$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: Y1FTP/8xJdch7y4Q7S3f+seuN5emgymsrYOo6h6+DIk= Subject key identifier: 65:AE:BF:15:B8:A2:01:19:5E:18:3B:E0:41:53:4F:5E:34:19:B4:02 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 0D8225B14909A4164597F48822B36259C8345A03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: B4 Signing time: Tue 05 Aug 2025 18:31:19 +0000 Manifest this update: Tue 05 Aug 2025 18:26:19 +0000 Manifest next update: Fri 08 Aug 2025 22:08:19 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 2: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) 3: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: TNH+PA+pK9GB3qEksAfLHOQ1BsfgRo8yFl1Nj5CPFqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:25:b1:49:09:a4:16:45:97:f4:88:22:b3:62:59:c8:34:5a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Aug 5 18:26:19 2025 GMT Not After : Aug 8 22:08:19 2025 GMT Subject: CN=65AEBF15B8A201195E183BE041534F5E3419B402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:63:ca:de:aa:eb:f1:7b:b0:fc:7d:1a:f6: 51:6b:f6:94:19:d6:9e:c1:29:74:3c:9c:13:0f:8a: 67:a8:90:e3:8f:96:98:f5:3f:f7:6f:89:ca:d6:1b: 07:84:7f:5d:5e:d1:68:e0:2d:43:48:59:27:cf:f9: 87:03:8c:8e:80:5b:0d:9f:3e:e0:5b:ad:52:4f:1c: 54:14:3c:bd:40:28:84:5c:d6:27:c7:9f:da:61:f9: d3:23:df:63:ba:a3:5f:2d:af:f1:67:53:98:a1:a3: 00:be:da:c8:33:9c:48:8a:f2:a7:e5:22:57:d1:31: dc:2e:1d:dc:eb:3b:9f:5a:7d:f0:c4:10:b2:9a:f7: 56:6b:d9:dd:da:42:85:80:ec:ef:6c:cf:2f:b1:62: 56:85:6f:f9:d1:0c:6c:cd:ef:32:3d:97:0d:fc:ac: 50:66:7b:bf:9d:3b:14:b1:ff:42:28:ae:49:7e:8b: 9b:94:3c:4f:4b:97:75:78:09:4a:41:90:aa:db:41: da:7a:4a:70:84:0d:79:b0:62:8d:c5:7f:28:44:6b: 0a:49:5b:64:ea:3e:4c:05:65:c6:9d:2a:ee:82:d1: 91:c0:eb:9d:86:9a:7c:ac:a3:96:bc:4c:72:ad:9f: cd:13:57:4f:49:b0:70:8f:fe:87:0b:34:a0:96:8d: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AE:BF:15:B8:A2:01:19:5E:18:3B:E0:41:53:4F:5E:34:19:B4:02 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:ba:47:00:8e:17:93:b2:ba:8c:a5:e1:b2:60:74:ce:e1: a5:b3:6f:33:7a:ee:af:14:3a:0f:8f:e2:f6:d7:96:91:82:34: 58:29:42:46:dc:56:c9:d5:bb:cf:3e:c0:cf:38:b3:2f:4c:cc: 6b:f6:9d:19:52:ea:4a:eb:fd:c9:88:ea:ce:fa:55:b9:34:9f: 37:42:73:2f:31:cd:16:93:ad:c0:88:f1:57:53:38:3f:60:73: a2:d2:db:bb:68:f3:da:5d:97:59:75:53:8a:b2:2a:43:bb:4d: 12:d4:5c:bb:40:d3:2f:b5:32:19:4f:92:05:9b:8b:09:2d:a8: 9e:de:58:bc:90:3b:e1:ee:9a:2b:39:ce:39:a3:f9:2a:ef:db: a2:14:f2:47:2b:60:16:93:ed:4f:39:f9:6f:69:a9:6a:42:d9: a7:e6:33:3d:ca:c3:d7:3c:43:44:7a:e6:3b:36:d1:89:06:1e: 22:ae:43:5d:61:f4:ec:51:e9:45:e5:b4:e4:f6:36:f6:4a:81: 07:ee:42:4d:61:de:9d:42:3a:0b:7e:7a:63:af:71:de:48:a8: 1f:7c:63:6a:98:bf:d0:1d:8a:ad:69:2b:27:69:eb:94:63:72: f6:3b:ea:63:01:69:86:28:6e:c9:f8:4a:11:4e:1c:fd:91:88: 15:23:80:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYIlsUkJpBZFl/SIIrNiWcg0WgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTA4MDUxODI2MTlaFw0yNTA4MDgyMjA4MTlaMDMxMTAvBgNV BAMTKDY1QUVCRjE1QjhBMjAxMTk1RTE4M0JFMDQxNTM0RjVFMzQxOUI0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm6mPK3qrr8Xuw/H0a9lFr9pQZ 1p7BKXQ8nBMPimeokOOPlpj1P/dvicrWGweEf11e0WjgLUNIWSfP+YcDjI6AWw2f PuBbrVJPHFQUPL1AKIRc1ifHn9ph+dMj32O6o18tr/FnU5ihowC+2sgznEiK8qfl IlfRMdwuHdzrO59affDEELKa91Zr2d3aQoWA7O9szy+xYlaFb/nRDGzN7zI9lw38 rFBme7+dOxSx/0Iorkl+i5uUPE9Ll3V4CUpBkKrbQdp6SnCEDXmwYo3FfyhEawpJ W2TqPkwFZcadKu6C0ZHA652Gmnyso5a8THKtn80TV09JsHCP/ocLNKCWjQ37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZa6/FbiiARleGDvgQVNPXjQZtAIwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI6ukcAjheTsrqMpeGyYHTO4aWzbzN67q8U Og+P4vbXlpGCNFgpQkbcVsnVu88+wM84sy9MzGv2nRlS6krr/cmI6s76Vbk0nzdC cy8xzRaTrcCI8VdTOD9gc6LS27to89pdl1l1U4qyKkO7TRLUXLtA0y+1MhlPkgWb iwktqJ7eWLyQO+Humis5zjmj+Srv26IU8kcrYBaT7U85+W9pqWpC2afmMz3Kw9c8 Q0R65js20YkGHiKuQ11h9OxR6UXltOT2NvZKgQfuQk1h3p1COgt+emOvcd5IqB98 Y2qYv9Adiq1pKydp65RjcvY76mMBaYYobsn4ShFOHP2RiBUjgGU= -----END CERTIFICATE-----Generated at Tue Aug 5 22:55:58 2025 by rpki-client