$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: sKfU+DDHZh24w5fh8CmpYj81I/XQ+onBRbmE9I+YIK8= Subject key identifier: 52:79:03:E7:64:61:EA:5C:ED:D9:F3:4E:F2:0B:34:4D:9E:6A:4F:7E Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 363773BD2C64C569386FC8DC9CD19E3710A05A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 04F7 Signing time: Mon 04 Aug 2025 23:11:38 +0000 Manifest this update: Mon 04 Aug 2025 23:06:38 +0000 Manifest next update: Fri 08 Aug 2025 09:25:38 +0000 Files and hashes: 1: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) 3: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: GfPLitbuOMJa4vX7GEdoEyDypDduZt9SOzsLMP8lXFM=) 4: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:73:bd:2c:64:c5:69:38:6f:c8:dc:9c:d1:9e:37:10:a0:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Aug 4 23:06:38 2025 GMT Not After : Aug 8 09:25:38 2025 GMT Subject: CN=527903E76461EA5CEDD9F34EF20B344D9E6A4F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:d8:de:6a:0e:fb:31:08:8c:ca:db:a0:f6: de:91:20:f0:ce:96:d0:92:16:ae:f9:5a:00:ac:11: fd:44:94:66:91:6e:bb:75:38:ad:63:44:b8:b2:55: f0:50:27:09:46:43:04:45:3e:3d:0a:f0:31:b6:9a: 2a:f3:9d:42:89:38:80:88:a4:ab:a1:14:71:56:5b: 62:45:f3:95:4b:4c:c6:6e:77:aa:6f:26:de:11:ce: 02:11:e9:a4:66:e4:38:48:b5:84:71:04:ed:09:ea: e9:d2:d3:6a:6e:ab:74:e8:84:06:c6:9b:53:d3:e7: cd:4f:d1:38:e9:4f:b9:2b:6b:8f:13:47:65:91:3e: 41:c5:5f:f2:57:94:4f:df:74:58:e7:f9:6e:79:31: f0:f4:f2:cc:3f:26:c2:04:8c:b8:b8:81:02:8f:69: 22:e3:91:5c:c8:17:4a:71:f3:23:98:ca:f0:01:4e: 66:09:d3:c6:02:a2:c4:07:55:8a:6f:67:94:e3:65: 3c:ee:3b:49:c6:17:65:75:b5:e3:f2:ff:57:ed:6b: ff:e6:30:59:46:ad:e5:a2:ae:65:a3:27:34:97:01: c8:49:19:d9:28:f0:45:87:c6:27:78:27:75:38:88: 01:71:62:3f:f5:1f:df:1f:0e:e8:00:11:9d:87:6f: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:79:03:E7:64:61:EA:5C:ED:D9:F3:4E:F2:0B:34:4D:9E:6A:4F:7E X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b9:59:36:18:a9:a9:29:74:8d:c6:3a:b5:15:61:29:88:73: d0:fb:61:f0:c4:3d:11:38:65:c0:35:01:b6:b0:dc:d5:6a:04: a8:fb:95:6f:5b:5c:ad:46:8d:d2:d5:bc:02:6e:4b:80:e4:a2: de:63:05:59:14:41:17:de:82:76:b1:fc:51:41:33:3b:1d:72: 2d:b8:1a:26:6b:22:8e:2c:7e:5d:aa:c3:1b:1b:9b:80:87:ff: 88:32:eb:60:20:c0:f3:af:cc:f1:db:1f:16:54:2b:d9:01:ce: 8f:d8:ce:54:a0:39:4e:98:da:96:f7:2b:24:76:67:44:e6:d5: d4:99:5b:83:8a:43:eb:37:b3:ca:b1:4a:72:1f:2f:87:53:4e: f0:c1:82:45:e7:97:3a:38:86:9d:68:1b:ce:01:31:1b:aa:af: 90:cd:a4:24:ae:ac:b1:ba:c5:b8:6e:e8:74:70:a1:9a:3f:57: 3e:02:1f:86:6b:09:02:cb:a5:f0:16:b2:b4:aa:e8:0d:c6:6e: ca:c6:22:67:e7:c2:7a:98:b9:2f:39:78:2a:19:d8:31:5d:10: 76:1d:30:67:74:5a:a6:32:87:6d:ef:8f:53:3f:d2:4d:cd:de: f2:81:00:af:a1:45:e3:8f:d7:22:c4:9a:a3:a7:b3:e2:65:33: 62:c7:43:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjdzvSxkxWk4b8jcnNGeNxCgWgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTA4MDQyMzA2MzhaFw0yNTA4MDgwOTI1MzhaMDMxMTAvBgNV BAMTKDUyNzkwM0U3NjQ2MUVBNUNFREQ5RjM0RUYyMEIzNDREOUU2QTRGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rtjeag77MQiMytug9t6RIPDO ltCSFq75WgCsEf1ElGaRbrt1OK1jRLiyVfBQJwlGQwRFPj0K8DG2mirznUKJOICI pKuhFHFWW2JF85VLTMZud6pvJt4RzgIR6aRm5DhItYRxBO0J6unS02puq3TohAbG m1PT581P0TjpT7kra48TR2WRPkHFX/JXlE/fdFjn+W55MfD08sw/JsIEjLi4gQKP aSLjkVzIF0px8yOYyvABTmYJ08YCosQHVYpvZ5TjZTzuO0nGF2V1tePy/1fta//m MFlGreWirmWjJzSXAchJGdko8EWHxid4J3U4iAFxYj/1H98fDugAEZ2Hb++DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnkD52Rh6lzt2fNO8gs0TZ5qT34wHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK5WTYYqakpdI3GOrUVYSmIc9D7YfDEPRE4 ZcA1Abaw3NVqBKj7lW9bXK1GjdLVvAJuS4Dkot5jBVkUQRfegnax/FFBMzsdci24 GiZrIo4sfl2qwxsbm4CH/4gy62AgwPOvzPHbHxZUK9kBzo/YzlSgOU6Y2pb3KyR2 Z0Tm1dSZW4OKQ+s3s8qxSnIfL4dTTvDBgkXnlzo4hp1oG84BMRuqr5DNpCSurLG6 xbhu6HRwoZo/Vz4CH4ZrCQLLpfAWsrSq6A3GbsrGImfnwnqYuS85eCoZ2DFdEHYd MGd0WqYyh23vj1M/0k3N3vKBAK+hReOP1yLEmqOns+JlM2LHQ3s= -----END CERTIFICATE-----Generated at Thu Aug 7 00:38:15 2025 by rpki-client