$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: oZ+wZ1q5yUmJpJh0vdVai1FfqwPYCgJkLl5rXyksNCY= Subject key identifier: 78:EF:59:52:08:15:EC:B2:15:19:80:F0:1B:CC:7E:B0:3D:D3:10:88 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 265E7B2FF0894A7ECC2DF2DB86E728973D874A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: 72 Signing time: Tue 05 Aug 2025 06:51:21 +0000 Manifest this update: Tue 05 Aug 2025 06:46:21 +0000 Manifest next update: Fri 08 Aug 2025 07:38:21 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=) 2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: xFCCJmgTRrsoQesTMRTPmcjwQozgcnPxOmEMpkhSZ3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5e:7b:2f:f0:89:4a:7e:cc:2d:f2:db:86:e7:28:97:3d:87:4a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Aug 5 06:46:21 2025 GMT Not After : Aug 8 07:38:21 2025 GMT Subject: CN=78EF59520815ECB2151980F01BCC7EB03DD31088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:44:1d:79:f6:c9:20:c8:37:d0:c7:88:e5: b6:ac:da:ed:50:c5:1a:65:0e:39:0f:92:21:d6:9c: 30:20:8a:bd:ab:ec:81:47:0c:05:c7:74:9f:6a:93: 4b:45:97:7d:8f:b2:30:ca:d6:cb:ad:8b:98:d9:d6: c7:b4:84:b7:85:51:d4:e4:0c:d0:91:25:50:57:49: 3d:64:c3:3d:5c:98:b4:37:a8:52:01:7c:fc:47:11: b4:e3:63:38:71:85:95:d4:3e:03:f4:9c:71:03:f2: 3a:1d:34:3d:44:bb:78:a7:43:04:5f:fb:24:00:c2: 41:df:c5:7c:54:99:71:c9:03:78:dc:04:96:29:ae: 22:4e:61:a0:6b:14:05:d6:19:08:31:d2:b8:5a:6c: 5b:88:51:f9:a7:ac:e4:73:9a:44:94:5d:7d:19:46: 95:c8:a9:a1:f6:0b:50:52:62:c3:1b:66:46:44:2b: 81:cd:86:fc:0e:1a:86:a4:a7:73:ae:c8:a7:75:4d: b4:28:e4:b5:81:dc:ee:52:7e:3e:bf:dc:df:cc:03: 05:75:43:ae:07:51:0f:12:0f:b3:81:2d:1e:5a:46: 50:74:eb:ba:01:3c:01:d3:1e:36:b5:fc:5d:61:df: a2:cf:3a:b7:8d:3a:5f:13:c0:cb:b4:f2:00:e4:af: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:59:52:08:15:EC:B2:15:19:80:F0:1B:CC:7E:B0:3D:D3:10:88 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:15:e6:da:3b:47:38:a2:9f:93:40:aa:20:79:d0:b7:33:50: 39:97:ef:4a:70:60:a3:19:bb:ee:7c:b6:03:e6:d3:a2:56:c7: 66:f5:1e:7c:6c:4b:9b:cc:2e:8e:a5:ce:ff:d7:72:70:0c:98: 50:ae:63:eb:e7:0c:fe:b2:e3:9b:6e:72:36:cb:f3:1c:c9:8c: 36:c0:fd:95:20:be:50:0e:69:a1:be:0f:4d:74:65:7b:01:45: d2:2b:11:53:1b:bd:d7:62:bf:fa:97:a6:dc:3e:4b:14:8e:69: aa:c3:1d:6b:ad:6c:f2:90:e7:40:1e:97:3e:4c:9d:58:f0:8f: 76:f7:2f:95:a1:13:84:29:77:c6:8e:ac:eb:0c:be:92:f2:37: 5d:22:1f:60:56:e3:4f:13:32:c3:98:ea:c9:de:92:a0:c5:24: e7:a0:96:fe:d6:f3:32:78:2b:b8:af:d8:30:2d:1e:ff:1f:41: 4f:db:61:4b:c7:cc:b0:b4:3d:6f:e9:36:a8:cc:fe:d8:57:0a: 23:92:ea:b4:c2:36:05:f1:31:5a:58:2b:71:9d:a4:06:f5:75: 5f:78:ca:34:ac:66:8e:c6:27:cc:1f:4d:a6:2a:57:7c:6d:38: 25:c5:db:a1:52:27:36:ff:63:10:69:b3:2d:d1:b4:05:b5:f7: c4:cc:f9:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl57L/CJSn7MLfLbhucolz2HSnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTA4MDUwNjQ2MjFaFw0yNTA4MDgwNzM4MjFaMDMxMTAvBgNV BAMTKDc4RUY1OTUyMDgxNUVDQjIxNTE5ODBGMDFCQ0M3RUIwM0REMzEwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DkQdefbJIMg30MeI5bas2u1Q xRplDjkPkiHWnDAgir2r7IFHDAXHdJ9qk0tFl32PsjDK1suti5jZ1se0hLeFUdTk DNCRJVBXST1kwz1cmLQ3qFIBfPxHEbTjYzhxhZXUPgP0nHED8jodND1Eu3inQwRf +yQAwkHfxXxUmXHJA3jcBJYpriJOYaBrFAXWGQgx0rhabFuIUfmnrORzmkSUXX0Z RpXIqaH2C1BSYsMbZkZEK4HNhvwOGoakp3OuyKd1TbQo5LWB3O5Sfj6/3N/MAwV1 Q64HUQ8SD7OBLR5aRlB067oBPAHTHja1/F1h36LPOreNOl8TwMu08gDkr3o9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeO9ZUggV7LIVGYDwG8x+sD3TEIgwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkV5to7Rziin5NAqiB50LczUDmX70pwYKMZ u+58tgPm06JWx2b1HnxsS5vMLo6lzv/XcnAMmFCuY+vnDP6y45tucjbL8xzJjDbA /ZUgvlAOaaG+D010ZXsBRdIrEVMbvddiv/qXptw+SxSOaarDHWutbPKQ50Aelz5M nVjwj3b3L5WhE4Qpd8aOrOsMvpLyN10iH2BW408TMsOY6snekqDFJOeglv7W8zJ4 K7iv2DAtHv8fQU/bYUvHzLC0PW/pNqjM/thXCiOS6rTCNgXxMVpYK3GdpAb1dV94 yjSsZo7GJ8wfTaYqV3xtOCXF26FSJzb/YxBpsy3RtAW198TM+fk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:41 2025 by rpki-client