$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: 8YqVtFYvZhmgh9KNrF8SHBJktRIZAioRiI6DAwK9tY4= Subject key identifier: 01:E1:4B:C8:91:B4:79:FD:8E:4A:56:20:34:53:D1:1E:70:73:24:32 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 7F26ACA591F093A0980E07F06596E1A3D2B8C6FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 036D Signing time: Thu 07 Aug 2025 23:50:54 +0000 Manifest this update: Thu 07 Aug 2025 23:45:54 +0000 Manifest next update: Mon 11 Aug 2025 04:27:54 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 3: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: Vb61oCBRXmSrbOSgIn+DA44H1m4JsUVHYEAp0yjXd98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 04:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:26:ac:a5:91:f0:93:a0:98:0e:07:f0:65:96:e1:a3:d2:b8:c6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Aug 7 23:45:54 2025 GMT Not After : Aug 11 04:27:54 2025 GMT Subject: CN=01E14BC891B479FD8E4A56203453D11E70732432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:9a:66:f5:81:20:00:94:a8:9f:59:91:a0: 47:28:58:d6:d6:74:ef:1b:56:09:9f:19:43:07:d6: cf:dd:dd:1e:fe:8b:62:1f:34:d2:bb:0f:3d:ae:a5: 82:4b:29:d2:7e:81:ab:70:3e:eb:e5:d1:48:54:a4: 90:d7:2f:00:06:15:56:2a:d5:6c:6c:ec:18:c9:98: 1f:f8:30:5e:ea:13:a6:87:e8:fc:dd:75:af:e2:9e: c2:16:71:e9:c3:8b:67:07:bf:20:3d:57:71:71:79: ed:01:b2:bc:b7:39:77:d9:a1:28:22:b2:a4:fc:41: b3:65:99:aa:07:1d:c3:fe:70:83:b1:8a:7a:94:ff: d6:85:57:43:64:72:b4:59:38:d9:0f:25:04:17:ba: c6:f2:80:68:89:66:95:17:bb:69:31:90:51:67:cb: 15:c6:65:38:40:cb:92:2d:66:ed:24:aa:b5:eb:33: f1:24:13:02:cb:5a:35:24:ba:7f:46:7c:3b:1e:c8: 84:ac:81:50:69:0b:64:ac:8c:72:c4:f9:6b:39:a0: 2b:2d:b3:53:c3:1f:cf:76:04:87:14:bc:69:73:c9: 4a:48:b1:28:18:10:b2:c4:72:c4:35:77:a4:20:c5: 5a:6b:0a:be:0a:6b:06:61:d9:7a:23:a2:30:0e:3b: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E1:4B:C8:91:B4:79:FD:8E:4A:56:20:34:53:D1:1E:70:73:24:32 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:45:7c:18:9c:09:72:ca:0a:8a:78:f5:20:b9:af:6c:fb:53: 96:77:bf:a5:33:d9:e6:a8:10:51:3e:c0:49:ae:8a:f5:00:dc: a3:2f:ac:2b:5d:1b:e5:6e:55:0c:4b:31:8b:30:99:b3:f2:ae: 94:64:f1:6d:ed:0d:b9:84:45:6c:87:f1:46:e1:2a:56:ff:76: e1:55:99:07:7b:92:d2:92:2a:29:23:84:06:7a:c5:07:61:cb: 52:9b:63:9e:66:ba:a8:08:52:86:e0:05:bd:ca:b7:f6:d7:48: 68:07:2a:a1:3d:3d:03:f6:6d:ad:b4:0f:8f:53:43:30:6b:72: 1a:d2:df:25:da:c6:89:71:dc:fc:43:0d:36:4b:fe:b8:a1:12: 8e:19:05:6d:69:88:e1:fb:17:a5:9f:1a:b4:bd:9c:e9:20:df: f0:37:bc:c8:7e:0f:e9:90:87:ee:6f:a5:4d:ea:d3:4b:c0:4a: bf:ae:fc:46:d5:21:4b:f7:94:27:05:7d:ec:f3:45:d2:15:79: 1b:c6:c2:ba:25:0d:d7:bf:5d:12:79:e8:a7:d3:54:aa:aa:33: 1c:67:51:b5:7f:61:aa:8e:f9:08:72:af:37:fc:44:ba:10:36: 5a:64:72:67:8b:f3:cc:48:2b:3d:62:6b:b0:0c:9c:b3:61:18: 49:13:3e:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyaspZHwk6CYDgfwZZbho9K4xvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA4MDcyMzQ1NTRaFw0yNTA4MTEwNDI3NTRaMDMxMTAvBgNV BAMTKDAxRTE0QkM4OTFCNDc5RkQ4RTRBNTYyMDM0NTNEMTFFNzA3MzI0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCJpm9YEgAJSon1mRoEcoWNbW dO8bVgmfGUMH1s/d3R7+i2IfNNK7Dz2upYJLKdJ+gatwPuvl0UhUpJDXLwAGFVYq 1Wxs7BjJmB/4MF7qE6aH6Pzdda/insIWcenDi2cHvyA9V3Fxee0Bsry3OXfZoSgi sqT8QbNlmaoHHcP+cIOxinqU/9aFV0NkcrRZONkPJQQXusbygGiJZpUXu2kxkFFn yxXGZThAy5ItZu0kqrXrM/EkEwLLWjUkun9GfDseyISsgVBpC2SsjHLE+Ws5oCst s1PDH892BIcUvGlzyUpIsSgYELLEcsQ1d6QgxVprCr4KawZh2XojojAOO1Q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeFLyJG0ef2OSlYgNFPRHnBzJDIwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRFfBicCXLKCop49SC5r2z7U5Z3v6Uz2eao EFE+wEmuivUA3KMvrCtdG+VuVQxLMYswmbPyrpRk8W3tDbmERWyH8UbhKlb/duFV mQd7ktKSKikjhAZ6xQdhy1KbY55muqgIUobgBb3Kt/bXSGgHKqE9PQP2ba20D49T QzBrchrS3yXaxolx3PxDDTZL/rihEo4ZBW1piOH7F6WfGrS9nOkg3/A3vMh+D+mQ h+5vpU3q00vASr+u/EbVIUv3lCcFfezzRdIVeRvGwrolDde/XRJ56KfTVKqqMxxn UbV/YaqO+Qhyrzf8RLoQNlpkcmeL88xIKz1ia7AMnLNhGEkTPiw= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:54 2025 by rpki-client