$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: UBDRz+Ak5Ju/9SM7+DUAQ2r21JilG6FuOOAXLL5fxTU= Subject key identifier: 4F:F8:38:65:CC:13:1D:ED:FD:BB:71:C0:96:C9:5C:AD:11:A9:C9:C8 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 703A760B6025579596D9C82539FAE522F45D2DE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: C2 Signing time: Sun 20 Jul 2025 14:00:59 +0000 Manifest this update: Sun 20 Jul 2025 13:55:59 +0000 Manifest next update: Thu 24 Jul 2025 00:18:59 +0000 Files and hashes: 1: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: ukCi5eHGABkq3fek3dsjrQF1E1SUdaDLJAqqQhecf90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3a:76:0b:60:25:57:95:96:d9:c8:25:39:fa:e5:22:f4:5d:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Jul 20 13:55:59 2025 GMT Not After : Jul 24 00:18:59 2025 GMT Subject: CN=4FF83865CC131DEDFDBB71C096C95CAD11A9C9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:bc:72:e6:52:1e:15:4d:e2:65:e0:7e:f9: 68:f4:75:b6:b4:00:3f:e1:b9:d1:63:30:4a:fb:12: 32:df:31:b7:78:4b:e5:2a:25:5b:4c:23:32:4a:c1: 6c:5e:f4:dc:01:d3:06:e2:4e:9d:1a:c2:91:c6:70: fd:9c:ce:fb:f3:79:39:84:4c:cd:29:60:f3:92:44: 3b:13:27:fe:f7:62:c7:1e:89:5b:ea:47:59:68:3b: 11:17:d9:e9:98:fe:f5:f4:9d:97:43:35:96:a5:19: 74:8f:2e:a4:85:c0:d7:e8:90:aa:dc:ad:1a:b3:de: 93:19:0d:3a:45:71:7f:d0:b6:6d:55:a3:b6:e6:08: b0:50:52:01:63:e9:bc:04:72:80:75:bd:ec:cc:96: 44:a8:6f:b0:b1:dc:b2:aa:0d:67:55:78:04:ac:a9: 0a:48:9f:f2:20:39:23:be:d3:44:a8:f5:70:34:8d: a6:f2:af:d1:92:39:2b:ae:f6:92:0d:4f:99:c3:93: e5:ae:5e:30:d0:64:2e:7b:b5:da:48:05:1d:78:ed: 25:e6:8d:d6:e6:63:e9:60:86:b3:02:ec:11:f4:10: 6b:10:2d:42:ee:ab:7d:ed:e1:76:2a:92:2d:f9:5f: 2d:d1:2e:83:55:b0:0c:95:d6:a1:17:27:b9:f5:40: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:38:65:CC:13:1D:ED:FD:BB:71:C0:96:C9:5C:AD:11:A9:C9:C8 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:10:81:c8:59:a0:66:b5:79:72:56:96:2f:7f:0f:50:ef:55: 49:b6:08:a2:f5:85:86:58:dc:b8:6e:20:7b:ce:f5:54:59:fe: 19:1f:1d:9a:ad:81:da:48:b5:18:44:53:83:bc:bb:3f:ad:c3: 8d:c5:06:2b:e2:c5:e7:fc:ce:7f:ce:22:13:24:17:7c:a8:49: df:19:68:01:c8:1d:75:e2:db:48:ab:0d:b5:fd:c5:07:44:ab: 9e:c8:c8:dc:eb:8b:e1:c5:db:7d:fe:6d:fe:cb:8e:56:f4:94: b5:48:30:4c:5c:4b:33:8b:13:eb:e2:40:d0:0a:5c:30:0b:58: 99:53:71:c9:9f:17:df:a2:4f:b9:40:87:28:09:0d:e2:6c:e6: f0:15:d8:e9:06:06:a1:f6:68:5f:b4:a0:06:5e:24:ae:10:d6: 7a:a2:77:e5:3a:6f:c2:48:c2:16:76:ca:64:6c:91:97:2a:3d: 52:60:e0:36:57:89:df:ff:dd:e2:fa:f0:41:5a:a3:28:e6:23: 55:d5:46:cf:ea:76:64:c5:53:ce:46:be:9c:68:5b:87:c9:a8: ba:0d:cf:23:38:06:f7:27:df:02:97:b0:b7:90:d4:a6:98:12: 75:78:9e:f5:c8:61:31:35:f8:ae:fd:5a:1c:68:fb:d6:d7:93: 14:28:f3:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDp2C2AlV5WW2cglOfrlIvRdLeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA3MjAxMzU1NTlaFw0yNTA3MjQwMDE4NTlaMDMxMTAvBgNV BAMTKDRGRjgzODY1Q0MxMzFERURGREJCNzFDMDk2Qzk1Q0FEMTFBOUM5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCverxy5lIeFU3iZeB++Wj0dba0 AD/hudFjMEr7EjLfMbd4S+UqJVtMIzJKwWxe9NwB0wbiTp0awpHGcP2czvvzeTmE TM0pYPOSRDsTJ/73YsceiVvqR1loOxEX2emY/vX0nZdDNZalGXSPLqSFwNfokKrc rRqz3pMZDTpFcX/Qtm1Vo7bmCLBQUgFj6bwEcoB1vezMlkSob7Cx3LKqDWdVeASs qQpIn/IgOSO+00So9XA0jabyr9GSOSuu9pINT5nDk+WuXjDQZC57tdpIBR147SXm jdbmY+lghrMC7BH0EGsQLULuq33t4XYqki35Xy3RLoNVsAyV1qEXJ7n1QF/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/g4ZcwTHe39u3HAlslcrRGpycgwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEQgchZoGa1eXJWli9/D1DvVUm2CKL1hYZY 3LhuIHvO9VRZ/hkfHZqtgdpItRhEU4O8uz+tw43FBivixef8zn/OIhMkF3yoSd8Z aAHIHXXi20irDbX9xQdEq57IyNzri+HF233+bf7Ljlb0lLVIMExcSzOLE+viQNAK XDALWJlTccmfF9+iT7lAhygJDeJs5vAV2OkGBqH2aF+0oAZeJK4Q1nqid+U6b8JI whZ2ymRskZcqPVJg4DZXid//3eL68EFaoyjmI1XVRs/qdmTFU85GvpxoW4fJqLoN zyM4Bvcn3wKXsLeQ1KaYEnV4nvXIYTE1+K79Whxo+9bXkxQo8x8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:17:31 2025 by rpki-client