$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: KN3+vXQeoxH2iccA9Myd7i9SVTPnJLOqk/Ym1Bd3XDg= Subject key identifier: 2C:84:C2:40:34:D3:31:A0:06:23:0B:EF:C3:6B:E5:AD:41:14:5E:CC Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 03A64C18F798DC31E8819ABC132F25BB32DFE06F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: B9 Signing time: Mon 21 Jul 2025 15:51:27 +0000 Manifest this update: Mon 21 Jul 2025 15:46:27 +0000 Manifest next update: Fri 25 Jul 2025 01:01:27 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: YDruBy3KsOXcNxfGeWufyfsl46ztaKowCF3bg295U+Y=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:4c:18:f7:98:dc:31:e8:81:9a:bc:13:2f:25:bb:32:df:e0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jul 21 15:46:27 2025 GMT Not After : Jul 25 01:01:27 2025 GMT Subject: CN=2C84C24034D331A006230BEFC36BE5AD41145ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:13:73:89:95:90:d8:af:89:fa:db:ba:48: ca:08:38:6a:f4:f7:7a:a3:c8:3f:85:04:9c:85:50: 6a:67:24:22:6a:00:7f:0a:a3:07:a6:86:d6:f6:b5: 79:54:2a:04:ab:36:dc:6e:73:e5:c7:81:0a:4f:b2: a1:49:00:5e:b2:8f:4e:d1:2d:4a:bc:da:aa:a2:e3: 0a:21:e9:8e:d5:f9:66:91:fb:38:53:91:1a:2b:52: a8:40:fb:df:a6:28:6f:68:c7:aa:be:35:44:78:38: 80:60:07:dc:1c:60:6e:92:78:36:24:a2:c4:d2:47: 68:12:2c:44:e8:92:0f:b7:29:30:48:24:0b:0b:1d: da:00:68:ca:21:1e:9b:dc:18:f1:67:7a:06:c8:29: 78:68:4b:1a:41:7a:44:3e:f5:2f:e8:b1:5f:86:84: a0:b6:58:7a:4a:6b:c4:cc:4c:6c:b9:8b:05:20:91: e4:31:df:4f:2e:40:25:6a:1a:f0:b9:d5:77:d7:92: cc:0d:66:5e:ff:9e:2c:81:27:47:f1:a8:16:e5:15: 6d:87:eb:89:18:8c:67:02:08:b6:2b:f1:d5:d8:e8: 4c:92:4a:8d:65:a5:22:8a:81:5b:8f:ac:58:a5:6c: dc:94:50:15:85:f0:ea:9f:ca:96:30:e5:9a:37:e9: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:84:C2:40:34:D3:31:A0:06:23:0B:EF:C3:6B:E5:AD:41:14:5E:CC X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:99:e8:65:ec:f3:a9:1c:9b:f2:7d:d2:a2:56:32:31:75:e9: 7c:13:da:0c:31:5b:1f:6d:31:5c:da:8a:f6:19:9e:d0:bf:b5: 28:a8:19:d2:50:5f:a2:9e:d3:8e:c1:e2:e2:63:b3:e2:53:44: 67:5f:30:57:2d:5d:9a:cc:72:38:69:35:1a:c1:da:a3:f1:36: cb:c6:f1:32:22:ca:36:74:52:7b:59:01:b5:99:75:af:52:47: cc:f8:45:c3:46:fa:b9:ec:97:ec:17:85:f0:46:7d:e4:a2:a0: 7d:81:b2:7a:e6:1a:8f:d5:b5:43:6b:7e:19:07:15:34:43:b4: ad:fe:22:23:30:fd:34:e4:d2:58:9f:9b:1d:83:1f:92:01:c7: 64:3f:36:78:e2:18:9d:72:d0:1b:b4:b9:e5:b5:ab:93:e7:ed: 99:92:d6:aa:cf:b8:c4:fa:aa:ae:eb:2b:d6:8a:2e:1c:a8:43: d8:36:fc:36:db:60:3a:44:e8:d0:02:97:e0:71:70:28:30:1a: ac:9c:01:fe:42:68:f2:7b:7d:9a:c7:81:61:8a:84:9d:bd:dd: 88:cf:15:71:3c:7d:6f:12:2e:48:ef:6a:ab:af:9a:1e:5f:43: 14:d9:ac:5e:d7:1d:08:4d:8f:a1:cc:92:f8:08:ea:76:c1:72: 8f:7f:7b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6ZMGPeY3DHogZq8Ey8luzLf4G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA3MjExNTQ2MjdaFw0yNTA3MjUwMTAxMjdaMDMxMTAvBgNV BAMTKDJDODRDMjQwMzREMzMxQTAwNjIzMEJFRkMzNkJFNUFENDExNDVFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lRNziZWQ2K+J+tu6SMoIOGr0 93qjyD+FBJyFUGpnJCJqAH8Kowemhtb2tXlUKgSrNtxuc+XHgQpPsqFJAF6yj07R LUq82qqi4woh6Y7V+WaR+zhTkRorUqhA+9+mKG9ox6q+NUR4OIBgB9wcYG6SeDYk osTSR2gSLETokg+3KTBIJAsLHdoAaMohHpvcGPFnegbIKXhoSxpBekQ+9S/osV+G hKC2WHpKa8TMTGy5iwUgkeQx308uQCVqGvC51XfXkswNZl7/niyBJ0fxqBblFW2H 64kYjGcCCLYr8dXY6EySSo1lpSKKgVuPrFilbNyUUBWF8OqfypYw5Zo36fTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULITCQDTTMaAGIwvvw2vlrUEUXswwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeZ6GXs86kcm/J90qJWMjF16XwT2gwxWx9t MVzaivYZntC/tSioGdJQX6Ke047B4uJjs+JTRGdfMFctXZrMcjhpNRrB2qPxNsvG 8TIiyjZ0UntZAbWZda9SR8z4RcNG+rnsl+wXhfBGfeSioH2BsnrmGo/VtUNrfhkH FTRDtK3+IiMw/TTk0lifmx2DH5IBx2Q/NnjiGJ1y0Bu0ueW1q5Pn7ZmS1qrPuMT6 qq7rK9aKLhyoQ9g2/DbbYDpE6NACl+BxcCgwGqycAf5CaPJ7fZrHgWGKhJ293YjP FXE8fW8SLkjvaquvmh5fQxTZrF7XHQhNj6HMkvgI6nbBco9/e4M= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:35 2025 by rpki-client