$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: 9E81+EwQk2HcY4ignYXxaWJk1j+q6kjrKDOcZI88rHE= Subject key identifier: 9F:0F:EF:46:E8:DD:5E:9B:05:2C:0C:8C:47:AC:62:2B:11:9B:66:34 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 5C700AEC1DB5D68BEE148932BBF0CA5372103AF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 01:50:01 +0000 Manifest this update: Wed 06 Aug 2025 01:45:01 +0000 Manifest next update: Sat 09 Aug 2025 02:38:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: Z93H3CbcsXhZeEVpPCh/ACSfC2NtSsTj/DsMFTOra04=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:70:0a:ec:1d:b5:d6:8b:ee:14:89:32:bb:f0:ca:53:72:10:3a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Aug 6 01:45:01 2025 GMT Not After : Aug 9 02:38:01 2025 GMT Subject: CN=9F0FEF46E8DD5E9B052C0C8C47AC622B119B6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:14:79:22:2d:3c:47:09:cd:7a:96:16:3c: 26:f9:45:e0:74:25:6b:92:8b:55:81:94:5b:97:c7: e4:4a:12:9d:32:ce:c7:7d:04:8c:e0:14:bc:11:25: 34:40:f7:65:7f:5e:88:8c:26:0b:0f:70:01:3e:3e: 19:32:40:e8:f6:5e:b9:ff:79:92:1e:21:88:cc:a3: b5:16:14:ef:2d:7b:f1:c0:5f:ab:8b:86:91:1f:06: f7:e7:b2:5b:e5:cb:d9:3b:29:2c:cd:c9:84:ea:f3: fd:29:45:9e:9f:d6:db:2d:5d:01:a1:4f:b3:48:2a: 69:99:5a:e5:25:2e:d3:57:b4:c1:31:25:1d:7d:5f: aa:b8:54:7c:1e:eb:86:90:0c:7b:28:6a:2e:08:16: aa:83:7e:24:27:37:52:b4:0f:f3:66:94:40:43:f9: 11:9d:cb:3a:17:c6:f6:60:7a:31:77:0a:5e:c3:89: 5a:29:70:16:a0:93:de:9f:3b:30:b6:6e:f5:1a:d1: 05:e4:ad:b4:51:46:f5:fc:41:80:6a:44:1a:7b:6a: e5:7d:33:15:e9:2f:c9:1c:c7:25:f5:67:c0:46:60: 84:28:be:b2:79:99:a4:1f:78:4c:93:d2:eb:3c:84: 66:ef:b4:59:eb:53:76:38:4a:fd:8f:35:aa:a5:55: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:EF:46:E8:DD:5E:9B:05:2C:0C:8C:47:AC:62:2B:11:9B:66:34 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9a:ad:79:e2:54:38:16:67:d8:7e:59:b6:33:d4:4d:1e:48: d0:bb:ba:f2:1b:df:c1:56:4f:95:ad:76:d0:d5:2d:fd:e7:dd: 23:09:a7:32:21:f5:27:71:d3:9d:6b:1b:22:f4:9b:01:41:19: d0:bb:f7:e8:9b:ac:ab:6b:72:f7:d3:43:e2:d7:ab:b7:d5:ff: ad:54:56:f0:3f:bc:a7:e4:f9:52:1b:e0:58:f6:93:ea:c0:d7: b5:d3:29:68:76:90:42:0c:e2:2a:d5:60:34:7f:1c:c4:9a:d3: 37:9e:d0:71:4e:cc:32:6e:87:22:fd:cc:ba:fb:f5:71:9f:05: 36:c3:50:cb:e8:57:25:1a:5f:f6:92:d4:ec:22:0e:e5:f5:28: 28:2a:8e:68:eb:30:e2:39:0d:b2:cf:f9:d4:8b:30:04:3e:2e: 42:6e:f2:6b:d7:eb:a2:3e:30:ad:e0:23:53:ed:82:f6:ef:3b: 23:d6:ce:9c:36:c4:23:0e:fc:99:8a:86:73:7b:32:b2:dd:f7: 55:b1:e5:92:33:70:35:12:97:ed:a6:ff:92:75:52:96:8d:3a: 25:ea:5d:9c:c4:26:60:67:c4:c2:52:d9:5b:65:b1:12:a5:f3: 14:c0:e6:8d:ae:ac:ff:7f:bc:1f:0e:e1:fa:de:eb:a8:57:8c: c4:02:93:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHAK7B211ovuFIkyu/DKU3IQOvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA4MDYwMTQ1MDFaFw0yNTA4MDkwMjM4MDFaMDMxMTAvBgNV BAMTKDlGMEZFRjQ2RThERDVFOUIwNTJDMEM4QzQ3QUM2MjJCMTE5QjY2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgRR5Ii08RwnNepYWPCb5ReB0 JWuSi1WBlFuXx+RKEp0yzsd9BIzgFLwRJTRA92V/XoiMJgsPcAE+PhkyQOj2Xrn/ eZIeIYjMo7UWFO8te/HAX6uLhpEfBvfnslvly9k7KSzNyYTq8/0pRZ6f1tstXQGh T7NIKmmZWuUlLtNXtMExJR19X6q4VHwe64aQDHsoai4IFqqDfiQnN1K0D/NmlEBD +RGdyzoXxvZgejF3Cl7DiVopcBagk96fOzC2bvUa0QXkrbRRRvX8QYBqRBp7auV9 MxXpL8kcxyX1Z8BGYIQovrJ5maQfeEyT0us8hGbvtFnrU3Y4Sv2PNaqlVfo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnw/vRujdXpsFLAyMR6xiKxGbZjQwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2arXniVDgWZ9h+WbYz1E0eSNC7uvIb38FW T5WtdtDVLf3n3SMJpzIh9Sdx051rGyL0mwFBGdC79+ibrKtrcvfTQ+LXq7fV/61U VvA/vKfk+VIb4Fj2k+rA17XTKWh2kEIM4irVYDR/HMSa0zee0HFOzDJuhyL9zLr7 9XGfBTbDUMvoVyUaX/aS1OwiDuX1KCgqjmjrMOI5DbLP+dSLMAQ+LkJu8mvX66I+ MK3gI1PtgvbvOyPWzpw2xCMO/JmKhnN7MrLd91Wx5ZIzcDUSl+2m/5J1UpaNOiXq XZzEJmBnxMJS2VtlsRKl8xTA5o2urP9/vB8O4fre66hXjMQCk6A= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:07 2025 by rpki-client