$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: NyZpDMREBAmMdV1VruV/i3AoE7V8aDJ62z7p5USr/OQ= Subject key identifier: CA:88:06:0C:10:FC:0E:88:9C:41:BC:36:8C:15:58:31:CC:2B:AC:B4 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 3595FF61825337EB44DD222E494D891EBB7B7458 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 01FC Signing time: Sat 19 Jul 2025 23:00:00 +0000 Manifest this update: Sat 19 Jul 2025 22:55:00 +0000 Manifest next update: Wed 23 Jul 2025 01:52:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: yAZKkzuXA7U38fddJusDoa5YijcEg9Vg513UdX1XeEw=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:95:ff:61:82:53:37:eb:44:dd:22:2e:49:4d:89:1e:bb:7b:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Jul 19 22:55:00 2025 GMT Not After : Jul 23 01:52:00 2025 GMT Subject: CN=CA88060C10FC0E889C41BC368C155831CC2BACB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:34:1e:16:89:fe:a9:4a:b6:64:78:97:26: f4:b4:46:8a:fc:57:63:f0:68:44:0c:f2:c1:be:f7: 2c:66:0b:79:eb:e2:c2:1b:1a:74:e2:85:be:8c:44: 7c:bf:bd:9e:43:b6:0d:96:16:df:6c:c2:58:d9:c5: 03:4d:5f:fb:ab:14:e7:ba:2c:f3:c5:cc:b6:64:fe: 0e:e0:53:b9:d6:25:68:52:ce:0b:2d:d5:e7:b3:03: 7f:40:60:09:be:bf:3a:ae:03:c1:f2:9d:2f:e9:31: 63:7f:af:ea:f4:02:ea:7e:fe:20:8a:2b:b2:ec:3f: da:b6:62:41:ab:e9:9e:d4:92:9c:fc:f8:d7:75:a2: 34:6d:39:2e:7b:b7:db:76:58:f7:46:e3:d2:17:77: 9c:23:9b:ee:fa:39:aa:e9:22:25:c0:e4:13:ab:53: 37:f2:24:c5:85:29:4f:57:10:86:44:54:25:ec:8f: 1d:57:23:5b:ac:7f:0c:e7:24:8c:ac:2c:69:45:0c: 7c:d5:51:25:48:5e:f7:07:99:45:76:e0:fb:6b:33: 26:be:de:98:be:67:75:cf:5e:1b:39:3f:88:e0:4f: cf:04:a6:79:85:31:1d:71:d1:0e:a7:7d:3b:38:d8: 15:bc:ac:bf:e3:0a:db:f3:b7:1c:dc:f6:58:b2:f7: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:88:06:0C:10:FC:0E:88:9C:41:BC:36:8C:15:58:31:CC:2B:AC:B4 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f6:f4:d1:fc:21:71:d8:b1:25:ed:5a:74:ec:9c:9a:b5:5d: ee:e9:56:a5:0d:5a:72:eb:e1:34:54:0d:83:e6:bf:f8:1a:7f: 7d:81:de:77:44:f7:50:2c:ba:7a:78:1a:4f:5b:53:93:07:2a: c3:da:c8:39:9f:51:57:92:d0:a2:13:46:06:3b:b7:08:9c:b5: 16:75:17:48:b9:b5:f1:78:12:8e:66:d8:14:14:5d:c7:51:db: f4:70:61:c8:c9:08:d9:20:5e:4d:57:43:82:83:96:e4:f7:34: ba:b7:76:b2:0a:57:79:e2:32:4e:46:1b:87:c5:25:57:9d:a8: 65:fe:ad:f2:c4:fd:17:45:0d:a0:b0:7a:3d:dd:12:c6:7b:3c: 4d:ea:13:4f:9a:6f:4c:65:8b:d5:1c:56:b9:5a:af:8a:49:4b: d3:d8:23:56:0f:fb:25:14:26:9f:d0:7b:50:1d:4e:e5:00:0b: 00:67:e9:29:d8:65:f2:b4:9d:fd:fc:f0:db:43:91:21:e1:39: b1:1d:b3:9c:43:ce:6e:e9:73:f5:80:8e:e6:b9:59:c9:c7:c0: b3:4c:25:53:17:4f:f9:fe:20:f0:4a:84:2a:28:c6:95:dc:5c: 2e:67:d4:b1:e1:4b:4d:d6:f6:0d:43:d4:00:87:78:72:57:31: 50:5a:b9:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZX/YYJTN+tE3SIuSU2JHrt7dFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA3MTkyMjU1MDBaFw0yNTA3MjMwMTUyMDBaMDMxMTAvBgNV BAMTKENBODgwNjBDMTBGQzBFODg5QzQxQkMzNjhDMTU1ODMxQ0MyQkFDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzDQeFon+qUq2ZHiXJvS0Ror8 V2PwaEQM8sG+9yxmC3nr4sIbGnTihb6MRHy/vZ5Dtg2WFt9swljZxQNNX/urFOe6 LPPFzLZk/g7gU7nWJWhSzgst1eezA39AYAm+vzquA8HynS/pMWN/r+r0Aup+/iCK K7LsP9q2YkGr6Z7Ukpz8+Nd1ojRtOS57t9t2WPdG49IXd5wjm+76OarpIiXA5BOr UzfyJMWFKU9XEIZEVCXsjx1XI1usfwznJIysLGlFDHzVUSVIXvcHmUV24PtrMya+ 3pi+Z3XPXhs5P4jgT88EpnmFMR1x0Q6nfTs42BW8rL/jCtvztxzc9liy93gPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyogGDBD8DoicQbw2jBVYMcwrrLQwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL29NH8IXHYsSXtWnTsnJq1Xe7pVqUNWnLr 4TRUDYPmv/gaf32B3ndE91Asunp4Gk9bU5MHKsPayDmfUVeS0KITRgY7twictRZ1 F0i5tfF4Eo5m2BQUXcdR2/RwYcjJCNkgXk1XQ4KDluT3NLq3drIKV3niMk5GG4fF JVedqGX+rfLE/RdFDaCwej3dEsZ7PE3qE0+ab0xli9UcVrlar4pJS9PYI1YP+yUU Jp/Qe1AdTuUACwBn6SnYZfK0nf388NtDkSHhObEds5xDzm7pc/WAjua5WcnHwLNM JVMXT/n+IPBKhCooxpXcXC5n1LHhS03W9g1D1ACHeHJXMVBauS0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:18 2025 by rpki-client