$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft File: 9F93097BE8B711227435ABF870C332F631C8D769.mft (raw, json) Hash identifier: Vpf5WQOzdiLlnhUsghTFseBj/wuTiFc1S8nvRlanBs0= Subject key identifier: 25:DE:BD:3D:BC:1D:0B:2D:D2:80:68:C6:09:AA:BE:CE:BB:CA:78:30 Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 5213AC89F59A9D2FFC88E01E6C2F904B1F0C4D41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft Manifest number: 9D Signing time: Mon 21 Jul 2025 11:01:05 +0000 Manifest this update: Mon 21 Jul 2025 10:56:05 +0000 Manifest next update: Thu 24 Jul 2025 20:25:05 +0000 Files and hashes: 1: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: zK90jmviS5skAn/jDcVMI3Aok7WFlX9b62aRW8Ax9FY=) 2: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8=) 3: 9F93097BE8B711227435ABF870C332F631C8D769.crl (hash: CcHGuK+EVWLd2PAATS3hj1VrG647A3IPk09MnPB3ujw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:13:ac:89:f5:9a:9d:2f:fc:88:e0:1e:6c:2f:90:4b:1f:0c:4d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Jul 21 10:56:05 2025 GMT Not After : Jul 24 20:25:05 2025 GMT Subject: CN=25DEBD3DBC1D0B2DD28068C609AABECEBBCA7830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:48:34:b5:af:ac:ad:a6:2a:c7:d9:c2:a0: 85:d5:da:92:38:f6:82:ef:5b:68:5a:6f:d5:32:d8: da:e1:73:5e:04:a4:2c:35:da:35:77:79:4a:ba:13: de:01:e8:b8:5d:19:53:14:0a:a9:36:2e:1b:82:5a: 6b:57:98:44:0f:5f:bf:51:14:2d:95:18:3e:5c:5c: b9:28:1a:a4:30:c4:2f:03:cd:bb:20:fb:2b:08:bc: 74:70:dd:1b:31:ef:69:d0:75:01:2c:c3:ab:93:12: 97:8a:38:96:70:3c:9c:60:5b:6e:83:0d:0f:95:0b: f4:84:43:e3:43:c1:0c:4c:38:73:5f:82:1f:bb:ef: 47:4a:c8:f6:de:58:81:d4:85:e8:3e:70:14:9d:1c: 8a:8e:07:5c:18:52:3e:78:a2:61:84:46:f4:bf:08: 0a:2b:f9:91:fc:43:f2:21:05:4f:b8:92:40:ae:d8: fe:7d:23:ff:c2:c9:43:19:b6:ec:65:14:00:11:ae: c2:bc:7c:68:6c:3e:5b:e0:7f:1f:f7:8f:ad:b3:ab: 31:6e:35:f7:08:fb:92:7d:d8:b0:ab:1f:74:92:5c: 51:de:16:c1:e0:7f:7a:dc:e4:12:43:09:bb:9d:44: 9a:3f:15:13:05:e1:75:1b:42:d8:4f:fc:f4:b8:c2: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DE:BD:3D:BC:1D:0B:2D:D2:80:68:C6:09:AA:BE:CE:BB:CA:78:30 X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b2:54:b8:c4:0a:be:f5:82:f9:28:a5:05:64:ec:48:c1:2a: 19:e7:f3:27:19:d1:ff:1e:8f:bf:1c:e0:13:7f:39:dc:d4:73: 86:cb:0f:cb:88:36:9b:b9:96:ba:1b:84:d0:aa:dc:71:95:2d: 7c:cd:1b:85:cc:2d:63:b4:10:5b:94:7d:89:97:64:9a:c2:aa: 36:68:7b:9a:cf:6d:4a:f5:f0:92:04:f2:90:ff:7e:9a:04:f4: 3a:dd:61:bc:4a:81:7e:b1:ed:4d:22:5c:4c:e0:a3:6d:4e:f2: 0e:13:a1:62:d4:ec:d3:0f:9a:5b:1a:1e:7b:ec:92:4b:18:80: ac:70:b0:65:9f:ac:4e:90:c7:82:66:5d:21:68:9f:51:e9:97: 89:e9:70:bb:0c:86:ff:6c:5e:97:17:db:ae:b9:bf:24:d8:73: 7c:16:91:82:5c:66:d1:21:07:3c:b7:bc:16:e6:44:e4:b2:54: c2:7e:72:8a:9f:a7:f5:b5:4e:08:5d:d7:20:11:a9:8a:35:5e: 14:60:8a:1f:0e:73:79:a1:7e:5d:13:04:2b:c5:36:ba:90:f1: 91:97:a6:c6:e4:8b:ad:a2:17:54:27:16:e3:a7:df:cf:4c:16: 62:1e:df:66:81:e2:8f:c6:31:b0:9b:bd:c1:b1:9d:4d:49:6b: a3:0f:35:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhOsifWanS/8iOAebC+QSx8MTUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTA3MjExMDU2MDVaFw0yNTA3MjQyMDI1MDVaMDMxMTAvBgNV BAMTKDI1REVCRDNEQkMxRDBCMkREMjgwNjhDNjA5QUFCRUNFQkJDQTc4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1Eg0ta+sraYqx9nCoIXV2pI4 9oLvW2hab9Uy2Nrhc14EpCw12jV3eUq6E94B6LhdGVMUCqk2LhuCWmtXmEQPX79R FC2VGD5cXLkoGqQwxC8Dzbsg+ysIvHRw3Rsx72nQdQEsw6uTEpeKOJZwPJxgW26D DQ+VC/SEQ+NDwQxMOHNfgh+770dKyPbeWIHUheg+cBSdHIqOB1wYUj54omGERvS/ CAor+ZH8Q/IhBU+4kkCu2P59I//CyUMZtuxlFAARrsK8fGhsPlvgfx/3j62zqzFu NfcI+5J92LCrH3SSXFHeFsHgf3rc5BJDCbudRJo/FRMF4XUbQthP/PS4wsz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJd69PbwdCy3SgGjGCaq+zrvKeDAwHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMy RjYzMUM4RDc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyyVLjECr71gvkopQVk7EjBKhnn8ycZ0f8e j78c4BN/OdzUc4bLD8uINpu5lrobhNCq3HGVLXzNG4XMLWO0EFuUfYmXZJrCqjZo e5rPbUr18JIE8pD/fpoE9DrdYbxKgX6x7U0iXEzgo21O8g4ToWLU7NMPmlsaHnvs kksYgKxwsGWfrE6Qx4JmXSFon1Hpl4npcLsMhv9sXpcX2665vyTYc3wWkYJcZtEh Bzy3vBbmROSyVMJ+coqfp/W1Tghd1yARqYo1XhRgih8Oc3mhfl0TBCvFNrqQ8ZGX psbki62iF1QnFuOn389MFmIe32aB4o/GMbCbvcGxnU1Ja6MPNaE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:09 2025 by rpki-client