$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: svvtt+PMF0Bto0C4N8WMKstgczvCHNSsME6ptLp0A34= Subject key identifier: C6:A4:82:1F:55:8D:6C:22:67:F3:7C:5B:6A:CF:93:D5:61:C3:51:B1 Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 02BD64E933C81F65BDAC83E10A175331AF2CEB67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 011D Signing time: Fri 18 Jul 2025 18:21:25 +0000 Manifest this update: Fri 18 Jul 2025 18:16:25 +0000 Manifest next update: Tue 22 Jul 2025 03:42:25 +0000 Files and hashes: 1: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: aKEsgE6H2Q6MjQcVkyp/z8tGgi8bnF/5scXJTaxQ5O4=) 2: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 7c1sfMcrfO93nFfMchi4QHV2HKxCNeAUSMnzGqAyt9Q=) 3: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: NbBYk657nhFcWyfIb4SK1Hr5N01903qmNQrNmHuRDKc=) 4: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: 3xpIJX5oINXJUPuBkhUbqHuDByu9ZULCKQ7tzsRwqDk=) 5: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: eHISoXHVKn1qECNQ4NnS2RxhoIQiyXH6p1jR8nSpuuc=) 6: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: 7vbMiozb3uHTPyIGLruw8yBs7XhAiHnr0tqrwOMZY8w=) 7: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: pe62LiojXyM7gYicjmgnqk2m0Gdqr7TylPQuh7SdFnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 03:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bd:64:e9:33:c8:1f:65:bd:ac:83:e1:0a:17:53:31:af:2c:eb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Jul 18 18:16:25 2025 GMT Not After : Jul 22 03:42:25 2025 GMT Subject: CN=C6A4821F558D6C2267F37C5B6ACF93D561C351B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:40:2f:85:58:43:88:0f:cc:fd:6a:04:67: c3:5b:33:12:a6:d4:62:84:b1:fb:f8:42:6d:61:b2: e4:a5:82:5a:d4:0f:c7:47:e9:eb:99:2c:83:7b:fc: ac:cb:44:0a:f5:5e:c8:da:8f:53:ad:6c:f1:ee:dd: 04:8b:71:85:e8:24:d8:a9:59:67:f4:5c:d6:6b:6e: b1:a0:57:47:d7:52:8a:03:ce:79:90:6c:fb:09:70: ca:97:b8:dd:bf:fd:f3:a4:6e:27:8d:9f:52:66:5c: bf:98:19:cd:4a:69:f6:71:49:83:5f:34:5c:21:29: 1a:8f:48:35:b8:83:41:54:6f:c9:01:e4:f3:fb:45: b4:1d:59:02:ca:00:37:c6:29:94:00:58:5d:a8:4b: d1:74:d4:eb:21:ea:12:b6:55:25:e1:b9:9e:d0:de: 32:15:ff:5c:f1:10:75:bb:14:9c:48:0d:00:a9:11: a7:96:71:b6:4d:ea:10:ce:51:07:5b:8a:79:4b:31: 5a:ca:40:a0:44:d5:66:45:2b:52:98:38:4d:4e:bd: 06:ab:60:03:0e:6c:c0:4d:0c:c6:61:07:35:9f:5f: 4f:6b:82:90:bb:de:36:9b:61:35:51:a8:23:3c:56: 4c:71:08:c2:26:81:d6:09:3a:39:52:d7:de:52:b8: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:82:1F:55:8D:6C:22:67:F3:7C:5B:6A:CF:93:D5:61:C3:51:B1 X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:de:97:c5:0a:19:92:09:c8:b1:57:f9:95:1c:46:8d:24:40: 44:31:8e:06:d2:2a:57:a9:20:ab:1b:56:b2:b0:5f:4b:62:b1: 76:eb:d4:0a:7a:0c:89:08:a8:98:a5:fe:04:bd:6e:f4:d4:e6: 03:76:a3:e3:65:b1:be:43:5b:cd:70:80:80:ea:7d:98:69:99: 47:e7:c5:45:91:fd:76:59:6a:15:c7:0f:dd:28:c5:58:37:49: 49:c7:d1:c2:fc:42:aa:a4:02:53:d1:db:3a:c9:8a:d7:d6:41: ac:1d:59:1f:c7:e5:dc:75:34:03:b7:f9:dd:6f:aa:a1:7e:96: 0a:67:ba:fe:a5:74:ea:e2:3d:2f:3d:2e:71:49:24:9f:1f:b4: c1:ae:9f:6e:f0:55:76:b5:51:fd:98:64:83:18:43:ca:ec:45: b0:61:27:b0:46:22:4f:00:dd:01:59:50:47:87:8c:b0:e6:3b: 6a:e2:e1:aa:a0:a8:af:36:4a:2e:d9:b9:6d:01:83:f0:97:cc: 9b:4f:52:a3:56:34:77:f0:49:5d:d1:c7:c6:9e:6b:4f:26:55: 0e:21:d2:21:64:3b:1d:70:e3:2b:09:5d:d5:b1:0c:24:16:99: c2:e9:10:18:8d:7c:38:9b:09:30:25:af:2f:88:8a:35:95:ec: a7:a7:54:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr1k6TPIH2W9rIPhChdTMa8s62cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTA3MTgxODE2MjVaFw0yNTA3MjIwMzQyMjVaMDMxMTAvBgNV BAMTKEM2QTQ4MjFGNTU4RDZDMjI2N0YzN0M1QjZBQ0Y5M0Q1NjFDMzUxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYEAvhVhDiA/M/WoEZ8NbMxKm 1GKEsfv4Qm1hsuSlglrUD8dH6euZLIN7/KzLRAr1Xsjaj1OtbPHu3QSLcYXoJNip WWf0XNZrbrGgV0fXUooDznmQbPsJcMqXuN2//fOkbieNn1JmXL+YGc1KafZxSYNf NFwhKRqPSDW4g0FUb8kB5PP7RbQdWQLKADfGKZQAWF2oS9F01Osh6hK2VSXhuZ7Q 3jIV/1zxEHW7FJxIDQCpEaeWcbZN6hDOUQdbinlLMVrKQKBE1WZFK1KYOE1OvQar YAMObMBNDMZhBzWfX09rgpC73jabYTVRqCM8VkxxCMImgdYJOjlS195SuN8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqSCH1WNbCJn83xbas+T1WHDUbEwHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvel8UKGZIJyLFX+ZUcRo0kQEQxjgbSKlep IKsbVrKwX0tisXbr1Ap6DIkIqJil/gS9bvTU5gN2o+Nlsb5DW81wgIDqfZhpmUfn xUWR/XZZahXHD90oxVg3SUnH0cL8QqqkAlPR2zrJitfWQawdWR/H5dx1NAO3+d1v qqF+lgpnuv6ldOriPS89LnFJJJ8ftMGun27wVXa1Uf2YZIMYQ8rsRbBhJ7BGIk8A 3QFZUEeHjLDmO2ri4aqgqK82Si7ZuW0Bg/CXzJtPUqNWNHfwSV3Rx8aea08mVQ4h 0iFkOx1w4ysJXdWxDCQWmcLpEBiNfDibCTAlry+IijWV7KenVKw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:10 2025 by rpki-client