$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: C1Dl7JiRR5zXZoLdYTf9JR9eLnD7UnM79mqEs2jj5oA= Subject key identifier: E8:04:1B:B0:6A:F4:99:01:62:19:A3:33:37:80:8D:8B:67:22:4A:C8 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 5D2631DEF1D6CEB71650416AF742665E43501564 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 94 Signing time: Wed 23 Jul 2025 08:12:04 +0000 Manifest this update: Wed 23 Jul 2025 08:07:04 +0000 Manifest next update: Sat 26 Jul 2025 15:40:04 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: lxW818mKTKY/fc7aHekxTQJ7Lc2xkRenscQF10SAgNs=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 15:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:31:de:f1:d6:ce:b7:16:50:41:6a:f7:42:66:5e:43:50:15:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Jul 23 08:07:04 2025 GMT Not After : Jul 26 15:40:04 2025 GMT Subject: CN=E8041BB06AF499016219A33337808D8B67224AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:2b:4f:8f:42:35:2a:80:54:c8:ea:60:97: b3:d8:b6:63:a5:63:20:c1:44:9f:0c:b6:28:89:ef: a8:30:e2:c5:df:4e:bd:ef:39:b4:83:e9:5b:0c:2a: 4e:05:e6:ad:62:c5:05:d4:ea:5b:12:1d:af:7a:d5: 7d:52:ab:69:6d:09:ab:78:65:d5:49:ce:b4:9b:08: 39:ac:fb:ae:6f:59:14:0e:cd:77:50:1f:6b:c5:bd: 7d:49:1a:4d:b8:7e:8b:2e:ec:a6:92:d4:b4:1a:39: 8e:3d:1b:8d:79:2e:1d:a9:7e:51:d4:34:95:2d:c7: 21:1a:27:4f:ed:35:de:28:9f:29:27:dc:24:81:12: 56:4b:3a:c6:d4:27:c1:12:4a:da:ed:2f:20:d2:e4: 9c:9f:59:9e:2e:f6:f3:db:da:a7:8f:29:f6:98:5e: a5:58:ee:e1:1a:2a:51:b7:ab:06:bb:21:fc:98:7c: 28:18:48:40:59:42:43:58:ae:bf:1c:8d:b2:f9:dd: a7:7c:4f:e9:f6:47:f0:8f:fa:3b:53:f8:92:97:14: c1:3c:06:5b:24:01:82:f3:d4:15:f2:b7:63:97:36: ba:fa:39:cb:6a:ab:0c:83:5d:47:d4:51:17:a5:4f: 6f:ec:9d:15:80:85:d0:ba:c5:88:83:c6:de:0d:79: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:1B:B0:6A:F4:99:01:62:19:A3:33:37:80:8D:8B:67:22:4A:C8 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:38:c0:43:7c:fb:8d:eb:e0:08:f6:5c:bf:27:3a:c6:ea:51: d3:c0:92:c5:1d:83:41:f1:df:a6:f6:90:57:8b:7f:da:52:18: 99:20:ea:97:b9:07:5c:2f:7f:79:9f:1f:43:ee:07:32:bd:74: 60:66:44:b2:1d:96:eb:88:83:69:9c:7c:27:38:8f:64:59:f2: 27:40:bf:95:41:17:31:52:e3:a5:f8:16:6f:56:b9:a7:ef:4a: 9e:21:19:4e:24:1d:41:d1:00:73:85:78:ca:69:84:05:17:91: a4:f2:e2:10:f9:99:06:ed:8d:50:55:49:03:f3:ab:e7:9d:01: 87:53:16:49:39:fb:f3:1c:94:d5:c6:9e:e8:46:91:41:62:9a: 8b:7e:29:cb:08:da:30:ba:f7:03:eb:94:c2:c8:78:f6:cd:3f: 4d:78:80:db:d2:a0:0c:92:1f:87:3f:af:61:d9:66:83:9c:d9: 11:2b:ca:ed:12:72:b3:86:39:57:c4:8f:41:7b:6d:30:3a:95: 88:68:25:6d:f8:a0:21:6e:22:ab:88:c5:59:eb:be:eb:da:43: 58:e4:5e:1c:e3:9e:44:5c:d7:ce:34:57:3c:d1:90:05:6a:39: c9:3a:32:78:18:55:a7:6b:d4:b4:9b:92:06:e3:61:4a:00:fb: 63:d5:c8:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSYx3vHWzrcWUEFq90JmXkNQFWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA3MjMwODA3MDRaFw0yNTA3MjYxNTQwMDRaMDMxMTAvBgNV BAMTKEU4MDQxQkIwNkFGNDk5MDE2MjE5QTMzMzM3ODA4RDhCNjcyMjRBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXStPj0I1KoBUyOpgl7PYtmOl YyDBRJ8MtiiJ76gw4sXfTr3vObSD6VsMKk4F5q1ixQXU6lsSHa961X1Sq2ltCat4 ZdVJzrSbCDms+65vWRQOzXdQH2vFvX1JGk24fosu7KaS1LQaOY49G415Lh2pflHU NJUtxyEaJ0/tNd4onykn3CSBElZLOsbUJ8ESStrtLyDS5JyfWZ4u9vPb2qePKfaY XqVY7uEaKlG3qwa7IfyYfCgYSEBZQkNYrr8cjbL53ad8T+n2R/CP+jtT+JKXFME8 BlskAYLz1BXyt2OXNrr6OctqqwyDXUfUURelT2/snRWAhdC6xYiDxt4NeZ8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6AQbsGr0mQFiGaMzN4CNi2ciSsgwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw4wEN8+43r4Aj2XL8nOsbqUdPAksUdg0Hx 36b2kFeLf9pSGJkg6pe5B1wvf3mfH0PuBzK9dGBmRLIdluuIg2mcfCc4j2RZ8idA v5VBFzFS46X4Fm9WuafvSp4hGU4kHUHRAHOFeMpphAUXkaTy4hD5mQbtjVBVSQPz q+edAYdTFkk5+/MclNXGnuhGkUFimot+KcsI2jC69wPrlMLIePbNP014gNvSoAyS H4c/r2HZZoOc2REryu0ScrOGOVfEj0F7bTA6lYhoJW34oCFuIquIxVnrvuvaQ1jk XhzjnkRc1840VzzRkAVqOck6MngYVadr1LSbkgbjYUoA+2PVyOo= -----END CERTIFICATE-----Generated at Thu Jul 24 04:56:10 2025 by rpki-client