$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: IDUpgV8YA8wmLn/saoZb2E2qK/cZTItIINJBgax52Ec= Subject key identifier: B1:FE:2E:FF:9B:4A:9F:F3:8A:E2:9E:07:49:33:93:4C:4D:CA:A3:34 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 1EF1A98377778CCD5EDF2131CE4DD077724397E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: BE Signing time: Mon 11 Aug 2025 16:01:28 +0000 Manifest this update: Mon 11 Aug 2025 15:56:28 +0000 Manifest next update: Thu 14 Aug 2025 19:42:28 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: TyAnuW6NLQRmj4fjQefjwsWtnfu/gNfWdjSVi1aRtBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 19:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f1:a9:83:77:77:8c:cd:5e:df:21:31:ce:4d:d0:77:72:43:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Aug 11 15:56:28 2025 GMT Not After : Aug 14 19:42:28 2025 GMT Subject: CN=B1FE2EFF9B4A9FF38AE29E074933934C4DCAA334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:12:50:75:57:05:b1:03:d4:55:83:2c:5b: df:78:cc:90:73:75:a6:17:35:cc:44:e5:36:42:c6: cb:ea:8b:e0:59:28:51:68:d7:31:55:1d:69:7e:d0: b0:35:a6:fd:e2:3a:b7:db:d0:5f:31:08:57:4c:02: 79:43:18:9d:6c:a8:19:2d:55:48:f4:26:8c:6e:60: 07:77:67:6e:62:95:6a:dc:8a:03:3e:cb:5d:a4:3a: e9:e4:45:de:c7:b2:c0:db:eb:9d:87:28:72:9f:ba: fb:f4:ce:dd:ba:65:ba:f4:89:d9:ff:0e:f7:a2:f2: e7:8a:40:a6:65:5c:8e:58:1d:9c:c8:c8:41:a1:1d: 16:77:38:66:fb:6b:25:f5:e8:7a:7a:79:6e:a0:d3: 4b:7b:14:c2:23:af:f1:c5:d4:c1:a1:10:a7:f6:49: 94:e8:df:8b:01:78:41:62:5a:46:02:50:88:97:cc: da:e2:a0:b2:a1:0d:5e:6d:d9:91:82:d2:09:bb:21: e1:fa:0c:76:45:e5:d3:b2:a2:3f:59:26:6c:6a:1f: a7:21:fa:e5:6d:e3:3e:39:93:93:18:22:23:15:36: 92:fd:15:37:c4:db:64:31:7c:fd:76:54:3a:1d:0d: 8f:26:e6:f3:e3:f4:99:f0:c7:25:70:98:db:1b:a9: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:2E:FF:9B:4A:9F:F3:8A:E2:9E:07:49:33:93:4C:4D:CA:A3:34 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ed:80:c8:81:6f:15:a8:d4:b5:a1:7f:c3:b3:fe:7f:84:9c: 97:e1:e4:7a:ad:5f:55:b4:7e:87:71:2e:96:ab:8a:4e:47:9e: a6:ad:71:3d:83:f6:21:6c:f4:17:77:b7:8e:59:6d:c0:5f:0e: 9b:bf:3c:cb:cf:c2:88:d8:10:de:80:55:53:de:a3:a3:70:64: eb:8b:37:b6:a5:a4:fa:80:9f:c7:51:dd:34:e0:0c:5c:c9:ff: b8:16:75:15:f2:b0:00:2d:38:b9:76:ed:2c:03:71:53:d2:05: c3:c8:fd:06:42:a3:52:2a:44:99:5d:a6:62:48:c6:37:e0:62: 8d:23:a8:24:36:6e:78:07:d9:df:82:26:c4:14:5d:95:7c:6c: f9:cb:12:5e:f5:0f:7e:3a:25:78:e9:6d:6a:4d:3b:49:ea:1b: d8:5e:3e:30:50:dd:63:d0:55:f6:f6:7f:1d:67:47:e2:97:ee: aa:97:dc:31:53:f6:15:23:a7:2a:27:cb:c9:93:ca:e0:f8:0d: a6:95:39:29:43:d9:06:b7:24:14:50:87:58:dd:a6:e9:96:37: 14:44:09:b0:d9:d7:18:84:48:33:b8:71:f2:08:8a:6d:94:c1: c9:e6:41:63:2a:98:4f:7c:a2:07:36:6d:5b:5a:66:99:f9:55: 66:20:1b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvGpg3d3jM1e3yExzk3Qd3JDl+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA4MTExNTU2MjhaFw0yNTA4MTQxOTQyMjhaMDMxMTAvBgNV BAMTKEIxRkUyRUZGOUI0QTlGRjM4QUUyOUUwNzQ5MzM5MzRDNERDQUEzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWRJQdVcFsQPUVYMsW994zJBz daYXNcxE5TZCxsvqi+BZKFFo1zFVHWl+0LA1pv3iOrfb0F8xCFdMAnlDGJ1sqBkt VUj0JoxuYAd3Z25ilWrcigM+y12kOunkRd7HssDb652HKHKfuvv0zt26Zbr0idn/ Dvei8ueKQKZlXI5YHZzIyEGhHRZ3OGb7ayX16Hp6eW6g00t7FMIjr/HF1MGhEKf2 SZTo34sBeEFiWkYCUIiXzNrioLKhDV5t2ZGC0gm7IeH6DHZF5dOyoj9ZJmxqH6ch +uVt4z45k5MYIiMVNpL9FTfE22QxfP12VDodDY8m5vPj9JnwxyVwmNsbqVVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsf4u/5tKn/OK4p4HSTOTTE3KozQwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrtgMiBbxWo1LWhf8Oz/n+EnJfh5HqtX1W0 fodxLparik5HnqatcT2D9iFs9Bd3t45ZbcBfDpu/PMvPwojYEN6AVVPeo6NwZOuL N7alpPqAn8dR3TTgDFzJ/7gWdRXysAAtOLl27SwDcVPSBcPI/QZCo1IqRJldpmJI xjfgYo0jqCQ2bngH2d+CJsQUXZV8bPnLEl71D346JXjpbWpNO0nqG9hePjBQ3WPQ Vfb2fx1nR+KX7qqX3DFT9hUjpyony8mTyuD4DaaVOSlD2Qa3JBRQh1jdpumWNxRE CbDZ1xiESDO4cfIIim2UwcnmQWMqmE98ogc2bVtaZpn5VWYgG6I= -----END CERTIFICATE-----Generated at Wed Aug 13 02:44:15 2025 by rpki-client