 9b:4f:ea:f2:be:ba:b3:87:a3:1a:61:2b:7a:d3:f8:56:74:11: a2:1a:5d:80:d3:5e:60:69:1e:68:6e:76:43:3d:48:d9:05:4c: fe:50:3a:86:a4:32:cf:2e:e2:b9:ce:90:e8:ea:aa:3c:79:ad: a3:8c:97:7a:83:8c:b5:f8:e3:cc:76:29:07:65:83:6d:b2:e7: fb:15:cc:20:b0:a5:8b:eb:13:40:5f:19:ea:32:1c:4c:9f:93: e5:f5:a7:e2:1e:68:6d:cb:73:80:1b:6e:66:b6:64:93:b4:30: 0d:39:b5:e4:40:fa:ab:08:74:e1:a3:eb:3b:e8:ea:44:62:92: 07:a4:7a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZltqGIjqqPssJ9nfOeHH+Jpg8AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTA3MDQyMTA2MzNaFw0yNTA3MDgwODE1MzNaMDMxMTAvBgNV BAMTKDkxNkU1Njg1MEQwMUNCNEY0QkU5QTRCRDFBMDU3QjE3RUUzNTMyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzXjpHEx2ThFG1dLslcwUFvO0P +VPACQSlWovoGWUvq+ptGOQHzBid2894Q08EDjIkUaytnFSvcXGL3Eu9NLFaP4bB sbiHKKIh3EegfK3xPOVDesIu2vb7iea78nyZkRYSYbU6pE0JnYjb09f9WuPHED0E UKUyQyxapnhtH2Qh4KnihYZqmKlCXrRk4IcGevkMC1wKQHiI/TpDYtiGSXF6QFL5 tCgOFff1hULdbOc3geaZ3KOsDAZ46Nvq77rauVGxFy72SOlJXG1yFBwqd4cJ1rEi AVVbmMv9Ei5JWwbE2j5fVbmhnp1B0ZOHFyBhFyeK0UbG/YERNqJcaMNcrVSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkW5WhQ0By09L6aS9GgV7F+41Mj8wHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzhtUFa9hy5sZEX6KP5ZrQI5kgFhTUEumfQ Rd1Pcp/zAfBZ0G5pjDBVNutU7EGFqVZTAHYUezO+92IoSPbRDvkWIy0E73snsqmW mzE3xbc1CGu4NoLe75fGGd2ElzYZjsJCMKP80iGTNLC/hP+ceY8IYoGSzEMBoE34 uEs1uZtP6vK+urOHoxphK3rT+FZ0EaIaXYDTXmBpHmhudkM9SNkFTP5QOoakMs8u 4rnOkOjqqjx5raOMl3qDjLX448x2KQdlg22y5/sVzCCwpYvrE0BfGeoyHEyfk+X1 p+IeaG3Lc4Abbma2ZJO0MA05teRA+qsIdOGj6zvo6kRikgekeiM= -----END CERTIFICATE-----Generated at Sat Jul 5 05:30:29 2025 by rpki-client