$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: H2jWPlzGouMSaTMfjavnvGtP9pP1g3dS4Sx3Y16tEag= Subject key identifier: 91:0B:5F:33:F2:65:96:B3:9A:0F:45:BC:11:EF:70:0F:B5:B1:C2:CD Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 7F1A548829C82E97C76A5DDA2D46C1D350C05510 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 95 Signing time: Fri 25 Jul 2025 15:42:05 +0000 Manifest this update: Fri 25 Jul 2025 15:37:05 +0000 Manifest next update: Tue 29 Jul 2025 03:16:05 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: lFDd3EU1lk3CwMobrEm4oj38S88paATcEpv280Vi4mg=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: PiNOnyLiOuKzhT/510rB/YvD9cR0+XXEVm+AvKjjZNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 03:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1a:54:88:29:c8:2e:97:c7:6a:5d:da:2d:46:c1:d3:50:c0:55:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Jul 25 15:37:05 2025 GMT Not After : Jul 29 03:16:05 2025 GMT Subject: CN=910B5F33F26596B39A0F45BC11EF700FB5B1C2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:e3:8a:62:c5:dc:c3:b3:27:34:74:ab:44: c9:70:f2:04:4d:25:54:2d:0c:fd:e5:58:de:99:cb: 42:54:54:b5:70:e8:db:f9:ec:d5:a3:11:53:2e:40: 86:f2:35:16:40:ad:ed:6a:32:e5:ca:88:c8:4e:a2: 50:d2:21:d4:dd:09:fc:29:ab:87:57:5f:ae:17:95: 9d:18:98:1c:1f:7d:6f:36:df:e1:2d:0a:58:02:8e: bb:34:7e:07:af:47:e1:61:e8:00:22:37:c4:1d:e0: fb:b1:1f:22:d2:9f:0d:67:02:1d:d3:4b:67:09:87: f4:8d:90:f1:9b:8b:a1:b2:7b:99:f2:0e:e4:28:9c: 51:c4:3a:c2:23:03:a7:89:b2:2a:1d:04:f4:88:4e: fe:79:36:cc:b6:6d:f5:7f:ab:48:b9:65:a2:a4:82: b8:c3:7c:86:75:38:2d:90:a5:8d:4a:9f:d2:89:57: 44:19:ac:a8:68:57:de:5f:c1:61:c8:68:b8:3a:14: a2:0f:d4:01:9f:7e:fd:3e:bb:aa:6f:40:cb:37:3e: 7d:e7:99:d4:9e:c4:10:99:05:57:c7:40:c9:ec:5a: e1:c8:e5:e4:54:f0:e2:dd:d9:a8:9c:0b:1d:78:95: 13:e1:89:f7:6f:ce:ad:71:2e:96:c5:ec:69:49:5c: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0B:5F:33:F2:65:96:B3:9A:0F:45:BC:11:EF:70:0F:B5:B1:C2:CD X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:03:e2:77:d5:99:b7:7e:54:c1:6a:69:69:dc:f8:98:69:d1: 66:df:32:d4:d7:a7:18:35:dd:42:e4:23:75:3c:79:e8:ea:76: 26:65:5a:9f:e4:82:fa:2b:54:7b:65:ca:ec:3d:d2:1d:ac:92: c2:53:ff:fd:28:94:ac:f9:c9:bf:48:7d:f0:87:9f:1e:d6:be: 6c:11:04:3d:8f:bf:d6:53:3a:de:8c:75:37:da:d0:8d:5d:a8: b7:b2:10:91:b6:23:39:72:18:51:f1:05:fd:14:aa:ed:cb:df: b9:b1:5a:1d:c3:b6:1b:35:ef:69:a6:2c:36:a1:73:3f:f4:17: df:4a:d0:61:26:06:0f:a2:70:88:08:9d:d3:58:73:87:c5:33: 84:a8:4a:65:6c:02:0e:a0:94:6c:14:df:9d:31:06:a8:62:57: 22:d9:da:4c:27:bc:4a:52:3e:b7:43:18:58:fa:f4:82:1d:e6: 8a:e2:56:f4:9e:18:39:34:4a:ec:5d:fd:77:cb:4e:e4:96:3c: 63:07:5c:4c:b6:c0:33:17:51:e7:86:5a:b3:45:33:0d:9c:a7: 46:52:66:fe:5f:78:7f:f8:14:82:df:27:75:9d:5c:53:3b:02: 6a:68:91:75:90:9f:15:5a:ac:b4:14:57:eb:2f:50:70:65:41: 10:0d:fa:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxpUiCnILpfHal3aLUbB01DAVRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNTA3MjUxNTM3MDVaFw0yNTA3MjkwMzE2MDVaMDMxMTAvBgNV BAMTKDkxMEI1RjMzRjI2NTk2QjM5QTBGNDVCQzExRUY3MDBGQjVCMUMyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfheOKYsXcw7MnNHSrRMlw8gRN JVQtDP3lWN6Zy0JUVLVw6Nv57NWjEVMuQIbyNRZAre1qMuXKiMhOolDSIdTdCfwp q4dXX64XlZ0YmBwffW823+EtClgCjrs0fgevR+Fh6AAiN8Qd4PuxHyLSnw1nAh3T S2cJh/SNkPGbi6Gye5nyDuQonFHEOsIjA6eJsiodBPSITv55Nsy2bfV/q0i5ZaKk grjDfIZ1OC2QpY1Kn9KJV0QZrKhoV95fwWHIaLg6FKIP1AGffv0+u6pvQMs3Pn3n mdSexBCZBVfHQMnsWuHI5eRU8OLd2aicCx14lRPhifdvzq1xLpbF7GlJXFPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQtfM/JllrOaD0W8Ee9wD7Wxws0wHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0D4nfVmbd+VMFqaWnc+Jhp0WbfMtTXpxg1 3ULkI3U8eejqdiZlWp/kgvorVHtlyuw90h2sksJT//0olKz5yb9IffCHnx7WvmwR BD2Pv9ZTOt6MdTfa0I1dqLeyEJG2IzlyGFHxBf0Uqu3L37mxWh3Dths172mmLDah cz/0F99K0GEmBg+icIgIndNYc4fFM4SoSmVsAg6glGwU350xBqhiVyLZ2kwnvEpS PrdDGFj69IId5oriVvSeGDk0Suxd/XfLTuSWPGMHXEy2wDMXUeeGWrNFMw2cp0ZS Zv5feH/4FILfJ3WdXFM7AmpokXWQnxVarLQUV+svUHBlQRAN+rM= -----END CERTIFICATE-----Generated at Sat Jul 26 01:53:57 2025 by rpki-client