$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: y4lGgfG/+mVHCxi1N2pBjdcxZ3LdajCDFxrYMfd1FZE= Subject key identifier: 94:54:62:A1:A4:17:8E:6D:2F:23:30:11:A3:60:87:1D:65:75:51:C9 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 4CDCDA877DA386E6BE139D048BC87D000E57185F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0151 Signing time: Wed 23 Jul 2025 07:20:35 +0000 Manifest this update: Wed 23 Jul 2025 07:15:35 +0000 Manifest next update: Sat 26 Jul 2025 13:53:35 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: tQOAA7kuRA7Buie+aiQgmY9/gkXPaDYOTbCFiSPwhsU=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:dc:da:87:7d:a3:86:e6:be:13:9d:04:8b:c8:7d:00:0e:57:18:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Jul 23 07:15:35 2025 GMT Not After : Jul 26 13:53:35 2025 GMT Subject: CN=945462A1A4178E6D2F233011A360871D657551C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:fe:00:fe:a0:79:64:cd:9b:77:65:ee:f0: 40:3d:2a:30:16:3b:5a:31:fa:34:6d:14:89:71:5f: c7:c0:0b:2c:cc:af:ac:0a:44:2a:ff:ec:ca:f2:5e: 73:de:b5:ff:2e:c8:07:00:6c:c8:77:c4:b9:d9:26: c2:ac:70:a3:a6:ee:85:83:68:77:c2:0b:1b:25:1b: 91:9a:ba:a1:fc:da:07:e0:a8:89:42:31:bf:c5:87: 37:3c:e1:30:3b:6d:4b:ff:4e:e5:d9:3a:da:84:da: 47:14:de:7a:37:c3:67:35:1e:8d:0e:fd:15:b4:f3: 23:15:fc:86:c2:98:73:bd:39:7f:fc:5e:e0:63:4f: 3a:34:e9:93:bc:16:e4:5a:ae:b4:02:54:aa:c8:fa: 1b:84:8f:40:fc:2e:42:1e:82:34:a0:9b:e4:ca:ce: 83:e8:f8:59:8a:04:d9:e3:95:75:99:14:eb:c9:3f: 06:df:72:0f:a8:9c:e8:2a:b5:ec:5e:31:89:55:3e: 39:10:bd:9a:34:f0:f5:c5:f2:80:7c:6c:e5:e0:c7: 38:15:39:31:fe:06:d2:d0:c7:37:5d:b8:e6:20:a9: 23:2a:08:4e:c9:d5:11:84:c1:c1:16:b0:47:3b:34: f7:43:19:8b:c7:af:52:91:97:c1:13:b9:03:bb:9d: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:54:62:A1:A4:17:8E:6D:2F:23:30:11:A3:60:87:1D:65:75:51:C9 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2b:18:6c:81:98:ba:2e:c0:b9:05:32:e1:96:18:d8:0d:e4: 91:ff:94:34:3e:d5:21:59:24:07:06:e3:01:8a:4f:01:df:15: cc:69:74:57:3a:93:e3:44:3d:a9:54:9b:5f:95:22:3d:87:b9: 5d:de:7c:d3:02:05:b9:53:d9:f8:9a:1c:7e:ad:0a:a0:a1:8b: 62:22:3d:11:6b:65:65:fe:23:9a:cc:57:d2:d5:55:d3:97:f7: ed:f2:27:16:84:7a:3a:b7:c1:68:fb:48:d6:75:9d:1c:7d:ce: 9b:30:2a:af:9e:3a:76:3a:b4:7b:35:8e:d3:cd:2a:16:e1:e9: f3:8d:dc:e6:fe:f2:b1:0e:b7:b5:af:80:dc:b5:e6:00:5c:bb: da:81:63:d0:81:3f:b2:91:47:e0:9f:22:6b:49:42:4f:00:0a: ea:13:8a:86:45:cc:36:84:bb:a4:3e:cd:1f:67:ef:22:16:d4: 45:a0:e8:75:b1:a1:c7:4d:f9:8c:b4:80:31:4e:5f:e3:7a:25: db:54:64:bc:5d:fa:29:a2:16:0c:5e:c6:aa:3e:a2:1c:4d:b1: 0a:a9:e3:2e:73:74:0a:91:f5:51:27:a1:26:e2:18:e3:ed:7a: 80:62:f5:b7:1e:f0:0b:4c:6b:a7:95:b0:16:b2:e5:c5:0b:57: e9:1a:6a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNzah32jhua+E50Ei8h9AA5XGF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA3MjMwNzE1MzVaFw0yNTA3MjYxMzUzMzVaMDMxMTAvBgNV BAMTKDk0NTQ2MkExQTQxNzhFNkQyRjIzMzAxMUEzNjA4NzFENjU3NTUxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gP4A/qB5ZM2bd2Xu8EA9KjAW O1ox+jRtFIlxX8fACyzMr6wKRCr/7MryXnPetf8uyAcAbMh3xLnZJsKscKOm7oWD aHfCCxslG5GauqH82gfgqIlCMb/Fhzc84TA7bUv/TuXZOtqE2kcU3no3w2c1Ho0O /RW08yMV/IbCmHO9OX/8XuBjTzo06ZO8FuRarrQCVKrI+huEj0D8LkIegjSgm+TK zoPo+FmKBNnjlXWZFOvJPwbfcg+onOgqtexeMYlVPjkQvZo08PXF8oB8bOXgxzgV OTH+BtLQxzdduOYgqSMqCE7J1RGEwcEWsEc7NPdDGYvHr1KRl8ETuQO7nd7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlFRioaQXjm0vIzARo2CHHWV1UckwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYrGGyBmLouwLkFMuGWGNgN5JH/lDQ+1SFZ JAcG4wGKTwHfFcxpdFc6k+NEPalUm1+VIj2HuV3efNMCBblT2fiaHH6tCqChi2Ii PRFrZWX+I5rMV9LVVdOX9+3yJxaEejq3wWj7SNZ1nRx9zpswKq+eOnY6tHs1jtPN Khbh6fON3Ob+8rEOt7WvgNy15gBcu9qBY9CBP7KRR+CfImtJQk8ACuoTioZFzDaE u6Q+zR9n7yIW1EWg6HWxocdN+Yy0gDFOX+N6JdtUZLxd+imiFgxexqo+ohxNsQqp 4y5zdAqR9VEnoSbiGOPteoBi9bce8AtMa6eVsBay5cULV+kaal8= -----END CERTIFICATE-----Generated at Thu Jul 24 04:54:16 2025 by rpki-client