$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: ZZ+tu3jSziC2kJ1Ry5n1rvqqXur/+blmCefmsIDvcco= Subject key identifier: 8E:67:78:73:7D:CC:9D:0A:EE:61:63:51:E4:30:D9:AF:DF:52:64:25 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 4B93EABDCD0A612A373326991BB7C24E1ACC80CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 01CA Signing time: Thu 07 Aug 2025 04:01:46 +0000 Manifest this update: Thu 07 Aug 2025 03:56:46 +0000 Manifest next update: Sun 10 Aug 2025 08:43:46 +0000 Files and hashes: 1: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: n3sbBfuLKEC1geB0k1Dh7NZVeI84mrHDuJ/mBS5tW04=) 3: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: cvJ3f+NTjzyPqSnCADAsLSMd2ko0dr5mY4OWnEZwjyY=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: tCdlLAwoC+YY63D9MBa5GyVbtzsufzTeHqMYaKr8EzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:ea:bd:cd:0a:61:2a:37:33:26:99:1b:b7:c2:4e:1a:cc:80:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Aug 7 03:56:46 2025 GMT Not After : Aug 10 08:43:46 2025 GMT Subject: CN=8E6778737DCC9D0AEE616351E430D9AFDF526425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:b6:aa:c3:39:cd:48:26:42:a9:b5:a4:5d: d0:48:cc:a6:37:ed:d4:78:23:9a:0c:18:ae:17:e5: ac:95:24:9a:62:4d:9f:b8:36:db:47:8f:fd:a2:ea: 2a:0a:6d:81:36:29:bf:fa:22:ee:f3:fb:9a:47:6e: 00:a3:d6:2f:4f:40:83:2d:23:4f:4a:77:75:80:0b: 93:f4:32:bd:d2:b4:7c:3f:a3:b0:ce:19:79:c6:ae: 45:f1:3a:27:ea:93:da:b1:19:f2:fa:9a:9f:61:8d: 6d:35:0b:a3:f4:6b:d2:f3:92:e7:aa:bf:69:6e:e4: 1c:38:b3:95:c5:c5:22:ec:35:4d:e6:8c:96:bd:a7: 1d:50:2d:26:9c:26:c9:8c:6d:66:26:81:c1:95:3f: c5:d1:ce:ab:c9:a3:32:11:80:86:6b:66:5f:fb:61: 2d:32:e1:73:a7:c4:a1:4b:a4:3f:a6:51:ad:02:36: 1e:b8:d7:58:d1:0d:bf:05:72:51:b4:48:0a:6c:98: 9a:02:62:dc:b9:86:1a:f4:fd:e8:fc:b3:ff:a5:25: 09:ef:6a:f2:79:9a:c8:2a:e4:36:ef:fd:e0:bd:ba: fa:a3:2c:a7:2b:cc:e8:75:4d:07:5a:9b:4e:42:0f: 48:31:30:3a:be:7e:bd:2b:fd:b1:75:ee:eb:28:5d: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:67:78:73:7D:CC:9D:0A:EE:61:63:51:E4:30:D9:AF:DF:52:64:25 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:94:f8:ff:72:69:84:b3:be:02:0c:c2:20:14:e2:0d:f7:f0: 04:cc:0f:09:0d:28:95:b7:82:7d:7d:98:ea:af:a8:88:d5:e8: b1:91:a0:6e:d0:de:36:57:da:f9:32:71:6d:fb:e2:1b:e5:47: 3a:15:56:f9:89:0e:19:a0:83:18:f2:ff:54:3c:c1:69:7f:78: cf:db:e0:6c:26:08:f2:05:2d:c6:65:96:47:1d:99:1e:74:53: aa:90:04:76:64:02:e3:6e:22:90:5a:b3:b5:39:0a:7e:f5:e7: 53:11:ef:a8:16:2d:ee:7b:af:c2:fc:c9:a4:73:9c:e3:aa:c3: 3f:3e:72:4e:3f:2f:ba:21:d9:12:7c:da:5d:ab:df:e3:0e:bb: 5e:46:e2:2f:a9:a5:d3:8e:9c:8f:16:12:c1:5b:0a:86:57:b1: c3:b6:a5:fa:05:a6:f8:53:05:ba:a2:46:75:43:b2:92:c0:35: b7:48:30:79:77:16:f8:bf:0a:da:af:55:de:90:07:e8:e0:23: 3c:f6:c7:81:90:e9:a6:33:31:de:6b:ea:25:b2:f4:8a:e6:c9: da:4e:89:f1:69:ea:8b:97:ec:4c:01:a2:9b:62:ce:3c:ad:a0: b8:1d:52:03:c1:a3:cf:cd:c5:09:8f:a2:df:d6:9b:67:1a:b4: 19:ea:eb:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5Pqvc0KYSo3MyaZG7fCThrMgM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTA4MDcwMzU2NDZaFw0yNTA4MTAwODQzNDZaMDMxMTAvBgNV BAMTKDhFNjc3ODczN0RDQzlEMEFFRTYxNjM1MUU0MzBEOUFGREY1MjY0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzLaqwznNSCZCqbWkXdBIzKY3 7dR4I5oMGK4X5ayVJJpiTZ+4NttHj/2i6ioKbYE2Kb/6Iu7z+5pHbgCj1i9PQIMt I09Kd3WAC5P0Mr3StHw/o7DOGXnGrkXxOifqk9qxGfL6mp9hjW01C6P0a9Lzkueq v2lu5Bw4s5XFxSLsNU3mjJa9px1QLSacJsmMbWYmgcGVP8XRzqvJozIRgIZrZl/7 YS0y4XOnxKFLpD+mUa0CNh6411jRDb8FclG0SApsmJoCYty5hhr0/ej8s/+lJQnv avJ5msgq5Dbv/eC9uvqjLKcrzOh1TQdam05CD0gxMDq+fr0r/bF17usoXf2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmd4c33MnQruYWNR5DDZr99SZCUwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWU+P9yaYSzvgIMwiAU4g338ATMDwkNKJW3 gn19mOqvqIjV6LGRoG7Q3jZX2vkycW374hvlRzoVVvmJDhmggxjy/1Q8wWl/eM/b 4GwmCPIFLcZllkcdmR50U6qQBHZkAuNuIpBas7U5Cn7151MR76gWLe57r8L8yaRz nOOqwz8+ck4/L7oh2RJ82l2r3+MOu15G4i+ppdOOnI8WEsFbCoZXscO2pfoFpvhT BbqiRnVDspLANbdIMHl3Fvi/CtqvVd6QB+jgIzz2x4GQ6aYzMd5r6iWy9IrmydpO ifFp6ouX7EwBoptizjytoLgdUgPBo8/NxQmPot/Wm2catBnq6xs= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:18 2025 by rpki-client