$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json) Hash identifier: ghl8czhJOH3MuUOeIrbn4j6foj+vC4IWj3l78AXEz1w= Subject key identifier: 84:3B:39:72:00:BE:E1:E2:CF:A8:D4:48:C7:A4:49:4F:EE:9C:1B:F9 Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Certificate serial: 55AFA20D38C18ED9BA507958C9D4A84E790822FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft Manifest number: 04EF Signing time: Fri 18 Jul 2025 20:43:49 +0000 Manifest this update: Fri 18 Jul 2025 20:38:49 +0000 Manifest next update: Tue 22 Jul 2025 08:28:49 +0000 Files and hashes: 1: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: E6dG5xzAhmGOOI9hqLkzzpPLdq+Po/vVFCvAL/IU7eU=) 2: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: T9ji1AFTzEEWIaCqcH/iO3+RUFaFMnvEmXw1DWc4R/E=) 3: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: G3k2TGIZtD0G6kIsLYuxmLupEQGsTsKhUmFGnPgDNkk=) 4: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: 8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=) 5: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=) 6: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=) 7: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: ZIgEMhAvryXvDTGrETcZ8TflN3USBddmvWjLfCuExYA=) 8: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: tWUdaCi6USMMsgIMwxNhIvyYJg4UE5mGg0yF8mZruBw=) 9: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: 0A+yflnfox493zQOXJw7z+/lYnUBHyiLxhJZ8YP1PP0=) 10: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=) 11: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:af:a2:0d:38:c1:8e:d9:ba:50:79:58:c9:d4:a8:4e:79:08:22:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Validity Not Before: Jul 18 20:38:49 2025 GMT Not After : Jul 22 08:28:49 2025 GMT Subject: CN=843B397200BEE1E2CFA8D448C7A4494FEE9C1BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:9a:c1:3b:80:df:bf:36:7c:4d:8b:d4:dc: a4:e6:87:85:ec:0f:a1:ea:56:b2:3e:81:c4:89:d4: b3:06:a2:3b:07:c0:66:41:2e:e9:57:12:c4:05:39: 7b:be:c7:83:78:c4:af:09:51:ba:16:04:5d:6f:bf: 86:65:8c:99:e2:40:97:44:43:25:94:2e:e0:75:03: 5a:02:45:f3:52:12:61:1a:7e:e7:f2:95:40:a8:25: 80:ff:9b:c2:17:0d:e4:9c:1a:4b:58:15:12:e3:d4: 78:37:d0:12:dc:f4:ad:b7:f0:05:34:17:68:09:23: ef:a0:e7:fd:d6:63:f8:08:5c:84:0b:fd:2f:65:0f: eb:1c:d0:d2:0c:dc:c4:d8:38:ac:35:bd:52:2d:99: d4:72:42:1d:03:34:08:d2:6c:69:ee:bf:54:86:09: cc:0d:fe:a0:72:d8:56:79:f9:1e:e9:2d:8c:23:fd: 2b:66:c1:7e:27:49:46:e4:13:f3:1d:70:30:e3:c3: a2:61:dd:d7:0a:79:35:01:65:d3:2b:a9:24:f4:72: f0:eb:b9:5f:07:32:50:c7:64:2f:d3:0d:c6:9e:16: 01:4b:0f:e2:05:1b:cc:ab:b5:9c:b2:cb:11:d8:71: 39:cc:23:4e:3a:b9:e7:d9:01:2b:06:c2:7b:5c:c0: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:39:72:00:BE:E1:E2:CF:A8:D4:48:C7:A4:49:4F:EE:9C:1B:F9 X509v3 Authority Key Identifier: keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:90:1f:e5:da:69:fa:0a:84:66:67:07:36:60:68:f4:9b:22: bd:a6:53:53:bc:bb:de:12:ba:00:ac:69:02:41:a1:ad:52:f7: 6d:0b:96:be:ea:20:0a:7b:9e:cc:22:0e:2b:00:49:fb:d2:b6: 03:62:cd:8d:8c:f7:46:36:11:d9:ab:7b:7b:81:71:b9:9b:81: c1:65:e8:c7:98:ae:ed:dd:d9:f8:76:35:a7:a1:c7:f8:fd:3d: 53:7f:c7:61:db:79:07:0e:94:ef:d6:9d:2d:93:2f:4e:76:61: 27:90:73:5a:51:a3:43:08:54:f6:29:f9:e9:98:43:2f:9e:e2: 8b:62:08:f7:bb:d0:b7:18:46:79:78:83:07:00:27:ee:af:b2: 31:28:a3:f9:12:19:dd:2f:1c:04:5e:2e:cf:65:0b:f9:07:e4: f9:16:bf:d6:77:5b:1d:81:7b:3f:c5:65:9c:67:bd:de:a7:0b: 6a:b9:02:46:16:5b:34:57:d7:bb:40:ad:fe:6a:7b:bf:5f:2b: d2:6c:b1:eb:0a:31:23:e5:87:2a:c9:dd:31:a9:cd:cf:22:3b: f4:29:8b:92:2b:3b:d2:54:49:5c:1d:9a:f1:c2:6a:72:33:8d: c1:4f:47:53:a7:a7:20:49:70:f8:e0:7b:39:55:98:71:11:e6: 75:38:3c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa+iDTjBjtm6UHlYydSoTnkIIvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz RjBCNzBCNTAeFw0yNTA3MTgyMDM4NDlaFw0yNTA3MjIwODI4NDlaMDMxMTAvBgNV BAMTKDg0M0IzOTcyMDBCRUUxRTJDRkE4RDQ0OEM3QTQ0OTRGRUU5QzFCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFJrBO4DfvzZ8TYvU3KTmh4Xs D6HqVrI+gcSJ1LMGojsHwGZBLulXEsQFOXu+x4N4xK8JUboWBF1vv4ZljJniQJdE QyWULuB1A1oCRfNSEmEafufylUCoJYD/m8IXDeScGktYFRLj1Hg30BLc9K238AU0 F2gJI++g5/3WY/gIXIQL/S9lD+sc0NIM3MTYOKw1vVItmdRyQh0DNAjSbGnuv1SG CcwN/qBy2FZ5+R7pLYwj/StmwX4nSUbkE/MdcDDjw6Jh3dcKeTUBZdMrqST0cvDr uV8HMlDHZC/TDcaeFgFLD+IFG8yrtZyyyxHYcTnMI046uefZASsGwntcwKXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDs5cgC+4eLPqNRIx6RJT+6cG/kwHwYDVR0j BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZD NUEzRjBCNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImQH+XaafoKhGZnBzZgaPSbIr2mU1O8u94S ugCsaQJBoa1S920Llr7qIAp7nswiDisASfvStgNizY2M90Y2Edmre3uBcbmbgcFl 6MeYru3d2fh2Naehx/j9PVN/x2HbeQcOlO/WnS2TL052YSeQc1pRo0MIVPYp+emY Qy+e4otiCPe70LcYRnl4gwcAJ+6vsjEoo/kSGd0vHAReLs9lC/kH5PkWv9Z3Wx2B ez/FZZxnvd6nC2q5AkYWWzRX17tArf5qe79fK9JssesKMSPlhyrJ3TGpzc8iO/Qp i5IrO9JUSVwdmvHCanIzjcFPR1OnpyBJcPjgezlVmHER5nU4PB0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:17 2025 by rpki-client