$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: vD/UNjHPt6k5svvewoS8XhR+/74MI4GPSZr6oQ1CLMA= Subject key identifier: 64:2D:7D:36:20:6E:6D:BA:A9:E8:01:C4:CA:CD:B6:C3:63:80:58:A5 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 41C9C9815AD679A2E882115F7ADA7B8BA310795E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0507 Signing time: Wed 03 Sep 2025 20:22:02 +0000 Manifest this update: Wed 03 Sep 2025 20:17:02 +0000 Manifest next update: Sun 07 Sep 2025 03:13:02 +0000 Files and hashes: 1: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: 7RUPtMtIlrxRfe8JkDMowfNIaErD4O9L+lfHpuiX7sQ=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: hsmsycbgcxD+k7B/9K7pfzL9pgpZZ+cbabjIylSO6t0=) 3: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: IMuBoeIaFtTPbrQjkn4LdiYuzZclYappfMIzTQ540Q4=) 4: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: HVeg0PGOGTa0TGJxWHmzkgjdZm6SuE2awIUI2qwTJ2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c9:c9:81:5a:d6:79:a2:e8:82:11:5f:7a:da:7b:8b:a3:10:79:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: Sep 3 20:17:02 2025 GMT Not After : Sep 7 03:13:02 2025 GMT Subject: CN=642D7D36206E6DBAA9E801C4CACDB6C3638058A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:77:09:49:1f:ab:8f:2c:55:6f:42:99:88: 79:0f:13:bd:9c:54:f0:98:16:cd:5d:64:37:d3:a0: f5:0c:79:de:1f:1b:2e:3c:ed:cf:37:3b:2c:cd:c1: 89:c3:60:af:d7:c9:57:c8:a8:2d:2e:dd:3b:a5:00: d8:e3:f1:46:0f:61:0c:4d:ec:66:f5:da:60:ad:bb: 14:ec:e5:39:5f:1c:cf:c2:1b:94:f9:43:1b:70:3a: 56:39:05:95:55:5f:21:fa:7c:d0:97:16:51:b3:eb: 5c:db:22:a6:38:32:9a:6a:ee:58:44:a5:1e:e0:3e: ef:b0:56:33:e8:de:a1:b2:8a:c4:d2:99:58:07:e7: cb:b5:4d:46:b5:28:38:35:96:79:5e:c3:bd:52:6d: 68:48:da:0f:3d:f2:26:a2:32:b4:1f:f6:f5:f0:f1: b7:68:e8:26:f2:91:72:04:b2:47:f6:58:27:3c:64: 78:92:fe:cf:3a:6c:3f:e7:d0:7d:32:78:19:95:6f: 6a:3a:7c:db:04:29:fd:e9:69:0a:a2:69:93:a0:f8: c3:c9:ac:b3:65:f4:c9:06:df:c8:de:e7:78:6c:b8: 9f:de:cb:43:9f:ed:a5:e6:c1:f8:48:b5:91:74:6d: 73:f6:c8:17:63:f8:56:f8:63:1e:29:39:ed:2f:20: 38:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2D:7D:36:20:6E:6D:BA:A9:E8:01:C4:CA:CD:B6:C3:63:80:58:A5 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1f:e8:aa:49:37:74:25:dd:a9:7e:e2:3c:00:93:c7:88:69: fa:ab:a0:67:0a:1e:b4:a8:7b:3a:d6:4e:3c:0b:16:96:2d:0e: 69:32:82:a2:02:0f:ea:c3:b9:c6:d7:c7:d6:3a:62:9a:4f:5e: d6:83:f2:6c:00:18:df:ca:9c:40:cc:7f:80:63:7a:8a:cb:03: 45:89:53:95:4d:12:9f:01:db:f7:04:5a:95:66:3b:69:ad:b4: b4:0f:c9:98:d3:c2:8b:69:c3:12:fd:08:dd:36:55:15:c0:9c: cb:d9:ac:1a:a1:ab:16:a1:65:95:5c:ae:06:db:d2:c1:fd:86: 0a:dd:85:0f:c8:74:02:47:ed:8b:3a:c6:c6:5b:b1:9e:0b:eb: 22:b7:61:9f:4a:f6:a6:97:73:0b:35:ac:d2:b8:d4:d1:ef:f5: da:2f:0c:70:a4:d3:39:ae:ca:b4:c9:26:d7:33:36:38:5d:a1: a3:15:42:81:3b:70:fa:fa:59:a8:2a:32:48:d9:b4:ee:a4:9d: 2b:30:0c:2d:1c:cc:9c:03:8e:d1:dc:ca:41:d6:fa:12:79:57: dc:77:5e:0d:cc:2c:8e:2d:bd:e6:e9:60:6c:8b:c4:59:68:68: 4a:df:d2:45:5a:38:dc:6c:5e:e8:61:0b:dd:7b:7a:d3:89:92: ab:37:6f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcnJgVrWeaLoghFfetp7i6MQeV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNTA5MDMyMDE3MDJaFw0yNTA5MDcwMzEzMDJaMDMxMTAvBgNV BAMTKDY0MkQ3RDM2MjA2RTZEQkFBOUU4MDFDNENBQ0RCNkMzNjM4MDU4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxx3cJSR+rjyxVb0KZiHkPE72c VPCYFs1dZDfToPUMed4fGy487c83OyzNwYnDYK/XyVfIqC0u3TulANjj8UYPYQxN 7Gb12mCtuxTs5TlfHM/CG5T5QxtwOlY5BZVVXyH6fNCXFlGz61zbIqY4Mppq7lhE pR7gPu+wVjPo3qGyisTSmVgH58u1TUa1KDg1lnlew71SbWhI2g898iaiMrQf9vXw 8bdo6CbykXIEskf2WCc8ZHiS/s86bD/n0H0yeBmVb2o6fNsEKf3paQqiaZOg+MPJ rLNl9MkG38je53hsuJ/ey0Of7aXmwfhItZF0bXP2yBdj+Fb4Yx4pOe0vIDjLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZC19NiBubbqp6AHEys22w2OAWKUwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEf6KpJN3Ql3al+4jwAk8eIafqroGcKHrSo ezrWTjwLFpYtDmkygqICD+rDucbXx9Y6YppPXtaD8mwAGN/KnEDMf4BjeorLA0WJ U5VNEp8B2/cEWpVmO2mttLQPyZjTwotpwxL9CN02VRXAnMvZrBqhqxahZZVcrgbb 0sH9hgrdhQ/IdAJH7Ys6xsZbsZ4L6yK3YZ9K9qaXcws1rNK41NHv9dovDHCk0zmu yrTJJtczNjhdoaMVQoE7cPr6WagqMkjZtO6knSswDC0czJwDjtHcykHW+hJ5V9x3 Xg3MLI4tvebpYGyLxFloaErf0kVaONxsXuhhC917etOJkqs3bxE= -----END CERTIFICATE-----Generated at Fri Sep 5 20:24:15 2025 by rpki-client