$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: QlregcPrryQUmVxGQciUG8aUW45lU0yVsmQgsXJ7hT0= Subject key identifier: BB:62:E5:E3:F3:B5:05:B7:93:85:75:A2:E1:BD:00:AD:30:3E:F5:B5 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 4607F0DE2DE29A2E91028C144F9AAD66F45C10F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 01FA Signing time: Tue 05 Aug 2025 07:21:04 +0000 Manifest this update: Tue 05 Aug 2025 07:16:04 +0000 Manifest next update: Fri 08 Aug 2025 14:16:04 +0000 Files and hashes: 1: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 2: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 3: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: we6ZcM/PXiPKCGZSteYi19BKrOk8MGKiFsbusBNRt84=) 4: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 5: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 6: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 7: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 8: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 10: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:07:f0:de:2d:e2:9a:2e:91:02:8c:14:4f:9a:ad:66:f4:5c:10:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Aug 5 07:16:04 2025 GMT Not After : Aug 8 14:16:04 2025 GMT Subject: CN=BB62E5E3F3B505B7938575A2E1BD00AD303EF5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:14:b8:94:6d:cc:a5:3b:1d:34:62:f4:f6: 79:c1:8f:94:6c:2b:33:bc:07:a4:6f:b4:bc:dd:b1: 1b:b6:55:c1:38:2c:01:1b:27:a0:ff:3d:03:b1:f0: c8:3c:96:05:34:5a:aa:f9:03:a7:f6:0a:6f:5e:03: 6f:52:00:a8:06:a4:89:cb:ba:b4:25:a5:83:08:1e: 7b:06:29:e3:17:2a:e0:81:fb:db:48:e0:92:9a:04: 6b:9f:6c:ed:e9:fe:9f:31:5e:69:2d:d3:0c:e5:0f: 61:36:cb:7b:47:eb:b5:90:fc:d9:29:ea:a8:09:98: c6:b6:fa:3c:b7:c5:8d:64:c2:f5:9e:9b:b1:f1:25: 50:5f:c7:81:88:ee:e7:81:98:f2:15:36:55:11:77: f8:d8:63:b2:5b:dd:aa:81:eb:2f:7c:7f:44:31:f6: de:b5:79:55:72:ff:02:6a:76:5b:6e:7d:92:87:ed: 77:82:ca:94:c8:10:3b:ac:01:4e:ba:f9:42:91:23: e8:e8:50:ad:e8:26:df:e0:79:ca:83:b1:85:76:ff: f6:09:fd:93:6a:06:56:57:ff:62:20:41:35:78:b3: 20:98:85:f7:4f:bc:8b:a0:6b:e9:71:d3:6a:74:4a: 20:8e:2f:cb:b5:80:03:0c:63:6b:0f:46:67:5b:31: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:E5:E3:F3:B5:05:B7:93:85:75:A2:E1:BD:00:AD:30:3E:F5:B5 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c8:ba:e7:8d:38:db:7e:9b:59:6a:e1:5c:86:3d:96:c0:21: 4c:d3:cc:2d:95:18:f3:f4:30:b7:ba:2b:49:a4:ed:25:ac:b7: f7:a8:4f:05:95:8d:09:ba:6f:b3:b1:83:05:c2:1d:1b:a1:c6: 57:31:82:0e:a8:98:c3:7b:33:75:53:7f:24:6d:5c:9e:d1:97: a8:b9:fb:f2:f4:35:86:f1:2b:d9:0e:c6:05:13:86:5d:51:06: f3:e0:9c:10:7f:b4:5f:81:30:6c:bc:03:4b:24:d9:4b:64:b7: df:bd:65:f1:80:e6:dc:81:05:1b:bb:7c:6a:2e:87:81:81:a7: a0:e3:54:34:53:1d:7b:65:07:74:9b:37:78:9a:dc:be:e7:44: e9:d0:bc:30:0c:a5:6f:83:60:45:22:b6:ab:33:72:94:30:7a: 98:1d:23:e0:3b:95:c2:cb:ce:be:f6:03:26:4e:b0:dd:2b:4f: c9:12:59:b0:49:2a:7f:4c:09:10:60:b5:f4:13:12:d7:7e:21: ad:34:dc:e4:dc:07:86:61:14:cc:b6:cc:29:de:64:11:67:e1: 6b:8a:31:01:25:cd:5b:98:0b:2f:7e:d3:39:59:0c:a8:39:ce: 41:a8:88:16:d6:73:5b:0d:c0:7d:c6:17:76:9f:0c:ca:22:6b: 2f:88:ed:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgfw3i3imi6RAowUT5qtZvRcEPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA4MDUwNzE2MDRaFw0yNTA4MDgxNDE2MDRaMDMxMTAvBgNV BAMTKEJCNjJFNUUzRjNCNTA1Qjc5Mzg1NzVBMkUxQkQwMEFEMzAzRUY1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+hS4lG3MpTsdNGL09nnBj5Rs KzO8B6RvtLzdsRu2VcE4LAEbJ6D/PQOx8Mg8lgU0Wqr5A6f2Cm9eA29SAKgGpInL urQlpYMIHnsGKeMXKuCB+9tI4JKaBGufbO3p/p8xXmkt0wzlD2E2y3tH67WQ/Nkp 6qgJmMa2+jy3xY1kwvWem7HxJVBfx4GI7ueBmPIVNlURd/jYY7Jb3aqB6y98f0Qx 9t61eVVy/wJqdltufZKH7XeCypTIEDusAU66+UKRI+joUK3oJt/gecqDsYV2//YJ /ZNqBlZX/2IgQTV4syCYhfdPvIuga+lx02p0SiCOL8u1gAMMY2sPRmdbMTTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2Ll4/O1BbeThXWi4b0ArTA+9bUwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3IuueNONt+m1lq4VyGPZbAIUzTzC2VGPP0 MLe6K0mk7SWst/eoTwWVjQm6b7OxgwXCHRuhxlcxgg6omMN7M3VTfyRtXJ7Rl6i5 +/L0NYbxK9kOxgUThl1RBvPgnBB/tF+BMGy8A0sk2Utkt9+9ZfGA5tyBBRu7fGou h4GBp6DjVDRTHXtlB3SbN3ia3L7nROnQvDAMpW+DYEUitqszcpQwepgdI+A7lcLL zr72AyZOsN0rT8kSWbBJKn9MCRBgtfQTEtd+Ia003OTcB4ZhFMy2zCneZBFn4WuK MQElzVuYCy9+0zlZDKg5zkGoiBbWc1sNwH3GF3afDMoiay+I7YU= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:11 2025 by rpki-client