$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: aOob3O18asoDvPj1RpaTl8GhS2g6dGHrXuM6QE4mVds= Subject key identifier: 81:B6:07:88:4A:1A:5B:2C:CB:01:E9:CB:37:4E:B2:9E:46:19:CA:F6 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 23157068F36FF7BC390FFEED10747EB409D54DD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01B5 Signing time: Thu 07 Aug 2025 10:51:17 +0000 Manifest this update: Thu 07 Aug 2025 10:46:17 +0000 Manifest next update: Sun 10 Aug 2025 12:32:17 +0000 Files and hashes: 1: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: az0mgSY8gCi5CzxfCT/sY9U+UFNgXmWFw1JUJrZyQpw=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:15:70:68:f3:6f:f7:bc:39:0f:fe:ed:10:74:7e:b4:09:d5:4d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Aug 7 10:46:17 2025 GMT Not After : Aug 10 12:32:17 2025 GMT Subject: CN=81B607884A1A5B2CCB01E9CB374EB29E4619CAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:e7:12:99:5e:45:60:e3:42:93:8a:10:f6: 26:74:89:66:ee:53:9a:67:57:50:b1:ae:64:7a:75: 3c:da:ff:60:d4:99:cb:10:14:5b:c5:14:70:ef:06: 81:d1:39:ba:71:e9:c3:18:7b:d5:c2:ec:a4:6c:03: c9:a3:fa:7b:b0:31:f8:ca:f6:07:79:80:d9:d8:db: 34:52:78:18:76:ed:7d:c2:6e:0b:a7:a9:db:c4:1d: 5f:e6:c7:23:bc:7b:ae:40:68:7b:3b:53:74:97:ea: 8f:d1:4f:7f:b9:e8:6d:52:7f:98:c5:a3:1d:46:47: a4:a4:3d:3b:a6:c5:3e:6f:14:bf:e2:19:4c:3f:85: 43:71:a2:c4:56:6a:6e:9b:7d:f6:3e:f2:a9:18:21: 7c:4b:3a:ba:10:82:18:43:ff:e7:db:58:27:98:64: 3a:a9:e1:59:22:ff:5b:5c:d6:a1:ce:d6:29:d1:c0: 14:88:4b:b3:b4:c4:94:b1:ad:6c:67:8f:60:85:54: 64:c1:5e:ce:5c:1f:c7:9c:73:fa:b3:09:5a:1f:ed: ea:99:2b:f1:c6:fb:2d:70:2d:2d:60:ed:ad:c3:60: f4:01:5e:22:aa:a1:5d:03:0c:bb:fe:f7:08:55:00: 76:ae:bf:24:fa:1f:3a:58:b7:33:52:39:d4:e5:bd: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:07:88:4A:1A:5B:2C:CB:01:E9:CB:37:4E:B2:9E:46:19:CA:F6 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:be:39:7e:98:c0:0e:d3:1d:1d:99:20:78:22:1f:c0:a3:3c: d7:c3:5f:1a:27:cb:90:48:c1:a5:ce:b6:7b:53:50:cd:62:7a: 98:85:29:fc:91:c2:3c:70:e1:49:ba:d4:9f:80:33:28:b5:7b: d9:4c:3d:fa:4c:7f:b2:de:2f:ed:2d:67:8e:96:93:12:99:4a: 0b:d6:e3:a3:f2:35:dc:b4:ed:3d:eb:4f:f7:e9:89:72:c3:1e: 6c:30:17:8e:98:0e:63:3d:ac:e7:8a:4f:a7:b1:64:71:07:42: 44:08:ab:46:7e:f0:d2:e5:4d:da:9e:0f:4a:88:bc:aa:14:42: 96:4a:05:0a:3b:c1:ee:cc:64:04:5e:f9:e2:0f:54:89:42:f3: 71:f3:df:d4:e4:fd:ad:92:24:cb:fa:c5:83:6b:27:14:f1:05: 5e:d4:b4:07:e4:fa:4e:0b:b7:53:25:cb:d4:56:84:24:88:90: c2:f8:c0:b6:08:d3:5b:0a:69:30:23:c9:46:97:11:38:25:56: 72:d7:01:4f:37:6c:cc:0e:1d:c9:01:88:7c:ae:4d:94:c9:53: a3:bb:32:f6:73:03:80:c2:4a:68:cd:68:3a:96:02:09:be:c5: db:aa:66:b8:cb:4b:50:29:4d:20:38:eb:dc:09:3b:75:ae:b3: 38:7f:6b:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxVwaPNv97w5D/7tEHR+tAnVTdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTA4MDcxMDQ2MTdaFw0yNTA4MTAxMjMyMTdaMDMxMTAvBgNV BAMTKDgxQjYwNzg4NEExQTVCMkNDQjAxRTlDQjM3NEVCMjlFNDYxOUNBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1x+cSmV5FYONCk4oQ9iZ0iWbu U5pnV1CxrmR6dTza/2DUmcsQFFvFFHDvBoHRObpx6cMYe9XC7KRsA8mj+nuwMfjK 9gd5gNnY2zRSeBh27X3CbgunqdvEHV/mxyO8e65AaHs7U3SX6o/RT3+56G1Sf5jF ox1GR6SkPTumxT5vFL/iGUw/hUNxosRWam6bffY+8qkYIXxLOroQghhD/+fbWCeY ZDqp4Vki/1tc1qHO1inRwBSIS7O0xJSxrWxnj2CFVGTBXs5cH8ecc/qzCVof7eqZ K/HG+y1wLS1g7a3DYPQBXiKqoV0DDLv+9whVAHauvyT6HzpYtzNSOdTlva2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgbYHiEoaWyzLAenLN06ynkYZyvYwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA++OX6YwA7THR2ZIHgiH8CjPNfDXxony5BI waXOtntTUM1iepiFKfyRwjxw4Um61J+AMyi1e9lMPfpMf7LeL+0tZ46WkxKZSgvW 46PyNdy07T3rT/fpiXLDHmwwF46YDmM9rOeKT6exZHEHQkQIq0Z+8NLlTdqeD0qI vKoUQpZKBQo7we7MZARe+eIPVIlC83Hz39Tk/a2SJMv6xYNrJxTxBV7UtAfk+k4L t1Mly9RWhCSIkML4wLYI01sKaTAjyUaXETglVnLXAU83bMwOHckBiHyuTZTJU6O7 MvZzA4DCSmjNaDqWAgm+xduqZrjLS1ApTSA469wJO3Wuszh/a08= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:26 2025 by rpki-client