$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: nXJwVv6OW9P6egK7bOvKwO7cxFZBsiuIjFqNowUgcnk= Subject key identifier: 31:F1:48:BE:2E:32:47:6F:BA:EA:D5:71:8A:21:0A:86:DA:E0:87:DC Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 24CEB8A10DBA1939DD8D5739CA0D0E73393ACAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0120 Signing time: Fri 22 Aug 2025 04:12:12 +0000 Manifest this update: Fri 22 Aug 2025 04:07:12 +0000 Manifest next update: Mon 25 Aug 2025 09:21:12 +0000 Files and hashes: 1: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: FNlTf7zkvk04rh+bsYvD3+9fx8IAL+mJYgL1rqx6T3g=) 2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) 3: 3130332e39362e35342e302f32332d3234203d3e20313530393637.roa (hash: Pl5mXV2GVzrNQTc4RosdJvUks5j1v+XP+WNw1hZRoLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ce:b8:a1:0d:ba:19:39:dd:8d:57:39:ca:0d:0e:73:39:3a:ca:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Aug 22 04:07:12 2025 GMT Not After : Aug 25 09:21:12 2025 GMT Subject: CN=31F148BE2E32476FBAEAD5718A210A86DAE087DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a5:27:43:5a:0c:c0:8e:10:c0:62:b2:14:c1: da:4a:47:4d:6b:ee:ae:1f:b0:09:90:cb:81:25:e8: ec:25:91:8a:28:e8:e6:97:b9:96:27:69:5e:2c:e3: d2:01:01:cb:68:bb:26:ff:aa:d8:d9:8f:35:9e:5c: 3f:82:91:4a:ab:09:6f:a0:07:c4:76:85:c4:be:41: 14:37:03:37:2d:d2:86:ae:ee:a4:39:5b:33:fd:32: 91:c6:76:93:de:4f:ef:b3:3f:d3:ee:b7:9b:36:2b: 75:bb:d4:bc:4a:6d:dc:5e:2e:26:d5:25:c6:2e:28: b5:73:9e:e4:dd:1f:c2:af:ab:f2:6d:2b:fd:7c:98: e7:b3:bf:ac:b4:b7:35:3d:91:15:ef:4d:5e:18:8d: 91:23:2b:f1:83:6b:a5:d9:fe:8f:5b:cb:64:7e:e7: d8:c5:de:51:6c:16:f9:8b:d4:f0:2b:43:2f:a6:d9: d7:83:b6:1c:52:61:1b:3b:73:d3:69:a9:50:08:e8: cb:56:27:1f:1b:07:cc:b3:1a:48:6b:d2:2f:d5:c3: e2:b2:c0:e5:d3:12:b7:a7:e2:2f:f0:f6:c8:ce:d5: b4:48:7c:0d:17:cc:ce:88:36:5d:d2:de:60:90:08: 41:4b:ab:b8:0a:3f:22:ad:dc:fc:44:b3:2b:12:6d: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F1:48:BE:2E:32:47:6F:BA:EA:D5:71:8A:21:0A:86:DA:E0:87:DC X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:0e:00:ef:72:9e:10:f4:08:e8:4f:18:d0:47:ff:3e:cb: 9a:9b:b6:80:11:b6:9c:37:b9:ba:3d:0d:ff:e8:0f:eb:b7:cb: 10:cf:f5:5a:07:77:7e:8d:62:bd:62:b7:14:a8:7b:ef:11:20: 1e:79:9b:24:39:a5:f8:a8:94:8a:1c:c0:a4:a7:34:17:d0:2a: 44:64:5f:2c:ca:71:65:66:cb:60:72:24:d0:d0:a9:84:43:df: 03:d6:f1:fb:80:fb:df:07:29:71:71:ad:37:ac:15:bb:27:ad: 26:5f:22:4d:36:a1:1f:60:7b:7c:56:09:a8:51:ef:9b:77:ea: 30:a3:89:14:b5:fe:eb:bd:9d:c6:57:cf:db:50:73:0f:5d:0c: 02:15:eb:7f:c9:07:ba:32:54:60:6f:ee:0f:33:c7:02:c8:37: 9f:1c:21:fc:05:99:c9:9c:c7:64:c7:15:d9:2f:f0:1f:ea:a4: cb:2b:22:00:5a:dc:9b:83:71:7a:35:6a:88:9e:83:f8:66:01: 21:eb:a0:6e:10:55:f9:ad:c8:33:a8:02:e5:bf:6e:71:d2:b6: 4f:46:a1:00:7d:43:68:c5:1e:b6:8e:bd:29:bd:d8:88:14:84: 9c:5d:c5:e0:23:98:0e:e7:38:65:80:24:fd:02:ce:31:5d:84: d6:95:af:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJM64oQ26GTndjVc5yg0Oczk6yq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNTA4MjIwNDA3MTJaFw0yNTA4MjUwOTIxMTJaMDMxMTAvBgNV BAMTKDMxRjE0OEJFMkUzMjQ3NkZCQUVBRDU3MThBMjEwQTg2REFFMDg3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvpSdDWgzAjhDAYrIUwdpKR01r 7q4fsAmQy4El6OwlkYoo6OaXuZYnaV4s49IBActouyb/qtjZjzWeXD+CkUqrCW+g B8R2hcS+QRQ3Azct0oau7qQ5WzP9MpHGdpPeT++zP9Put5s2K3W71LxKbdxeLibV JcYuKLVznuTdH8Kvq/JtK/18mOezv6y0tzU9kRXvTV4YjZEjK/GDa6XZ/o9by2R+ 59jF3lFsFvmL1PArQy+m2deDthxSYRs7c9NpqVAI6MtWJx8bB8yzGkhr0i/Vw+Ky wOXTEren4i/w9sjO1bRIfA0XzM6INl3S3mCQCEFLq7gKPyKt3PxEsysSbYZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMfFIvi4yR2+66tVxiiEKhtrgh9wwHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkbDgDvcp4Q9AjoTxjQR/8+y5qbtoARtpw3 ubo9Df/oD+u3yxDP9VoHd36NYr1itxSoe+8RIB55myQ5pfiolIocwKSnNBfQKkRk XyzKcWVmy2ByJNDQqYRD3wPW8fuA+98HKXFxrTesFbsnrSZfIk02oR9ge3xWCahR 75t36jCjiRS1/uu9ncZXz9tQcw9dDAIV63/JB7oyVGBv7g8zxwLIN58cIfwFmcmc x2THFdkv8B/qpMsrIgBa3JuDcXo1aoieg/hmASHroG4QVfmtyDOoAuW/bnHStk9G oQB9Q2jFHraOvSm92IgUhJxdxeAjmA7nOGWAJP0CzjFdhNaVr9Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:24 2025 by rpki-client