$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: INGQLyitpjz+Zpjh1MWlZNrtqHBke/b+shdBICCxFwk= Subject key identifier: 74:22:55:C0:C0:AC:80:59:1A:74:E0:EE:2C:25:5D:F3:82:01:E2:11 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 21A86DC3D3373200D5FEB843AEA9A74BE560310A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 035D Signing time: Mon 21 Jul 2025 04:11:34 +0000 Manifest this update: Mon 21 Jul 2025 04:06:34 +0000 Manifest next update: Thu 24 Jul 2025 14:35:34 +0000 Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: zZXkFNoMeeH/UcEHeYxgje2AdMR4vR0VpG2ipNXaOuU=) 2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a8:6d:c3:d3:37:32:00:d5:fe:b8:43:ae:a9:a7:4b:e5:60:31:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Jul 21 04:06:34 2025 GMT Not After : Jul 24 14:35:34 2025 GMT Subject: CN=742255C0C0AC80591A74E0EE2C255DF38201E211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:ba:2d:06:68:95:be:a2:d1:b7:81:ef:13: f0:81:8d:85:76:4e:b3:d6:21:33:c1:d1:c4:7a:d1: 43:db:f9:91:65:4d:b0:c6:f1:d2:6b:b7:87:48:e3: 7a:5c:64:e1:07:a7:10:f0:4b:b7:97:ae:b8:ef:ab: 61:d2:07:f9:8b:db:63:96:8d:ea:c0:d4:54:76:09: dc:96:9a:1b:2c:c2:2b:f4:8f:99:2b:45:28:f0:5b: 87:06:1b:42:d6:e9:f2:a0:ee:4f:2d:19:63:5b:1d: 4e:38:d9:e6:a6:61:96:85:b0:d9:f2:dd:f9:26:50: 56:6d:25:f5:73:b3:84:f3:f6:fe:f3:5a:db:94:7d: 28:b2:0d:c8:37:33:b6:61:be:ba:ea:86:f2:41:00: eb:dd:2c:69:b2:f6:0e:e1:32:59:85:90:48:80:9f: 90:c5:18:9f:2a:c7:ef:cd:fa:33:56:76:0b:5d:09: ad:b6:cf:a1:1e:7e:cd:02:2b:81:4e:08:33:a2:95: fa:47:36:91:70:a8:f7:ef:c9:e3:0f:e6:ba:f4:1b: c2:a3:71:99:32:ae:7e:e4:52:40:f2:70:ee:5d:d4: 77:30:1c:e9:8a:8f:ea:fe:aa:f5:80:73:96:d1:79: e6:7e:a0:b6:13:f5:38:4c:16:c8:4c:fb:32:d7:19: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:22:55:C0:C0:AC:80:59:1A:74:E0:EE:2C:25:5D:F3:82:01:E2:11 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:51:1f:7c:bb:15:f8:6a:5c:9c:6e:d9:7d:01:2e:be:40:c7: 32:e9:b0:26:a3:75:d1:bb:a3:71:a4:02:ce:6b:3d:6a:6d:8a: 6c:93:53:78:c6:04:64:e6:19:76:b4:1c:c9:b6:6b:fa:b0:97: be:cf:f8:2c:02:04:27:a2:71:79:9b:18:d4:b3:27:86:20:7b: 26:32:b6:8a:99:60:24:ec:25:1e:80:91:e7:93:41:a1:26:fc: 71:38:d4:b9:6a:c0:bc:71:b2:f6:51:d9:2f:9f:92:9f:52:25: 13:ac:14:a1:b2:ee:da:65:8c:2c:c1:cb:bb:43:85:ac:e7:7b: e3:0a:1d:52:72:a2:9c:0a:82:be:cc:e8:4e:30:5f:15:51:a9: 29:3a:9c:52:a0:23:84:6c:fb:f9:af:54:aa:9d:a4:ec:27:0d: e7:8a:4d:ef:ae:08:89:e9:36:74:36:42:4e:6f:83:a7:70:7e: 9f:8e:84:6e:ca:a5:36:aa:e9:01:b7:c3:63:d2:3d:b1:fa:bd: c4:4b:cf:89:b7:ef:c9:2c:c9:06:40:d0:b7:35:73:04:55:7b: db:fb:bc:01:be:4f:71:16:63:de:44:fa:87:71:c3:75:4e:fe: 67:46:93:bb:49:72:ef:bd:92:f0:29:17:b8:74:9b:e7:d4:ee: c3:cf:24:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIahtw9M3MgDV/rhDrqmnS+VgMQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA3MjEwNDA2MzRaFw0yNTA3MjQxNDM1MzRaMDMxMTAvBgNV BAMTKDc0MjI1NUMwQzBBQzgwNTkxQTc0RTBFRTJDMjU1REYzODIwMUUyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1e7otBmiVvqLRt4HvE/CBjYV2 TrPWITPB0cR60UPb+ZFlTbDG8dJrt4dI43pcZOEHpxDwS7eXrrjvq2HSB/mL22OW jerA1FR2CdyWmhsswiv0j5krRSjwW4cGG0LW6fKg7k8tGWNbHU442eamYZaFsNny 3fkmUFZtJfVzs4Tz9v7zWtuUfSiyDcg3M7ZhvrrqhvJBAOvdLGmy9g7hMlmFkEiA n5DFGJ8qx+/N+jNWdgtdCa22z6Eefs0CK4FOCDOilfpHNpFwqPfvyeMP5rr0G8Kj cZkyrn7kUkDycO5d1HcwHOmKj+r+qvWAc5bReeZ+oLYT9ThMFshM+zLXGe2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCJVwMCsgFkadODuLCVd84IB4hEwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9RH3y7FfhqXJxu2X0BLr5AxzLpsCajddG7 o3GkAs5rPWptimyTU3jGBGTmGXa0HMm2a/qwl77P+CwCBCeicXmbGNSzJ4YgeyYy toqZYCTsJR6AkeeTQaEm/HE41LlqwLxxsvZR2S+fkp9SJROsFKGy7tpljCzBy7tD hazne+MKHVJyopwKgr7M6E4wXxVRqSk6nFKgI4Rs+/mvVKqdpOwnDeeKTe+uCInp NnQ2Qk5vg6dwfp+OhG7KpTaq6QG3w2PSPbH6vcRLz4m378ksyQZA0Lc1cwRVe9v7 vAG+T3EWY95E+odxw3VO/mdGk7tJcu+9kvApF7h0m+fU7sPPJCY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:27 2025 by rpki-client