$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: VT3OE1XlEbrt1CuqxjZWZZhcVtT5Pvn8MvQNzQC37gc= Subject key identifier: 30:29:6E:E6:04:4D:17:7E:08:B0:8B:5F:07:66:1D:BE:21:61:66:83 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 22C835A4718D372F8FA051897E6F9C65D1E9D2D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 027D Signing time: Sun 10 Aug 2025 05:50:39 +0000 Manifest this update: Sun 10 Aug 2025 05:45:39 +0000 Manifest next update: Wed 13 Aug 2025 10:12:39 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: VpiWqpEhryGAJzqP/OqLsnE9dYm51yw5A4FuzSrLRQI=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: L7LqVXyoSRg8DgNZpOS04vg4NVwWiWJGcA0KRd2HUBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 10:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c8:35:a4:71:8d:37:2f:8f:a0:51:89:7e:6f:9c:65:d1:e9:d2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Aug 10 05:45:39 2025 GMT Not After : Aug 13 10:12:39 2025 GMT Subject: CN=30296EE6044D177E08B08B5F07661DBE21616683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:f0:97:ec:e1:92:c4:a4:08:70:15:9a:3b: ee:bd:fd:d4:7e:c9:c4:f8:27:0f:c8:37:20:40:09: 05:44:7c:cc:ec:40:da:59:1b:e3:02:97:36:c6:0c: 7e:a4:03:c1:37:8d:df:40:0a:19:68:78:5e:ef:13: af:05:be:1a:d2:77:85:b2:77:f2:c0:b7:d8:af:71: da:db:0e:c1:c9:d4:8f:51:b6:7b:47:a7:bb:fc:f9: 5f:f0:17:6e:9e:f0:64:0b:96:03:da:be:ae:9f:b7: ca:2b:36:80:4e:f5:de:b2:2a:86:df:87:f1:52:21: f3:75:88:b7:08:50:bc:e7:85:a4:7e:50:d0:03:9a: 36:06:69:b4:9c:96:10:6c:8e:8b:b3:93:cb:49:e8: 18:de:a2:fc:84:22:cd:bd:f6:eb:69:66:10:28:e1: 5d:8f:62:8a:36:73:97:99:cc:b7:ad:2b:45:fb:99: 0d:b5:46:28:61:33:1b:75:e6:4c:3c:63:e5:88:14: a1:6d:25:1f:57:2e:f3:2e:05:27:f5:1b:db:65:72: a0:b7:0d:1c:db:ef:c4:19:ed:7b:52:ad:1c:be:96: 57:78:50:50:b1:5e:af:d8:4a:67:82:a1:5f:59:42: ee:9d:0b:d5:bc:29:4e:ac:1c:86:6b:b5:a4:3c:c7: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:29:6E:E6:04:4D:17:7E:08:B0:8B:5F:07:66:1D:BE:21:61:66:83 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3c:d8:cd:27:6f:cb:64:bb:eb:40:2d:5e:5b:2b:dd:c3:16: c9:84:af:b1:07:03:f8:7e:bf:33:5b:08:03:4e:81:3f:13:4b: ca:36:a8:b0:24:10:b8:cf:72:2b:9a:d5:50:3a:53:70:18:a1: fc:e3:68:94:57:c3:ab:b5:e5:2b:cb:35:24:be:fb:12:3a:52: 81:cf:6a:19:be:70:8a:99:d1:3d:7f:a8:a6:a0:60:5a:4d:49: 61:17:f7:77:f1:8c:97:d5:ab:59:40:e3:36:2e:6f:26:85:2c: 1b:fe:36:85:a8:67:08:e1:04:c3:eb:6c:aa:59:c0:69:ba:da: bc:b0:37:38:b8:4f:56:45:f6:3a:c6:ab:12:58:86:00:f9:b6: e2:f0:f2:6d:18:04:fa:05:e0:e7:d0:6c:00:6d:27:b7:8d:c4: 08:85:2e:0a:69:19:d5:ba:50:2d:f7:bf:84:67:71:d2:a0:82: 28:76:89:44:5e:7b:46:08:ac:de:3a:62:09:dd:83:52:d6:e8: 59:03:50:76:b8:6f:56:81:a4:0b:60:e9:eb:5f:92:b5:50:1e: aa:7b:9e:cd:c7:37:af:19:40:09:76:c1:10:50:36:5e:27:bb: e1:78:43:56:71:5c:c8:be:f9:66:63:88:bb:b5:7d:d9:14:00: 72:3c:2f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsg1pHGNNy+PoFGJfm+cZdHp0tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTA4MTAwNTQ1MzlaFw0yNTA4MTMxMDEyMzlaMDMxMTAvBgNV BAMTKDMwMjk2RUU2MDQ0RDE3N0UwOEIwOEI1RjA3NjYxREJFMjE2MTY2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nPCX7OGSxKQIcBWaO+69/dR+ ycT4Jw/INyBACQVEfMzsQNpZG+MClzbGDH6kA8E3jd9AChloeF7vE68FvhrSd4Wy d/LAt9ivcdrbDsHJ1I9RtntHp7v8+V/wF26e8GQLlgPavq6ft8orNoBO9d6yKobf h/FSIfN1iLcIULznhaR+UNADmjYGabSclhBsjouzk8tJ6BjeovyEIs299utpZhAo 4V2PYoo2c5eZzLetK0X7mQ21RihhMxt15kw8Y+WIFKFtJR9XLvMuBSf1G9tlcqC3 DRzb78QZ7XtSrRy+lld4UFCxXq/YSmeCoV9ZQu6dC9W8KU6sHIZrtaQ8x9V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMClu5gRNF34IsItfB2YdviFhZoMwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG082M0nb8tku+tALV5bK93DFsmEr7EHA/h+ vzNbCANOgT8TS8o2qLAkELjPciua1VA6U3AYofzjaJRXw6u15SvLNSS++xI6UoHP ahm+cIqZ0T1/qKagYFpNSWEX93fxjJfVq1lA4zYubyaFLBv+NoWoZwjhBMPrbKpZ wGm62rywNzi4T1ZF9jrGqxJYhgD5tuLw8m0YBPoF4OfQbABtJ7eNxAiFLgppGdW6 UC33v4RncdKggih2iURee0YIrN46Ygndg1LW6FkDUHa4b1aBpAtg6etfkrVQHqp7 ns3HN68ZQAl2wRBQNl4nu+F4Q1ZxXMi++WZjiLu1fdkUAHI8L8w= -----END CERTIFICATE-----Generated at Sun Aug 10 19:51:38 2025 by rpki-client