$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: Pd28hoL19nntTE4PX10nTKG508+yRV7FKgd5r7iyMFU= Subject key identifier: 8C:FF:15:20:80:E7:47:67:3F:CF:3E:21:66:05:B1:C1:0B:29:8E:59 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 12826781C17608900A7DC73AF9AD642D838D5669 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 011F Signing time: Wed 23 Jul 2025 16:40:39 +0000 Manifest this update: Wed 23 Jul 2025 16:35:39 +0000 Manifest next update: Sat 26 Jul 2025 22:57:39 +0000 Files and hashes: 1: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) 2: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 3: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: P1TY3QBT44HII05C7TMcTAC6tdbNVGpNnL1Hu/rpcF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 22:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:82:67:81:c1:76:08:90:0a:7d:c7:3a:f9:ad:64:2d:83:8d:56:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Jul 23 16:35:39 2025 GMT Not After : Jul 26 22:57:39 2025 GMT Subject: CN=8CFF152080E747673FCF3E216605B1C10B298E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:a6:df:8c:b0:00:b0:f8:6e:d4:26:1c:8c: c8:fa:d5:1b:5b:77:92:5d:6d:a2:ed:73:01:7b:c2: 16:7f:c6:91:5a:e0:95:c8:4f:dc:68:32:4c:e2:42: c6:07:46:b8:d2:2c:c7:f9:1d:1e:b6:8d:d7:e8:fe: fe:0e:78:2f:d3:c2:e1:a5:09:16:3c:39:6a:4a:db: a8:be:0e:54:6f:84:f4:c3:73:52:45:bd:77:49:79: 0c:a7:da:ce:3e:d3:41:18:1e:5e:6e:86:b9:47:c0: 42:9d:25:ef:f5:22:e1:6c:51:61:a3:98:bf:6e:84: 8a:e3:db:8e:9c:9e:ac:54:57:be:28:3a:52:ee:47: c5:c3:57:16:a8:b3:bd:d0:0e:a4:83:f9:78:f9:70: 96:e0:a5:f3:79:65:ce:16:c7:33:da:75:53:d6:5e: 5e:fc:b5:59:62:3e:a3:8d:79:f0:66:d4:70:b7:c4: 7c:66:a3:24:89:cf:01:3c:95:65:ec:95:bf:19:72: 7e:c1:bc:48:c5:88:13:e0:49:84:4f:c1:27:a2:48: f9:85:3a:35:8c:25:49:50:b9:48:4a:71:09:89:6d: 62:4e:11:eb:c7:01:d8:f2:4a:ec:32:28:0b:4b:ae: 59:3b:b3:d8:8d:02:4e:6d:5f:c3:b5:9a:2b:d7:ea: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FF:15:20:80:E7:47:67:3F:CF:3E:21:66:05:B1:C1:0B:29:8E:59 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:5e:99:81:2b:d1:80:b3:79:8c:fd:1c:13:b2:99:9e:3e: 7c:cc:a7:84:e8:fe:4c:f8:a2:21:f0:c9:43:2d:62:72:5c:41: e5:9c:17:91:68:77:a1:bb:ab:1e:25:7b:4a:a5:0f:4b:8d:d4: 5c:01:dc:f6:98:64:8e:e0:21:4f:49:07:14:2f:ff:62:87:e3: 75:65:00:75:22:ba:f7:3c:4d:49:14:02:e5:bf:ab:99:5e:8a: 30:a1:3a:95:20:fd:ea:35:8e:85:30:ff:f3:37:80:ac:4d:17: dc:7d:50:59:65:a5:49:6c:24:20:df:e7:b3:04:9c:52:da:2a: e9:1a:52:cf:d7:79:5f:c4:8e:ed:34:f0:48:28:20:28:70:74: f9:a7:7d:04:84:ce:44:37:18:c9:24:95:e5:31:98:c0:1a:42: cb:da:07:1b:ff:b1:02:9d:a3:0f:78:5f:c0:a3:16:b7:01:ee: 38:d0:6c:b2:ec:4f:06:41:f4:ba:e0:17:1b:40:a0:3f:31:6c: af:06:fc:04:eb:55:a6:9e:6b:c3:ae:f6:27:16:63:18:9f:f9: 1d:84:b2:92:f3:d7:ae:c5:70:00:f9:91:4d:8c:f0:69:01:77: cf:df:82:3d:e6:44:d2:36:8b:16:3c:ab:27:dc:b5:c5:05:1d: 44:0e:a3:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoJngcF2CJAKfcc6+a1kLYONVmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA3MjMxNjM1MzlaFw0yNTA3MjYyMjU3MzlaMDMxMTAvBgNV BAMTKDhDRkYxNTIwODBFNzQ3NjczRkNGM0UyMTY2MDVCMUMxMEIyOThFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMabfjLAAsPhu1CYcjMj61Rtb d5JdbaLtcwF7whZ/xpFa4JXIT9xoMkziQsYHRrjSLMf5HR62jdfo/v4OeC/TwuGl CRY8OWpK26i+DlRvhPTDc1JFvXdJeQyn2s4+00EYHl5uhrlHwEKdJe/1IuFsUWGj mL9uhIrj246cnqxUV74oOlLuR8XDVxaos73QDqSD+Xj5cJbgpfN5Zc4WxzPadVPW Xl78tVliPqONefBm1HC3xHxmoySJzwE8lWXslb8Zcn7BvEjFiBPgSYRPwSeiSPmF OjWMJUlQuUhKcQmJbWJOEevHAdjySuwyKAtLrlk7s9iNAk5tX8O1mivX6jc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjP8VIIDnR2c/zz4hZgWxwQspjlkwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA15XpmBK9GAs3mM/RwTspmePnzMp4To/kz4 oiHwyUMtYnJcQeWcF5Fod6G7qx4le0qlD0uN1FwB3PaYZI7gIU9JBxQv/2KH43Vl AHUiuvc8TUkUAuW/q5leijChOpUg/eo1joUw//M3gKxNF9x9UFllpUlsJCDf57ME nFLaKukaUs/XeV/Eju008EgoIChwdPmnfQSEzkQ3GMkkleUxmMAaQsvaBxv/sQKd ow94X8CjFrcB7jjQbLLsTwZB9LrgFxtAoD8xbK8G/ATrVaaea8Ou9icWYxif+R2E spLz167FcAD5kU2M8GkBd8/fgj3mRNI2ixY8qyfctcUFHUQOo+0= -----END CERTIFICATE-----Generated at Thu Jul 24 08:42:23 2025 by rpki-client