$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: RfiZWFkLSMbaOM2jbdoEfbu2VtU0LzuDv2db6riOhT8= Subject key identifier: 52:3F:E0:B1:E1:5E:E4:66:30:C1:60:5B:7B:CF:96:3B:BB:1F:85:EE Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 531497CE146F4580C1B36148955871A0519C9E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 01BF Signing time: Tue 05 Aug 2025 23:31:52 +0000 Manifest this update: Tue 05 Aug 2025 23:26:52 +0000 Manifest next update: Sat 09 Aug 2025 04:24:52 +0000 Files and hashes: 1: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) 2: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: 4PvPeMVVZPyLP2QMXWhxjEBGELrSS22Pe0zNrMQvja8=) 3: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) 4: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:97:ce:14:6f:45:80:c1:b3:61:48:95:58:71:a0:51:9c:9e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Aug 5 23:26:52 2025 GMT Not After : Aug 9 04:24:52 2025 GMT Subject: CN=523FE0B1E15EE46630C1605B7BCF963BBB1F85EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:54:61:5d:4c:16:18:8c:e1:18:81:f0:62: f7:23:c6:17:fc:7c:b4:cf:4a:25:d5:38:e7:91:6b: e4:66:a1:af:5f:f4:fe:36:6f:7d:3d:13:42:51:4c: bb:7b:c8:81:16:eb:27:77:64:43:33:90:16:2d:fc: 8c:9c:0d:07:bb:58:71:1e:fa:e8:b5:68:02:00:65: 56:e4:50:44:6f:64:d3:e8:bb:ca:78:76:3f:e9:94: 59:2f:fa:27:5b:f3:07:3d:fb:22:08:46:4f:26:69: 81:3b:fc:1d:8a:61:21:4a:71:1e:f5:96:6d:c4:de: b3:a7:81:02:8a:39:6c:e7:10:1e:24:e5:dd:61:da: 22:d9:91:03:54:ed:d5:f6:63:f6:9d:7e:80:22:14: c9:cb:6d:55:d7:6c:81:ae:be:bc:17:8b:e7:2f:af: de:95:f4:7c:10:0b:af:7b:a1:d6:69:6d:0f:64:60: 44:9d:75:56:63:4a:b4:54:50:1b:92:42:39:53:c7: fb:08:70:94:b3:ff:a2:4a:39:5b:62:42:c5:6b:6a: d9:2d:97:c2:ba:73:b5:e4:55:61:19:76:3d:f2:1d: 59:cc:7a:f6:84:92:a0:da:6a:ec:90:d1:cf:72:47: 60:8c:8a:00:36:29:78:71:10:7c:2c:03:fc:ea:a8: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3F:E0:B1:E1:5E:E4:66:30:C1:60:5B:7B:CF:96:3B:BB:1F:85:EE X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b0:7c:aa:f1:c9:5e:62:68:d2:04:e8:65:a9:10:1e:61:be: a0:ca:69:55:5f:51:56:ec:0f:f2:4d:0e:f7:8a:f1:91:5c:79: c4:ea:d4:aa:d8:a2:cb:42:28:b7:a6:d1:06:fd:11:c6:5f:41: f7:14:b9:64:62:41:ba:b7:9b:4a:96:24:d9:ce:f3:3b:1e:8a: 00:c3:be:da:f4:7c:a5:8f:da:90:80:78:73:53:c8:67:ad:b6: d5:ee:10:e4:19:83:e0:9e:27:2d:df:db:2f:2b:68:98:79:da: a3:66:24:29:a1:1c:45:cd:d2:1d:06:ce:ba:73:99:55:e2:ee: 27:0b:7c:f0:98:c4:cf:59:6e:39:f6:e1:21:27:fe:60:bc:41: 1e:68:e5:4c:30:e9:e2:d3:5d:a9:a1:13:64:8d:30:55:05:0d: f3:ec:b4:d6:51:52:cb:0c:00:13:96:6a:4c:f0:b7:3d:46:42: 3d:ec:83:04:21:3a:69:5a:fb:89:6f:ec:c3:6b:4a:0d:ed:b0: 09:a3:47:16:db:2f:9d:63:a2:99:e4:e1:61:99:e1:47:04:16: 6a:b3:b0:ce:57:46:b4:91:b1:ba:02:dd:71:62:0f:a1:e7:59: c0:bb:02:60:fd:f3:2c:19:af:38:ef:53:a4:97:6c:45:76:27: 55:88:03:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxSXzhRvRYDBs2FIlVhxoFGcnn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA4MDUyMzI2NTJaFw0yNTA4MDkwNDI0NTJaMDMxMTAvBgNV BAMTKDUyM0ZFMEIxRTE1RUU0NjYzMEMxNjA1QjdCQ0Y5NjNCQkIxRjg1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuR1RhXUwWGIzhGIHwYvcjxhf8 fLTPSiXVOOeRa+Rmoa9f9P42b309E0JRTLt7yIEW6yd3ZEMzkBYt/IycDQe7WHEe +ui1aAIAZVbkUERvZNPou8p4dj/plFkv+idb8wc9+yIIRk8maYE7/B2KYSFKcR71 lm3E3rOngQKKOWznEB4k5d1h2iLZkQNU7dX2Y/adfoAiFMnLbVXXbIGuvrwXi+cv r96V9HwQC697odZpbQ9kYESddVZjSrRUUBuSQjlTx/sIcJSz/6JKOVtiQsVratkt l8K6c7XkVWEZdj3yHVnMevaEkqDaauyQ0c9yR2CMigA2KXhxEHwsA/zqqAgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUj/gseFe5GYwwWBbe8+WO7sfhe4wHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2wfKrxyV5iaNIE6GWpEB5hvqDKaVVfUVbs D/JNDveK8ZFcecTq1KrYostCKLem0Qb9EcZfQfcUuWRiQbq3m0qWJNnO8zseigDD vtr0fKWP2pCAeHNTyGetttXuEOQZg+CeJy3f2y8raJh52qNmJCmhHEXN0h0Gzrpz mVXi7icLfPCYxM9Zbjn24SEn/mC8QR5o5Uww6eLTXamhE2SNMFUFDfPstNZRUssM ABOWakzwtz1GQj3sgwQhOmla+4lv7MNrSg3tsAmjRxbbL51jopnk4WGZ4UcEFmqz sM5XRrSRsboC3XFiD6HnWcC7AmD98ywZrzjvU6SXbEV2J1WIA+E= -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:48 2025 by rpki-client