$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: JmxTTtRHg3ty3aOonI9SAJCsGqj5JBfCHV0CCWROWFk= Subject key identifier: AA:1C:0E:EA:33:4A:07:4C:94:97:9C:FB:78:9F:B9:F3:64:6E:8D:55 Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 77C8A7CD028E3F4891DA46D8495D94F949630BFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 01DF Signing time: Tue 22 Jul 2025 08:51:35 +0000 Manifest this update: Tue 22 Jul 2025 08:46:35 +0000 Manifest next update: Fri 25 Jul 2025 10:14:35 +0000 Files and hashes: 1: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: 9yyryfQH9hWE6SFKvWdnSvco5ZvRRgpSLYsr0FVp4yI=) 2: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: Zm6lbiwWs4+Cpu+9WHto2KdA0VxKMzxTj2WXGzEISio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c8:a7:cd:02:8e:3f:48:91:da:46:d8:49:5d:94:f9:49:63:0b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: Jul 22 08:46:35 2025 GMT Not After : Jul 25 10:14:35 2025 GMT Subject: CN=AA1C0EEA334A074C94979CFB789FB9F3646E8D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:94:12:9b:c5:e5:0f:bd:53:9e:3e:d2:30: cd:56:81:0a:d6:89:43:73:92:f6:34:58:8c:82:ef: 8f:c9:8e:82:2c:c8:b5:c2:2b:60:d9:8e:cf:2e:4a: eb:0a:7b:df:16:17:0f:d8:03:dd:27:cd:4a:9b:2d: 34:3d:56:63:7c:f6:e1:dc:12:43:16:b2:9c:97:4e: 26:9b:05:42:07:0f:cc:51:9b:96:43:e2:18:19:8f: 12:cc:d7:38:01:f4:70:5d:57:3c:37:d2:6f:44:4c: ed:8e:ac:e5:d5:ef:1a:86:80:1c:39:9f:1d:01:ab: ff:ab:c9:7f:80:a5:bf:b4:0a:46:1c:bc:66:d8:7a: b0:28:6e:d6:6e:41:a6:8c:e9:42:a9:f0:1c:45:d6: 80:ee:52:bf:c2:cc:94:58:37:8e:91:0d:48:be:8d: be:90:01:08:fe:e6:16:d9:8f:f2:a9:8c:84:cf:96: f4:8c:34:c6:2c:5b:a0:df:6e:19:5a:d5:14:91:2b: 3e:2e:be:fb:eb:8a:97:3c:4d:61:43:ec:af:8f:44: 76:21:4f:b2:4d:77:91:39:3a:2d:f2:93:c3:c6:5c: 40:84:c6:e8:67:bc:ef:d3:92:0f:1b:c0:8d:b2:cf: 4f:e7:f6:a3:05:dd:db:3b:df:f2:53:ab:46:50:67: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:0E:EA:33:4A:07:4C:94:97:9C:FB:78:9F:B9:F3:64:6E:8D:55 X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:58:45:bf:bc:8b:db:d7:6d:31:27:2c:ad:c4:90:96:b4: fd:47:1c:42:06:f3:72:58:2a:c1:b3:0b:3e:30:7b:f6:c5:04: 1e:87:04:fd:96:f5:90:05:68:64:de:ce:96:6f:d7:64:a8:6e: 8b:c2:b1:48:78:9f:8a:ad:8b:cc:87:cd:89:db:fe:59:e2:dc: e7:2c:b7:a5:4f:17:d4:aa:45:93:1c:80:89:eb:4e:dc:f9:4a: 62:5f:be:63:73:1b:c9:74:31:dc:63:b6:6b:11:12:fd:95:fe: 3d:e8:f6:8f:c3:42:8f:14:b1:4e:20:44:bb:44:74:63:63:da: 72:8a:82:1b:32:c0:27:d4:eb:23:d4:8f:b1:6b:7c:9c:9c:a1: 5c:4b:c3:70:a3:a0:c1:73:fd:d6:e8:58:02:e0:10:64:76:4e: 11:2e:6a:b8:88:3c:cc:2d:5e:c3:6c:af:a5:f4:81:41:75:34: 65:59:66:68:d1:8d:71:5b:88:a2:44:04:63:61:5f:fd:73:a0: e8:c9:00:ab:46:00:58:81:1a:86:8b:61:9a:36:86:14:d6:16: 92:bb:21:bc:eb:35:9a:df:a4:c4:ab:4f:0b:5a:5c:71:c2:33: 25:83:65:45:d4:ef:7b:51:71:ce:ed:3f:6a:56:16:3e:b6:9d: 60:ac:b6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8inzQKOP0iR2kbYSV2U+UljC/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNTA3MjIwODQ2MzVaFw0yNTA3MjUxMDE0MzVaMDMxMTAvBgNV BAMTKEFBMUMwRUVBMzM0QTA3NEM5NDk3OUNGQjc4OUZCOUYzNjQ2RThENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJpQSm8XlD71Tnj7SMM1WgQrW iUNzkvY0WIyC74/JjoIsyLXCK2DZjs8uSusKe98WFw/YA90nzUqbLTQ9VmN89uHc EkMWspyXTiabBUIHD8xRm5ZD4hgZjxLM1zgB9HBdVzw30m9ETO2OrOXV7xqGgBw5 nx0Bq/+ryX+Apb+0CkYcvGbYerAobtZuQaaM6UKp8BxF1oDuUr/CzJRYN46RDUi+ jb6QAQj+5hbZj/KpjITPlvSMNMYsW6Dfbhla1RSRKz4uvvvripc8TWFD7K+PRHYh T7JNd5E5Oi3yk8PGXECExuhnvO/Tkg8bwI2yz0/n9qMF3ds73/JTq0ZQZwGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhwO6jNKB0yUl5z7eJ+582RujVUwHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCDWEW/vIvb120xJyytxJCWtP1HHEIG83JY KsGzCz4we/bFBB6HBP2W9ZAFaGTezpZv12SobovCsUh4n4qti8yHzYnb/lni3Ocs t6VPF9SqRZMcgInrTtz5SmJfvmNzG8l0MdxjtmsREv2V/j3o9o/DQo8UsU4gRLtE dGNj2nKKghsywCfU6yPUj7FrfJycoVxLw3CjoMFz/dboWALgEGR2ThEuariIPMwt XsNsr6X0gUF1NGVZZmjRjXFbiKJEBGNhX/1zoOjJAKtGAFiBGoaLYZo2hhTWFpK7 IbzrNZrfpMSrTwtaXHHCMyWDZUXU73tRcc7tP2pWFj62nWCstrQ= -----END CERTIFICATE-----Generated at Wed Jul 23 02:21:23 2025 by rpki-client