$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: 5b0e7ol59z3+pu/swqK8TxhN2M7xnBGvpATaM692Zcs= Subject key identifier: 8D:EE:0E:B0:62:63:7C:0B:8D:39:7A:22:3A:C6:70:64:3B:2D:2E:7F Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 71B3C383D03CAD9A8F951A1613ACF8C13B9E0F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 19:50:05 +0000 Manifest this update: Sat 19 Jul 2025 19:45:05 +0000 Manifest next update: Tue 22 Jul 2025 22:02:05 +0000 Files and hashes: 1: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 2: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 3: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 4: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 5: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: nzc5/wUJ8aw+wAeQEtD++VwLfwhAbQ63fOWGdAQZCPM=) 7: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 8: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b3:c3:83:d0:3c:ad:9a:8f:95:1a:16:13:ac:f8:c1:3b:9e:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Jul 19 19:45:05 2025 GMT Not After : Jul 22 22:02:05 2025 GMT Subject: CN=8DEE0EB062637C0B8D397A223AC670643B2D2E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:87:e0:b2:76:a5:78:e5:f3:0c:db:30:6d:b8: 01:e9:0a:62:fb:c3:da:7d:e1:35:4b:14:33:0f:04: de:3b:c7:9b:d6:be:2f:ac:2c:66:f3:5a:04:b7:10: ca:bd:73:d6:ab:92:b1:55:fc:bd:65:c0:c1:36:5e: 19:4b:78:6e:53:f7:e1:d9:23:5b:e8:d8:aa:19:53: 89:37:86:51:00:ee:d9:29:85:cb:06:4d:64:8c:7c: 20:b8:f3:b4:c2:aa:1d:96:7f:e5:b0:92:fe:36:2b: 80:c0:3a:ee:6e:b2:88:a1:cc:55:57:14:8e:73:d3: 38:47:47:5c:14:13:e7:91:3f:b9:1e:f9:6c:9c:de: 54:cb:fc:80:ee:0a:e4:39:db:91:21:2c:3a:ba:12: 35:8b:a7:a6:70:11:55:1d:35:dd:e4:ff:1d:9e:63: fe:f9:cc:fa:67:cb:44:35:42:68:e3:45:84:06:2f: 21:96:16:f5:ee:86:94:68:0b:ac:89:e1:92:91:f9: a6:0b:fb:f1:4f:d9:cf:f7:d2:4d:66:49:b1:b2:81: d1:96:48:f5:e5:46:60:c8:e9:0e:fe:09:6e:83:c8: 24:f3:d0:49:f7:2a:95:90:fd:25:bd:e4:22:d9:4b: fa:28:0b:bc:10:0e:3d:99:d9:60:fa:32:a4:67:c7: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:0E:B0:62:63:7C:0B:8D:39:7A:22:3A:C6:70:64:3B:2D:2E:7F X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:98:90:00:20:06:ae:b4:17:79:64:85:38:8b:03:e9:f5: 38:ec:af:be:1f:e4:fd:d0:0e:2d:7f:34:43:52:85:22:1c:fc: 97:c7:b1:11:9a:24:04:f3:d6:ab:57:d8:fc:04:24:59:f8:cb: 88:33:62:9b:13:53:c6:e7:cf:5a:89:53:4c:f8:1a:13:58:79: 82:6e:af:b9:5e:3b:f7:33:e1:66:fb:7f:31:6d:c8:68:69:fc: ab:37:00:61:9b:fd:8f:4c:a8:92:aa:63:40:28:d1:72:bb:f6: 21:27:2d:2f:5d:7a:4c:8b:b2:ae:5f:1f:2f:8c:29:f6:48:d0: b7:80:22:f0:c5:d3:f2:b7:24:ff:b1:22:7b:7e:f9:43:e5:79: 9d:03:99:64:ad:cc:74:48:9d:7e:3a:fa:2f:db:35:9b:5c:33: 55:f8:e6:b9:70:7f:b9:5e:e1:a6:49:6a:42:fd:6e:2f:16:3a: bf:1d:3d:48:a1:72:c7:60:35:db:1e:e3:cc:7c:1c:31:6f:36: 6b:43:a0:9e:72:97:00:e7:43:d2:31:c1:77:49:5a:59:7c:62: ad:51:c8:a6:b6:c8:fc:4b:5f:d1:44:35:7e:60:20:75:0a:af: 24:41:74:a5:ae:78:28:1d:ee:8c:94:a8:68:3c:63:fc:3a:bd: ff:6c:e2:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbPDg9A8rZqPlRoWE6z4wTueDyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA3MTkxOTQ1MDVaFw0yNTA3MjIyMjAyMDVaMDMxMTAvBgNV BAMTKDhERUUwRUIwNjI2MzdDMEI4RDM5N0EyMjNBQzY3MDY0M0IyRDJFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzh+CydqV45fMM2zBtuAHpCmL7 w9p94TVLFDMPBN47x5vWvi+sLGbzWgS3EMq9c9arkrFV/L1lwME2XhlLeG5T9+HZ I1vo2KoZU4k3hlEA7tkphcsGTWSMfCC487TCqh2Wf+Wwkv42K4DAOu5usoihzFVX FI5z0zhHR1wUE+eRP7ke+Wyc3lTL/IDuCuQ525EhLDq6EjWLp6ZwEVUdNd3k/x2e Y/75zPpny0Q1QmjjRYQGLyGWFvXuhpRoC6yJ4ZKR+aYL+/FP2c/30k1mSbGygdGW SPXlRmDI6Q7+CW6DyCTz0En3KpWQ/SW95CLZS/ooC7wQDj2Z2WD6MqRnx2MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUje4OsGJjfAuNOXoiOsZwZDstLn8wHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRDmJAAIAautBd5ZIU4iwPp9Tjsr74f5P3Q Di1/NENShSIc/JfHsRGaJATz1qtX2PwEJFn4y4gzYpsTU8bnz1qJU0z4GhNYeYJu r7leO/cz4Wb7fzFtyGhp/Ks3AGGb/Y9MqJKqY0Ao0XK79iEnLS9dekyLsq5fHy+M KfZI0LeAIvDF0/K3JP+xInt++UPleZ0DmWStzHRInX46+i/bNZtcM1X45rlwf7le 4aZJakL9bi8WOr8dPUihcsdgNdse48x8HDFvNmtDoJ5ylwDnQ9IxwXdJWll8Yq1R yKa2yPxLX9FENX5gIHUKryRBdKWueCgd7oyUqGg8Y/w6vf9s4gU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:08 2025 by rpki-client