$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: GYJIyASjDDpEPUBdgbreK8WqCBcY02ouExAR8o0BuNo= Subject key identifier: 85:EF:AA:E0:DC:89:9C:19:18:A2:D4:80:C3:8E:55:32:57:DA:E2:29 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 3A0C07B7833542F4689E28BD8F8A337AD5D49602 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: AA Signing time: Mon 21 Jul 2025 22:00:04 +0000 Manifest this update: Mon 21 Jul 2025 21:55:04 +0000 Manifest next update: Fri 25 Jul 2025 06:24:04 +0000 Files and hashes: 1: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) 2: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: eYgZ7HCDi6eTRxMN2FwsOF8LU6ZkqWwzOi6AnmHh0jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 06:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0c:07:b7:83:35:42:f4:68:9e:28:bd:8f:8a:33:7a:d5:d4:96:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Jul 21 21:55:04 2025 GMT Not After : Jul 25 06:24:04 2025 GMT Subject: CN=85EFAAE0DC899C1918A2D480C38E553257DAE229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:31:93:07:f9:a0:cc:d6:6c:e8:b5:72:de: 21:40:62:35:0c:81:bf:97:84:c4:7e:73:35:90:41: 4d:a3:78:e4:e1:b1:0f:0b:ef:9a:6e:b6:02:71:e5: 4a:0b:9e:27:0e:4f:2f:b6:44:72:3d:0b:14:e8:0a: f3:99:46:99:0b:d2:7c:72:e4:c0:34:0e:01:5c:ea: cf:49:45:71:11:40:36:73:60:bf:c8:dd:cb:e5:12: 3f:96:82:9d:c8:5e:f8:66:74:16:16:e6:e1:23:26: 9f:00:62:6e:c1:d7:48:0d:1d:20:77:f5:d9:6b:91: a3:f8:ce:d8:ef:33:07:3a:f0:db:55:50:5d:d2:b6: a2:9c:98:a8:8c:86:2f:fa:fa:4a:11:65:42:37:73: e6:72:1d:46:6d:b0:e7:cd:be:18:13:03:c9:07:c0: f5:8a:bf:75:23:ac:3d:19:40:25:cc:f6:91:d0:4b: bc:06:2f:f6:61:b1:91:ea:81:3f:7a:ae:3d:4c:c8: 94:a4:f0:81:84:f3:88:57:d2:71:05:60:6d:42:ae: 44:35:56:70:57:33:70:19:45:03:32:e6:48:33:2e: 21:46:27:c0:e5:6a:c8:6d:5b:79:70:47:da:09:16: 13:dc:86:80:a5:35:9c:13:e6:b6:f9:b4:4c:62:3f: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EF:AA:E0:DC:89:9C:19:18:A2:D4:80:C3:8E:55:32:57:DA:E2:29 X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:86:ec:5a:02:f7:d6:f8:af:a9:b4:64:7b:f3:e6:fb:9d:46: 3e:cf:b7:80:c9:d3:5e:89:3b:13:76:8e:97:47:eb:08:10:18: aa:71:69:84:a8:6f:cf:fc:e5:32:e6:30:9d:48:b2:30:9b:48: 57:a1:ae:a8:54:7a:ad:98:1c:d0:53:76:cd:53:20:36:36:64: 3d:7a:3f:06:1d:91:29:cf:5e:84:cc:42:41:d4:71:b9:2c:23: f0:c0:3d:29:60:f5:79:34:40:0f:40:2a:0b:52:89:70:56:e0: 48:fe:f4:e3:6e:cd:fc:62:74:00:ef:b8:8a:72:87:c1:4a:76: 69:a5:d6:80:b6:67:80:a8:e6:73:af:3c:ea:40:69:98:bc:1f: 85:21:66:55:ec:a4:df:40:f7:4d:c1:cd:61:b7:b1:8b:a7:4b: 9a:bd:cb:33:2a:00:52:0c:77:4c:b4:44:1e:23:3c:04:a6:16: 8e:f7:f8:4b:5c:c8:35:d0:68:1e:7a:a7:f1:1e:b4:e2:37:b3: 1a:67:91:eb:9e:34:29:19:1a:45:0b:4c:96:e7:de:16:51:95: d3:07:32:be:d6:44:06:da:33:79:20:33:f1:3f:29:4e:49:bf: 43:73:83:45:b2:f7:67:03:27:fe:3e:7f:af:e3:13:c4:89:1b: 64:b4:79:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgwHt4M1QvRonii9j4ozetXUlgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNTA3MjEyMTU1MDRaFw0yNTA3MjUwNjI0MDRaMDMxMTAvBgNV BAMTKDg1RUZBQUUwREM4OTlDMTkxOEEyRDQ4MEMzOEU1NTMyNTdEQUUyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvTGTB/mgzNZs6LVy3iFAYjUM gb+XhMR+czWQQU2jeOThsQ8L75putgJx5UoLnicOTy+2RHI9CxToCvOZRpkL0nxy 5MA0DgFc6s9JRXERQDZzYL/I3cvlEj+Wgp3IXvhmdBYW5uEjJp8AYm7B10gNHSB3 9dlrkaP4ztjvMwc68NtVUF3StqKcmKiMhi/6+koRZUI3c+ZyHUZtsOfNvhgTA8kH wPWKv3UjrD0ZQCXM9pHQS7wGL/ZhsZHqgT96rj1MyJSk8IGE84hX0nEFYG1CrkQ1 VnBXM3AZRQMy5kgzLiFGJ8DlashtW3lwR9oJFhPchoClNZwT5rb5tExiPyZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhe+q4NyJnBkYotSAw45VMlfa4ikwHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+G7FoC99b4r6m0ZHvz5vudRj7Pt4DJ016J OxN2jpdH6wgQGKpxaYSob8/85TLmMJ1IsjCbSFehrqhUeq2YHNBTds1TIDY2ZD16 PwYdkSnPXoTMQkHUcbksI/DAPSlg9Xk0QA9AKgtSiXBW4Ej+9ONuzfxidADvuIpy h8FKdmml1oC2Z4Co5nOvPOpAaZi8H4UhZlXspN9A903BzWG3sYunS5q9yzMqAFIM d0y0RB4jPASmFo73+EtcyDXQaB56p/EetOI3sxpnkeueNCkZGkULTJbn3hZRldMH Mr7WRAbaM3kgM/E/KU5Jv0Nzg0Wy92cDJ/4+f6/jE8SJG2S0eXs= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:58 2025 by rpki-client