$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: Y3PWL/cWTUBdbyAK93Rxy+zQNPgDEOTr2v/M/9sPe0M= Subject key identifier: C7:DF:79:AD:B8:3A:BA:EA:BD:DE:67:B2:5E:31:95:1E:D5:89:9E:C4 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 43967A89357E0E32CAF5FB38E62D079494C92F7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: B5 Signing time: Tue 22 Jul 2025 18:01:24 +0000 Manifest this update: Tue 22 Jul 2025 17:56:24 +0000 Manifest next update: Fri 25 Jul 2025 20:38:24 +0000 Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 1nTvc9wXQsrboqjSpyqN0rcAzJjq2KLVQp3CVtaX1O4=) 2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:96:7a:89:35:7e:0e:32:ca:f5:fb:38:e6:2d:07:94:94:c9:2f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Jul 22 17:56:24 2025 GMT Not After : Jul 25 20:38:24 2025 GMT Subject: CN=C7DF79ADB83ABAEABDDE67B25E31951ED5899EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:36:39:c9:44:3f:c4:94:d8:b4:5e:43:4c: e1:20:6b:9c:88:79:c5:63:79:a9:e5:ae:60:9a:01: 95:79:a6:3b:72:b0:fb:09:f2:f5:9d:4d:43:6a:ba: b5:ae:c6:3f:d4:a1:08:8a:8b:05:17:8f:f6:51:0e: 27:ef:ce:eb:f1:46:cd:1b:30:36:10:05:82:e4:98: 89:e5:04:10:2f:1e:4b:cc:b8:dc:d7:0b:02:a3:4b: ff:be:03:1b:f6:aa:f0:88:c7:4a:cc:53:6c:b6:7b: 98:ed:43:60:67:91:75:b6:22:b1:f6:f5:35:eb:fd: e4:fa:83:da:43:da:ea:76:db:cb:28:4c:0e:e6:18: 21:09:ab:3f:7e:9a:1b:4f:fe:57:d4:99:6b:5b:a8: d8:51:2a:91:69:6f:4f:66:b9:3f:99:84:d0:29:ed: ea:f5:d9:73:7f:dd:d1:4e:3d:f3:a5:6c:bc:b6:90: 65:2f:c9:a7:e4:cd:f6:62:73:01:4c:4f:6b:28:34: 2c:14:84:e2:04:8f:25:04:b0:91:05:c6:1f:47:2a: 5d:19:c5:45:6b:af:e1:38:22:01:4f:11:53:7c:b0: de:67:94:0c:c0:e9:cd:a5:bf:10:38:44:18:8f:46: 27:a3:63:00:65:cd:fe:0d:de:67:88:f2:ef:c2:5f: 35:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DF:79:AD:B8:3A:BA:EA:BD:DE:67:B2:5E:31:95:1E:D5:89:9E:C4 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e6:9f:1b:67:a2:bf:23:58:b6:da:ae:5d:d1:c8:e0:25:86: 71:80:78:26:82:e9:07:50:a5:72:34:24:19:a5:be:76:5a:90: 88:4a:df:6c:20:fd:8a:40:3a:86:42:46:8b:22:4a:af:61:c4: ae:66:64:16:fb:55:15:81:fe:85:cd:17:7d:57:e6:82:6e:44: 75:8e:33:69:a5:5a:5e:f7:5a:9b:b2:7c:de:bd:8a:e6:5a:09: 6a:f6:d7:13:61:fb:ed:a7:56:40:18:13:f6:bb:0a:4e:56:6e: 3b:6c:68:1e:29:f0:5c:ec:1b:d7:29:a6:60:de:fa:29:bd:10: 1c:9d:fc:aa:d6:c5:17:ee:92:6a:ec:b4:ed:0f:3f:c9:be:ae: 0c:7b:99:20:9d:65:39:3f:1c:14:fd:8b:c8:27:f6:96:1b:e3: c6:b1:ee:6a:3e:a1:bf:b3:3f:68:20:71:02:af:03:f2:3f:3b: 5a:b5:ad:d0:50:c8:b9:d1:d0:73:84:95:e2:30:74:3b:ab:e3: e1:cc:20:f7:22:35:3e:55:c0:f8:cb:1e:67:66:18:52:7a:14: f7:d9:9b:7f:c9:63:27:26:6d:10:a6:cb:36:43:61:fd:30:5f: fc:64:e3:61:60:4f:49:47:85:e0:29:59:e7:81:ac:97:f4:31: 15:89:d7:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5Z6iTV+DjLK9fs45i0HlJTJL30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNTA3MjIxNzU2MjRaFw0yNTA3MjUyMDM4MjRaMDMxMTAvBgNV BAMTKEM3REY3OUFEQjgzQUJBRUFCRERFNjdCMjVFMzE5NTFFRDU4OTlFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEjY5yUQ/xJTYtF5DTOEga5yI ecVjeanlrmCaAZV5pjtysPsJ8vWdTUNqurWuxj/UoQiKiwUXj/ZRDifvzuvxRs0b MDYQBYLkmInlBBAvHkvMuNzXCwKjS/++Axv2qvCIx0rMU2y2e5jtQ2BnkXW2IrH2 9TXr/eT6g9pD2up228soTA7mGCEJqz9+mhtP/lfUmWtbqNhRKpFpb09muT+ZhNAp 7er12XN/3dFOPfOlbLy2kGUvyafkzfZicwFMT2soNCwUhOIEjyUEsJEFxh9HKl0Z xUVrr+E4IgFPEVN8sN5nlAzA6c2lvxA4RBiPRiejYwBlzf4N3meI8u/CXzXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx995rbg6uuq93meyXjGVHtWJnsQwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbmnxtnor8jWLbarl3RyOAlhnGAeCaC6QdQ pXI0JBmlvnZakIhK32wg/YpAOoZCRosiSq9hxK5mZBb7VRWB/oXNF31X5oJuRHWO M2mlWl73WpuyfN69iuZaCWr21xNh++2nVkAYE/a7Ck5WbjtsaB4p8FzsG9cppmDe +im9EByd/KrWxRfukmrstO0PP8m+rgx7mSCdZTk/HBT9i8gn9pYb48ax7mo+ob+z P2ggcQKvA/I/O1q1rdBQyLnR0HOEleIwdDur4+HMIPciNT5VwPjLHmdmGFJ6FPfZ m3/JYycmbRCmyzZDYf0wX/xk42FgT0lHheApWeeBrJf0MRWJ150= -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:01 2025 by rpki-client