$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft File: 94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json) Hash identifier: z2JKUdLSIdpX0yn2VanuL6KekN5DnUr3MM02/rDUqmA= Subject key identifier: 70:4F:FD:32:57:E0:CD:A3:08:0A:2B:D3:45:DE:18:60:A5:6F:21:2E Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Certificate serial: 46685D96D17ECCE3862187C9B9208F4E89E2AB6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft Manifest number: FF Signing time: Thu 04 Sep 2025 11:42:22 +0000 Manifest this update: Thu 04 Sep 2025 11:37:22 +0000 Manifest next update: Sun 07 Sep 2025 16:20:22 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: PA93RwBGZzvBREAFM1iYNGPBBAoGkHxnKXuygsv1ptE=) 2: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: SZOGabm/whrPqsOLf8b+A5xZHDhaYkKTHi/ZkRA+X38=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: o89Hh5vp0Qt2o58GB1JQke74RyM5ltdrLMS25ekXGFY=) 4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: VlfA2F9WRPy+vssWvwHG73lbx3hyMs2V96FvcvqUxfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:68:5d:96:d1:7e:cc:e3:86:21:87:c9:b9:20:8f:4e:89:e2:ab:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Validity Not Before: Sep 4 11:37:22 2025 GMT Not After : Sep 7 16:20:22 2025 GMT Subject: CN=704FFD3257E0CDA3080A2BD345DE1860A56F212E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:55:e5:d9:a2:67:2b:7c:38:5f:5f:21:65: 4d:87:e1:bb:e4:41:a6:83:c8:de:7d:1d:72:87:85: 85:ec:8c:23:9e:a2:65:c2:61:2d:da:18:fe:d5:c2: 6d:46:1c:c9:cc:96:3d:38:1b:c2:9e:71:65:88:1f: 34:b3:b6:f6:09:7e:5b:76:7d:ad:72:f5:e0:2d:ae: 93:f9:76:b2:2c:5e:97:fd:53:a7:9b:0f:15:da:56: 74:c7:6e:6f:e7:f7:e1:ce:7d:cc:aa:be:f2:c4:36: ae:9a:0d:f9:78:a7:cd:31:21:03:4d:84:e9:ca:85: c3:1c:ca:a6:13:d9:b1:4c:e6:3d:47:fe:67:e5:ed: 2c:62:24:8f:4f:78:03:c2:a7:3a:02:c5:54:bf:e9: 2d:18:9e:d8:ac:aa:08:17:d4:eb:df:ef:d6:2d:67: 15:0e:25:e7:75:83:ca:58:fa:16:8c:66:97:6a:fb: aa:46:c3:b7:43:26:40:01:c2:a2:ad:14:8a:54:7c: f1:2f:e0:f9:17:19:3a:7f:34:c4:fd:1d:37:76:cf: 88:53:3f:9a:d2:6e:4f:2d:e0:f8:77:fa:99:8e:02: 1e:ad:a4:10:91:6e:be:70:b1:11:70:90:4d:13:22: 35:d4:aa:c6:47:b0:26:cd:74:8e:6b:69:28:17:59: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:FD:32:57:E0:CD:A3:08:0A:2B:D3:45:DE:18:60:A5:6F:21:2E X509v3 Authority Key Identifier: keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ef:a7:4d:5e:9c:44:bd:70:32:f1:b1:75:97:6a:10:b2:31: 62:af:b9:be:12:ed:55:c4:e5:85:73:ce:80:21:70:ca:6e:a1: 67:d1:b2:0e:f6:ee:18:b4:14:15:b9:cf:34:07:9d:18:7d:d7: fe:78:1d:7e:a9:1d:da:8c:c4:bc:8d:e9:ef:e6:d4:c3:df:0c: 5f:66:0e:0c:07:5d:9b:88:9c:b8:90:36:74:81:46:4e:a1:39: a1:d0:6c:21:d7:89:f4:19:6d:2f:14:07:db:fc:93:99:20:dd: b1:f6:c7:28:02:33:2b:63:89:97:15:4b:ba:21:51:cc:19:ed: ac:3f:45:f7:13:9c:c7:c3:dc:71:4f:6d:9f:f0:1e:bf:83:d7: 6f:90:29:53:38:c0:9a:18:8f:8e:d8:e8:c4:23:0a:a9:10:bf: 55:b8:55:ab:83:5a:9d:10:08:4b:95:2c:b7:f1:90:6f:e3:f8: 36:bf:a9:9f:d9:66:56:ca:08:79:44:8d:86:d6:ad:da:23:1a: 3c:8d:1b:c0:dc:e3:ce:04:eb:f5:d6:39:03:e0:e1:f3:f1:74: cc:9e:0d:2a:13:2d:92:cf:fe:d1:57:f4:89:52:6f:d6:45:1b: d0:27:a0:2d:3f:de:43:72:af:d2:56:c4:63:e9:23:37:e7:8b: 6f:f9:53:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmhdltF+zOOGIYfJuSCPToniq2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3 ODA5QTZGMzAeFw0yNTA5MDQxMTM3MjJaFw0yNTA5MDcxNjIwMjJaMDMxMTAvBgNV BAMTKDcwNEZGRDMyNTdFMENEQTMwODBBMkJEMzQ1REUxODYwQTU2RjIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzj1Xl2aJnK3w4X18hZU2H4bvk QaaDyN59HXKHhYXsjCOeomXCYS3aGP7Vwm1GHMnMlj04G8KecWWIHzSztvYJflt2 fa1y9eAtrpP5drIsXpf9U6ebDxXaVnTHbm/n9+HOfcyqvvLENq6aDfl4p80xIQNN hOnKhcMcyqYT2bFM5j1H/mfl7SxiJI9PeAPCpzoCxVS/6S0YntisqggX1Ovf79Yt ZxUOJed1g8pY+haMZpdq+6pGw7dDJkABwqKtFIpUfPEv4PkXGTp/NMT9HTd2z4hT P5rSbk8t4Ph3+pmOAh6tpBCRbr5wsRFwkE0TIjXUqsZHsCbNdI5raSgXWc05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcE/9MlfgzaMICivTRd4YYKVvIS4wHwYDVR0j BBgwFoAUlPbCYCe59yqocB0SlmJ/pXgJpvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGQwMDcxOC01MjEwLTQ0MzgtYjY0ZC02MmVjMWYzZWJjZDAvMC85NEY2QzI2MDI3 QjlGNzJBQTg3MDFEMTI5NjYyN0ZBNTc4MDlBNkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3ODA5 QTZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdG QTU3ODA5QTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvvp01enES9cDLxsXWXahCyMWKvub4S7VXE 5YVzzoAhcMpuoWfRsg727hi0FBW5zzQHnRh91/54HX6pHdqMxLyN6e/m1MPfDF9m DgwHXZuInLiQNnSBRk6hOaHQbCHXifQZbS8UB9v8k5kg3bH2xygCMytjiZcVS7oh UcwZ7aw/RfcTnMfD3HFPbZ/wHr+D12+QKVM4wJoYj47Y6MQjCqkQv1W4VauDWp0Q CEuVLLfxkG/j+Da/qZ/ZZlbKCHlEjYbWrdojGjyNG8Dc484E6/XWOQPg4fPxdMye DSoTLZLP/tFX9IlSb9ZFG9AnoC0/3kNyr9JWxGPpIzfni2/5U+k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client