$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: ibP2gx/OudFvzZZ+n4rfuTyUsv+nmO9iyFcidSWehn4= Subject key identifier: 57:4A:49:AC:EC:9E:EF:79:DA:39:7C:2A:78:89:B3:AD:12:7D:76:E1 Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 12E13857F7C62094387AD7DE37894F83D6A01E56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 04EE Signing time: Sat 19 Jul 2025 01:30:01 +0000 Manifest this update: Sat 19 Jul 2025 01:25:01 +0000 Manifest next update: Tue 22 Jul 2025 10:32:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: Z6U/Pe1RWTRI8vURgwYPBXkdoMn+J2+FzL7uBtcqndo=) 3: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e1:38:57:f7:c6:20:94:38:7a:d7:de:37:89:4f:83:d6:a0:1e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Jul 19 01:25:01 2025 GMT Not After : Jul 22 10:32:01 2025 GMT Subject: CN=574A49ACEC9EEF79DA397C2A7889B3AD127D76E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:26:8f:14:39:14:c9:eb:23:ca:e3:a6:d2: d0:c4:47:a6:9d:5d:19:74:b3:06:86:3f:08:d2:32: 2d:57:c2:4b:1a:96:a2:81:e0:c6:93:25:a1:0b:7e: ae:c7:07:5e:81:7f:7a:87:7e:12:5d:eb:a0:7e:c8: f0:0e:ef:19:51:1c:57:a2:4c:31:5b:4c:5e:96:87: ed:ee:e2:6a:21:1f:fc:87:a1:d9:22:6a:f9:29:e6: bf:41:18:b7:c7:00:d8:d3:66:64:59:b2:56:f6:68: 58:2f:ca:36:fc:3f:c5:7d:5d:11:b0:46:4e:02:71: 58:04:e2:83:16:8d:bc:da:c8:e3:0e:23:67:83:45: 84:45:af:0f:ba:67:75:69:8b:cd:9a:94:6c:72:3d: 9f:2a:e5:1b:61:a3:a3:6a:6c:22:e4:2f:12:4c:55: dd:e8:ac:b3:ef:ad:39:ad:70:e0:87:92:91:eb:48: 80:3c:27:2a:d9:a3:d4:05:fe:3b:a4:81:0c:c8:8f: da:92:6b:ee:df:ce:43:4f:76:91:31:59:ed:af:0d: b9:57:75:f3:2f:74:db:24:0a:74:f8:e5:b5:2b:e7: 02:f9:01:82:8d:da:bb:f4:d1:19:0d:3c:80:56:e4: 7f:57:a9:fe:cf:91:7d:54:64:f0:7d:39:02:91:eb: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:49:AC:EC:9E:EF:79:DA:39:7C:2A:78:89:B3:AD:12:7D:76:E1 X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8c:8a:1b:3a:67:79:01:69:85:03:98:37:bb:29:13:78:cf: 35:6f:be:5f:fb:b7:e6:2b:3f:b3:cb:ae:dc:4f:62:d7:0b:01: a0:c6:8c:22:25:9a:14:a5:d8:0d:fc:c1:ed:45:e9:46:c6:da: 67:32:ac:4f:d9:40:a1:aa:2c:de:1a:46:cb:d5:34:fb:d2:8f: 5b:50:fe:c9:da:6e:45:d4:50:37:bb:61:b3:0f:67:94:fb:f8: d1:5a:2f:c0:d4:17:8c:f1:63:59:55:8e:1d:e8:71:21:26:33: 73:86:7f:23:d9:97:80:58:19:04:36:7f:95:d2:33:3a:09:4a: f4:64:01:73:93:08:6e:60:f2:29:3e:47:88:54:6c:d8:83:43: cb:5a:57:f3:4c:f7:d5:00:a8:e2:06:20:39:dd:25:3f:c4:e9: cb:f1:bd:cf:53:d6:18:9f:fd:92:ca:f2:df:2b:f1:c8:7e:04: 05:b3:02:50:00:79:15:3e:1d:58:2a:30:93:0d:93:4d:64:df: 13:dc:07:9b:c1:97:ae:d3:f4:74:b5:9d:59:4f:a9:d5:9e:99: 91:8a:e8:29:5f:fa:ef:be:cc:a7:a8:10:3e:c2:c5:68:77:0e: c7:c3:30:95:e8:47:38:07:ae:e0:77:35:a2:4e:ab:cd:5a:29: 84:d6:41:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuE4V/fGIJQ4etfeN4lPg9agHlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNTA3MTkwMTI1MDFaFw0yNTA3MjIxMDMyMDFaMDMxMTAvBgNV BAMTKDU3NEE0OUFDRUM5RUVGNzlEQTM5N0MyQTc4ODlCM0FEMTI3RDc2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHiaPFDkUyesjyuOm0tDER6ad XRl0swaGPwjSMi1XwksalqKB4MaTJaELfq7HB16Bf3qHfhJd66B+yPAO7xlRHFei TDFbTF6Wh+3u4mohH/yHodkiavkp5r9BGLfHANjTZmRZslb2aFgvyjb8P8V9XRGw Rk4CcVgE4oMWjbzayOMOI2eDRYRFrw+6Z3Vpi82alGxyPZ8q5Rtho6NqbCLkLxJM Vd3orLPvrTmtcOCHkpHrSIA8JyrZo9QF/jukgQzIj9qSa+7fzkNPdpExWe2vDblX dfMvdNskCnT45bUr5wL5AYKN2rv00RkNPIBW5H9Xqf7PkX1UZPB9OQKR63c5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV0pJrOye73naOXwqeImzrRJ9duEwHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISMihs6Z3kBaYUDmDe7KRN4zzVvvl/7t+Yr P7PLrtxPYtcLAaDGjCIlmhSl2A38we1F6UbG2mcyrE/ZQKGqLN4aRsvVNPvSj1tQ /snabkXUUDe7YbMPZ5T7+NFaL8DUF4zxY1lVjh3ocSEmM3OGfyPZl4BYGQQ2f5XS MzoJSvRkAXOTCG5g8ik+R4hUbNiDQ8taV/NM99UAqOIGIDndJT/E6cvxvc9T1hif /ZLK8t8r8ch+BAWzAlAAeRU+HVgqMJMNk01k3xPcB5vBl67T9HS1nVlPqdWemZGK 6Clf+u++zKeoED7CxWh3DsfDMJXoRzgHruB3NaJOq81aKYTWQYg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:19 2025 by rpki-client