$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: sIdBRoNtYvM+f2UK0tkZTL15lXTcyH9INXmQ/uTtK/8= Subject key identifier: 2B:FF:A9:BC:D1:12:88:CD:18:84:54:AD:C1:E7:B6:C9:01:AF:CB:64 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 32BD2DCA0EBB890640AF2C45C3D02C2E48814546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 9C Signing time: Wed 23 Jul 2025 00:40:35 +0000 Manifest this update: Wed 23 Jul 2025 00:35:35 +0000 Manifest next update: Sat 26 Jul 2025 03:11:35 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: 8rbWPmYsFUQXdUbsdGA8FpKTI13OJETNn/PmD8TJogA=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bd:2d:ca:0e:bb:89:06:40:af:2c:45:c3:d0:2c:2e:48:81:45:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Jul 23 00:35:35 2025 GMT Not After : Jul 26 03:11:35 2025 GMT Subject: CN=2BFFA9BCD11288CD188454ADC1E7B6C901AFCB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:7f:58:a7:5e:ff:dd:0a:27:79:b5:3a:77: 48:15:c8:3f:1c:a5:46:d7:44:c8:cc:e9:1d:e6:b5: 7b:da:af:65:2e:ab:21:30:00:a3:16:7a:c8:5a:02: 74:88:4f:52:94:70:b2:6b:0a:1a:e0:a5:65:d1:e7: 8b:1f:df:76:0b:6b:4f:fc:d8:c8:6b:f0:87:15:38: 3f:21:52:11:4d:9e:6b:d1:48:1c:ce:60:d7:17:b3: 36:3a:17:53:d9:db:ff:90:4a:e6:55:05:6e:f7:cd: 3c:d7:2b:55:d8:19:2c:26:04:e2:f1:be:46:ad:a6: 0c:72:35:60:13:f6:74:48:21:99:96:62:43:ad:64: fc:60:b4:8d:d9:90:be:e5:5f:66:0f:de:ed:0b:c9: cf:fe:16:df:09:7e:73:c3:75:94:00:66:e2:90:cb: 49:61:34:ea:3d:34:8d:0c:27:76:f0:6e:cd:b1:75: af:20:17:ae:f1:84:aa:80:e1:3f:27:13:ed:84:4c: ae:f7:bd:26:2e:dc:4f:8f:53:8b:b6:35:fb:fc:50: 7a:db:1c:d9:3b:44:ab:a2:4c:bd:4c:c1:5a:b8:39: 68:95:29:2f:1f:ef:c6:2e:a3:61:a4:42:d5:15:fd: d8:ec:11:58:80:5f:f9:e3:67:b7:e2:df:c7:ec:78: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FF:A9:BC:D1:12:88:CD:18:84:54:AD:C1:E7:B6:C9:01:AF:CB:64 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:70:9d:26:33:e6:00:94:74:8f:f4:6b:77:c6:34:c3:1b: 2a:2c:6e:46:6d:2b:97:91:40:28:42:42:eb:5c:e9:76:cd:34: d5:6a:5b:eb:4c:08:3f:9a:a7:9d:a2:f3:6c:57:ae:de:15:a6: eb:3a:30:bf:34:9a:ab:e6:a1:aa:16:cd:de:58:55:d5:6a:57: f0:5b:7c:9e:10:f1:d4:6b:70:1a:14:96:09:a6:d3:bd:53:70: 89:6d:6b:d1:62:1f:d7:06:c1:82:36:18:f2:63:77:60:4f:ce: 97:6d:c2:d0:5a:d5:e4:67:9d:3c:5d:d9:27:a5:35:e8:58:d7: 70:6a:89:01:fd:2a:0a:24:cf:70:75:fa:5f:b7:a5:07:67:d4: 31:af:89:65:74:80:6d:05:1b:3a:90:76:04:22:6d:2c:f0:7d: 4b:6e:87:5f:53:c0:b5:f3:8c:9a:4a:0e:54:a5:18:e7:f9:ab: 4b:25:ec:62:f3:e4:09:b1:8e:6d:90:36:be:26:0b:93:85:4d: 64:f2:4c:bb:7c:b3:74:f5:77:f4:30:24:06:38:a1:5c:2e:73: 6d:5e:32:96:1a:84:34:7c:7e:ca:5a:70:bf:0a:16:c6:4f:5a: 37:6f:3b:1d:c6:a0:7a:11:e7:e6:c6:ea:71:50:dd:ee:b2:9b: 89:f0:34:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMr0tyg67iQZAryxFw9AsLkiBRUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA3MjMwMDM1MzVaFw0yNTA3MjYwMzExMzVaMDMxMTAvBgNV BAMTKDJCRkZBOUJDRDExMjg4Q0QxODg0NTRBREMxRTdCNkM5MDFBRkNCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLd39Yp17/3QonebU6d0gVyD8c pUbXRMjM6R3mtXvar2UuqyEwAKMWeshaAnSIT1KUcLJrChrgpWXR54sf33YLa0/8 2Mhr8IcVOD8hUhFNnmvRSBzOYNcXszY6F1PZ2/+QSuZVBW73zTzXK1XYGSwmBOLx vkatpgxyNWAT9nRIIZmWYkOtZPxgtI3ZkL7lX2YP3u0Lyc/+Ft8JfnPDdZQAZuKQ y0lhNOo9NI0MJ3bwbs2xda8gF67xhKqA4T8nE+2ETK73vSYu3E+PU4u2Nfv8UHrb HNk7RKuiTL1MwVq4OWiVKS8f78Yuo2GkQtUV/djsEViAX/njZ7fi38fseDGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/+pvNESiM0YhFStwee2yQGvy2QwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmQcJ0mM+YAlHSP9Gt3xjTDGyosbkZtK5eR QChCQutc6XbNNNVqW+tMCD+ap52i82xXrt4Vpus6ML80mqvmoaoWzd5YVdVqV/Bb fJ4Q8dRrcBoUlgmm071TcIlta9FiH9cGwYI2GPJjd2BPzpdtwtBa1eRnnTxd2Sel NehY13BqiQH9Kgokz3B1+l+3pQdn1DGviWV0gG0FGzqQdgQibSzwfUtuh19TwLXz jJpKDlSlGOf5q0sl7GLz5Amxjm2QNr4mC5OFTWTyTLt8s3T1d/QwJAY4oVwuc21e MpYahDR8fspacL8KFsZPWjdvOx3GoHoR5+bG6nFQ3e6ym4nwNKM= -----END CERTIFICATE-----Generated at Thu Jul 24 12:09:53 2025 by rpki-client