$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: uCKuDr/qiKDbYfV/oYJ+WRbEI2hqEdLz0OkBzLk9RcE= Subject key identifier: 60:BA:F0:37:6A:19:C5:DB:B1:03:F6:C6:85:31:D8:CB:BA:C1:EF:FA Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 06ED69922A15E65C1ED356BBAE5986CB16E11198 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: B9 Signing time: Sat 19 Jul 2025 11:10:00 +0000 Manifest this update: Sat 19 Jul 2025 11:05:00 +0000 Manifest next update: Tue 22 Jul 2025 21:01:00 +0000 Files and hashes: 1: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: 87jSISG/Jxm9MB+yHLa9+eBmMheKaakque0L2/282qU=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ed:69:92:2a:15:e6:5c:1e:d3:56:bb:ae:59:86:cb:16:e1:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Jul 19 11:05:00 2025 GMT Not After : Jul 22 21:01:00 2025 GMT Subject: CN=60BAF0376A19C5DBB103F6C68531D8CBBAC1EFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:0e:73:99:43:4a:4e:10:48:64:78:9c:6b: 64:26:09:6b:4a:52:df:61:40:f4:1c:e5:8b:6d:af: 45:b5:ba:9f:b4:05:e9:e9:06:d1:16:1c:35:d3:90: 77:fe:8e:e7:4a:ed:22:0c:47:fd:bc:21:67:f7:53: 57:26:33:df:5d:73:71:0a:15:ea:00:bb:5a:ee:d9: 08:36:eb:a0:02:c5:9a:38:1e:3b:27:cb:04:ad:e8: 58:7a:77:7f:0f:0c:ca:3f:51:c1:f7:51:18:89:27: 2e:4e:41:0c:ee:e2:58:28:a4:b1:4d:78:a4:45:6a: 56:47:3f:43:03:e8:14:e4:44:57:b8:6f:e4:79:7b: c6:38:10:ab:98:8a:5c:24:06:85:6a:25:4d:5d:b1: 40:11:c9:90:89:a8:a3:2d:7d:e8:35:35:8b:59:9f: 4f:ef:ff:4a:15:b2:69:3c:3d:ce:f5:ed:6e:cc:57: 21:60:03:37:0f:12:31:ca:6d:98:0f:69:4b:19:84: cc:62:49:07:0e:c6:28:72:52:67:30:21:02:95:fe: b3:cd:5a:a2:fb:07:7a:af:e5:09:0c:d7:45:5c:08: 49:ce:a5:c4:d1:b7:55:5b:2a:ef:64:fb:0c:9f:0d: 23:99:02:68:57:d0:e8:f5:80:0f:21:b8:ed:3d:c6: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BA:F0:37:6A:19:C5:DB:B1:03:F6:C6:85:31:D8:CB:BA:C1:EF:FA X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:32:6f:4e:26:ed:74:70:4b:15:17:44:75:22:d2:75:62:bf: f0:3b:cb:97:f7:d5:4a:0d:6a:3b:29:f2:6d:49:23:c0:b1:0b: f3:f7:8e:1c:09:af:10:c5:c3:fa:ff:ac:3b:26:16:bd:62:cb: 94:0f:e8:f6:29:4d:a5:c7:60:16:cc:ff:72:6b:cd:df:6f:1d: 66:75:de:ea:2b:69:bc:a8:ee:86:49:18:eb:ed:79:c0:08:61: 99:08:3c:dc:18:a7:00:93:16:ca:c7:13:73:06:0b:00:22:4b: c6:90:3c:8e:68:f3:4c:97:32:26:48:41:f9:d6:ce:5d:3c:45: 46:ef:fc:e6:06:72:a3:68:81:d3:fb:ef:68:46:13:40:3a:ce: 66:f1:8c:13:66:bd:4e:c3:a4:b2:b4:45:8d:3e:30:47:30:19: 8d:04:85:83:d9:4c:ad:be:e2:bb:65:df:c3:09:e7:d8:9b:e3: 92:bd:81:a0:65:c6:a3:6f:b0:42:c8:b2:40:74:c8:ab:3b:be: d1:5e:6b:31:97:9a:f9:f9:84:4e:df:ca:db:39:af:c7:92:b1: 61:38:f5:fa:90:18:75:66:ad:55:38:94:77:3c:09:c8:53:7c: 5f:ce:e4:8f:9c:b1:ff:92:fa:3d:5c:ec:29:b4:34:1e:d6:c4: b7:25:4b:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBu1pkioV5lwe01a7rlmGyxbhEZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTA3MTkxMTA1MDBaFw0yNTA3MjIyMTAxMDBaMDMxMTAvBgNV BAMTKDYwQkFGMDM3NkExOUM1REJCMTAzRjZDNjg1MzFEOENCQkFDMUVGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQQ5zmUNKThBIZHica2QmCWtK Ut9hQPQc5Yttr0W1up+0BenpBtEWHDXTkHf+judK7SIMR/28IWf3U1cmM99dc3EK FeoAu1ru2Qg266ACxZo4HjsnywSt6Fh6d38PDMo/UcH3URiJJy5OQQzu4lgopLFN eKRFalZHP0MD6BTkRFe4b+R5e8Y4EKuYilwkBoVqJU1dsUARyZCJqKMtfeg1NYtZ n0/v/0oVsmk8Pc717W7MVyFgAzcPEjHKbZgPaUsZhMxiSQcOxihyUmcwIQKV/rPN WqL7B3qv5QkM10VcCEnOpcTRt1VbKu9k+wyfDSOZAmhX0Oj1gA8huO09xsA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYLrwN2oZxduxA/bGhTHYy7rB7/owHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkyb04m7XRwSxUXRHUi0nViv/A7y5f31UoN ajsp8m1JI8CxC/P3jhwJrxDFw/r/rDsmFr1iy5QP6PYpTaXHYBbM/3Jrzd9vHWZ1 3uorabyo7oZJGOvtecAIYZkIPNwYpwCTFsrHE3MGCwAiS8aQPI5o80yXMiZIQfnW zl08RUbv/OYGcqNogdP772hGE0A6zmbxjBNmvU7DpLK0RY0+MEcwGY0EhYPZTK2+ 4rtl38MJ59ib45K9gaBlxqNvsELIskB0yKs7vtFeazGXmvn5hE7fyts5r8eSsWE4 9fqQGHVmrVU4lHc8CchTfF/O5I+csf+S+j1c7Cm0NB7WxLclSz4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:31 2025 by rpki-client