$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: 4ioaI+Lin4PEe8ye13zD7Dow1o6SdBaHdhDJiYmXMyU= Subject key identifier: 7A:AB:CA:28:0C:BF:67:65:AF:B5:23:D9:9D:A7:26:6F:2E:D1:F2:6D Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 4AF5110391CF251F51375A8AF9A04DE6E0FC8D9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 0150 Signing time: Mon 21 Jul 2025 06:10:34 +0000 Manifest this update: Mon 21 Jul 2025 06:05:34 +0000 Manifest next update: Thu 24 Jul 2025 07:18:34 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: OvjGkdtLWdl7uNMCrHcWLjfbripg/qGHo9AM3cZKk4E=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:11:03:91:cf:25:1f:51:37:5a:8a:f9:a0:4d:e6:e0:fc:8d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Jul 21 06:05:34 2025 GMT Not After : Jul 24 07:18:34 2025 GMT Subject: CN=7AABCA280CBF6765AFB523D99DA7266F2ED1F26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:60:2f:a9:15:00:1e:3e:69:c9:21:5f:d6: 63:2e:48:42:20:24:13:c8:e5:7a:98:39:ee:5c:dd: a0:a4:d5:8e:fb:cb:c9:9a:f5:81:ae:d6:23:8f:ba: a9:48:bc:69:21:90:1b:65:58:04:cc:35:e3:21:54: 7d:d7:7b:13:87:dc:ad:32:e4:9a:b9:e7:9c:9f:7f: e0:ac:80:9f:60:da:37:c8:ec:ad:50:eb:98:b8:46: 30:eb:08:1f:06:6d:3b:58:1e:ec:a5:71:f1:be:d6: 67:87:bd:a9:e7:fd:54:85:f8:6d:a4:4c:a3:44:d3: 26:7c:5d:09:9f:2c:a7:94:c4:ae:a9:c1:9d:79:29: c4:69:9c:75:8c:aa:6b:cc:63:b2:8e:5b:0a:7e:f6: 08:f4:fa:c1:66:25:6e:31:05:13:80:f4:02:48:2c: 6d:71:21:5d:01:25:05:c4:1d:36:45:ef:72:02:1a: 0d:88:31:de:d9:c9:1c:1d:6b:cf:72:77:f7:f9:f6: df:ed:36:a7:80:d2:22:60:7b:d6:1a:b1:a2:0d:2e: 84:fc:17:1f:03:96:bb:3b:15:e2:50:7a:61:ac:8f: 8b:32:af:b4:99:6b:41:8d:f0:83:e3:3a:78:a6:84: 1b:9b:7f:ff:89:56:3d:23:74:28:6b:31:2f:47:48: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:CA:28:0C:BF:67:65:AF:B5:23:D9:9D:A7:26:6F:2E:D1:F2:6D X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:aa:da:86:6e:e7:6c:3c:15:b1:95:1a:02:db:1d:19:85:41: 23:50:d2:a8:c1:44:02:1f:89:d3:f3:c1:ec:ad:19:cf:63:1b: 42:64:a7:6c:e9:ef:01:22:6e:9d:6a:12:3b:8d:61:16:5e:c1: fd:5f:a7:1e:36:64:12:73:f5:cf:fe:64:8e:cd:86:30:cd:bd: 46:50:c1:24:67:a6:5a:98:8a:18:ae:0d:1a:67:47:b1:4f:76: 8d:64:d6:73:29:72:c3:ca:47:4a:bf:df:d4:a0:4a:6a:3a:65: 11:23:ef:32:e7:12:60:c8:f8:3a:28:3e:2c:e0:a5:02:90:69: f8:a3:53:48:34:cf:ff:3f:3e:c1:e0:39:e7:f0:b5:c0:87:10: f4:83:19:d9:83:27:58:f1:8e:86:1c:72:bc:9e:da:0b:0e:3f: d5:c0:43:58:21:c3:d3:67:58:89:e3:f8:87:65:44:9d:4a:7a: e3:b5:84:32:e6:b3:ca:54:be:50:e9:81:3a:19:a7:4c:b3:0d: 35:82:58:e9:fc:ef:0e:88:e2:ef:94:57:ab:42:26:e1:4f:34: 32:21:d0:88:92:11:a2:11:11:02:5a:82:f0:70:84:f2:66:7e: 3d:54:69:38:b6:0c:83:df:51:75:a4:b8:a8:05:f5:ab:63:d2: 2d:db:f1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvURA5HPJR9RN1qK+aBN5uD8jZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNTA3MjEwNjA1MzRaFw0yNTA3MjQwNzE4MzRaMDMxMTAvBgNV BAMTKDdBQUJDQTI4MENCRjY3NjVBRkI1MjNEOTlEQTcyNjZGMkVEMUYyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GWAvqRUAHj5pySFf1mMuSEIg JBPI5XqYOe5c3aCk1Y77y8ma9YGu1iOPuqlIvGkhkBtlWATMNeMhVH3XexOH3K0y 5Jq555yff+CsgJ9g2jfI7K1Q65i4RjDrCB8GbTtYHuylcfG+1meHvann/VSF+G2k TKNE0yZ8XQmfLKeUxK6pwZ15KcRpnHWMqmvMY7KOWwp+9gj0+sFmJW4xBROA9AJI LG1xIV0BJQXEHTZF73ICGg2IMd7ZyRwda89yd/f59t/tNqeA0iJge9YasaINLoT8 Fx8Dlrs7FeJQemGsj4syr7SZa0GN8IPjOnimhBubf/+JVj0jdChrMS9HSGq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqvKKAy/Z2WvtSPZnacmby7R8m0wHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECq2oZu52w8FbGVGgLbHRmFQSNQ0qjBRAIf idPzweytGc9jG0Jkp2zp7wEibp1qEjuNYRZewf1fpx42ZBJz9c/+ZI7NhjDNvUZQ wSRnplqYihiuDRpnR7FPdo1k1nMpcsPKR0q/39SgSmo6ZREj7zLnEmDI+DooPizg pQKQafijU0g0z/8/PsHgOefwtcCHEPSDGdmDJ1jxjoYccrye2gsOP9XAQ1ghw9Nn WInj+IdlRJ1KeuO1hDLms8pUvlDpgToZp0yzDTWCWOn87w6I4u+UV6tCJuFPNDIh 0IiSEaIREQJagvBwhPJmfj1UaTi2DIPfUXWkuKgF9atj0i3b8UQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:20 2025 by rpki-client