$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: W7q6Vj+kPGaqokrGVZEnCGTTFHhJ9UxmYoYLmXK4E3k= Subject key identifier: 04:66:83:74:09:C2:14:60:60:C1:DA:9A:5A:69:2E:4C:E3:D7:7E:64 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 2E2C58C154D2AA05AFED508AB60130E8B415C5A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 01F0 Signing time: Wed 06 Aug 2025 05:31:49 +0000 Manifest this update: Wed 06 Aug 2025 05:26:49 +0000 Manifest next update: Sat 09 Aug 2025 07:19:49 +0000 Files and hashes: 1: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) 2: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 3: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 4: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 5: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 6: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: ChmWISZOP47wSWOsemAifVML3V0wViDKY5hbGJrWvHM=) 7: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 8: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 9: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 10: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 11: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 12: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 14: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 15: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 16: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 17: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2c:58:c1:54:d2:aa:05:af:ed:50:8a:b6:01:30:e8:b4:15:c5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Aug 6 05:26:49 2025 GMT Not After : Aug 9 07:19:49 2025 GMT Subject: CN=0466837409C2146060C1DA9A5A692E4CE3D77E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:a8:d5:41:ab:eb:df:5a:8a:62:58:ec:2a: a3:9b:3e:b8:1b:37:99:4d:eb:85:51:32:4d:e5:09: 63:ea:5b:94:69:31:38:a8:6f:bf:12:c8:9f:4b:d9: bf:a3:32:93:be:eb:30:5a:eb:5b:6b:fc:7e:77:d4: 51:fa:66:d8:dc:51:e6:8c:db:71:95:43:d5:36:d9: 3b:a8:29:08:63:97:1e:be:93:3c:b6:be:d6:95:07: a9:26:ee:b2:43:c5:a0:97:e8:9b:e1:02:39:d9:5e: f6:7f:9e:f2:db:a8:93:ff:56:9b:ac:98:57:ba:e1: e8:85:1c:f5:1b:f1:7e:7b:db:e7:a8:4b:e9:74:fd: ca:6f:99:55:a3:c0:19:54:f3:1e:1d:59:1f:ac:74: 82:96:93:a6:61:3a:45:a7:be:05:d4:e8:8c:b7:f1: 48:a2:d4:c6:56:9c:96:f1:ad:d7:af:86:2d:03:41: ae:8e:c9:5c:74:3d:c9:fd:3f:54:2b:4e:01:e2:55: a7:34:64:eb:92:6e:be:8f:d9:18:e8:13:b9:d3:e3: 60:f3:1e:72:bb:56:fe:a5:a6:a4:cf:12:19:fb:a7: 68:b3:ba:99:d6:14:65:01:c0:39:56:fa:4b:a3:50: 71:e7:88:1b:12:a6:3e:26:4b:5f:b6:a6:8e:49:32: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:83:74:09:C2:14:60:60:C1:DA:9A:5A:69:2E:4C:E3:D7:7E:64 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b4:8a:0b:09:49:e9:22:39:a7:87:e2:db:96:fe:3f:b4:05: f6:f3:ca:ac:0e:b1:32:51:a2:63:65:69:10:e1:36:ad:7b:93: ee:ac:32:74:f0:ab:a3:79:ec:9c:88:59:b1:5d:0d:a0:b2:3c: e6:c8:1f:4b:06:1b:4e:da:6b:12:fb:c0:28:b4:04:13:e7:d2: aa:8b:02:74:de:98:c8:88:15:00:df:5c:de:3a:31:21:99:24: b3:64:0b:9e:d1:5b:4d:9c:0f:a3:4a:6b:23:a5:f1:83:f4:37: 50:31:be:54:1c:8e:1b:30:45:15:18:02:f5:93:80:e3:c0:a9: 1f:15:37:c1:99:66:d6:a3:8b:14:71:4a:60:38:c0:19:c7:69: 91:0c:40:32:e2:08:cb:45:32:2a:b0:03:f5:de:6b:85:b3:ca: ce:d2:a6:7d:eb:c8:a4:68:e0:66:a3:64:15:34:60:81:20:77: ef:c8:0d:eb:b9:20:11:c0:a9:0e:64:6e:5b:d1:33:14:1d:aa: 47:61:82:44:1d:e9:dc:ff:7f:b3:cb:40:50:c2:4b:0d:fd:f7: 61:70:dd:32:33:80:13:32:17:97:de:77:ec:de:9a:ae:0f:ae: 06:66:9e:ee:a2:77:94:6e:9e:6a:f1:ec:32:7f:9e:c5:89:c6: af:84:7e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULixYwVTSqgWv7VCKtgEw6LQVxaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA4MDYwNTI2NDlaFw0yNTA4MDkwNzE5NDlaMDMxMTAvBgNV BAMTKDA0NjY4Mzc0MDlDMjE0NjA2MEMxREE5QTVBNjkyRTRDRTNENzdFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46KjVQavr31qKYljsKqObPrgb N5lN64VRMk3lCWPqW5RpMTiob78SyJ9L2b+jMpO+6zBa61tr/H531FH6ZtjcUeaM 23GVQ9U22TuoKQhjlx6+kzy2vtaVB6km7rJDxaCX6JvhAjnZXvZ/nvLbqJP/Vpus mFe64eiFHPUb8X572+eoS+l0/cpvmVWjwBlU8x4dWR+sdIKWk6ZhOkWnvgXU6Iy3 8Uii1MZWnJbxrdevhi0DQa6OyVx0Pcn9P1QrTgHiVac0ZOuSbr6P2RjoE7nT42Dz HnK7Vv6lpqTPEhn7p2izupnWFGUBwDlW+kujUHHniBsSpj4mS1+2po5JMi3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGaDdAnCFGBgwdqaWmkuTOPXfmQwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC0igsJSekiOaeH4tuW/j+0BfbzyqwOsTJR omNlaRDhNq17k+6sMnTwq6N57JyIWbFdDaCyPObIH0sGG07aaxL7wCi0BBPn0qqL AnTemMiIFQDfXN46MSGZJLNkC57RW02cD6NKayOl8YP0N1AxvlQcjhswRRUYAvWT gOPAqR8VN8GZZtajixRxSmA4wBnHaZEMQDLiCMtFMiqwA/Xea4Wzys7Spn3ryKRo 4GajZBU0YIEgd+/IDeu5IBHAqQ5kblvRMxQdqkdhgkQd6dz/f7PLQFDCSw3992Fw 3TIzgBMyF5fed+zemq4PrgZmnu6id5Runmrx7DJ/nsWJxq+EfkI= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:33 2025 by rpki-client