$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: bli6zQ5scGXz/4Ng2LycrK8fAZDPJOTYoUue2czx+J0= Subject key identifier: 9B:0F:23:1B:5A:4B:52:FB:6A:34:4E:11:C4:30:FC:5C:56:99:D1:34 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 21F27463BBC8E3E7784056E43BABF7D1768DC299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 9C Signing time: Tue 05 Aug 2025 11:21:08 +0000 Manifest this update: Tue 05 Aug 2025 11:16:08 +0000 Manifest next update: Fri 08 Aug 2025 16:56:08 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: 9AT3nVC283zn1a9tncinAzD30rIgdEFOQYm9u+gSucs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f2:74:63:bb:c8:e3:e7:78:40:56:e4:3b:ab:f7:d1:76:8d:c2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Aug 5 11:16:08 2025 GMT Not After : Aug 8 16:56:08 2025 GMT Subject: CN=9B0F231B5A4B52FB6A344E11C430FC5C5699D134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:10:22:5f:21:df:24:b5:71:e4:ff:85:7b: ff:32:6d:7a:2f:73:41:4d:c8:dc:64:f2:d1:e6:bf: e0:24:98:2a:ef:14:38:c2:32:d5:43:cb:d1:40:8c: ad:7f:e1:bc:93:e1:4c:8d:e0:bc:7c:d3:a1:3b:79: a4:36:8c:5f:5b:a3:5c:26:25:3d:45:85:94:0f:9c: 81:0d:b6:b2:4c:7e:bc:0c:c2:35:01:21:98:ce:6f: 00:23:93:5d:09:c1:b2:c8:9b:db:ad:4d:32:ea:b4: 30:e6:c4:bb:02:2c:42:45:5e:bc:78:ef:dc:ee:72: 26:02:43:af:9d:a6:5a:fe:93:fd:04:1f:e7:c0:66: fe:2f:6c:3a:07:b7:54:35:40:32:e2:6e:7c:07:04: 90:96:6a:81:1a:80:aa:83:64:f2:00:f2:d5:3a:89: 41:e0:69:4b:21:e8:82:87:c1:47:fb:40:22:59:2f: b4:da:9d:a4:f8:b1:1c:a0:ae:9b:48:b0:5b:f5:f8: 19:6d:ed:f8:bb:90:51:f1:9a:bf:c6:ad:c9:36:51: a1:e8:6a:7d:37:0c:ff:74:a7:29:14:f8:49:f7:b3: f4:4f:ff:82:f0:b7:77:5b:e0:70:a7:ec:46:14:6d: 17:cd:4e:8f:58:b1:46:f2:77:15:41:43:25:f2:53: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0F:23:1B:5A:4B:52:FB:6A:34:4E:11:C4:30:FC:5C:56:99:D1:34 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:03:72:bd:03:3b:1a:1c:f1:12:cc:c5:eb:95:2e:77:5d:21: 99:b6:6a:e2:69:e0:bc:23:4b:56:b2:aa:69:ca:47:98:5a:46: 12:c8:81:46:b4:c3:5a:61:c8:2e:96:c3:6d:2a:e9:68:b4:94: f2:d7:f1:bd:90:41:d6:c0:82:ec:18:15:a5:4d:76:3f:ca:ed: 4e:94:46:fb:fd:94:5c:48:73:e5:53:60:e9:01:bc:73:d7:07: 3d:1c:2c:c9:09:87:d4:a7:32:65:a9:0e:bd:07:46:95:54:38: 7a:10:cd:f1:11:74:b7:87:b8:f1:94:ab:5e:48:37:eb:7d:33: ee:14:61:f7:f6:d0:79:67:f3:22:53:72:98:e3:6a:7d:0b:cd: c4:aa:00:9d:9d:6f:4c:e9:54:67:06:0b:91:73:e8:fd:93:e0: 08:e0:88:91:8d:ed:90:fa:d1:1f:5f:26:f3:17:b6:63:22:de: 33:a0:38:05:92:c6:a1:39:ec:10:52:a6:97:2d:a8:72:10:14: 90:44:cc:fb:d5:16:40:1d:de:24:eb:d8:01:b3:35:6c:11:a6: 92:e6:0f:5d:8e:be:71:49:81:12:77:a7:22:a5:47:9c:99:7f: 81:10:5e:20:7e:57:29:ee:ee:c2:b0:e1:bd:f5:b5:74:8d:fd: 29:14:c0:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfJ0Y7vI4+d4QFbkO6v30XaNwpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA4MDUxMTE2MDhaFw0yNTA4MDgxNjU2MDhaMDMxMTAvBgNV BAMTKDlCMEYyMzFCNUE0QjUyRkI2QTM0NEUxMUM0MzBGQzVDNTY5OUQxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZBAiXyHfJLVx5P+Fe/8ybXov c0FNyNxk8tHmv+AkmCrvFDjCMtVDy9FAjK1/4byT4UyN4Lx806E7eaQ2jF9bo1wm JT1FhZQPnIENtrJMfrwMwjUBIZjObwAjk10JwbLIm9utTTLqtDDmxLsCLEJFXrx4 79zuciYCQ6+dplr+k/0EH+fAZv4vbDoHt1Q1QDLibnwHBJCWaoEagKqDZPIA8tU6 iUHgaUsh6IKHwUf7QCJZL7TanaT4sRygrptIsFv1+Blt7fi7kFHxmr/Grck2UaHo an03DP90pykU+En3s/RP/4Lwt3db4HCn7EYUbRfNTo9YsUbydxVBQyXyU4dBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmw8jG1pLUvtqNE4RxDD8XFaZ0TQwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUDcr0DOxoc8RLMxeuVLnddIZm2auJp4Lwj S1ayqmnKR5haRhLIgUa0w1phyC6Ww20q6Wi0lPLX8b2QQdbAguwYFaVNdj/K7U6U Rvv9lFxIc+VTYOkBvHPXBz0cLMkJh9SnMmWpDr0HRpVUOHoQzfERdLeHuPGUq15I N+t9M+4UYff20Hln8yJTcpjjan0LzcSqAJ2db0zpVGcGC5Fz6P2T4AjgiJGN7ZD6 0R9fJvMXtmMi3jOgOAWSxqE57BBSppctqHIQFJBEzPvVFkAd3iTr2AGzNWwRppLm D12OvnFJgRJ3pyKlR5yZf4EQXiB+Vynu7sKw4b31tXSN/SkUwCI= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:24 2025 by rpki-client