$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft File: 94F615F011BBB2C259625D478AF937086CA8D2EF.mft (raw, json) Hash identifier: edkcVC5Ge2iI/7acGAOkWmMj64yCYR4RhiDA35YiP2A= Subject key identifier: E2:93:3A:2D:31:BC:90:77:3C:44:C7:21:8E:9D:B5:AE:57:98:30:06 Authority key identifier: 94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF Certificate issuer: /CN=94F615F011BBB2C259625D478AF937086CA8D2EF Certificate serial: 17DEB3C354264B4FE442CCDD2C6A9DA0168B5050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft Manifest number: 0112 Signing time: Mon 21 Jul 2025 20:22:25 +0000 Manifest this update: Mon 21 Jul 2025 20:17:25 +0000 Manifest next update: Fri 25 Jul 2025 07:00:25 +0000 Files and hashes: 1: 94F615F011BBB2C259625D478AF937086CA8D2EF.crl (hash: /3O+b6uDeuuO7cbnNg737M/G3zC5a+JCMleXO809Cro=) 2: 3130332e39362e35342e302f32332d3233203d3e20313530393637.roa (hash: sf7Z4Dj1PN+l91MbwnFDpewNOOEB7EDrorjf9fk38qg=) 3: 3130332e39362e35342e302f32332d3234203d3e20313530393637.roa (hash: Pl5mXV2GVzrNQTc4RosdJvUks5j1v+XP+WNw1hZRoLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:de:b3:c3:54:26:4b:4f:e4:42:cc:dd:2c:6a:9d:a0:16:8b:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F615F011BBB2C259625D478AF937086CA8D2EF Validity Not Before: Jul 21 20:17:25 2025 GMT Not After : Jul 25 07:00:25 2025 GMT Subject: CN=E2933A2D31BC90773C44C7218E9DB5AE57983006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:f2:a2:e0:9a:62:85:54:5a:bf:e8:51:23: b8:01:73:44:21:6c:61:03:50:a2:9f:d0:8e:43:08: 38:cd:f9:59:0a:37:d6:99:c5:f1:df:ec:8e:e8:30: 9c:2a:87:b3:5e:cb:78:76:45:5b:8c:ea:44:03:6a: 6f:75:a2:e0:4f:69:e7:8b:61:1a:4d:9d:de:36:95: 04:28:85:9f:16:73:46:6b:5d:bb:f4:e4:75:e8:86: 0a:ce:64:0e:63:9e:1b:39:af:1e:2d:6c:68:d9:8c: ac:9c:59:d5:e2:ff:8a:af:8c:f4:57:66:85:4e:28: eb:0c:56:2d:3e:18:4c:3c:3a:85:6f:a0:63:0b:45: 0c:fb:66:dd:14:df:1b:7c:a8:90:36:75:1c:43:7a: bb:d2:c3:e3:0c:73:b5:91:8b:68:36:a0:61:a0:92: 39:2b:28:ca:0b:26:6a:11:39:d2:89:c3:38:b3:57: 0c:0c:29:89:18:5e:6d:55:be:fd:06:9d:5c:b9:fd: 77:cf:dc:f6:19:3e:db:4c:f1:8f:c0:8c:52:c8:9c: 18:ef:90:65:cb:b5:a0:44:95:07:22:d3:d2:ff:d8: 5a:05:cb:1c:6b:5f:36:0a:b3:41:1d:78:6e:b0:e6: 2d:9b:49:dd:8f:ef:62:21:1c:1a:54:e3:4e:6f:6d: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:93:3A:2D:31:BC:90:77:3C:44:C7:21:8E:9D:B5:AE:57:98:30:06 X509v3 Authority Key Identifier: keyid:94:F6:15:F0:11:BB:B2:C2:59:62:5D:47:8A:F9:37:08:6C:A8:D2:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F615F011BBB2C259625D478AF937086CA8D2EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc6ad64-7543-48ad-b158-e82676a11c70/0/94F615F011BBB2C259625D478AF937086CA8D2EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:0a:83:9a:19:06:c7:ce:d3:c0:c3:7f:50:b2:00:1b:40: 49:8e:04:b2:72:90:bb:e5:a6:ef:96:cf:4d:9e:1f:25:bb:94: 0a:3d:d4:72:77:71:42:4a:de:d0:5c:9d:1d:69:7b:b8:59:69: c4:05:09:ba:19:ae:e1:8f:a0:26:65:bf:f2:da:c3:2b:17:93: bc:5b:d4:5b:05:80:9e:ac:50:26:ba:29:80:4f:c9:27:a8:d7: 3f:5c:fa:ae:5e:d5:3a:e1:bb:1f:e9:7a:53:48:9c:6d:20:90: c3:c7:92:1b:21:4d:a6:14:40:bb:42:2a:38:69:3b:b5:35:fe: 22:01:3b:f1:47:d5:83:03:93:52:d8:3f:14:a8:79:51:3c:2b: e7:f5:7c:69:a3:6b:26:a4:54:b8:71:b5:60:18:d7:3a:3c:9c: ed:a4:b2:c3:f1:93:74:c6:0d:eb:33:20:37:5c:dc:ef:b0:77: 85:3f:d8:5d:0e:1d:a2:60:2e:f7:5c:5b:66:cd:30:b1:09:a3: 35:04:c9:ca:a8:83:9a:b1:5a:13:15:68:c4:a2:f5:69:dd:f8: c8:64:19:55:93:e8:02:57:7b:49:23:8b:65:3e:a5:9c:08:d7: d8:fe:80:0f:84:2a:ec:c2:48:f2:4c:44:44:b6:74:4d:a8:d5: d0:fc:fc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF96zw1QmS0/kQszdLGqdoBaLUFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2 Q0E4RDJFRjAeFw0yNTA3MjEyMDE3MjVaFw0yNTA3MjUwNzAwMjVaMDMxMTAvBgNV BAMTKEUyOTMzQTJEMzFCQzkwNzczQzQ0QzcyMThFOURCNUFFNTc5ODMwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy/Ki4JpihVRav+hRI7gBc0Qh bGEDUKKf0I5DCDjN+VkKN9aZxfHf7I7oMJwqh7Ney3h2RVuM6kQDam91ouBPaeeL YRpNnd42lQQohZ8Wc0ZrXbv05HXohgrOZA5jnhs5rx4tbGjZjKycWdXi/4qvjPRX ZoVOKOsMVi0+GEw8OoVvoGMLRQz7Zt0U3xt8qJA2dRxDervSw+MMc7WRi2g2oGGg kjkrKMoLJmoROdKJwzizVwwMKYkYXm1Vvv0GnVy5/XfP3PYZPttM8Y/AjFLInBjv kGXLtaBElQci09L/2FoFyxxrXzYKs0EdeG6w5i2bSd2P72IhHBpU405vbVpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pM6LTG8kHc8RMchjp21rleYMAYwHwYDVR0j BBgwFoAUlPYV8BG7ssJZYl1Hivk3CGyo0u8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmM2YWQ2NC03NTQzLTQ4YWQtYjE1OC1lODI2NzZhMTFjNzAvMC85NEY2MTVGMDEx QkJCMkMyNTk2MjVENDc4QUY5MzcwODZDQThEMkVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3MDg2Q0E4 RDJFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjNmFkNjQtNzU0My00OGFkLWIx NTgtZTgyNjc2YTExYzcwLzAvOTRGNjE1RjAxMUJCQjJDMjU5NjI1RDQ3OEFGOTM3 MDg2Q0E4RDJFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIJCoOaGQbHztPAw39QsgAbQEmOBLJykLvl pu+Wz02eHyW7lAo91HJ3cUJK3tBcnR1pe7hZacQFCboZruGPoCZlv/LawysXk7xb 1FsFgJ6sUCa6KYBPySeo1z9c+q5e1Trhux/pelNInG0gkMPHkhshTaYUQLtCKjhp O7U1/iIBO/FH1YMDk1LYPxSoeVE8K+f1fGmjayakVLhxtWAY1zo8nO2kssPxk3TG DeszIDdc3O+wd4U/2F0OHaJgLvdcW2bNMLEJozUEycqog5qxWhMVaMSi9Wnd+Mhk GVWT6AJXe0kji2U+pZwI19j+gA+EKuzCSPJMRES2dE2o1dD8/HY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:09:19 2025 by rpki-client