$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: 6/KgFCxn4MmZx/In0enuv6Mi+lcbfOYNhvXXoVElOeM= Subject key identifier: FD:53:29:DA:C6:FC:39:52:22:57:A2:3B:9B:3B:5E:57:B5:CE:74:EB Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 3085D60017024F0726AFF55E2793292970492B47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 01E7 Signing time: Sat 09 Aug 2025 04:31:36 +0000 Manifest this update: Sat 09 Aug 2025 04:26:36 +0000 Manifest next update: Tue 12 Aug 2025 10:56:36 +0000 Files and hashes: 1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: nHFH8D3DWulsr8EqSOjUHwJ38bcyEF8jZsUT2ZXnaR4=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 10:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:85:d6:00:17:02:4f:07:26:af:f5:5e:27:93:29:29:70:49:2b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Aug 9 04:26:36 2025 GMT Not After : Aug 12 10:56:36 2025 GMT Subject: CN=FD5329DAC6FC39522257A23B9B3B5E57B5CE74EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:f4:ce:ae:2b:b8:a9:b9:bc:1f:55:b0:16: 74:94:6b:7c:7e:74:35:20:ba:1e:08:41:02:74:26: 38:e6:fd:e0:95:e6:2b:1a:d3:85:29:b9:e9:cc:d7: e2:b1:4b:10:cb:4c:91:4e:01:f7:7c:6d:c6:5c:45: ec:f7:fa:98:26:9e:7e:75:24:7e:a6:c0:8e:d2:d4: 0e:4f:4e:c6:b4:cd:04:38:39:30:81:b7:29:0a:2a: a2:0c:a3:61:21:27:34:3d:72:05:b5:69:8e:a6:4e: 9b:da:29:0f:e5:51:2b:98:28:b4:2a:c5:1c:b4:22: 7d:ec:c5:b7:78:5a:39:85:93:2f:3f:59:76:f7:ec: 58:37:39:01:16:ec:47:bf:fd:d7:e7:fe:a5:75:35: 14:35:fa:b3:05:ab:ab:ca:50:f8:27:0c:48:66:24: 63:73:37:98:a6:5d:d8:0e:82:74:3d:ec:41:d1:33: 3c:da:ed:4d:a3:19:de:37:84:68:b0:ee:18:bf:5b: 4e:de:4b:23:67:df:b1:c9:7e:b1:34:69:4e:1e:48: dd:64:25:fe:e5:fe:db:dd:ca:43:f2:20:0e:4f:05: 5b:48:61:a5:54:35:d4:cf:f1:03:4e:c3:81:bb:bf: 17:c5:fa:ce:07:0a:2a:3b:ed:5e:69:b2:2b:10:7d: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:29:DA:C6:FC:39:52:22:57:A2:3B:9B:3B:5E:57:B5:CE:74:EB X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:da:65:88:0b:b0:57:05:ae:2d:14:42:db:81:8b:1e:5e: 43:f1:a3:54:99:f6:e5:35:4a:cb:04:95:e3:12:ca:f4:cf:d1: e6:7e:0e:16:ee:b4:7c:9e:8f:c8:cc:88:69:7f:80:d4:36:c6: a7:ba:72:7c:30:d7:b7:7a:ee:57:4f:ae:f9:6d:66:7f:e1:57: 10:35:e3:76:ab:7f:8f:49:f7:eb:8d:f7:0c:04:b3:0f:3f:65: f9:02:e1:5f:46:e3:34:c9:d4:da:77:4a:16:28:f5:d2:3f:c5: 6c:0e:97:78:35:9a:d3:f8:17:8f:83:e3:8c:3d:55:fa:a0:08: 7b:ae:5d:d8:d4:dd:ed:c5:b6:55:3e:fe:c8:94:36:f8:fa:2c: b6:db:8e:51:57:d3:2f:f5:f7:05:0c:8e:c2:5e:fe:f2:78:3d: bf:73:82:c6:13:a6:d2:74:0c:92:a6:01:63:14:3d:80:f6:6f: f6:57:58:40:25:65:d1:b4:c6:a4:c0:b5:0c:fe:ec:31:ee:37: df:fc:25:16:64:85:2d:7b:96:96:e1:44:fb:18:c9:bd:44:3b: a6:f2:77:a8:3d:1c:0f:c8:b5:e5:6a:d1:9c:8e:15:ab:b5:5c: 6a:12:4f:4d:a5:e3:59:ee:25:73:60:42:7a:b6:a2:ec:a8:d5: 72:86:e0:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIXWABcCTwcmr/VeJ5MpKXBJK0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTA4MDkwNDI2MzZaFw0yNTA4MTIxMDU2MzZaMDMxMTAvBgNV BAMTKEZENTMyOURBQzZGQzM5NTIyMjU3QTIzQjlCM0I1RTU3QjVDRTc0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqvTOriu4qbm8H1WwFnSUa3x+ dDUguh4IQQJ0Jjjm/eCV5isa04UpuenM1+KxSxDLTJFOAfd8bcZcRez3+pgmnn51 JH6mwI7S1A5PTsa0zQQ4OTCBtykKKqIMo2EhJzQ9cgW1aY6mTpvaKQ/lUSuYKLQq xRy0In3sxbd4WjmFky8/WXb37Fg3OQEW7Ee//dfn/qV1NRQ1+rMFq6vKUPgnDEhm JGNzN5imXdgOgnQ97EHRMzza7U2jGd43hGiw7hi/W07eSyNn37HJfrE0aU4eSN1k Jf7l/tvdykPyIA5PBVtIYaVUNdTP8QNOw4G7vxfF+s4HCio77V5psisQfRS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VMp2sb8OVIiV6I7mzteV7XOdOswHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3G2mWIC7BXBa4tFELbgYseXkPxo1SZ9uU1 SssEleMSyvTP0eZ+DhbutHyej8jMiGl/gNQ2xqe6cnww17d67ldPrvltZn/hVxA1 43arf49J9+uN9wwEsw8/ZfkC4V9G4zTJ1Np3ShYo9dI/xWwOl3g1mtP4F4+D44w9 VfqgCHuuXdjU3e3FtlU+/siUNvj6LLbbjlFX0y/19wUMjsJe/vJ4Pb9zgsYTptJ0 DJKmAWMUPYD2b/ZXWEAlZdG0xqTAtQz+7DHuN9/8JRZkhS17lpbhRPsYyb1EO6by d6g9HA/IteVq0ZyOFau1XGoST02l41nuJXNgQnq2ouyo1XKG4I4= -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:22 2025 by rpki-client