$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: uZ/BsX/vpfZxnAl2719hKG2wH4XIvXpbPS1MpVxnCkI= Subject key identifier: 1E:5F:45:4E:92:79:48:CE:02:7B:C4:E6:24:1B:32:70:74:70:16:F2 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 7BEF19B75AC6B48DC3FDEA3C6F092C4D7AD3064B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 9D Signing time: Fri 25 Jul 2025 03:20:38 +0000 Manifest this update: Fri 25 Jul 2025 03:15:38 +0000 Manifest next update: Mon 28 Jul 2025 11:45:38 +0000 Files and hashes: 1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) 2: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: /IO+aN/1KdAzKjV51IpRbWKi2O63luJp9efjhbNtw7Y=) 3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ef:19:b7:5a:c6:b4:8d:c3:fd:ea:3c:6f:09:2c:4d:7a:d3:06:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Jul 25 03:15:38 2025 GMT Not After : Jul 28 11:45:38 2025 GMT Subject: CN=1E5F454E927948CE027BC4E6241B3270747016F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:26:ee:50:36:45:b5:b4:19:36:fa:19:2b: 36:13:95:40:9f:ee:e6:d7:4a:5b:14:a5:fe:ad:6a: da:6b:f6:99:d5:e9:d1:f0:d0:3e:31:d6:46:8c:df: 0b:99:6e:23:29:79:df:f5:af:2a:78:c2:9e:f6:bc: e1:ef:c1:38:8d:e2:f5:64:63:3d:3b:df:c8:fc:c8: 6d:e1:87:0c:93:a7:89:bd:29:52:95:84:83:b7:27: b5:56:e2:82:cb:79:b6:b7:35:41:26:57:1d:38:77: 44:81:33:7c:b6:f0:c6:82:e9:e6:96:45:a5:da:63: 5b:ba:29:64:75:6b:72:b0:29:6b:1d:6a:f0:d2:c0: 63:b9:e7:11:b8:4d:8a:91:31:f8:58:b4:4d:73:76: 2d:88:ca:e8:19:57:f1:88:9d:37:93:e8:3e:0f:62: 2c:bb:95:29:97:d8:6b:4e:71:fe:bf:7e:c7:bf:b4: 59:15:d5:b9:8f:e5:da:45:ea:6b:f7:9d:a0:62:a8: 52:a8:be:98:3b:79:7d:be:11:88:5f:e8:a4:94:5d: a2:8b:14:74:03:72:f0:f3:1b:61:12:5f:0c:82:76: 32:50:22:54:67:19:5d:32:23:ab:02:24:13:7f:1a: 48:55:53:d5:ad:ef:21:50:4f:19:31:08:5c:cc:19: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:45:4E:92:79:48:CE:02:7B:C4:E6:24:1B:32:70:74:70:16:F2 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ec:e8:65:e7:b1:2b:49:f1:73:d4:90:5c:60:d6:c1:c7:b7: 64:0b:69:46:c8:67:c9:fb:84:d5:99:0f:41:37:89:f1:e1:0b: 82:64:9e:eb:4d:4f:aa:80:7a:eb:ee:ed:bb:33:ee:68:ec:e0: 0a:ad:b9:00:46:ef:b7:ed:d3:fa:9b:7d:28:81:04:2b:c6:cd: a0:52:cd:e3:fe:f3:85:bf:41:53:15:68:31:cd:df:cc:f4:a7: 10:e1:41:52:af:ff:c6:74:ac:9d:97:f9:d5:4b:05:7a:f4:2d: 4e:da:cb:da:f4:cd:84:9b:2d:34:6a:1c:6f:91:09:04:3c:c0: b7:d0:5b:79:eb:31:7c:c4:58:40:91:fb:09:09:38:fb:87:b7: 9e:69:3d:b4:04:88:54:dc:31:3f:eb:da:c6:41:c7:89:62:90: 10:0f:df:1a:a5:6b:6c:74:23:de:52:b7:94:10:f2:78:6d:0f: 83:01:e9:ee:f4:74:6b:7b:b6:ea:36:f9:8b:fc:ee:5a:d5:8f: 5a:2a:04:b5:ae:c2:0a:a7:4f:b6:f8:39:e0:58:a6:ce:4d:27: c6:e4:46:21:18:be:a0:76:4b:c4:9b:de:01:3b:c4:03:a9:b1: d2:6d:31:06:91:7e:00:d4:5c:74:34:ca:60:81:cb:dd:72:b7: 73:d0:25:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+8Zt1rGtI3D/eo8bwksTXrTBkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA3MjUwMzE1MzhaFw0yNTA3MjgxMTQ1MzhaMDMxMTAvBgNV BAMTKDFFNUY0NTRFOTI3OTQ4Q0UwMjdCQzRFNjI0MUIzMjcwNzQ3MDE2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPybuUDZFtbQZNvoZKzYTlUCf 7ubXSlsUpf6tatpr9pnV6dHw0D4x1kaM3wuZbiMped/1ryp4wp72vOHvwTiN4vVk Yz0738j8yG3hhwyTp4m9KVKVhIO3J7VW4oLLeba3NUEmVx04d0SBM3y28MaC6eaW RaXaY1u6KWR1a3KwKWsdavDSwGO55xG4TYqRMfhYtE1zdi2IyugZV/GInTeT6D4P Yiy7lSmX2GtOcf6/fse/tFkV1bmP5dpF6mv3naBiqFKovpg7eX2+EYhf6KSUXaKL FHQDcvDzG2ESXwyCdjJQIlRnGV0yI6sCJBN/GkhVU9Wt7yFQTxkxCFzMGeYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHl9FTpJ5SM4Ce8TmJBsycHRwFvIwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbs6GXnsStJ8XPUkFxg1sHHt2QLaUbIZ8n7 hNWZD0E3ifHhC4JknutNT6qAeuvu7bsz7mjs4AqtuQBG77ft0/qbfSiBBCvGzaBS zeP+84W/QVMVaDHN38z0pxDhQVKv/8Z0rJ2X+dVLBXr0LU7ay9r0zYSbLTRqHG+R CQQ8wLfQW3nrMXzEWECR+wkJOPuHt55pPbQEiFTcMT/r2sZBx4likBAP3xqla2x0 I95St5QQ8nhtD4MB6e70dGt7tuo2+Yv87lrVj1oqBLWuwgqnT7b4OeBYps5NJ8bk RiEYvqB2S8Sb3gE7xAOpsdJtMQaRfgDUXHQ0ymCBy91yt3PQJRQ= -----END CERTIFICATE-----Generated at Fri Jul 25 06:49:26 2025 by rpki-client