$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft File: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft (raw, json) Hash identifier: N0TwrK7HFlcfRozvbtSOxTmJnZsF3NtvT4XxWjmhXIQ= Subject key identifier: 3A:96:14:82:0C:FF:CB:53:58:87:CA:3F:42:2B:8E:2C:BD:B3:F6:22 Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 3CC5CC205950FBB673837C633DDCA12014D07939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft Manifest number: 01B2 Signing time: Thu 07 Aug 2025 00:32:18 +0000 Manifest this update: Thu 07 Aug 2025 00:27:18 +0000 Manifest next update: Sun 10 Aug 2025 03:20:18 +0000 Files and hashes: 1: 3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (hash: vX/A9y9l7mDzRfDBjuCxoiwVgHmV7OjNWsTWxTukflI=) 2: 3130332e33392e37302e302f32342d3234203d3e20313530323734.roa (hash: n9HiNkJ52DbLxZISXERFZtFdqx3265M08OZ/zKtOVYU=) 3: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (hash: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY=) 4: 9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl (hash: M9gUK8lgXNu8Pd+zqcVb80iODhswysPRNveD8vCHYVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c5:cc:20:59:50:fb:b6:73:83:7c:63:3d:dc:a1:20:14:d0:79:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Aug 7 00:27:18 2025 GMT Not After : Aug 10 03:20:18 2025 GMT Subject: CN=3A9614820CFFCB535887CA3F422B8E2CBDB3F622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:2d:41:55:56:16:ed:67:24:c9:f0:53:a1: 5c:00:fa:47:55:2f:12:32:b7:d1:64:db:52:ec:04: 40:e0:20:c6:9b:28:f3:fb:52:89:c2:fe:27:62:a4: 23:d5:62:f3:64:63:81:4b:62:bd:01:29:60:a8:90: ca:42:94:1a:c0:7e:7a:f8:ce:2b:36:6f:4d:71:62: 2d:cf:bc:46:ac:95:4d:9e:a0:0b:9e:2e:8f:46:ef: a2:53:73:ab:e3:cf:3b:b9:4b:73:d5:4b:db:ff:3a: e2:a0:93:a1:66:49:ca:a5:8e:65:98:a5:b1:27:13: c6:88:fb:9c:00:80:08:14:e9:df:99:cc:3e:53:33: 3b:0d:ed:e2:18:e8:48:dc:ae:44:59:ab:58:56:4a: fe:f8:ea:2f:82:2f:5c:18:e3:f7:f1:1a:f8:d5:21: bf:0b:07:8c:0b:40:5d:0e:2e:80:13:8f:ea:e1:cc: 09:0e:5c:24:30:c3:a7:21:a6:eb:58:b9:d6:d3:c8: f3:f2:ca:87:48:ef:5b:ca:d3:55:3a:44:6b:72:63: 0a:85:f8:61:0d:d3:3d:e9:cd:2a:24:00:25:fe:9a: bf:f8:a4:a4:3c:56:85:14:ef:3c:a8:9f:7f:15:38: ed:f7:39:cc:11:a0:f3:38:0f:8d:81:02:36:03:41: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:14:82:0C:FF:CB:53:58:87:CA:3F:42:2B:8E:2C:BD:B3:F6:22 X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:a3:dd:be:04:6a:c1:be:3a:7a:8b:04:d8:2e:c7:52:68: 8f:83:c9:74:ea:ce:ec:7e:33:34:65:33:4b:76:23:95:2f:98: 97:d7:84:6c:72:5e:38:7c:03:18:15:96:94:48:49:18:da:5d: 7f:2d:70:aa:ce:5a:61:91:7e:ce:d6:64:b7:31:b0:7b:55:ce: fe:69:f1:3c:38:8a:bf:8f:7b:55:bc:56:d6:44:2c:88:7a:30: c1:37:1b:69:61:79:d1:06:8d:15:c9:7e:ed:ee:1d:40:97:cf: 28:4e:a7:7c:bd:ff:4e:f1:64:9d:2e:22:d3:9a:2d:7e:68:03: fa:c5:f2:59:a5:c0:68:41:6c:3f:5f:64:f4:0c:ec:84:26:47: 17:91:d6:1a:3a:3f:e4:af:45:07:57:f4:e4:86:d4:b7:ca:7a: 1b:4e:40:cb:27:d0:d8:6f:37:04:b0:69:1d:8e:30:99:4b:c6: 02:c2:d2:d0:d0:f6:3c:35:9f:27:eb:20:d5:7b:9c:d2:8d:4f: 86:fe:9a:e2:21:0e:bd:66:66:be:ed:21:32:d8:84:85:8f:41: cc:c3:c5:b8:b8:4c:7b:08:b4:83:b2:b4:3c:4a:6e:c4:6f:51: 23:96:db:a7:e0:56:c2:89:14:ae:d0:7e:ba:a0:18:34:75:95: 65:ce:f7:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMXMIFlQ+7Zzg3xjPdyhIBTQeTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTA4MDcwMDI3MThaFw0yNTA4MTAwMzIwMThaMDMxMTAvBgNV BAMTKDNBOTYxNDgyMENGRkNCNTM1ODg3Q0EzRjQyMkI4RTJDQkRCM0Y2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtki1BVVYW7WckyfBToVwA+kdV LxIyt9Fk21LsBEDgIMabKPP7UonC/idipCPVYvNkY4FLYr0BKWCokMpClBrAfnr4 zis2b01xYi3PvEaslU2eoAueLo9G76JTc6vjzzu5S3PVS9v/OuKgk6FmScqljmWY pbEnE8aI+5wAgAgU6d+ZzD5TMzsN7eIY6EjcrkRZq1hWSv746i+CL1wY4/fxGvjV Ib8LB4wLQF0OLoATj+rhzAkOXCQww6chputYudbTyPPyyodI71vK01U6RGtyYwqF +GEN0z3pzSokACX+mr/4pKQ8VoUU7zyon38VOO33OcwRoPM4D42BAjYDQR+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpYUggz/y1NYh8o/QiuOLL2z9iIwHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1N2Q1NDMtYmFmMC00MzQ4LTg4 NTctM2QyNjAxYzNhODAzLzAvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5 MkU5NEY1QUI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMZo92+BGrBvjp6iwTYLsdSaI+DyXTqzux+ MzRlM0t2I5UvmJfXhGxyXjh8AxgVlpRISRjaXX8tcKrOWmGRfs7WZLcxsHtVzv5p 8Tw4ir+Pe1W8VtZELIh6MME3G2lhedEGjRXJfu3uHUCXzyhOp3y9/07xZJ0uItOa LX5oA/rF8lmlwGhBbD9fZPQM7IQmRxeR1ho6P+SvRQdX9OSG1LfKehtOQMsn0Nhv NwSwaR2OMJlLxgLC0tDQ9jw1nyfrINV7nNKNT4b+muIhDr1mZr7tITLYhIWPQczD xbi4THsItIOytDxKbsRvUSOW26fgVsKJFK7QfrqgGDR1lWXO9w4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:16 2025 by rpki-client