$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: C6piyVreQp24Wemh6xGKIIdtuBdYH+rs0y5/yunSM4I= Subject key identifier: 8E:76:A8:C7:1E:E6:D0:68:83:43:DD:80:B7:AF:07:96:1B:71:18:E2 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 773FA16260F46C80663BEFB0E838D14D929FD569 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: A4 Signing time: Sun 10 Aug 2025 12:40:00 +0000 Manifest this update: Sun 10 Aug 2025 12:35:00 +0000 Manifest next update: Wed 13 Aug 2025 13:34:00 +0000 Files and hashes: 1: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: D6uWf9f9VURoT+0faLwxVSXAuVBbjEEQ3l9/HwBSoh8=) 2: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 13:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3f:a1:62:60:f4:6c:80:66:3b:ef:b0:e8:38:d1:4d:92:9f:d5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Aug 10 12:35:00 2025 GMT Not After : Aug 13 13:34:00 2025 GMT Subject: CN=8E76A8C71EE6D0688343DD80B7AF07961B7118E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:b2:e9:be:3f:49:54:a9:17:14:23:65:4f: a0:ee:e2:a4:5e:cd:4e:41:49:64:3b:54:f3:7c:9a: 3c:79:26:97:03:81:cf:af:26:b9:df:bd:fd:20:bf: c8:08:5b:d0:00:4e:33:20:61:0c:b0:27:11:2a:d9: e8:76:a8:ed:a5:0e:4d:57:cf:a7:34:14:13:3e:6a: 06:48:79:cd:0b:d3:c0:1f:72:48:99:49:4f:02:f4: 46:06:b8:fd:bd:78:ac:63:dd:a0:16:aa:33:1d:ff: 72:f3:c7:e2:00:dc:55:69:8b:e7:c1:21:0d:35:18: 60:70:1b:5b:a9:ed:2e:f7:7e:b0:23:2b:3e:b9:cc: 4c:e5:f4:9c:98:e4:d0:30:8c:55:61:14:2e:9f:a4: 10:a4:44:dc:40:3b:a9:2c:f7:14:4e:82:ba:9c:46: fe:99:b1:db:9d:f6:03:d0:4c:79:63:fa:3a:b2:8e: ec:47:24:73:b8:d8:64:9a:34:49:e8:18:b0:4e:af: 7c:e7:f5:c1:df:a5:36:3c:4f:2d:f5:75:00:73:1d: 3a:98:1d:60:8d:42:98:17:e5:50:a4:e6:87:4e:e6: 4d:18:20:54:a9:36:92:55:95:0f:55:4d:31:b3:62: a2:b2:3b:6e:d3:78:01:34:7c:f5:7e:33:08:03:5d: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:A8:C7:1E:E6:D0:68:83:43:DD:80:B7:AF:07:96:1B:71:18:E2 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:b0:96:07:ee:f8:b3:8b:c1:dc:d2:25:c1:2e:15:10:28: 84:dc:4f:73:7e:81:43:4b:3a:40:3b:ec:c3:78:9d:c4:a5:26: 68:fd:bc:8e:1e:24:c8:e0:c0:01:33:7d:7a:8d:a6:89:fc:11: ab:fd:cb:86:57:5e:f9:02:e0:9f:72:f4:df:ba:b9:43:42:49: 23:a8:ae:e8:c2:c7:cd:2a:8f:7a:45:60:af:c1:b9:a3:7d:73: 9a:40:1f:8d:0f:80:d5:95:55:58:44:a5:a9:87:15:17:bf:63: 31:a1:ad:fa:c5:fe:e4:49:a0:f9:80:f9:f4:41:84:63:dd:8a: e2:42:47:46:9d:c4:07:55:07:81:e1:44:8e:7e:f2:9e:fb:96: 06:55:70:0f:82:5a:72:6c:77:07:f9:bc:06:6a:c5:da:bd:33: 30:5f:b5:bd:f8:9c:bd:e8:e7:e7:f5:70:5f:fb:2a:50:54:64: fb:77:19:8d:9d:88:8a:78:89:b9:e9:bf:a1:25:4d:18:e9:08: d0:63:8e:03:e8:f9:29:5c:e5:6e:22:eb:9a:49:51:10:7d:a0: a8:5d:6a:06:bc:7c:ee:63:70:0a:8b:62:b5:c1:53:4d:12:9a: 8c:2a:40:3e:32:be:48:30:ae:20:47:f0:c9:a1:cf:1a:06:4e: 6e:aa:3d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdz+hYmD0bIBmO++w6DjRTZKf1WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTA4MTAxMjM1MDBaFw0yNTA4MTMxMzM0MDBaMDMxMTAvBgNV BAMTKDhFNzZBOEM3MUVFNkQwNjg4MzQzREQ4MEI3QUYwNzk2MUI3MTE4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2rLpvj9JVKkXFCNlT6Du4qRe zU5BSWQ7VPN8mjx5JpcDgc+vJrnfvf0gv8gIW9AATjMgYQywJxEq2eh2qO2lDk1X z6c0FBM+agZIec0L08AfckiZSU8C9EYGuP29eKxj3aAWqjMd/3Lzx+IA3FVpi+fB IQ01GGBwG1up7S73frAjKz65zEzl9JyY5NAwjFVhFC6fpBCkRNxAO6ks9xROgrqc Rv6Zsdud9gPQTHlj+jqyjuxHJHO42GSaNEnoGLBOr3zn9cHfpTY8Ty31dQBzHTqY HWCNQpgX5VCk5odO5k0YIFSpNpJVlQ9VTTGzYqKyO27TeAE0fPV+MwgDXYhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjnaoxx7m0GiDQ92At68HlhtxGOIwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP/sJYH7vizi8Hc0iXBLhUQKITcT3N+gUNL OkA77MN4ncSlJmj9vI4eJMjgwAEzfXqNpon8Eav9y4ZXXvkC4J9y9N+6uUNCSSOo rujCx80qj3pFYK/BuaN9c5pAH40PgNWVVVhEpamHFRe/YzGhrfrF/uRJoPmA+fRB hGPdiuJCR0adxAdVB4HhRI5+8p77lgZVcA+CWnJsdwf5vAZqxdq9MzBftb34nL3o 5+f1cF/7KlBUZPt3GY2diIp4ibnpv6ElTRjpCNBjjgPo+Slc5W4i65pJURB9oKhd aga8fO5jcAqLYrXBU00SmowqQD4yvkgwriBH8MmhzxoGTm6qPfc= -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:09 2025 by rpki-client