$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: xqFuRUJqLo9NnrnEJnPPfzjmpM5W1MJKAva2Uun0AbQ= Subject key identifier: E3:81:19:02:8D:BF:2E:60:A0:58:E0:03:3E:F8:4D:50:DF:DD:25:8C Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 36300B245CFEFA0899B50B98A0E26D6F39732DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 9A Signing time: Wed 06 Aug 2025 03:42:15 +0000 Manifest this update: Wed 06 Aug 2025 03:37:15 +0000 Manifest next update: Sat 09 Aug 2025 15:18:15 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: 5K/aB8jfd9GYtUJPgX8FkWpGVGiBFWBoaSnwyphN8cA=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:0b:24:5c:fe:fa:08:99:b5:0b:98:a0:e2:6d:6f:39:73:2d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Aug 6 03:37:15 2025 GMT Not After : Aug 9 15:18:15 2025 GMT Subject: CN=E38119028DBF2E60A058E0033EF84D50DFDD258C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:cf:82:77:7c:e1:5d:04:c9:66:9f:2d:5c: b0:36:dc:88:16:0e:44:c3:44:1c:4e:18:72:fa:78: eb:7b:57:e2:42:0f:4e:9f:63:f8:b3:e8:2c:23:8b: b1:d4:f6:b6:99:fb:31:52:73:10:c8:53:0e:78:e0: 2f:98:5b:7a:25:9c:5f:ac:04:58:25:af:96:0b:50: 1f:68:f4:51:ae:3f:e0:18:f8:cf:d5:69:c1:08:ee: 9e:c8:6b:71:48:f2:c5:25:4d:5c:f0:d6:3f:d3:4b: e5:e3:a6:e4:0f:31:2b:ad:87:b5:4b:e1:05:05:24: e1:5f:66:d0:68:c5:5d:96:6c:51:11:f2:83:2f:27: f9:27:57:4d:dd:48:21:db:3e:73:cd:d4:76:39:cb: 7f:8e:a8:c3:c7:ab:06:10:d8:ff:5c:90:95:74:31: 20:c4:62:58:ab:d7:76:be:55:1b:7c:a5:ec:80:5e: 0d:aa:21:05:00:94:a5:6e:20:b9:c2:a7:8d:8b:4f: 2e:8c:f6:4d:ed:5c:38:1d:32:26:3d:25:35:02:3a: 12:e4:7e:dd:ae:8a:72:3f:d8:5c:26:4e:b0:b4:dc: 43:01:5f:00:2e:c7:6b:c4:1d:f1:85:e0:bd:23:40: 0b:91:5e:71:12:75:ac:1d:2a:3a:e6:bc:e2:f5:dd: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:81:19:02:8D:BF:2E:60:A0:58:E0:03:3E:F8:4D:50:DF:DD:25:8C X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7d:cd:52:2a:d6:6f:28:ba:c8:97:d5:08:6e:16:6f:10:4c: c8:45:7e:f8:f5:b6:27:2d:ef:39:25:3e:3e:1a:3f:1c:fc:3d: d8:7f:18:2c:e1:c5:d0:d9:d7:90:61:98:f0:9a:65:da:b1:1c: 3f:48:ed:ec:70:61:36:26:6d:ba:18:f4:a1:a4:db:15:ab:cf: e4:48:8b:cc:5f:7f:07:7a:c2:ca:10:85:a4:bf:ae:bd:4a:0f: a0:48:22:15:d6:37:56:3a:cb:6b:de:e1:6a:93:ca:5a:8e:a9: 2e:0b:01:d1:2f:68:55:16:f2:68:3d:2b:9e:57:5b:94:9d:d3: 6c:6b:e5:ed:4b:39:de:14:cb:d9:8b:64:f6:54:94:28:20:19: e5:85:4d:8b:c8:f2:66:04:99:e9:1c:31:4b:ae:95:6f:1d:ce: a1:5d:0e:bf:01:47:0a:ba:8b:71:99:e6:f0:95:ff:56:33:3f: 81:3c:2e:ee:48:7f:74:40:27:b5:1b:ba:b8:d3:80:90:77:6c: dc:67:bb:3e:7a:cc:9c:49:1d:82:a1:12:b6:eb:4c:ae:b1:fb: 59:18:6c:9f:9d:83:9d:4b:91:19:fc:40:c9:03:cc:e9:fd:71: f6:0a:27:80:80:cb:a6:a5:64:4e:ec:a5:a2:ab:75:56:1c:80: 10:f9:9b:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjALJFz++giZtQuYoOJtbzlzLd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA4MDYwMzM3MTVaFw0yNTA4MDkxNTE4MTVaMDMxMTAvBgNV BAMTKEUzODExOTAyOERCRjJFNjBBMDU4RTAwMzNFRjg0RDUwREZERDI1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk58+Cd3zhXQTJZp8tXLA23IgW DkTDRBxOGHL6eOt7V+JCD06fY/iz6Cwji7HU9raZ+zFScxDIUw544C+YW3olnF+s BFglr5YLUB9o9FGuP+AY+M/VacEI7p7Ia3FI8sUlTVzw1j/TS+XjpuQPMSuth7VL 4QUFJOFfZtBoxV2WbFER8oMvJ/knV03dSCHbPnPN1HY5y3+OqMPHqwYQ2P9ckJV0 MSDEYlir13a+VRt8peyAXg2qIQUAlKVuILnCp42LTy6M9k3tXDgdMiY9JTUCOhLk ft2uinI/2FwmTrC03EMBXwAux2vEHfGF4L0jQAuRXnESdawdKjrmvOL13RTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44EZAo2/LmCgWOADPvhNUN/dJYwwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd9zVIq1m8ousiX1QhuFm8QTMhFfvj1tict 7zklPj4aPxz8Pdh/GCzhxdDZ15BhmPCaZdqxHD9I7exwYTYmbboY9KGk2xWrz+RI i8xffwd6wsoQhaS/rr1KD6BIIhXWN1Y6y2ve4WqTylqOqS4LAdEvaFUW8mg9K55X W5Sd02xr5e1LOd4Uy9mLZPZUlCggGeWFTYvI8mYEmekcMUuulW8dzqFdDr8BRwq6 i3GZ5vCV/1YzP4E8Lu5If3RAJ7UburjTgJB3bNxnuz56zJxJHYKhErbrTK6x+1kY bJ+dg51LkRn8QMkDzOn9cfYKJ4CAy6alZE7spaKrdVYcgBD5mzM= -----END CERTIFICATE-----Generated at Fri Aug 8 10:26:30 2025 by rpki-client