$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json) Hash identifier: YzGQUwcgluzhMS6HDezS1bQ0/kRcl2u/2f/Q8G2yw50= Subject key identifier: 58:F6:FA:44:FF:64:C5:4C:04:C6:8B:CE:60:05:19:7F:0C:83:79:C6 Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 098BF7DCA4970F72031D3DFAE0ED93E43ADBE005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft Manifest number: 018B Signing time: Sun 20 Jul 2025 07:21:44 +0000 Manifest this update: Sun 20 Jul 2025 07:16:44 +0000 Manifest next update: Wed 23 Jul 2025 13:39:44 +0000 Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: OGejiG7ww/4ANM9WMGVqk5ky5j5O+TRQ9Z18Ia9TOUM=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d3VfPkAv0Y7wZUXEtDA5/M8jwR4+SgensuDndKBOuNg=) 3: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: oV3Aa30V+XWt1jQbkbuaAjshkztsyDJj4Wkyx6FkK6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:f7:dc:a4:97:0f:72:03:1d:3d:fa:e0:ed:93:e4:3a:db:e0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Jul 20 07:16:44 2025 GMT Not After : Jul 23 13:39:44 2025 GMT Subject: CN=58F6FA44FF64C54C04C68BCE6005197F0C8379C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:4c:4b:c1:17:38:93:72:44:21:42:14:0d: 54:8b:73:98:e2:ae:0b:0c:23:55:30:1e:ad:4d:bb: e4:1b:f1:45:7d:62:d0:f0:dd:4a:e5:85:93:62:0c: 77:7c:e2:0f:5c:2b:98:52:12:ba:78:f4:ca:e5:0c: 7f:3b:92:79:c6:79:be:80:53:bc:f3:b4:36:97:37: ea:26:f2:b0:eb:9b:b0:d5:80:7d:b0:bb:8e:fd:2d: b1:33:8c:58:6f:ed:4f:da:9a:ed:77:e5:28:9b:43: 9a:dc:69:75:4e:6b:c3:c7:f2:2e:67:70:b5:fc:11: 1e:13:c6:d6:98:43:ab:7e:2e:e2:57:9a:fe:90:36: f3:84:8c:f2:72:35:51:c8:32:81:d2:93:93:ee:6e: 30:f5:8f:54:73:1d:4e:4f:b9:35:6b:4a:f7:bd:6b: 5d:2c:df:2b:db:ed:8f:d3:28:34:fb:17:2c:d5:e3: fb:67:ef:a3:8a:05:bd:3f:ac:cb:64:0d:c3:d1:03: d8:d4:4f:4a:1b:36:55:e2:ce:68:00:8d:a3:40:20: a1:ec:06:38:17:a2:9c:df:f5:ec:35:9b:86:29:5e: 6f:40:b8:cf:58:40:3a:67:93:a4:04:24:1d:03:d9: 4d:86:03:ba:2f:aa:9b:b4:42:36:01:29:fd:0f:64: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:FA:44:FF:64:C5:4C:04:C6:8B:CE:60:05:19:7F:0C:83:79:C6 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3e:06:9f:ce:e8:30:eb:ad:33:36:95:dc:65:66:3c:25:2f: 79:7d:cf:cf:07:9d:fd:dd:01:e3:f8:85:7c:5a:ae:a8:e7:27: 28:3c:1b:d3:42:a0:2b:0e:02:a5:6e:5b:f5:b3:6d:b8:57:28: 54:69:b3:f1:f2:39:ea:b7:09:3c:ed:43:e2:f7:bf:9e:9b:67: 18:bd:fc:ce:42:43:52:33:34:31:b8:40:28:33:02:92:7c:b3: 5e:b3:e6:4a:a2:c8:c0:6e:54:89:39:60:6c:72:c0:09:5b:02: ba:2c:e0:34:57:0f:bd:cb:ac:34:ce:f5:82:1f:9f:1e:5d:01: 44:e3:f3:a4:34:db:fc:eb:0b:6b:aa:73:97:97:a0:0d:23:a0: 8c:55:96:82:16:5f:90:d6:11:74:cf:b4:98:14:1b:d0:51:7f: a4:74:61:47:91:77:5a:ab:7b:89:9a:d7:75:05:47:6a:6d:cd: 3b:cf:cd:2e:32:56:dd:74:c4:09:ce:1f:d3:4e:cc:af:53:8f: d3:79:79:78:19:9f:12:16:f9:e7:ed:15:0c:38:61:c1:95:04: 45:16:1f:65:86:16:2e:70:7d:76:98:a7:ef:a4:a3:a4:c9:0d: ca:8c:b9:87:65:a7:3c:11:7c:06:61:e3:d5:65:92:28:21:90: f7:0d:7a:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYv33KSXD3IDHT364O2T5Drb4AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNTA3MjAwNzE2NDRaFw0yNTA3MjMxMzM5NDRaMDMxMTAvBgNV BAMTKDU4RjZGQTQ0RkY2NEM1NEMwNEM2OEJDRTYwMDUxOTdGMEM4Mzc5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+kxLwRc4k3JEIUIUDVSLc5ji rgsMI1UwHq1Nu+Qb8UV9YtDw3UrlhZNiDHd84g9cK5hSErp49MrlDH87knnGeb6A U7zztDaXN+om8rDrm7DVgH2wu479LbEzjFhv7U/amu135SibQ5rcaXVOa8PH8i5n cLX8ER4TxtaYQ6t+LuJXmv6QNvOEjPJyNVHIMoHSk5PubjD1j1RzHU5PuTVrSve9 a10s3yvb7Y/TKDT7FyzV4/tn76OKBb0/rMtkDcPRA9jUT0obNlXizmgAjaNAIKHs BjgXopzf9ew1m4YpXm9AuM9YQDpnk6QEJB0D2U2GA7ovqpu0QjYBKf0PZATDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPb6RP9kxUwExovOYAUZfwyDecYwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVB MEY0MTExNzNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc+Bp/O6DDrrTM2ldxlZjwlL3l9z88Hnf3d AeP4hXxarqjnJyg8G9NCoCsOAqVuW/WzbbhXKFRps/HyOeq3CTztQ+L3v56bZxi9 /M5CQ1IzNDG4QCgzApJ8s16z5kqiyMBuVIk5YGxywAlbAros4DRXD73LrDTO9YIf nx5dAUTj86Q02/zrC2uqc5eXoA0joIxVloIWX5DWEXTPtJgUG9BRf6R0YUeRd1qr e4ma13UFR2ptzTvPzS4yVt10xAnOH9NOzK9Tj9N5eXgZnxIW+eftFQw4YcGVBEUW H2WGFi5wfXaYp++ko6TJDcqMuYdlpzwRfAZh49VlkighkPcNep0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:47 2025 by rpki-client