$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: eEQp9MEKRF+3IvEQoCcq0r9nbfYjkNjbzuPVNe7U0gk= Subject key identifier: F1:08:BA:41:18:35:B1:46:03:FA:74:03:47:D6:95:21:F9:01:75:99 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 4636E1D103A618BB97712E9921C91AB6C2CF855F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: B2 Signing time: Fri 08 Aug 2025 21:10:05 +0000 Manifest this update: Fri 08 Aug 2025 21:05:05 +0000 Manifest next update: Tue 12 Aug 2025 01:48:05 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: DzZAW2BDBbn3NBEuGZfgUCGZ7EyTYy3jCIPEKwWMHSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:36:e1:d1:03:a6:18:bb:97:71:2e:99:21:c9:1a:b6:c2:cf:85:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Aug 8 21:05:05 2025 GMT Not After : Aug 12 01:48:05 2025 GMT Subject: CN=F108BA411835B14603FA740347D69521F9017599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a9:60:ad:59:3c:5e:d5:2d:a8:2d:6d:be:fd: 8b:a3:d9:af:f3:44:e7:de:95:7f:a8:fc:13:86:f6: 9b:47:ff:4f:22:2d:9e:bc:44:88:9b:02:25:d3:97: 4a:20:78:dc:a9:d3:21:58:6f:24:7b:ef:38:32:2d: d2:f4:eb:39:fc:bf:bc:aa:50:ce:5b:b1:68:56:f4: cf:6f:67:e2:39:93:32:34:31:f9:18:f4:0f:e1:8e: 39:89:8c:6a:8a:d2:be:69:4c:53:98:1d:86:ef:3e: 9d:1a:0c:a9:dd:93:0c:30:09:5e:51:dd:36:a1:fd: 8d:9d:93:82:76:28:4c:c8:74:13:83:0b:ca:21:2a: f9:d7:be:cb:d4:a6:ed:51:64:f8:4e:33:9b:c8:3a: 2d:88:43:e5:79:f9:6b:08:a2:14:e6:86:7a:64:a2: b8:4c:72:3e:fe:da:e4:eb:70:18:63:cb:96:78:e7: 2f:cf:3d:c4:89:27:2c:fd:0a:06:9e:9c:97:40:1c: 76:b5:ee:e3:a4:42:0b:79:37:19:88:ea:f3:32:ed: 00:1e:38:1a:7b:b2:18:2c:49:a6:9c:64:45:61:1f: ee:b5:1e:11:4c:88:9e:42:44:84:4b:60:39:56:73: ac:39:4f:9a:44:9e:61:e1:fa:ba:63:d0:43:4e:83: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:08:BA:41:18:35:B1:46:03:FA:74:03:47:D6:95:21:F9:01:75:99 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1a:b9:9d:a6:e8:1a:b0:ed:50:fc:c0:93:3e:82:1f:c5:16: c6:40:d7:a1:64:95:43:2d:4c:32:8d:15:0b:2a:80:94:98:73: fa:2a:23:e0:db:6a:45:d4:39:47:3e:a6:64:0b:ba:3f:13:e2: 84:c5:08:c6:a7:8e:51:fd:d9:4b:08:f0:36:a0:c0:0c:a5:d2: 88:c8:11:e6:d9:1d:5c:02:87:68:0c:5e:f4:34:61:23:ab:76: 6f:6a:2a:8e:1f:02:e0:40:2b:36:9f:29:22:ae:19:c6:34:dc: 7a:5e:4c:e6:a8:38:41:36:e3:f3:91:97:c9:3a:00:d8:fe:4e: 48:80:b1:93:18:3e:f2:ba:db:f7:37:c1:66:86:68:b5:31:e5: d7:c4:b3:b9:a9:e2:8c:37:b0:66:7d:a4:ad:da:7b:5f:29:f5: fd:df:4f:83:8e:fe:28:50:e6:c3:6f:ec:ee:79:2a:91:18:ae: e3:75:dd:1c:d4:e1:55:82:59:bc:d3:88:d3:16:17:cd:29:aa: 0d:90:b5:12:67:fb:d5:97:28:af:0c:35:21:1a:49:ec:48:05: 0d:d4:19:23:27:90:32:e0:3b:9f:60:03:8c:6d:e0:c8:d5:1b: b6:ef:c7:d6:c4:4c:8a:8c:9a:d5:0f:1e:d1:01:86:53:0f:bc: 9a:ee:c1:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjbh0QOmGLuXcS6ZIckatsLPhV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTA4MDgyMTA1MDVaFw0yNTA4MTIwMTQ4MDVaMDMxMTAvBgNV BAMTKEYxMDhCQTQxMTgzNUIxNDYwM0ZBNzQwMzQ3RDY5NTIxRjkwMTc1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2qWCtWTxe1S2oLW2+/Yuj2a/z ROfelX+o/BOG9ptH/08iLZ68RIibAiXTl0ogeNyp0yFYbyR77zgyLdL06zn8v7yq UM5bsWhW9M9vZ+I5kzI0MfkY9A/hjjmJjGqK0r5pTFOYHYbvPp0aDKndkwwwCV5R 3Tah/Y2dk4J2KEzIdBODC8ohKvnXvsvUpu1RZPhOM5vIOi2IQ+V5+WsIohTmhnpk orhMcj7+2uTrcBhjy5Z45y/PPcSJJyz9CgaenJdAHHa17uOkQgt5NxmI6vMy7QAe OBp7shgsSaacZEVhH+61HhFMiJ5CRIRLYDlWc6w5T5pEnmHh+rpj0ENOg0WRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Qi6QRg1sUYD+nQDR9aVIfkBdZkwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8auZ2m6Bqw7VD8wJM+gh/FFsZA16FklUMt TDKNFQsqgJSYc/oqI+DbakXUOUc+pmQLuj8T4oTFCManjlH92UsI8DagwAyl0ojI EebZHVwCh2gMXvQ0YSOrdm9qKo4fAuBAKzafKSKuGcY03HpeTOaoOEE24/ORl8k6 ANj+TkiAsZMYPvK62/c3wWaGaLUx5dfEs7mp4ow3sGZ9pK3ae18p9f3fT4OO/ihQ 5sNv7O55KpEYruN13RzU4VWCWbzTiNMWF80pqg2QtRJn+9WXKK8MNSEaSexIBQ3U GSMnkDLgO59gA4xt4MjVG7bvx9bETIqMmtUPHtEBhlMPvJruwWA= -----END CERTIFICATE-----Generated at Sat Aug 9 20:44:56 2025 by rpki-client