$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: 5gqCpqYRS84KSZJfOGJuoPqgo3RLDO+ELUkJ8HCHMXA= Subject key identifier: B4:36:FA:BD:CB:78:01:2D:9B:A9:67:2F:A6:E7:C0:A0:BF:7C:92:84 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 2936FD9EBD1A53088E9A1800B5BBDF358816AE16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 86 Signing time: Sun 10 Aug 2025 13:30:05 +0000 Manifest this update: Sun 10 Aug 2025 13:25:05 +0000 Manifest next update: Wed 13 Aug 2025 23:52:05 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) 2: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 4: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: xuIX5UufBRLQUf5zYs6t+YWTH7J3ta+pecegkHmLpnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:36:fd:9e:bd:1a:53:08:8e:9a:18:00:b5:bb:df:35:88:16:ae:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Aug 10 13:25:05 2025 GMT Not After : Aug 13 23:52:05 2025 GMT Subject: CN=B436FABDCB78012D9BA9672FA6E7C0A0BF7C9284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:6e:29:8c:8f:6c:6a:93:eb:94:e9:46:14: 04:0d:51:ba:32:91:f9:ff:ec:fd:fe:b1:4a:f6:1b: a4:2a:14:88:53:b2:1a:5b:21:96:0a:af:76:b8:84: 6d:39:a7:b9:0c:4b:ed:1e:2d:27:ea:15:de:db:35: 6a:73:27:11:0f:60:1c:b0:72:0f:55:38:1d:a6:24: 8c:53:b3:5a:2f:68:bd:09:70:ee:da:a2:de:bd:c3: 98:a5:88:d6:6e:fc:40:ae:e4:dd:fe:7b:40:5e:37: d3:c7:28:24:3f:2b:ed:e8:fd:ce:71:3f:c1:7f:bb: 9e:37:e1:5f:50:39:f1:53:c6:1b:0f:d4:95:7e:e6: d7:07:d3:46:f5:30:98:7a:35:df:b1:13:d5:ff:ec: c3:03:bc:7e:a2:b5:ef:4a:39:75:9e:92:21:66:41: 8f:2f:15:e6:34:dc:7e:42:5d:c3:6a:a7:1b:ce:f9: 09:22:75:57:75:51:08:22:8e:ff:62:78:a5:e5:68: 0c:92:1f:54:a3:aa:09:3a:63:e2:75:7a:8f:5b:c4: 0c:85:ef:41:76:51:e3:b0:72:70:54:b0:93:fd:71: 1b:4f:30:80:f0:52:2d:81:bd:b0:5c:f7:3d:6d:c9: 82:14:5f:0b:ee:24:bd:1a:0d:5d:bb:cd:20:98:6a: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:36:FA:BD:CB:78:01:2D:9B:A9:67:2F:A6:E7:C0:A0:BF:7C:92:84 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f8:ac:2e:26:86:7a:60:f2:24:73:d1:bf:a6:e7:71:82:66: 60:f7:ef:da:bc:83:03:e6:0d:1f:49:14:87:80:f4:e6:c8:ad: 71:a4:e2:25:d6:1d:16:63:b0:05:4a:97:6f:53:b9:17:f4:ed: 3c:ef:62:d8:0d:78:d8:8b:31:82:1e:5e:51:68:ad:55:af:1c: ec:52:24:10:e4:cd:0f:e4:77:75:8b:89:ba:e4:b5:da:9d:a1: 7e:22:0f:0e:b1:80:33:87:34:be:5d:85:ce:59:f7:26:47:8b: 30:3e:35:64:41:d2:f4:a2:19:5a:dc:ef:f8:09:0c:1e:a5:89: 08:d3:96:ef:b4:cb:38:3a:48:b2:c1:42:36:45:c1:d3:93:1f: 31:9d:6d:50:65:38:00:72:0a:8d:e6:e8:86:44:23:e5:c0:e4: c1:15:db:8f:83:1d:d1:55:fb:fa:8f:c9:9b:54:fb:e1:3b:88: 6b:b8:49:8f:ef:6d:f8:bf:9f:06:bd:ce:4d:46:59:e1:32:ce: 9c:3e:25:f5:a7:fd:48:e1:ae:8d:c1:f0:ea:95:bb:e7:bd:e7: cb:16:2c:2b:7b:b1:9b:a6:50:f2:e3:6d:e4:7b:fc:5f:08:f6: 07:f3:cb:a8:36:9b:f5:04:bb:b6:53:91:5d:c8:8b:78:6a:53: 1e:9d:e1:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTb9nr0aUwiOmhgAtbvfNYgWrhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA4MTAxMzI1MDVaFw0yNTA4MTMyMzUyMDVaMDMxMTAvBgNV BAMTKEI0MzZGQUJEQ0I3ODAxMkQ5QkE5NjcyRkE2RTdDMEEwQkY3QzkyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHT24pjI9sapPrlOlGFAQNUboy kfn/7P3+sUr2G6QqFIhTshpbIZYKr3a4hG05p7kMS+0eLSfqFd7bNWpzJxEPYByw cg9VOB2mJIxTs1ovaL0JcO7aot69w5iliNZu/ECu5N3+e0BeN9PHKCQ/K+3o/c5x P8F/u5434V9QOfFTxhsP1JV+5tcH00b1MJh6Nd+xE9X/7MMDvH6ite9KOXWekiFm QY8vFeY03H5CXcNqpxvO+QkidVd1UQgijv9ieKXlaAySH1Sjqgk6Y+J1eo9bxAyF 70F2UeOwcnBUsJP9cRtPMIDwUi2BvbBc9z1tyYIUXwvuJL0aDV27zSCYah4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDb6vct4AS2bqWcvpufAoL98koQwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/4rC4mhnpg8iRz0b+m53GCZmD379q8gwPm DR9JFIeA9ObIrXGk4iXWHRZjsAVKl29TuRf07TzvYtgNeNiLMYIeXlForVWvHOxS JBDkzQ/kd3WLibrktdqdoX4iDw6xgDOHNL5dhc5Z9yZHizA+NWRB0vSiGVrc7/gJ DB6liQjTlu+0yzg6SLLBQjZFwdOTHzGdbVBlOAByCo3m6IZEI+XA5MEV24+DHdFV +/qPyZtU++E7iGu4SY/vbfi/nwa9zk1GWeEyzpw+JfWn/Ujhro3B8OqVu+e958sW LCt7sZumUPLjbeR7/F8I9gfzy6g2m/UEu7ZTkV3Ii3hqUx6d4Rc= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:43 2025 by rpki-client