$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: YFIesX0L5yGpuo7lUb1GZPwaxuHPntAX8eoVuCbhpk8= Subject key identifier: AA:4D:7E:56:5A:B3:B8:00:4C:3D:DF:4E:D2:EB:BF:54:2E:4D:12:FE Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 12B1179CB8CCEEFAF4F1BDFF1235644525BE6AC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: B8 Signing time: Thu 07 Aug 2025 16:20:52 +0000 Manifest this update: Thu 07 Aug 2025 16:15:52 +0000 Manifest next update: Mon 11 Aug 2025 01:16:52 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=) 2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=) 3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: HI/9pqwbZ0PXtw72Ugf7KTYw5yxHZTTXrRDMeYxP5aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b1:17:9c:b8:cc:ee:fa:f4:f1:bd:ff:12:35:64:45:25:be:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Aug 7 16:15:52 2025 GMT Not After : Aug 11 01:16:52 2025 GMT Subject: CN=AA4D7E565AB3B8004C3DDF4ED2EBBF542E4D12FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:60:bb:d7:d6:7e:a6:12:f7:96:76:19:dd: 7a:72:2a:c4:9c:ef:25:46:24:5c:e0:9a:0d:a4:75: 88:16:52:3e:18:e3:8d:55:77:fc:5d:c1:1b:b8:fb: 22:8f:99:17:8a:f1:68:b3:54:25:4f:3a:01:bf:3e: d6:93:5e:5e:02:be:fb:82:3b:4b:80:a3:52:c2:75: 87:67:d6:59:68:86:87:bd:27:c0:76:d7:47:9b:b6: f1:ec:b4:6e:f8:62:90:be:42:3d:9d:eb:9f:ac:08: db:64:65:b5:46:7f:54:e7:86:14:26:38:79:8a:73: 5d:2d:7f:83:24:32:37:1c:14:5c:4a:76:a3:40:5a: e6:44:6b:bc:02:3e:83:0b:70:14:ae:1f:98:88:b8: 41:03:d4:c3:f8:40:29:c7:cd:40:95:8e:bc:d0:0f: 2e:43:93:0b:92:0b:06:eb:28:a2:d8:3b:f2:58:85: 67:aa:6a:3e:3c:cc:e1:5f:67:b4:58:c7:ea:28:de: a5:c4:29:18:35:13:69:b1:97:85:c3:ee:b6:dc:9b: ee:62:b9:81:e8:d4:f1:a2:f0:32:76:a0:72:02:98: d1:62:01:23:43:0e:ad:68:0d:f9:91:2d:67:5d:3c: 3a:3e:89:c6:2a:43:c7:09:81:e7:2e:3a:0d:69:21: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4D:7E:56:5A:B3:B8:00:4C:3D:DF:4E:D2:EB:BF:54:2E:4D:12:FE X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fc:c1:ec:7d:61:13:27:85:25:63:13:63:2a:cd:15:81:1e: 10:2a:9a:6d:e4:04:44:a9:85:89:7b:a0:99:35:80:f6:d2:4f: 5c:bd:96:94:67:b7:37:c7:42:f7:0f:97:63:2e:07:79:09:00: a3:b8:82:14:bc:ee:07:a9:39:91:de:53:d8:c6:40:f2:fd:47: 19:16:84:00:4f:95:f7:a5:45:1e:e4:af:27:c3:cf:7c:dc:08: 3c:e8:6d:ec:1c:39:1c:af:74:49:d5:9e:e2:7c:4f:bb:58:35: d8:5e:31:6b:90:bc:b6:dd:22:e8:16:2f:3b:9c:a7:62:a5:d6: dc:f9:b8:d5:93:7a:d1:e3:65:5f:0a:35:d2:d9:4f:16:b8:ff: f7:ee:59:f0:90:f7:32:99:3e:c5:48:84:de:1a:67:e9:95:fb: fa:d4:e8:e4:37:ed:05:ba:07:fc:e9:1d:4a:32:09:d3:d9:c1: ad:09:2c:06:3a:68:3c:85:05:d0:4f:fa:1a:7b:55:c9:c2:62: 2a:6c:62:86:15:19:5c:c5:e9:aa:2d:01:38:f8:39:4f:d2:38: e9:78:bc:41:24:d5:8b:86:85:be:d1:7b:ec:3f:85:ad:c5:88: bc:fb:04:41:59:77:a7:20:32:93:27:07:77:55:41:f7:86:1b: 63:1e:fd:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErEXnLjM7vr08b3/EjVkRSW+asAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA4MDcxNjE1NTJaFw0yNTA4MTEwMTE2NTJaMDMxMTAvBgNV BAMTKEFBNEQ3RTU2NUFCM0I4MDA0QzNEREY0RUQyRUJCRjU0MkU0RDEyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBGC719Z+phL3lnYZ3XpyKsSc 7yVGJFzgmg2kdYgWUj4Y441Vd/xdwRu4+yKPmReK8WizVCVPOgG/PtaTXl4CvvuC O0uAo1LCdYdn1llohoe9J8B210ebtvHstG74YpC+Qj2d65+sCNtkZbVGf1TnhhQm OHmKc10tf4MkMjccFFxKdqNAWuZEa7wCPoMLcBSuH5iIuEED1MP4QCnHzUCVjrzQ Dy5DkwuSCwbrKKLYO/JYhWeqaj48zOFfZ7RYx+oo3qXEKRg1E2mxl4XD7rbcm+5i uYHo1PGi8DJ2oHICmNFiASNDDq1oDfmRLWddPDo+icYqQ8cJgecuOg1pIXozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqk1+VlqzuABMPd9O0uu/VC5NEv4wHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv8wex9YRMnhSVjE2MqzRWBHhAqmm3kBESp hYl7oJk1gPbST1y9lpRntzfHQvcPl2MuB3kJAKO4ghS87gepOZHeU9jGQPL9RxkW hABPlfelRR7kryfDz3zcCDzobewcORyvdEnVnuJ8T7tYNdheMWuQvLbdIugWLzuc p2Kl1tz5uNWTetHjZV8KNdLZTxa4//fuWfCQ9zKZPsVIhN4aZ+mV+/rU6OQ37QW6 B/zpHUoyCdPZwa0JLAY6aDyFBdBP+hp7VcnCYipsYoYVGVzF6aotATj4OU/SOOl4 vEEk1YuGhb7Re+w/ha3FiLz7BEFZd6cgMpMnB3dVQfeGG2Me/ZQ= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:16 2025 by rpki-client