$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: aAUni9eez06y4UB+huaxFI0/mvNikwBQaQM2Fjfktio= Subject key identifier: 3B:1C:46:22:FB:D9:E2:78:38:23:22:24:9A:6C:0D:09:DB:9F:7F:BA Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 70F2AFD80014199DA6C72944EBBD58545B83B136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: 6E Signing time: Sun 27 Jul 2025 03:41:20 +0000 Manifest this update: Sun 27 Jul 2025 03:36:20 +0000 Manifest next update: Wed 30 Jul 2025 04:55:20 +0000 Files and hashes: 1: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: OUo94p/1L8eEsTpC4kjWaPDE8DAFLxalsjCxy/5jn9c=) 2: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: 8MJhaEM9s5y+fwdSrAqbf15JCA7uoMHQob6RLCQgrpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f2:af:d8:00:14:19:9d:a6:c7:29:44:eb:bd:58:54:5b:83:b1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Jul 27 03:36:20 2025 GMT Not After : Jul 30 04:55:20 2025 GMT Subject: CN=3B1C4622FBD9E278382322249A6C0D09DB9F7FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:e9:11:f3:fc:63:aa:42:f9:8b:e9:df:2a: 5b:a4:fa:6b:98:5c:81:f1:7e:2d:40:8f:1a:ca:ab: c6:66:cd:c8:b7:0d:a1:e4:97:5b:76:95:67:8f:1a: c4:25:31:73:4c:9c:a3:3d:02:d9:89:79:1d:31:7e: 99:7f:28:fe:12:44:4f:b2:89:32:08:c1:a3:bf:68: e6:5d:c4:ba:fa:52:a8:aa:02:1b:a6:8d:ff:be:2b: ac:5d:33:fb:e1:b2:1b:94:39:be:c7:40:94:1b:c1: dd:68:27:73:cd:8a:4c:1d:30:78:0d:16:bf:2b:01: e8:a8:f3:a2:44:ac:02:c8:3d:d7:a7:e3:f8:81:47: 7b:48:89:80:00:73:aa:8e:8e:10:76:5e:c1:68:41: e4:c6:60:78:0a:d5:a7:a3:1d:a4:a6:5d:b6:4a:71: d7:24:33:cb:82:d5:61:e9:ad:d4:23:3a:d4:0a:44: e0:92:52:dc:6e:38:b6:36:a4:e2:83:d5:ad:ed:af: 6d:10:33:a4:47:83:3d:66:d5:bf:6e:d8:40:56:7d: 77:98:88:f3:d8:68:10:80:90:a3:e2:e1:9a:49:1b: 94:88:b9:fa:99:67:e4:9a:e9:01:cc:f5:bd:2e:20: b9:f9:4a:fc:f0:a6:f5:a5:35:d9:70:ec:2e:04:46: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:46:22:FB:D9:E2:78:38:23:22:24:9A:6C:0D:09:DB:9F:7F:BA X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:14:1e:b2:ff:ba:6f:66:d2:ea:05:18:7d:da:16:be:cb: 5f:61:64:0c:20:36:f9:b7:1e:52:d5:ba:8d:0a:f9:08:1d:0a: 49:cc:17:f8:a2:71:10:8c:16:f0:b0:65:d4:00:3c:0c:fa:33: c4:e2:52:97:84:6c:29:bb:f5:26:bb:8d:1b:2f:74:8b:e6:a4: 17:d4:f0:cb:18:63:98:86:13:e7:1a:b3:dc:00:e6:92:3b:b3: b2:a3:1b:a3:00:5d:ee:e9:b2:55:dd:f6:ee:50:b1:45:d7:58: 6e:56:92:5c:a8:3a:bb:ad:57:b2:44:75:e9:32:da:53:45:98: 6a:6d:7a:a1:fb:42:9c:c7:df:14:1a:f1:77:e9:54:9c:c4:02: ef:4d:cb:cb:1d:39:ff:49:e9:55:30:fa:09:4e:fb:8b:97:d1: 54:b3:df:28:a2:31:8d:ca:2c:be:38:32:57:ed:03:ad:e7:4f: fa:1c:51:35:8c:28:6e:27:c7:f2:07:ab:2f:ed:b2:6d:83:ce: 2e:d9:8b:fa:1d:4f:3f:52:5f:5e:34:60:43:a8:e4:d4:25:c4: 39:14:88:9f:6b:57:2d:9a:33:6f:0a:5c:0b:0f:ec:4f:a5:1c: 77:a8:c3:7d:ce:18:01:47:ed:a6:d7:b6:08:6b:8a:7a:49:c7: 24:dd:41:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPKv2AAUGZ2mxylE671YVFuDsTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNTA3MjcwMzM2MjBaFw0yNTA3MzAwNDU1MjBaMDMxMTAvBgNV BAMTKDNCMUM0NjIyRkJEOUUyNzgzODIzMjIyNDlBNkMwRDA5REI5RjdGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6ukR8/xjqkL5i+nfKluk+muY XIHxfi1AjxrKq8Zmzci3DaHkl1t2lWePGsQlMXNMnKM9AtmJeR0xfpl/KP4SRE+y iTIIwaO/aOZdxLr6UqiqAhumjf++K6xdM/vhshuUOb7HQJQbwd1oJ3PNikwdMHgN Fr8rAeio86JErALIPden4/iBR3tIiYAAc6qOjhB2XsFoQeTGYHgK1aejHaSmXbZK cdckM8uC1WHprdQjOtQKROCSUtxuOLY2pOKD1a3tr20QM6RHgz1m1b9u2EBWfXeY iPPYaBCAkKPi4ZpJG5SIufqZZ+Sa6QHM9b0uILn5SvzwpvWlNdlw7C4ERoaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOxxGIvvZ4ng4IyIkmmwNCduff7owHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmoFB6y/7pvZtLqBRh92ha+y19hZAwgNvm3 HlLVuo0K+QgdCknMF/iicRCMFvCwZdQAPAz6M8TiUpeEbCm79Sa7jRsvdIvmpBfU 8MsYY5iGE+cas9wA5pI7s7KjG6MAXe7pslXd9u5QsUXXWG5WklyoOrutV7JEdeky 2lNFmGpteqH7QpzH3xQa8XfpVJzEAu9Ny8sdOf9J6VUw+glO+4uX0VSz3yiiMY3K LL44MlftA63nT/ocUTWMKG4nx/IHqy/tsm2Dzi7Zi/odTz9SX140YEOo5NQlxDkU iJ9rVy2aM28KXAsP7E+lHHeow33OGAFH7abXtghrinpJxyTdQS4= -----END CERTIFICATE-----Generated at Sun Jul 27 10:26:26 2025 by rpki-client