$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: BbJOhHe6s1MveiiGQTgMn1UHu7r+3dXZKYqgRncxRf8= Subject key identifier: EA:BF:06:8A:F6:C2:34:3E:3F:2B:65:8C:80:32:CA:06:71:C4:26:47 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 3EB6F709BE2581915EB19E5B7EC3D351693FAD2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 017F Signing time: Sat 19 Jul 2025 09:11:36 +0000 Manifest this update: Sat 19 Jul 2025 09:06:36 +0000 Manifest next update: Tue 22 Jul 2025 18:46:36 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: Y1P4JKtxiI5DzZUbtIT33jlxL082P0OzM/6EQhI7aEk=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b6:f7:09:be:25:81:91:5e:b1:9e:5b:7e:c3:d3:51:69:3f:ad:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Jul 19 09:06:36 2025 GMT Not After : Jul 22 18:46:36 2025 GMT Subject: CN=EABF068AF6C2343E3F2B658C8032CA0671C42647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:8b:4c:ed:a2:1d:40:3a:54:37:f9:3f:7b: 35:9f:cc:1f:d7:ff:9d:bd:b0:af:d9:8b:39:f8:ba: e2:0a:c9:3e:b2:1b:8a:97:99:00:8c:a0:af:83:9b: 18:4d:d7:74:4d:1c:d1:35:81:58:8e:6f:3d:21:bd: 7d:6e:08:89:6d:b1:97:f0:99:0f:94:03:35:4b:e1: 22:4d:85:93:b3:76:57:c0:65:5b:ac:9b:87:72:91: 5c:be:11:bf:c0:e1:a7:76:20:f9:91:56:7e:5f:00: 74:74:d0:50:e0:8b:2b:08:90:d5:72:b2:03:ce:d3: b4:c3:83:2b:52:6f:74:34:41:de:b3:60:e8:57:4f: d3:67:c7:cd:49:60:49:c6:1c:29:78:ca:0a:f5:de: 55:96:10:1f:7b:41:65:08:42:95:d2:cf:21:19:2e: 15:c0:cb:b7:39:32:b2:69:fe:19:9e:77:ad:f2:48: b8:b7:ad:d4:50:bf:1d:f6:0d:f8:7f:13:23:2a:bf: 33:58:0d:23:e1:eb:69:0c:45:91:2f:e0:d9:e6:5d: c7:36:66:b3:7e:b1:07:de:dc:f2:2d:d0:8a:c8:43: 23:d6:fb:b6:63:ea:1c:bf:76:69:24:c8:ef:5f:ae: 84:00:a1:4c:72:85:28:01:c2:e5:e9:e6:b9:5f:65: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:06:8A:F6:C2:34:3E:3F:2B:65:8C:80:32:CA:06:71:C4:26:47 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c4:7f:b6:f5:7e:de:04:0a:18:3d:5d:f7:6c:f2:1c:6e:84: 26:7d:ec:f9:2d:52:99:20:9f:33:f2:b0:ab:42:79:bd:c8:8e: 11:46:91:91:78:3a:21:d3:52:0b:8c:bd:71:fc:aa:d5:46:20: 8e:97:ff:c6:db:47:99:26:a4:3d:e1:15:98:17:c4:94:a8:7a: e1:42:e0:64:86:a5:e6:59:1b:58:b9:1e:93:3d:ab:33:1b:f2: 92:18:a9:14:9b:bf:db:8d:24:bb:b0:84:94:b1:e1:8d:45:e0: f8:8e:b9:63:c8:5d:6f:af:74:c3:41:b7:76:f3:72:bb:05:1d: 1b:f2:17:d8:d2:c6:91:d3:b1:76:fe:82:50:c9:2a:80:e0:9f: 8f:85:d0:85:56:82:60:1c:27:3a:f2:f4:19:85:99:23:00:cb: 15:1c:9b:97:9e:92:cb:0a:96:5d:cb:a4:2b:6f:e2:10:a0:68: 12:36:5a:65:0f:fe:cd:5a:f0:c0:91:93:f4:a2:52:2d:fe:70: 9d:ae:99:5c:d2:89:a3:d9:fc:50:3b:93:f8:69:95:a1:a8:c8: 61:6a:36:e1:d0:65:4e:44:06:b7:0c:24:94:38:06:1b:6c:4a: 2c:22:61:c1:d9:c1:9a:59:25:8d:63:0d:32:a7:16:ce:93:8e: 22:74:6a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrb3Cb4lgZFesZ5bfsPTUWk/rS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA3MTkwOTA2MzZaFw0yNTA3MjIxODQ2MzZaMDMxMTAvBgNV BAMTKEVBQkYwNjhBRjZDMjM0M0UzRjJCNjU4QzgwMzJDQTA2NzFDNDI2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrF4tM7aIdQDpUN/k/ezWfzB/X /529sK/Zizn4uuIKyT6yG4qXmQCMoK+DmxhN13RNHNE1gViObz0hvX1uCIltsZfw mQ+UAzVL4SJNhZOzdlfAZVusm4dykVy+Eb/A4ad2IPmRVn5fAHR00FDgiysIkNVy sgPO07TDgytSb3Q0Qd6zYOhXT9Nnx81JYEnGHCl4ygr13lWWEB97QWUIQpXSzyEZ LhXAy7c5MrJp/hmed63ySLi3rdRQvx32Dfh/EyMqvzNYDSPh62kMRZEv4NnmXcc2 ZrN+sQfe3PIt0IrIQyPW+7Zj6hy/dmkkyO9froQAoUxyhSgBwuXp5rlfZdILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6r8GivbCND4/K2WMgDLKBnHEJkcwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnEf7b1ft4EChg9Xfds8hxuhCZ97PktUpkg nzPysKtCeb3IjhFGkZF4OiHTUguMvXH8qtVGII6X/8bbR5kmpD3hFZgXxJSoeuFC 4GSGpeZZG1i5HpM9qzMb8pIYqRSbv9uNJLuwhJSx4Y1F4PiOuWPIXW+vdMNBt3bz crsFHRvyF9jSxpHTsXb+glDJKoDgn4+F0IVWgmAcJzry9BmFmSMAyxUcm5eekssK ll3LpCtv4hCgaBI2WmUP/s1a8MCRk/SiUi3+cJ2umVzSiaPZ/FA7k/hplaGoyGFq NuHQZU5EBrcMJJQ4BhtsSiwiYcHZwZpZJY1jDTKnFs6TjiJ0anQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:41 2025 by rpki-client