$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: bzOaqyr8YXpC01d2UNOHwDbkUZq+IVyF5WznQhQBTrU= Subject key identifier: 37:E1:72:68:C7:DB:4E:38:43:BE:24:57:FD:CE:D8:3C:B9:0A:20:57 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 3751BFF8B62D77B60D5112BB626B77E6C72B4BE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 01F3 Signing time: Sun 20 Jul 2025 05:41:03 +0000 Manifest this update: Sun 20 Jul 2025 05:36:03 +0000 Manifest next update: Wed 23 Jul 2025 07:44:03 +0000 Files and hashes: 1: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 3: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 5: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 6: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: vLHF9P8XBRSSMAU9CIVdMxeU8iXd5lUEkcx6+GRB3sQ=) 7: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 8: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 9: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: mUT/imDNd5nEvTJhXb+ILWS9VphIa2K8BNvbvyfP3G4=) 10: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:51:bf:f8:b6:2d:77:b6:0d:51:12:bb:62:6b:77:e6:c7:2b:4b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Jul 20 05:36:03 2025 GMT Not After : Jul 23 07:44:03 2025 GMT Subject: CN=37E17268C7DB4E3843BE2457FDCED83CB90A2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:4d:a9:e3:04:53:6e:16:4d:e0:5e:07:f0: 91:99:78:26:af:16:a5:cb:50:1b:f2:8e:41:b4:20: 59:14:98:88:b8:27:2e:48:1b:bc:14:a7:40:db:98: e9:cc:ed:4e:4d:dd:9c:e7:ee:82:93:c8:8b:e2:a8: cc:33:68:aa:0f:42:13:fa:e9:07:84:48:a2:5c:f8: 84:a2:0b:12:41:e5:a4:4b:18:35:24:d3:39:2a:8f: c8:f7:af:e5:58:9e:01:88:bb:8f:e1:1e:1c:4f:11: 0d:88:db:61:12:c1:87:6d:f2:1c:7f:ad:25:0e:fc: 08:dd:5d:1a:5c:94:b7:b8:bd:66:a0:a0:55:0f:94: 05:b5:18:d6:a4:a8:98:c5:7d:96:6b:e8:b9:0d:0b: c7:ef:b1:7b:78:a3:f0:c7:fa:34:aa:74:1f:b8:44: 57:90:82:0c:3d:ea:71:3a:a0:37:7a:ca:d0:72:a7: e0:88:ff:0d:06:77:1f:29:43:a7:5d:27:c4:43:43: f6:2e:9c:d6:ea:15:96:11:d1:e4:cd:90:d6:5c:b2: 27:23:46:b8:49:56:37:2f:8a:e5:ba:dd:0c:c6:44: 29:fc:90:cf:cd:2f:d0:e2:da:4e:cb:06:0c:c0:36: ae:bb:a5:e7:08:10:01:1f:95:f1:26:d5:28:36:84: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E1:72:68:C7:DB:4E:38:43:BE:24:57:FD:CE:D8:3C:B9:0A:20:57 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b8:05:fc:4a:b3:da:3f:e0:10:54:10:fb:36:4c:ce:3b:d2: e1:fe:a8:5e:14:ae:89:35:b9:36:9c:8a:92:f5:4b:3d:88:f0: 16:98:54:32:5a:c0:b1:1d:1f:c5:fd:b3:74:d6:c6:df:01:9f: cb:dc:96:84:c2:19:56:ed:c1:5b:b6:80:62:08:ab:52:24:77: ee:05:13:5c:b8:33:b1:46:4b:0d:81:3a:cb:97:84:61:f3:be: 5a:ea:58:ef:30:86:10:2c:e5:31:ca:89:07:bf:2b:e1:39:05: 09:cc:78:60:e5:b3:e8:e7:f2:7d:a6:04:03:68:d0:df:6b:20: 57:25:b3:dc:13:ca:00:d2:83:69:35:6c:77:d4:56:a1:15:45: a7:0d:31:c2:d2:e9:3e:56:82:54:6f:a0:67:c0:6c:c3:db:2d: fe:bc:53:31:00:f7:ce:e3:69:33:e5:63:e4:db:b3:da:73:99: 8e:1c:1b:7d:e6:cf:97:9f:1a:ee:28:b6:b4:29:a1:c3:04:54: 47:c4:ab:02:7a:27:74:78:92:80:9d:b7:a6:34:ab:a8:0f:7a: d6:98:d7:3b:4a:39:ce:bd:67:1a:8a:fd:6f:54:1c:b5:6b:27: 4a:79:da:09:9a:99:9f:bf:55:2d:e9:29:e6:14:bf:70:c9:32: 21:33:23:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1G/+LYtd7YNURK7Ymt35scrS+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA3MjAwNTM2MDNaFw0yNTA3MjMwNzQ0MDNaMDMxMTAvBgNV BAMTKDM3RTE3MjY4QzdEQjRFMzg0M0JFMjQ1N0ZEQ0VEODNDQjkwQTIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiE2p4wRTbhZN4F4H8JGZeCav FqXLUBvyjkG0IFkUmIi4Jy5IG7wUp0DbmOnM7U5N3Zzn7oKTyIviqMwzaKoPQhP6 6QeESKJc+ISiCxJB5aRLGDUk0zkqj8j3r+VYngGIu4/hHhxPEQ2I22ESwYdt8hx/ rSUO/AjdXRpclLe4vWagoFUPlAW1GNakqJjFfZZr6LkNC8fvsXt4o/DH+jSqdB+4 RFeQggw96nE6oDd6ytByp+CI/w0Gdx8pQ6ddJ8RDQ/YunNbqFZYR0eTNkNZcsicj RrhJVjcviuW63QzGRCn8kM/NL9Di2k7LBgzANq67pecIEAEflfEm1Sg2hGBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+FyaMfbTjhDviRX/c7YPLkKIFcwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG4BfxKs9o/4BBUEPs2TM470uH+qF4Urok1 uTacipL1Sz2I8BaYVDJawLEdH8X9s3TWxt8Bn8vcloTCGVbtwVu2gGIIq1Ikd+4F E1y4M7FGSw2BOsuXhGHzvlrqWO8whhAs5THKiQe/K+E5BQnMeGDls+jn8n2mBANo 0N9rIFcls9wTygDSg2k1bHfUVqEVRacNMcLS6T5WglRvoGfAbMPbLf68UzEA987j aTPlY+Tbs9pzmY4cG33mz5efGu4otrQpocMEVEfEqwJ6J3R4koCdt6Y0q6gPetaY 1ztKOc69ZxqK/W9UHLVrJ0p52gmamZ+/VS3pKeYUv3DJMiEzI4s= -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:21 2025 by rpki-client