$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: 7NNHeAmCkdXX0hyJGEoRSpcHChXiLayIQZLaV4zMyvQ= Subject key identifier: 21:C3:D2:EE:8F:B1:38:46:14:E1:E8:7A:6F:D0:2F:12:E2:C5:1E:6B Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 3923BFC0688FE51BFD94F68B0166063E45103447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 02FE Signing time: Wed 06 Aug 2025 16:31:42 +0000 Manifest this update: Wed 06 Aug 2025 16:26:42 +0000 Manifest next update: Sat 09 Aug 2025 22:51:42 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) 2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 3: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: budvZEZemn9McJ+oFUM263DHgN2ivZXb7G00cuyY3yY=) 4: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:23:bf:c0:68:8f:e5:1b:fd:94:f6:8b:01:66:06:3e:45:10:34:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Aug 6 16:26:42 2025 GMT Not After : Aug 9 22:51:42 2025 GMT Subject: CN=21C3D2EE8FB1384614E1E87A6FD02F12E2C51E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2f:93:71:45:f9:2d:a0:6f:fa:96:0a:22:d7: 49:8e:fe:3b:47:22:bf:b2:2a:a1:e5:4e:f3:6b:97: 1e:d6:96:2c:90:5e:97:3d:54:f4:be:3d:1a:46:98: 1b:79:77:44:38:6e:43:69:e6:11:7e:1f:3b:2b:85: a0:a2:db:73:b6:bf:be:c9:42:ff:a8:1b:1b:c2:60: 6a:f6:82:eb:5e:26:68:65:8d:d5:c8:d4:b3:8b:d0: 61:29:db:98:7c:67:74:5a:c8:26:51:88:7c:2b:89: b7:d6:a1:b0:cb:86:2e:0b:a0:20:5d:59:c9:9d:9e: c4:00:3b:61:8b:d1:68:47:9f:d1:18:55:2f:5b:bb: ae:c0:05:7b:57:4f:af:3a:ac:37:2c:64:ea:7c:8b: 1c:8a:ec:04:e3:82:26:dc:5b:c6:2d:eb:0c:21:4d: ba:d0:78:c3:3b:fc:39:6b:10:6e:38:7b:d7:2a:45: 3c:3e:ca:1d:45:a9:eb:29:f9:7e:9d:60:8c:fa:4e: 3d:ca:3c:6d:f4:ac:5d:57:e6:da:44:7f:9a:b6:0f: 10:93:24:5a:01:d1:c9:f2:29:28:13:b3:8e:78:1a: c6:89:c6:c6:bd:be:c0:dd:39:3b:f0:67:9d:64:b1: 9d:98:91:5c:a8:3b:95:2f:79:4d:f8:b3:81:5b:af: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:D2:EE:8F:B1:38:46:14:E1:E8:7A:6F:D0:2F:12:E2:C5:1E:6B X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:9b:57:b0:76:c7:41:80:35:66:59:58:8e:30:70:ea:be: 39:5f:2f:c2:79:ef:13:27:3a:09:c0:1b:7d:c9:1d:db:83:97: 6c:a8:f7:9d:e2:ee:9f:b8:05:40:75:41:22:4b:6d:9f:83:85: ed:e1:a2:2c:d2:84:ed:4f:6f:83:21:1e:c1:12:80:eb:5e:78: d6:a8:40:6f:aa:6d:bb:fd:14:38:9b:6c:c3:3a:56:ca:f8:ee: cb:d5:f4:35:08:e7:fb:ce:dc:99:5d:d4:9f:f5:2f:d8:d2:17: d3:4f:64:4e:3e:f7:bf:02:93:15:17:cb:be:2b:4d:dd:7a:96: d8:f8:16:dc:9a:ea:5f:b0:17:49:83:64:60:dd:85:a2:94:46: c6:11:ff:15:0d:c0:64:61:56:9f:36:1d:7c:7d:bd:b7:e0:84: 79:63:63:3f:20:9f:dc:b3:98:81:2e:cf:c0:92:03:c8:0f:15: b0:17:4d:28:55:22:d7:5d:80:bf:fc:83:59:d3:15:51:70:ff: 53:d2:8a:ae:25:59:f6:6a:0d:13:52:76:97:57:38:06:dd:b8: 6a:dc:77:26:60:22:8b:cf:03:27:db:60:23:cf:fd:0a:1d:88: bb:0e:8c:d7:67:0d:be:47:5b:15:b6:97:ae:bc:9e:a3:dc:1e: b5:eb:58:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSO/wGiP5Rv9lPaLAWYGPkUQNEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTA4MDYxNjI2NDJaFw0yNTA4MDkyMjUxNDJaMDMxMTAvBgNV BAMTKDIxQzNEMkVFOEZCMTM4NDYxNEUxRTg3QTZGRDAyRjEyRTJDNTFFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrL5NxRfktoG/6lgoi10mO/jtH Ir+yKqHlTvNrlx7WliyQXpc9VPS+PRpGmBt5d0Q4bkNp5hF+HzsrhaCi23O2v77J Qv+oGxvCYGr2guteJmhljdXI1LOL0GEp25h8Z3RayCZRiHwribfWobDLhi4LoCBd WcmdnsQAO2GL0WhHn9EYVS9bu67ABXtXT686rDcsZOp8ixyK7ATjgibcW8Yt6wwh TbrQeMM7/DlrEG44e9cqRTw+yh1Fqesp+X6dYIz6Tj3KPG30rF1X5tpEf5q2DxCT JFoB0cnyKSgTs454GsaJxsa9vsDdOTvwZ51ksZ2YkVyoO5UveU34s4Fbr4kPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcPS7o+xOEYU4eh6b9AvEuLFHmswHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzHm1ewdsdBgDVmWViOMHDqvjlfL8J57xMn OgnAG33JHduDl2yo953i7p+4BUB1QSJLbZ+Dhe3hoizShO1Pb4MhHsESgOteeNao QG+qbbv9FDibbMM6Vsr47svV9DUI5/vO3Jld1J/1L9jSF9NPZE4+978CkxUXy74r Td16ltj4Ftya6l+wF0mDZGDdhaKURsYR/xUNwGRhVp82HXx9vbfghHljYz8gn9yz mIEuz8CSA8gPFbAXTShVItddgL/8g1nTFVFw/1PSiq4lWfZqDRNSdpdXOAbduGrc dyZgIovPAyfbYCPP/QodiLsOjNdnDb5HWxW2l668nqPcHrXrWAg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:41 2025 by rpki-client