$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: P+IWEkydKC98gzjwfEkdHdmoIug4/K2oEfamDRJzzQA= Subject key identifier: 3F:57:BD:BB:E3:12:AE:80:B0:8B:84:7B:6A:41:1B:3F:5B:EB:95:F2 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 35C3615C5890BDD9E94D39027A44F4F156F157B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: B8 Signing time: Sat 09 Aug 2025 05:40:37 +0000 Manifest this update: Sat 09 Aug 2025 05:35:37 +0000 Manifest next update: Tue 12 Aug 2025 16:13:37 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 3: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: t7AuKwnMsyS5HtvEVkv1jQ9vnM1OcSag9xnwtfK8lRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 16:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c3:61:5c:58:90:bd:d9:e9:4d:39:02:7a:44:f4:f1:56:f1:57:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Aug 9 05:35:37 2025 GMT Not After : Aug 12 16:13:37 2025 GMT Subject: CN=3F57BDBBE312AE80B08B847B6A411B3F5BEB95F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:de:b3:4d:bd:e0:f2:f2:77:e3:43:a4:52: 10:78:f5:b2:f0:a2:78:a6:b2:fe:d7:67:55:32:53: 86:6d:fd:66:94:96:b1:b3:42:bc:56:63:d8:06:29: 1e:f9:5d:c5:b9:8b:b8:05:7a:41:e6:29:33:af:6c: 69:51:9c:85:06:5c:1b:43:2a:1f:d4:b4:b2:c5:f6: 48:9b:08:1f:bf:72:bd:6c:61:24:01:0b:af:84:ae: b8:69:05:03:ed:13:af:82:a5:11:e1:49:ef:0d:d0: 59:62:b9:f2:db:42:05:8b:8c:9d:9b:7f:48:f7:c5: 02:4a:49:64:dd:9c:73:a2:72:dd:12:73:82:ec:ac: 7d:ba:56:47:10:c2:a4:9e:46:b6:08:1a:14:1e:13: a6:bf:1a:cb:37:97:c7:96:38:0c:5e:ec:50:5c:22: 29:01:c8:c8:f7:46:fd:8a:47:60:07:61:9b:3b:ff: 97:9b:55:e4:90:ad:fd:a7:cd:a9:e3:0a:87:af:31: 0e:31:54:05:51:fe:6b:70:5e:8c:fc:7b:88:81:a5: 6a:3a:a0:09:16:c3:7b:ec:92:81:90:08:af:ad:1b: 61:6a:35:08:a6:15:66:50:73:63:21:ef:63:5a:0e: 82:26:b7:b7:38:b0:d3:9a:4c:1e:1b:bd:45:e1:7a: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:57:BD:BB:E3:12:AE:80:B0:8B:84:7B:6A:41:1B:3F:5B:EB:95:F2 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:50:ee:94:45:5e:c2:5b:2e:12:a0:f5:80:ba:7a:e7:16:ae: 03:87:96:68:48:b9:84:c5:bd:13:81:ef:d4:db:d4:fd:b8:b7: cf:7d:91:4c:bf:7f:ad:6e:87:65:5a:38:3d:d8:2f:9e:ec:1c: 68:70:f3:6a:da:84:58:a1:68:bb:a5:3f:a8:70:91:c8:54:3b: cf:e0:2b:64:8a:22:78:f5:69:66:7a:2a:4c:ec:bf:3f:5a:78: 9b:37:be:d4:60:a6:2f:bc:93:fc:ca:1d:da:3e:23:72:5b:99: b4:f3:ec:74:1f:6d:14:04:12:09:f8:93:f2:06:f2:da:d7:e6: 43:b1:53:38:52:ff:e9:c4:fe:ef:86:6d:55:16:25:42:49:e7: 7c:66:cd:ee:e0:e2:f8:17:b1:9b:69:aa:f2:9c:06:46:14:43: cd:f8:11:95:62:da:f6:88:96:58:09:51:4b:c5:e8:66:4a:db: 82:30:0d:7a:c1:59:8a:fa:f8:2b:b8:6d:c6:94:ca:1e:f5:4c: 00:50:7f:9e:6c:89:42:c2:70:24:9b:96:94:53:cf:ce:01:c3: b5:a1:21:09:d8:73:88:92:f7:56:5b:3b:1d:6c:88:c8:3e:e4: fd:78:38:15:47:c7:89:62:2c:ee:0a:20:5d:8d:f7:92:c4:75: c2:fc:e2:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcNhXFiQvdnpTTkCekT08VbxV7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA4MDkwNTM1MzdaFw0yNTA4MTIxNjEzMzdaMDMxMTAvBgNV BAMTKDNGNTdCREJCRTMxMkFFODBCMDhCODQ3QjZBNDExQjNGNUJFQjk1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCna96zTb3g8vJ340OkUhB49bLw onimsv7XZ1UyU4Zt/WaUlrGzQrxWY9gGKR75XcW5i7gFekHmKTOvbGlRnIUGXBtD Kh/UtLLF9kibCB+/cr1sYSQBC6+ErrhpBQPtE6+CpRHhSe8N0FliufLbQgWLjJ2b f0j3xQJKSWTdnHOict0Sc4LsrH26VkcQwqSeRrYIGhQeE6a/Gss3l8eWOAxe7FBc IikByMj3Rv2KR2AHYZs7/5ebVeSQrf2nzanjCoevMQ4xVAVR/mtwXoz8e4iBpWo6 oAkWw3vskoGQCK+tG2FqNQimFWZQc2Mh72NaDoImt7c4sNOaTB4bvUXhehwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1e9u+MSroCwi4R7akEbP1vrlfIwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhQ7pRFXsJbLhKg9YC6eucWrgOHlmhIuYTF vROB79Tb1P24t899kUy/f61uh2VaOD3YL57sHGhw82rahFihaLulP6hwkchUO8/g K2SKInj1aWZ6Kkzsvz9aeJs3vtRgpi+8k/zKHdo+I3JbmbTz7HQfbRQEEgn4k/IG 8trX5kOxUzhS/+nE/u+GbVUWJUJJ53xmze7g4vgXsZtpqvKcBkYUQ834EZVi2vaI llgJUUvF6GZK24IwDXrBWYr6+Cu4bcaUyh71TABQf55siULCcCSblpRTz84Bw7Wh IQnYc4iS91ZbOx1siMg+5P14OBVHx4liLO4KIF2N95LEdcL84ko= -----END CERTIFICATE-----Generated at Mon Aug 11 06:28:16 2025 by rpki-client