$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: O1dIZg2piKLTWmejhRDGozp5YAPizCRQgD0W+BTrcdA= Subject key identifier: 8D:69:6B:F4:95:70:48:CA:E0:B1:38:0F:05:CB:C5:43:7A:29:A5:74 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 86D98A178026149F78E086EBD6EF3731EF23B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01C4 Signing time: Sat 06 Sep 2025 04:31:14 +0000 Manifest this update: Sat 06 Sep 2025 04:26:14 +0000 Manifest next update: Tue 09 Sep 2025 04:37:14 +0000 Files and hashes: 1: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: Fm12kbV2sIipp1vOUdTK6DiifqCcnuLnLCLcShdsAB8=) 2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: Iad/pFnY5v/nY50Xd0qR07twAz4pd0+B5syrBkizf7M=) 3: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: Z0N6isYAhB+e8rxLvCh1RIXjBWd+TKJHWZOCO+4YKaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86:d9:8a:17:80:26:14:9f:78:e0:86:eb:d6:ef:37:31:ef:23:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Sep 6 04:26:14 2025 GMT Not After : Sep 9 04:37:14 2025 GMT Subject: CN=8D696BF4957048CAE0B1380F05CBC5437A29A574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:90:07:7b:6f:b0:d4:5c:e3:a2:38:e8:6d: 79:68:ab:d1:f9:f7:6e:8e:13:bc:f1:42:a3:02:2f: 6c:3d:c8:ed:a2:8f:ff:3e:22:e7:cd:64:4d:f4:b5: 9c:f9:56:38:a3:48:7b:a7:16:ea:d4:37:9c:2e:9c: 22:93:ea:9d:01:b4:fd:79:13:80:cb:52:dd:76:f0: ad:27:81:be:01:a4:0f:c0:0a:90:4b:6a:8e:35:6b: 7b:07:a3:24:8e:e2:2f:1f:3a:52:a4:6b:2a:b3:d8: e3:c7:64:20:47:9f:c2:fe:a4:5e:53:03:f7:ea:a5: f1:7a:1a:d5:50:05:3f:60:20:f1:62:c3:7d:03:a7: 50:13:23:f7:11:3d:56:de:42:15:26:1e:70:74:4f: f3:b8:3a:0d:9e:88:f8:88:19:39:51:88:cd:b0:47: 1d:1e:af:34:7b:cc:e2:1f:6d:fb:b6:a1:ae:90:01: ec:84:59:7e:d7:ee:d0:1f:fc:57:81:a2:d9:f8:e2: 10:62:c5:ed:8b:7d:05:24:54:f0:48:00:39:92:a0: df:8b:90:be:53:f9:1b:93:38:bf:55:8d:d1:23:36: 03:db:2b:3e:ac:af:8b:50:06:5f:23:6d:d3:b5:c0: c5:31:de:3f:94:37:32:d8:8f:14:1c:fb:6a:20:1f: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:6B:F4:95:70:48:CA:E0:B1:38:0F:05:CB:C5:43:7A:29:A5:74 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bd:f9:f3:91:8a:ee:63:70:9a:bc:8e:79:51:26:a1:20:10: d0:cf:3f:3e:ba:b8:3b:b5:7a:89:72:ff:84:a6:ed:44:ce:da: 28:de:54:aa:bd:0c:9d:25:4a:a3:f8:a1:d0:f0:42:c5:51:b8: d1:b7:fb:e8:fb:e8:5b:28:61:87:23:85:50:35:d6:52:d5:3b: c7:26:43:49:fc:51:1f:f8:aa:4e:a7:b1:52:ee:15:6f:03:2e: 35:f6:de:2b:5b:c4:3e:62:67:9e:16:46:50:a1:52:5a:31:51: 5e:43:3e:7b:31:8b:55:5c:e2:4b:66:1f:80:98:84:df:43:8d: 82:98:c2:de:05:54:a4:bc:a4:ff:75:95:9e:69:79:ac:4c:47: e7:3e:c0:de:1c:c5:16:2d:46:01:12:8c:1a:60:e5:3f:a4:f2: 3e:f1:5b:aa:3e:a1:b6:19:66:f8:39:c8:8d:d3:71:3e:16:64: 6e:2b:83:e4:3d:99:ed:42:bc:6c:ee:d8:a8:cb:3b:00:39:df: 94:3e:84:6e:49:7c:85:bf:2f:77:17:de:42:c5:8e:97:ec:8e: 02:33:52:e6:98:1f:03:2e:9b:19:dd:02:8e:d5:f2:fd:af:3c: e3:50:64:8a:e0:16:42:ac:09:8f:99:ea:ba:43:1d:4e:fe:e7: 81:3a:34:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIbZiheAJhSfeOCG69bvNzHvI7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTA5MDYwNDI2MTRaFw0yNTA5MDkwNDM3MTRaMDMxMTAvBgNV BAMTKDhENjk2QkY0OTU3MDQ4Q0FFMEIxMzgwRjA1Q0JDNTQzN0EyOUE1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHpAHe2+w1FzjojjobXloq9H5 926OE7zxQqMCL2w9yO2ij/8+IufNZE30tZz5VjijSHunFurUN5wunCKT6p0BtP15 E4DLUt128K0ngb4BpA/ACpBLao41a3sHoySO4i8fOlKkayqz2OPHZCBHn8L+pF5T A/fqpfF6GtVQBT9gIPFiw30Dp1ATI/cRPVbeQhUmHnB0T/O4Og2eiPiIGTlRiM2w Rx0erzR7zOIfbfu2oa6QAeyEWX7X7tAf/FeBotn44hBixe2LfQUkVPBIADmSoN+L kL5T+RuTOL9VjdEjNgPbKz6sr4tQBl8jbdO1wMUx3j+UNzLYjxQc+2ogH1izAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjWlr9JVwSMrgsTgPBcvFQ3oppXQwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS9+fORiu5jcJq8jnlRJqEgENDPPz66uDu1 eoly/4Sm7UTO2ijeVKq9DJ0lSqP4odDwQsVRuNG3++j76FsoYYcjhVA11lLVO8cm Q0n8UR/4qk6nsVLuFW8DLjX23itbxD5iZ54WRlChUloxUV5DPnsxi1Vc4ktmH4CY hN9DjYKYwt4FVKS8pP91lZ5peaxMR+c+wN4cxRYtRgESjBpg5T+k8j7xW6o+obYZ Zvg5yI3TcT4WZG4rg+Q9me1CvGzu2KjLOwA535Q+hG5JfIW/L3cX3kLFjpfsjgIz UuaYHwMumxndAo7V8v2vPONQZIrgFkKsCY+Z6rpDHU7+54E6NIw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:43 2025 by rpki-client