$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: b+n7SyO8X9NtJIO7OC6kserwvAcptOgolTFHEH4qyGQ= Subject key identifier: F5:06:80:69:89:70:96:DD:4A:90:33:78:B3:5E:07:F4:07:DF:59:C0 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 501E8A7ADDA87D6316FE7DBF952664CD0FF719E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 01FD Signing time: Fri 18 Jul 2025 12:22:19 +0000 Manifest this update: Fri 18 Jul 2025 12:17:19 +0000 Manifest next update: Mon 21 Jul 2025 20:43:19 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: h9dP62DF8RPA0HuNruF7tT6mf3aJfeDVn5XAe7sZXOU=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1e:8a:7a:dd:a8:7d:63:16:fe:7d:bf:95:26:64:cd:0f:f7:19:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Jul 18 12:17:19 2025 GMT Not After : Jul 21 20:43:19 2025 GMT Subject: CN=F5068069897096DD4A903378B35E07F407DF59C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:9d:25:c6:23:98:f3:13:fd:d7:2d:9a:11: b4:ea:8c:2f:39:ce:cb:53:05:e5:12:38:42:be:1c: ed:ca:ad:e8:01:f5:9f:1f:ec:4c:0a:31:74:33:d8: a4:50:f5:e1:71:ae:8a:0b:49:96:d0:0e:3d:e6:45: 85:e1:b3:12:65:05:6a:71:2d:ba:f2:85:c4:76:01: 61:5a:a7:a3:71:04:16:20:cf:cf:a2:fc:19:61:b5: b7:c7:35:17:3e:c1:a6:27:15:d6:2d:b9:23:2d:75: 68:d9:e7:57:21:2c:fd:05:42:7e:03:1e:4a:dc:ec: e8:d1:ea:40:ea:61:24:11:81:fd:5d:bb:0b:83:a7: 41:02:e8:e6:a5:74:24:2d:29:a3:46:e0:8d:1a:39: b3:26:ef:b8:63:2e:f5:96:36:cb:fa:4d:1d:17:fc: 13:a1:d3:7f:00:38:5c:58:18:a5:86:4c:47:70:a8: 4b:d3:67:93:dd:2a:5f:0e:21:a6:ca:cf:78:5b:0b: 78:58:2b:ed:b8:12:52:3b:e2:ee:59:36:fd:db:2c: ac:f3:ba:62:71:22:3d:6e:6e:f9:16:66:57:b8:7e: a4:ef:6b:ae:bf:94:96:53:28:a6:bd:30:9f:90:9b: f3:75:ac:33:5c:8a:60:84:96:14:1c:b8:36:eb:11: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:80:69:89:70:96:DD:4A:90:33:78:B3:5E:07:F4:07:DF:59:C0 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:93:f0:c9:70:fb:54:bc:80:ae:83:e9:a1:dd:dd:71:cd:9b: d8:f5:ee:6c:f0:96:74:1d:a8:ce:38:6c:cc:6a:20:ca:0c:87: f9:d9:88:4d:15:70:5a:41:23:da:f3:c1:11:a6:52:2f:01:a6: f2:e8:86:5c:11:b7:91:02:40:83:f3:09:18:9a:26:11:0b:a3: c8:d4:cf:99:74:69:ca:96:a1:cf:53:81:1e:e1:f5:66:8e:27: 81:57:0b:32:03:f3:ff:6c:74:59:ba:9e:1a:fc:06:e0:d1:96: bd:96:75:8e:9c:74:10:63:7c:77:0e:0a:85:9b:c6:62:fa:20: 77:4f:98:ec:22:d0:4c:e5:a6:28:88:55:77:a2:9b:5e:c2:1f: df:b7:2e:94:36:6d:8f:58:2a:3f:82:f0:da:35:27:d5:9c:9a: df:2b:15:20:5e:21:99:5b:25:27:6d:28:c3:38:d7:70:52:b3: 2c:44:ed:2d:2b:25:00:1b:31:be:b6:84:fd:4c:b8:75:23:2b: a5:03:a2:dc:ab:9e:98:9e:fe:19:61:19:4f:ff:a3:fa:48:3e: 5a:f1:e0:21:3a:a8:e4:83:bc:d6:66:97:94:10:25:d9:38:a6: 81:0f:b6:d6:65:70:40:b7:67:bd:70:18:33:a7:c8:df:d2:49: da:73:e6:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUB6Ket2ofWMW/n2/lSZkzQ/3GeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA3MTgxMjE3MTlaFw0yNTA3MjEyMDQzMTlaMDMxMTAvBgNV BAMTKEY1MDY4MDY5ODk3MDk2REQ0QTkwMzM3OEIzNUUwN0Y0MDdERjU5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoJ0lxiOY8xP91y2aEbTqjC85 zstTBeUSOEK+HO3KregB9Z8f7EwKMXQz2KRQ9eFxrooLSZbQDj3mRYXhsxJlBWpx LbryhcR2AWFap6NxBBYgz8+i/BlhtbfHNRc+waYnFdYtuSMtdWjZ51chLP0FQn4D Hkrc7OjR6kDqYSQRgf1duwuDp0EC6OaldCQtKaNG4I0aObMm77hjLvWWNsv6TR0X /BOh038AOFxYGKWGTEdwqEvTZ5PdKl8OIabKz3hbC3hYK+24ElI74u5ZNv3bLKzz umJxIj1ubvkWZle4fqTva66/lJZTKKa9MJ+Qm/N1rDNcimCElhQcuDbrEQTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9QaAaYlwlt1KkDN4s14H9AffWcAwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeT8Mlw+1S8gK6D6aHd3XHNm9j17mzwlnQd qM44bMxqIMoMh/nZiE0VcFpBI9rzwRGmUi8BpvLohlwRt5ECQIPzCRiaJhELo8jU z5l0acqWoc9TgR7h9WaOJ4FXCzID8/9sdFm6nhr8BuDRlr2WdY6cdBBjfHcOCoWb xmL6IHdPmOwi0EzlpiiIVXeim17CH9+3LpQ2bY9YKj+C8No1J9Wcmt8rFSBeIZlb JSdtKMM413BSsyxE7S0rJQAbMb62hP1MuHUjK6UDotyrnpie/hlhGU//o/pIPlrx 4CE6qOSDvNZml5QQJdk4poEPttZlcEC3Z71wGDOnyN/SSdpz5i4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:23 2025 by rpki-client