$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: HcSz/+eLKsu/vNUaQyRXJsDSVt2qAxo0ZFOYRflsAtw= Subject key identifier: F4:71:B5:C3:8D:3C:02:A2:DF:31:DF:71:E0:BB:A3:46:E6:7E:2B:D8 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 553C1D74F1E17C9568EE19B94445233D46FC2CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 01C3 Signing time: Tue 22 Jul 2025 11:31:44 +0000 Manifest this update: Tue 22 Jul 2025 11:26:44 +0000 Manifest next update: Fri 25 Jul 2025 15:38:44 +0000 Files and hashes: 1: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: n3sbBfuLKEC1geB0k1Dh7NZVeI84mrHDuJ/mBS5tW04=) 2: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: XKbJLwfpZg0mrW906Lg9ti/G6wLkJc7QCodpqhRfsIM=) 3: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: tCdlLAwoC+YY63D9MBa5GyVbtzsufzTeHqMYaKr8EzE=) 4: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3c:1d:74:f1:e1:7c:95:68:ee:19:b9:44:45:23:3d:46:fc:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Jul 22 11:26:44 2025 GMT Not After : Jul 25 15:38:44 2025 GMT Subject: CN=F471B5C38D3C02A2DF31DF71E0BBA346E67E2BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:12:f3:56:ac:b7:19:3a:17:83:02:52:68:76: bf:18:76:42:92:93:23:a3:d1:79:fb:cf:1d:20:f1: 4f:e8:00:f3:68:46:5c:4a:d7:7d:7b:54:9f:9f:b8: 96:30:6f:32:ad:44:95:ed:da:02:63:d0:78:fe:4f: 6f:1c:d2:46:73:3f:91:cf:a9:fb:fd:f7:89:1d:c7: 31:60:04:2e:24:5e:07:6e:84:44:78:83:bc:d9:fa: d2:6f:67:e1:ca:01:30:d4:08:18:3c:e4:74:27:70: dc:3b:48:e6:6a:ce:df:c3:b8:d8:3f:d2:29:23:55: 40:6e:c5:9d:a7:4d:90:b2:9a:10:4b:9d:65:13:29: b5:68:67:3d:b3:2c:8d:4a:a1:a7:c6:ea:19:2b:ed: 30:5c:bc:52:5c:a6:59:31:9c:3c:76:61:9d:f3:46: 73:ca:f2:7e:f0:2f:2b:af:50:0d:19:72:e2:02:cb: 63:63:f6:7d:18:76:82:42:f9:21:2d:15:a6:7b:34: f3:f5:72:55:7d:71:a7:05:a8:85:f6:9f:50:71:c3: 0a:2b:c5:3a:7c:dd:aa:29:fe:85:da:96:74:16:3b: 05:ea:71:f0:16:64:9f:ad:6e:6b:8d:ea:11:51:8a: 02:64:89:87:90:20:b1:8b:5f:bd:e1:6e:3f:eb:44: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:71:B5:C3:8D:3C:02:A2:DF:31:DF:71:E0:BB:A3:46:E6:7E:2B:D8 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:61:38:42:8c:38:33:43:ed:c1:b8:50:e3:06:1a:0f:16:1d: 8d:d2:1e:25:f7:3b:9e:81:0f:05:45:34:9c:64:06:c9:a4:e0: 5c:e0:01:07:28:12:21:06:05:6f:d1:a3:4f:33:f7:d2:8c:d8: c6:9b:82:83:35:04:a5:7f:77:24:02:5c:e0:2f:d7:93:41:a3: 0f:8e:6c:f2:cd:48:a0:32:ec:29:ae:df:31:3d:e0:ea:6b:f2: 7d:f4:f0:87:ec:05:83:51:41:9b:d8:3e:06:7b:2e:b1:5e:ec: 5b:60:38:f8:6c:97:81:0e:71:7b:7a:27:1f:dc:10:a8:05:03: be:71:05:ce:2a:55:51:61:b6:a7:2d:16:c8:50:f7:1b:0e:e3: e7:46:01:54:5b:bf:10:dc:e7:2c:dc:67:16:db:e2:e4:c4:36: 77:85:3f:a2:fb:aa:e7:c7:45:34:57:b2:0e:d4:3b:27:54:f4: 15:93:3c:19:d2:3a:d6:2c:ab:a6:69:c6:58:05:f6:48:56:cb: 73:dd:19:7b:af:79:fc:9b:3d:56:4b:b7:80:d2:60:0f:91:e5: 78:b9:77:5a:d2:36:78:98:87:00:8c:4f:8a:b6:47:03:df:e7: e2:bd:c5:5b:56:29:27:40:6d:2e:41:0a:3d:50:14:bf:b7:c1: ac:ed:14:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTwddPHhfJVo7hm5REUjPUb8LP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTA3MjIxMTI2NDRaFw0yNTA3MjUxNTM4NDRaMDMxMTAvBgNV BAMTKEY0NzFCNUMzOEQzQzAyQTJERjMxREY3MUUwQkJBMzQ2RTY3RTJCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0EvNWrLcZOheDAlJodr8YdkKS kyOj0Xn7zx0g8U/oAPNoRlxK1317VJ+fuJYwbzKtRJXt2gJj0Hj+T28c0kZzP5HP qfv994kdxzFgBC4kXgduhER4g7zZ+tJvZ+HKATDUCBg85HQncNw7SOZqzt/DuNg/ 0ikjVUBuxZ2nTZCymhBLnWUTKbVoZz2zLI1KoafG6hkr7TBcvFJcplkxnDx2YZ3z RnPK8n7wLyuvUA0ZcuICy2Nj9n0YdoJC+SEtFaZ7NPP1clV9cacFqIX2n1Bxwwor xTp83aop/oXalnQWOwXqcfAWZJ+tbmuN6hFRigJkiYeQILGLX73hbj/rRD8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9HG1w408AqLfMd9x4LujRuZ+K9gwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1hOEKMODND7cG4UOMGGg8WHY3SHiX3O56B DwVFNJxkBsmk4FzgAQcoEiEGBW/Ro08z99KM2MabgoM1BKV/dyQCXOAv15NBow+O bPLNSKAy7Cmu3zE94Opr8n308IfsBYNRQZvYPgZ7LrFe7FtgOPhsl4EOcXt6Jx/c EKgFA75xBc4qVVFhtqctFshQ9xsO4+dGAVRbvxDc5yzcZxbb4uTENneFP6L7qufH RTRXsg7UOydU9BWTPBnSOtYsq6ZpxlgF9khWy3PdGXuvefybPVZLt4DSYA+R5Xi5 d1rSNniYhwCMT4q2RwPf5+K9xVtWKSdAbS5BCj1QFL+3waztFIo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:07 2025 by rpki-client