$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: 7TxoHhLBUOLW52XBUQb2KCoCSFfGBsRy9yD3JrUoRDU= Subject key identifier: 47:7B:45:98:B1:C3:E4:BB:14:FF:49:67:35:EB:28:E7:86:CE:05:90 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 67C261EFECCAD354990E3C70515C1A4CCFE43EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 047B Signing time: Sat 06 Sep 2025 22:40:47 +0000 Manifest this update: Sat 06 Sep 2025 22:35:47 +0000 Manifest next update: Wed 10 Sep 2025 04:28:47 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 2: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 3: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 4: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) 5: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: GT23r+wujGf3vANj3I+8YZ74XnEA6aNwj7ivBhiQnpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c2:61:ef:ec:ca:d3:54:99:0e:3c:70:51:5c:1a:4c:cf:e4:3e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Sep 6 22:35:47 2025 GMT Not After : Sep 10 04:28:47 2025 GMT Subject: CN=477B4598B1C3E4BB14FF496735EB28E786CE0590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:05:e7:72:dd:c9:21:b5:c1:7f:ac:c5:94: 5f:77:6f:31:4e:4e:d8:0d:71:a8:e5:c8:a2:7e:9c: b5:80:12:d0:47:20:29:77:e0:a6:7a:e6:fd:74:da: cb:52:4b:68:e5:5e:a9:e6:9a:d4:15:8a:98:75:0e: 90:a8:55:01:b9:9a:3f:4c:3a:4b:80:05:57:2b:bf: ea:a6:60:13:d6:d8:78:5a:8b:66:cc:e0:0b:cc:87: a7:44:aa:32:87:39:20:2f:f4:ac:0c:f4:c9:2b:dc: b4:8e:53:5f:7d:29:75:bf:9d:69:3a:9e:e4:cf:12: e1:24:78:44:3b:cb:a1:8a:43:eb:eb:32:e4:8a:cb: e3:b8:db:ea:b4:8b:95:57:aa:43:ac:2d:5a:fc:d1: b1:fd:5c:d0:63:7a:8e:06:10:64:82:e4:59:f6:2a: cf:6c:fd:32:6c:10:d1:32:5c:18:03:94:b9:9d:f7: 80:ee:01:10:1a:99:a7:f3:33:29:8d:16:14:d5:01: f7:92:69:71:06:14:66:7d:b5:44:6a:9c:fc:42:0b: d2:8c:a2:ca:eb:dd:c5:13:1e:34:da:40:16:c8:15: 0d:49:8b:0b:40:81:7e:d4:06:cb:7e:ab:ca:30:10: 19:3d:0f:8d:ae:77:06:27:e6:3a:ca:f1:14:3e:dd: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:45:98:B1:C3:E4:BB:14:FF:49:67:35:EB:28:E7:86:CE:05:90 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ed:c3:9b:8a:58:1c:34:a2:82:93:55:2b:8e:21:5f:48:b0: 58:cb:b6:94:33:d5:08:19:57:b7:c6:d5:18:01:30:6f:67:cb: 31:c2:81:d4:a4:61:17:a9:09:50:ae:e9:72:3f:de:c5:7f:59: f4:fc:65:02:65:fe:5e:53:fd:e2:54:36:f4:fa:73:10:bc:ce: 10:c9:05:d2:21:c5:ce:3d:a5:d5:f0:0b:8b:d9:35:af:a0:1a: ce:ad:12:45:a7:6d:50:ce:40:09:37:45:f1:8f:33:1e:0d:0c: 86:6d:db:d5:4b:fb:02:70:de:0c:16:af:a4:6a:6a:b0:b3:c3: 4e:c5:6d:db:ff:dd:69:b8:e7:c9:42:e3:38:d0:16:06:a0:25: 71:43:3a:f3:dd:0c:fc:e8:25:b1:06:13:a8:7c:e7:fd:52:52: 16:28:ff:3d:20:7d:2e:58:26:97:05:67:19:95:8a:36:40:4b: 18:5a:60:db:87:2d:6b:c5:49:32:98:1b:91:c7:f5:8a:5f:ef: 74:f3:54:53:96:d3:20:3f:93:7e:c4:f6:f3:93:97:4e:24:da: 7f:82:52:b4:10:38:39:41:66:ca:88:9f:7f:84:cf:04:a7:02: 2a:0a:69:5c:3c:b2:68:d5:1b:c7:8c:b9:81:aa:a2:12:60:10: 58:28:7d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8Jh7+zK01SZDjxwUVwaTM/kPrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA5MDYyMjM1NDdaFw0yNTA5MTAwNDI4NDdaMDMxMTAvBgNV BAMTKDQ3N0I0NTk4QjFDM0U0QkIxNEZGNDk2NzM1RUIyOEU3ODZDRTA1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uAXnct3JIbXBf6zFlF93bzFO TtgNcajlyKJ+nLWAEtBHICl34KZ65v102stSS2jlXqnmmtQViph1DpCoVQG5mj9M OkuABVcrv+qmYBPW2Hhai2bM4AvMh6dEqjKHOSAv9KwM9Mkr3LSOU199KXW/nWk6 nuTPEuEkeEQ7y6GKQ+vrMuSKy+O42+q0i5VXqkOsLVr80bH9XNBjeo4GEGSC5Fn2 Ks9s/TJsENEyXBgDlLmd94DuARAamafzMymNFhTVAfeSaXEGFGZ9tURqnPxCC9KM osrr3cUTHjTaQBbIFQ1JiwtAgX7UBst+q8owEBk9D42udwYn5jrK8RQ+3XE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR3tFmLHD5LsU/0lnNeso54bOBZAwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbtw5uKWBw0ooKTVSuOIV9IsFjLtpQz1QgZ V7fG1RgBMG9nyzHCgdSkYRepCVCu6XI/3sV/WfT8ZQJl/l5T/eJUNvT6cxC8zhDJ BdIhxc49pdXwC4vZNa+gGs6tEkWnbVDOQAk3RfGPMx4NDIZt29VL+wJw3gwWr6Rq arCzw07Fbdv/3Wm458lC4zjQFgagJXFDOvPdDPzoJbEGE6h85/1SUhYo/z0gfS5Y JpcFZxmVijZASxhaYNuHLWvFSTKYG5HH9Ypf73TzVFOW0yA/k37E9vOTl04k2n+C UrQQODlBZsqIn3+EzwSnAioKaVw8smjVG8eMuYGqohJgEFgofS4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:16 2025 by rpki-client