$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: w/ycKsE6wV5S2VVVWN54oqjBuNZR+lyM8NR8PRIM3jo= Subject key identifier: 9B:59:4C:4D:20:B5:DF:63:F3:DA:CE:B2:1F:98:C2:9A:8B:41:A6:EF Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 64E98889218F835B2B9118FA785FF1C33720A46A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 04FA Signing time: Tue 05 Aug 2025 13:12:02 +0000 Manifest this update: Tue 05 Aug 2025 13:07:02 +0000 Manifest next update: Fri 08 Aug 2025 23:10:02 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 2: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 3: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: A86AkStgsg3X3HDZ70MqvmWLNglc02s00h28bVIVDJ4=) 4: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e9:88:89:21:8f:83:5b:2b:91:18:fa:78:5f:f1:c3:37:20:a4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Aug 5 13:07:02 2025 GMT Not After : Aug 8 23:10:02 2025 GMT Subject: CN=9B594C4D20B5DF63F3DACEB21F98C29A8B41A6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:90:79:39:b7:1d:47:f2:fe:a0:12:f6:c6: eb:c4:2c:0c:ac:41:d2:bc:bc:c6:05:05:d5:40:dc: 68:7d:0f:4e:a2:c2:16:38:ae:91:fd:82:7c:4b:bd: 29:63:0b:0c:73:0f:d6:91:39:f7:10:fe:07:b3:38: 39:2d:b5:02:4a:d5:ee:83:d2:f7:14:02:06:18:23: 4b:13:da:6b:23:77:39:26:b0:21:29:7e:f3:d3:93: dd:15:43:9d:33:ce:ca:0c:59:28:97:74:e1:bb:0a: 84:be:7a:66:f1:5b:f3:c5:77:e7:e0:a8:96:30:d5: 66:a6:a5:17:9a:56:05:87:8e:f8:f1:25:c1:dd:a5: 55:9d:5e:b9:9f:91:44:e8:28:ec:c7:2c:22:85:a9: 65:96:bd:77:d2:4b:06:d0:be:be:b5:8e:91:e4:4f: ad:31:23:18:31:58:4c:00:3c:ee:01:25:be:b7:63: 40:b2:33:02:3a:c8:07:18:a2:fb:1f:43:90:92:72: 52:8f:b5:27:4b:f8:27:c0:ba:e5:d7:cc:31:c4:67: c5:7e:80:95:9d:52:f9:52:9e:be:94:6d:3c:d7:1f: 9b:56:fb:64:bd:d2:be:cb:14:8e:72:50:42:be:bb: 27:93:64:9d:35:93:e2:cd:81:b3:c6:97:f4:fb:71: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:4C:4D:20:B5:DF:63:F3:DA:CE:B2:1F:98:C2:9A:8B:41:A6:EF X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fc:5c:83:9c:2e:d6:23:74:d1:56:bd:b3:94:dc:a4:4f:c3: be:e7:9e:83:0f:7d:2e:5d:f2:e0:bd:cb:a6:10:db:5f:da:01: a1:1f:83:4e:e9:02:f4:95:4d:21:02:ab:0f:11:8e:a8:6f:5c: fc:7e:81:9b:37:7f:e2:ba:35:bb:0c:0d:fb:d8:fc:a3:9d:a9: 2f:a4:9b:13:a5:37:65:09:60:53:1f:ee:07:9c:28:b2:78:36: 96:f7:1c:30:c3:df:dc:47:7e:52:60:52:8b:ba:31:0c:21:63: ed:d3:7f:07:65:59:be:4b:e4:5a:a2:b6:1d:96:97:d2:a0:43: 80:bf:c0:be:36:c2:65:09:0d:9a:c8:6c:24:24:1e:86:c8:96: 19:0e:90:40:70:8c:af:88:76:cf:d0:30:aa:88:36:dd:f8:4e: a5:44:d0:a2:ae:87:b1:c7:c5:c3:33:00:e8:a1:b7:b3:4d:b6: 42:b9:46:4b:e9:66:89:e5:9e:f5:c7:90:e6:22:c5:b0:37:58: 35:7d:33:0f:ad:85:d2:ed:c6:50:29:3c:42:81:eb:d4:1e:73: 9e:1d:7d:21:7e:1e:69:d0:7a:a4:e7:4c:c7:44:48:63:c8:f4: fe:b6:e5:88:7d:16:b1:6c:73:40:b7:64:dc:a1:bb:0d:f1:79: cc:e6:6c:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOmIiSGPg1srkRj6eF/xwzcgpGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA4MDUxMzA3MDJaFw0yNTA4MDgyMzEwMDJaMDMxMTAvBgNV BAMTKDlCNTk0QzREMjBCNURGNjNGM0RBQ0VCMjFGOThDMjlBOEI0MUE2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4pB5ObcdR/L+oBL2xuvELAys QdK8vMYFBdVA3Gh9D06iwhY4rpH9gnxLvSljCwxzD9aROfcQ/gezODkttQJK1e6D 0vcUAgYYI0sT2msjdzkmsCEpfvPTk90VQ50zzsoMWSiXdOG7CoS+embxW/PFd+fg qJYw1WampReaVgWHjvjxJcHdpVWdXrmfkUToKOzHLCKFqWWWvXfSSwbQvr61jpHk T60xIxgxWEwAPO4BJb63Y0CyMwI6yAcYovsfQ5CSclKPtSdL+CfAuuXXzDHEZ8V+ gJWdUvlSnr6UbTzXH5tW+2S90r7LFI5yUEK+uyeTZJ01k+LNgbPGl/T7cdPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1lMTSC132Pz2s6yH5jCmotBpu8wHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT8XIOcLtYjdNFWvbOU3KRPw77nnoMPfS5d 8uC9y6YQ21/aAaEfg07pAvSVTSECqw8RjqhvXPx+gZs3f+K6NbsMDfvY/KOdqS+k mxOlN2UJYFMf7gecKLJ4Npb3HDDD39xHflJgUou6MQwhY+3TfwdlWb5L5Fqith2W l9KgQ4C/wL42wmUJDZrIbCQkHobIlhkOkEBwjK+Ids/QMKqINt34TqVE0KKuh7HH xcMzAOiht7NNtkK5RkvpZonlnvXHkOYixbA3WDV9Mw+thdLtxlApPEKB69Qec54d fSF+HmnQeqTnTMdESGPI9P625Yh9FrFsc0C3ZNyhuw3xeczmbK8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:37 2025 by rpki-client