$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: 55W8xcNYIbAEIs59lwww+g1N6hl+6qlMBVd8RJqDm+k= Subject key identifier: 81:2F:0F:0D:CE:10:1A:08:AC:5A:D4:55:2F:C6:1E:1E:EB:54:02:41 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 162CAE5058451EE1931B025AC87A9D87AA4A4DCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 0104 Signing time: Tue 05 Aug 2025 09:32:19 +0000 Manifest this update: Tue 05 Aug 2025 09:27:19 +0000 Manifest next update: Fri 08 Aug 2025 17:56:19 +0000 Files and hashes: 1: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=) 2: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: YmIVke9CuTReC5ju9xvOBgcY853dZJYFzjnkkXVikZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2c:ae:50:58:45:1e:e1:93:1b:02:5a:c8:7a:9d:87:aa:4a:4d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Aug 5 09:27:19 2025 GMT Not After : Aug 8 17:56:19 2025 GMT Subject: CN=812F0F0DCE101A08AC5AD4552FC61E1EEB540241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:d2:97:a6:fc:2a:cd:f2:cf:37:7d:b4:fa: 84:ea:1d:80:4d:a6:a5:5d:20:99:53:66:88:0f:0e: ae:77:35:2f:8b:93:a1:22:2a:02:18:a0:60:b0:9c: b6:b2:25:13:12:6d:89:d2:60:36:47:49:03:57:7f: b4:6c:29:70:36:72:c2:a3:a3:58:9c:ce:ec:8e:b9: e1:9c:6f:0b:b6:4f:29:e6:6a:32:99:bc:15:a6:f2: 2e:30:a5:ec:db:4b:5b:80:b9:9d:3e:ed:e4:33:80: 23:fb:45:31:22:67:3a:b2:35:7d:c4:fe:9c:2b:53: 23:9d:ad:6b:f0:6e:98:a3:25:35:a5:e9:b2:86:41: 11:f7:e7:f4:89:8c:1f:ba:89:be:f6:69:83:30:be: 96:4b:20:c0:a9:f0:03:98:49:60:9e:d9:62:da:1a: 7d:ae:49:b2:24:a1:f7:9e:22:54:7e:88:6b:75:09: 55:3b:49:f7:80:ff:5a:62:52:c9:cc:b9:d6:37:3c: 20:8d:3d:90:5b:98:71:d3:c9:02:8f:cf:67:7d:21: 40:63:c2:97:53:13:82:48:a1:49:b3:d2:e2:5a:28: c8:fa:b7:36:a5:cd:c8:7b:c5:b7:6d:9f:24:b9:f3: 32:6d:35:e4:82:01:c4:b6:48:58:7b:d2:83:7f:9c: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:0F:0D:CE:10:1A:08:AC:5A:D4:55:2F:C6:1E:1E:EB:54:02:41 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7d:e5:ff:83:bc:ab:fd:af:35:73:96:93:8c:3e:ba:50:12: 13:ea:f3:44:8e:b8:5e:c9:4d:13:ca:b4:64:df:5a:6f:ec:41: ca:b5:b3:e5:ee:d8:1f:d8:c7:d6:fd:06:0b:d8:0e:3c:09:89: 68:fe:8c:11:47:9f:9a:21:02:51:14:2a:80:95:51:e3:12:da: a3:1c:e6:ee:e8:93:5f:c0:9a:50:9b:6b:1a:ca:ed:97:cb:60: 4f:d0:d5:d6:13:ba:7f:8b:aa:ce:5c:fa:3a:e2:95:ff:b4:fb: 26:23:db:fb:5a:b0:f2:b3:96:da:d0:6c:43:ae:c5:c8:26:79: be:a4:cf:fe:40:02:cc:e3:05:1c:58:48:5b:54:22:a2:ac:e8: 22:0b:f7:c0:07:e0:da:29:f6:f3:72:ee:09:02:9f:b1:99:f8: 8a:2e:07:b7:01:4b:bf:ea:f8:f8:49:72:5c:99:4f:e1:87:47: 75:ab:79:98:6d:64:de:2f:4b:27:5f:5b:c1:fd:cd:0f:29:1a: 28:28:2e:6d:33:5b:57:c5:6e:a1:c7:52:83:67:e7:0f:82:ea: fe:ec:34:1f:b0:e0:ff:7b:88:4d:26:d7:41:42:f5:52:9d:f9: d2:28:34:cd:c8:c9:61:34:c1:fd:c1:14:46:63:01:88:5e:22: 50:95:09:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiyuUFhFHuGTGwJayHqdh6pKTc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTA4MDUwOTI3MTlaFw0yNTA4MDgxNzU2MTlaMDMxMTAvBgNV BAMTKDgxMkYwRjBEQ0UxMDFBMDhBQzVBRDQ1NTJGQzYxRTFFRUI1NDAyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3tKXpvwqzfLPN320+oTqHYBN pqVdIJlTZogPDq53NS+Lk6EiKgIYoGCwnLayJRMSbYnSYDZHSQNXf7RsKXA2csKj o1iczuyOueGcbwu2TynmajKZvBWm8i4wpezbS1uAuZ0+7eQzgCP7RTEiZzqyNX3E /pwrUyOdrWvwbpijJTWl6bKGQRH35/SJjB+6ib72aYMwvpZLIMCp8AOYSWCe2WLa Gn2uSbIkofeeIlR+iGt1CVU7SfeA/1piUsnMudY3PCCNPZBbmHHTyQKPz2d9IUBj wpdTE4JIoUmz0uJaKMj6tzalzch7xbdtnyS58zJtNeSCAcS2SFh70oN/nI+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgS8PDc4QGgisWtRVL8YeHutUAkEwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB95f+DvKv9rzVzlpOMPrpQEhPq80SOuF7J TRPKtGTfWm/sQcq1s+Xu2B/Yx9b9BgvYDjwJiWj+jBFHn5ohAlEUKoCVUeMS2qMc 5u7ok1/AmlCbaxrK7ZfLYE/Q1dYTun+Lqs5c+jrilf+0+yYj2/tasPKzltrQbEOu xcgmeb6kz/5AAszjBRxYSFtUIqKs6CIL98AH4Nop9vNy7gkCn7GZ+IouB7cBS7/q +PhJclyZT+GHR3WreZhtZN4vSydfW8H9zQ8pGigoLm0zW1fFbqHHUoNn5w+C6v7s NB+w4P97iE0m10FC9VKd+dIoNM3IyWE0wf3BFEZjAYheIlCVCTU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:15 2025 by rpki-client