$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: SVT2aeSm/urp5qExx3VCiNrmFximGhvA23zDvRgsbnQ= Subject key identifier: 43:E4:5C:06:72:AD:3D:5A:1A:44:2C:D1:3B:79:B0:55:5B:E7:4E:77 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 5AA91A410210807A467343D4B601BFC485349B3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 0568 Signing time: Wed 06 Aug 2025 03:41:44 +0000 Manifest this update: Wed 06 Aug 2025 03:36:44 +0000 Manifest next update: Sat 09 Aug 2025 10:27:44 +0000 Files and hashes: 1: AS59281.roa (hash: 3OoTAmlO4zWNGL/bSRhl8jP1S0EccRMZ9zeQlEN9DAw=) 2: AS38511.roa (hash: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=) 3: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: q+g4C7kMZoARoT77fSBmu+1Bw5bpXJkH4fm8nJHWJRM=) 4: AS137379.roa (hash: Z4MIJUqMOvirE2SHUjhYz08IiUGc/JsWL19e9jt5EIs=) 5: AS137342.roa (hash: CMk60fE5UdVZv/MxL6/n0+3Rya8vaHN7xLAuSG2v4iA=) 6: AS56242.roa (hash: tSzKKpcbE6bo3w9bV3TVhMwcF8jKEriX5Wm0rnvAgIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:1a:41:02:10:80:7a:46:73:43:d4:b6:01:bf:c4:85:34:9b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Aug 6 03:36:44 2025 GMT Not After : Aug 9 10:27:44 2025 GMT Subject: CN=43E45C0672AD3D5A1A442CD13B79B0555BE74E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:76:05:f5:3e:cf:0b:d0:35:ae:53:01:40: 31:7d:2a:eb:5c:8e:04:9a:4a:16:df:38:99:23:6a: 2d:df:a6:8b:91:99:8c:fb:08:8c:7a:44:a5:e5:24: af:f4:15:c1:cf:09:50:a1:0e:87:bd:a0:5a:57:63: 1d:bf:7e:b3:3c:7d:69:2c:f0:44:47:9b:3c:0c:e6: 56:c1:3a:32:6e:53:51:e5:45:87:61:86:31:55:33: 2a:11:ff:ca:70:fa:1f:7c:c6:55:86:7c:4b:e1:2a: 7e:d7:12:3d:21:cd:42:a6:7f:d2:0c:3c:63:14:ed: 4b:a8:88:bf:06:dc:04:9f:f1:78:48:a7:95:85:da: 58:dd:bd:65:8e:75:02:e5:82:d1:0f:b0:65:8e:e9: b4:d3:bd:a4:03:2a:06:10:f9:f7:c2:74:ac:83:6b: 6a:84:3d:13:63:fe:77:dc:db:92:e2:d6:24:cd:91: f8:d6:b3:01:e2:2d:01:38:d6:8d:98:e8:df:90:4b: 9d:2c:82:84:91:ae:cb:e2:da:76:f6:aa:c2:f7:d2: 59:9b:e4:5d:2a:7b:97:9d:c7:5e:43:5a:0f:a6:62: 22:32:65:77:c3:54:ae:70:b3:dc:83:b8:d9:d6:e6: e9:19:05:d4:9a:58:92:66:e7:c3:a5:c7:c9:53:8b: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:5C:06:72:AD:3D:5A:1A:44:2C:D1:3B:79:B0:55:5B:E7:4E:77 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8d:fe:8e:bb:99:74:57:f6:8f:2d:f3:cc:67:0c:d7:3a:36: f5:bb:8a:8a:5c:d8:7b:54:9b:68:86:13:e8:99:a6:a8:51:61: 46:37:4c:aa:bc:e6:2b:14:3b:a1:8e:90:e7:81:ac:e8:0f:6d: 53:12:65:87:58:d4:a9:81:88:7f:13:90:60:d8:a6:e1:a6:48: 93:86:a9:b5:d9:37:9d:c1:75:e7:04:80:45:ce:22:9c:ec:41: f7:41:dc:05:1b:51:3b:60:65:e6:2a:97:f0:be:83:6b:40:df: 04:69:51:f7:aa:64:dc:c4:5b:a6:18:46:ca:93:0b:d9:b0:17: c1:a9:45:4a:62:cf:e1:bf:79:5f:81:ff:41:8e:29:5e:ae:17: eb:79:f3:79:0b:9e:d9:75:3f:5b:bb:a8:41:84:be:0a:ed:6f: 0a:a6:b4:6f:14:f9:1d:7d:33:35:e2:14:ef:58:b1:77:cd:5d: 90:1e:fb:02:7c:8f:bb:07:c7:30:1b:da:9d:7f:03:53:8e:97: 17:98:c9:b4:48:c2:9a:58:53:c6:19:10:f4:bc:3f:a6:53:1f: 7d:36:0d:6d:f1:a8:01:4e:12:8f:42:45:15:ee:ca:c3:cd:a2: 93:97:0a:8e:df:a4:1b:df:2e:31:22:f3:30:80:1a:ee:35:ca: 1f:0f:1d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqkaQQIQgHpGc0PUtgG/xIU0mzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNTA4MDYwMzM2NDRaFw0yNTA4MDkxMDI3NDRaMDMxMTAvBgNV BAMTKDQzRTQ1QzA2NzJBRDNENUExQTQ0MkNEMTNCNzlCMDU1NUJFNzRFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QXYF9T7PC9A1rlMBQDF9Kutc jgSaShbfOJkjai3fpouRmYz7CIx6RKXlJK/0FcHPCVChDoe9oFpXYx2/frM8fWks 8ERHmzwM5lbBOjJuU1HlRYdhhjFVMyoR/8pw+h98xlWGfEvhKn7XEj0hzUKmf9IM PGMU7UuoiL8G3ASf8XhIp5WF2ljdvWWOdQLlgtEPsGWO6bTTvaQDKgYQ+ffCdKyD a2qEPRNj/nfc25Li1iTNkfjWswHiLQE41o2Y6N+QS50sgoSRrsvi2nb2qsL30lmb 5F0qe5edx15DWg+mYiIyZXfDVK5ws9yDuNnW5ukZBdSaWJJm58Olx8lTi33lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+RcBnKtPVoaRCzRO3mwVVvnTncwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6N/o67mXRX9o8t88xnDNc6NvW7iopc2HtU m2iGE+iZpqhRYUY3TKq85isUO6GOkOeBrOgPbVMSZYdY1KmBiH8TkGDYpuGmSJOG qbXZN53BdecEgEXOIpzsQfdB3AUbUTtgZeYql/C+g2tA3wRpUfeqZNzEW6YYRsqT C9mwF8GpRUpiz+G/eV+B/0GOKV6uF+t583kLntl1P1u7qEGEvgrtbwqmtG8U+R19 MzXiFO9YsXfNXZAe+wJ8j7sHxzAb2p1/A1OOlxeYybRIwppYU8YZEPS8P6ZTH302 DW3xqAFOEo9CRRXuysPNopOXCo7fpBvfLjEi8zCAGu41yh8PHbg= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:48 2025 by rpki-client