$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: +jr4HjoSLm2m+Tw+xXtyLMuMcjmN5JCvzdeD6n2i0WI= Subject key identifier: B9:AB:E8:CA:F4:10:4B:F0:97:0E:E3:4F:2F:11:71:11:AA:D9:4E:9F Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 3A80C14C8D4DE3E235C9F3FE40C04B46D96CECBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 04F3 Signing time: Sun 20 Jul 2025 18:11:59 +0000 Manifest this update: Sun 20 Jul 2025 18:06:59 +0000 Manifest next update: Thu 24 Jul 2025 02:50:59 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 2: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: hQSA8QhMBcgzWz/aAjOCMjT9fqxaniE7/W3Miyso2+o=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) 4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:80:c1:4c:8d:4d:e3:e2:35:c9:f3:fe:40:c0:4b:46:d9:6c:ec:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Jul 20 18:06:59 2025 GMT Not After : Jul 24 02:50:59 2025 GMT Subject: CN=B9ABE8CAF4104BF0970EE34F2F117111AAD94E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:ac:cd:73:e4:a7:d6:0d:a1:5e:7d:7d:2c: 14:d2:b2:04:e3:be:bc:aa:68:ca:94:e2:e3:cb:cf: 99:33:59:51:82:8a:31:70:75:4f:b2:c0:da:a5:b0: f4:c4:82:1a:95:0c:cb:ee:d1:39:bd:dd:54:d9:f5: 03:12:0f:74:5a:c1:bb:0f:58:57:27:fc:87:67:50: a6:8c:84:c3:4f:75:69:74:f5:0b:82:17:2c:84:30: 70:31:2f:f6:74:bd:64:6c:ff:c0:6a:f7:50:da:a9: b3:a6:01:cb:f2:36:19:9c:21:8c:8d:d2:70:0e:72: fc:55:6c:83:4e:1d:b4:70:37:75:d7:5f:1c:c5:b1: 7a:1a:29:c9:70:1f:d3:77:eb:25:8e:7d:4f:1e:19: 20:0a:ae:ab:2a:da:75:52:eb:f3:05:03:5f:a6:d1: 5e:70:32:0f:8c:e5:11:0b:70:4b:2d:bb:d4:db:1d: d7:7b:f8:27:8b:e3:49:c8:ee:58:41:bf:f8:fb:cb: 00:c8:eb:fa:a4:ab:95:49:f5:00:d8:ab:0e:fc:09: 3c:e0:81:bf:a7:8e:dc:5a:ad:d9:51:7a:42:46:40: 58:9a:97:d3:ad:f8:40:e5:15:e8:d4:ac:27:c6:c1: eb:6f:ab:2e:fe:89:1a:86:e1:71:12:dc:80:f0:94: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:E8:CA:F4:10:4B:F0:97:0E:E3:4F:2F:11:71:11:AA:D9:4E:9F X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:37:96:8a:a0:12:dc:4b:d1:05:29:b8:aa:8f:43:d2:bd:49: 94:12:bc:c3:2f:3c:51:d7:61:a8:c6:96:98:d1:95:4d:c7:81: 89:4f:c1:68:95:19:d2:8f:fc:26:66:c8:46:73:6c:5f:25:17: 5b:f6:eb:b1:4b:02:ec:f4:29:8e:dd:2a:0a:15:6b:30:d5:7c: 09:0d:26:81:39:22:b1:8e:81:e9:37:23:ed:87:d0:0b:f7:1e: 56:b9:ec:9e:14:0f:6f:13:10:7d:c3:a1:9c:0c:a8:bf:b6:5d: 24:4b:4e:1f:72:60:df:8a:75:4c:10:a2:94:78:64:e2:71:62: f2:3d:db:a9:1a:38:f2:1b:49:95:a8:65:2c:61:c3:94:35:30: 37:08:8e:5c:30:2e:40:5a:79:d6:19:15:13:63:ff:c7:1f:b4: f7:ba:a0:e2:37:5f:1e:9b:57:fa:f5:f6:07:34:a5:76:b4:01: 53:d4:23:b8:78:5c:8f:44:7f:20:6b:6e:f1:3e:70:2a:4e:9e: ff:47:6a:4c:1f:22:c9:03:8d:f1:91:06:ab:6d:a7:35:49:d8: a8:6f:c5:85:56:af:67:19:fb:b5:76:84:6f:71:b0:66:d8:24: 72:a6:1c:a1:3f:ea:86:03:58:38:5b:56:fd:b1:7b:ed:06:fd: e1:98:12:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoDBTI1N4+I1yfP+QMBLRtls7L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA3MjAxODA2NTlaFw0yNTA3MjQwMjUwNTlaMDMxMTAvBgNV BAMTKEI5QUJFOENBRjQxMDRCRjA5NzBFRTM0RjJGMTE3MTExQUFEOTRFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN8qzNc+Sn1g2hXn19LBTSsgTj vryqaMqU4uPLz5kzWVGCijFwdU+ywNqlsPTEghqVDMvu0Tm93VTZ9QMSD3RawbsP WFcn/IdnUKaMhMNPdWl09QuCFyyEMHAxL/Z0vWRs/8Bq91DaqbOmAcvyNhmcIYyN 0nAOcvxVbINOHbRwN3XXXxzFsXoaKclwH9N36yWOfU8eGSAKrqsq2nVS6/MFA1+m 0V5wMg+M5RELcEstu9TbHdd7+CeL40nI7lhBv/j7ywDI6/qkq5VJ9QDYqw78CTzg gb+njtxardlRekJGQFial9Ot+EDlFejUrCfGwetvqy7+iRqG4XES3IDwlCmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuavoyvQQS/CXDuNPLxFxEarZTp8wHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK83loqgEtxL0QUpuKqPQ9K9SZQSvMMvPFHX YajGlpjRlU3HgYlPwWiVGdKP/CZmyEZzbF8lF1v267FLAuz0KY7dKgoVazDVfAkN JoE5IrGOgek3I+2H0Av3Hla57J4UD28TEH3DoZwMqL+2XSRLTh9yYN+KdUwQopR4 ZOJxYvI926kaOPIbSZWoZSxhw5Q1MDcIjlwwLkBaedYZFRNj/8cftPe6oOI3Xx6b V/r19gc0pXa0AVPUI7h4XI9EfyBrbvE+cCpOnv9HakwfIskDjfGRBqttpzVJ2Khv xYVWr2cZ+7V2hG9xsGbYJHKmHKE/6oYDWDhbVv2xe+0G/eGYEnM= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:57 2025 by rpki-client