$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json) Hash identifier: 60EzDEa1Fho0htXrFZehCzZl8cd5J16Ur8P3eRaawUk= Subject key identifier: B7:AC:34:6D:FA:A8:4C:AB:FE:55:F1:C1:15:5B:29:19:5D:D5:FC:CF Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Certificate serial: 554A22BDE4AD7A1D006DEDBD982DFF435BC481F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft Manifest number: 01CD Signing time: Fri 05 Sep 2025 22:51:55 +0000 Manifest this update: Fri 05 Sep 2025 22:46:55 +0000 Manifest next update: Tue 09 Sep 2025 07:29:55 +0000 Files and hashes: 1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: CSfNB0cg+AdHSaOjW2eSYVe4Vr4tWBf7Ep5yU/aYOaU=) 2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: 6xVE4NEw1Sikw1Gooesys2fgq3FlYqAHu2UarTz/OSA=) 3: 3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (hash: LvHJIxtfhB2+/kQQUsIDFDt8FQ6eUEnISh2k8TBxBs8=) 4: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: Rfg7HDMWVIP929YUdwK1uVc6J5MR0b+Dq0p8seprFqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4a:22:bd:e4:ad:7a:1d:00:6d:ed:bd:98:2d:ff:43:5b:c4:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23 Validity Not Before: Sep 5 22:46:55 2025 GMT Not After : Sep 9 07:29:55 2025 GMT Subject: CN=B7AC346DFAA84CABFE55F1C1155B29195DD5FCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:ab:40:e6:2a:db:19:a5:8a:c5:b5:30:3c: 8b:96:df:1a:04:f5:a3:03:35:86:19:d1:91:04:c0: d1:88:d2:6a:d0:73:10:9c:34:eb:0d:97:d4:d7:3a: ad:24:8c:9e:39:20:5b:dc:c8:d4:65:4a:6d:57:f7: 79:fa:73:00:c8:92:c1:5c:d8:1d:a5:5b:57:30:a9: 79:1d:c4:4a:96:12:c4:2f:4c:70:0c:3c:bf:bc:7a: cf:88:a5:f9:7b:95:2a:1d:27:d8:98:3c:a4:0d:78: 0f:f7:88:6e:ef:dd:fc:5c:0b:c9:b4:72:7d:45:59: 50:03:ea:0a:82:10:9f:bd:4f:6a:e7:cf:2f:47:85: c8:82:8c:41:2c:62:97:cf:9e:96:8f:02:27:39:f2: 1a:54:06:f1:b0:94:f8:4a:4a:a0:9c:ce:c0:85:d2: 95:9c:29:c6:6f:66:0f:3e:16:3b:f0:28:9d:bb:1d: 62:3b:12:98:25:da:f1:b1:06:6c:8d:cf:61:41:e0: ea:bd:8f:7f:c3:15:2e:38:be:52:aa:5b:4e:f0:6e: 1e:ad:e0:4f:8f:42:32:b0:84:80:27:f3:1d:18:3f: a6:c5:10:75:32:bf:f7:ad:c3:b5:af:35:0a:a2:41: ef:08:02:4a:d8:5c:60:f2:c1:38:bb:52:b4:2b:f5: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:34:6D:FA:A8:4C:AB:FE:55:F1:C1:15:5B:29:19:5D:D5:FC:CF X509v3 Authority Key Identifier: keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5b:34:93:3d:fa:ca:7f:97:47:4a:ac:fd:6a:2f:05:1a:75: ed:2e:34:25:ac:b8:3b:b2:aa:97:9c:e7:a8:63:ae:e7:2f:c5: 8b:d4:8c:5d:80:31:f6:5f:12:7b:23:af:4d:fd:db:db:e8:69: 19:9e:1f:23:13:fa:4b:5c:a5:ac:ce:c2:90:04:08:c8:73:f3: 6b:2a:9b:18:11:ee:5c:c8:da:db:41:79:99:8d:26:16:75:4d: 80:11:44:f8:64:84:bc:dc:12:61:c0:c1:38:bd:b0:0b:bc:ed: 2c:54:b0:e7:58:57:d9:0d:a2:a3:fb:cc:0b:7a:ae:11:bd:43: a0:0f:b5:00:78:d2:74:b5:f1:98:f2:80:54:97:28:71:c2:72: 10:54:59:b7:85:6e:38:95:e8:4a:87:d4:0f:e0:e1:01:67:68: 4e:88:7b:72:0a:7c:45:01:47:07:eb:ec:47:15:93:ac:9a:fd: 52:44:df:b1:d2:70:14:bc:a0:db:fe:61:e2:c1:37:38:6f:b6: b1:7a:50:35:9c:1b:86:55:6f:b8:23:5a:38:fb:e7:5c:89:e8: 0e:fc:c6:c8:a4:71:58:47:df:ee:1b:5c:e3:b9:cf:cd:2b:85: d2:6c:ed:e9:ae:27:db:4d:ba:32:20:9f:11:eb:05:f5:5e:fc: 25:22:ae:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUoiveSteh0Abe29mC3/Q1vEgfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw QkI4MkIyMzAeFw0yNTA5MDUyMjQ2NTVaFw0yNTA5MDkwNzI5NTVaMDMxMTAvBgNV BAMTKEI3QUMzNDZERkFBODRDQUJGRTU1RjFDMTE1NUIyOTE5NURENUZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9V6tA5irbGaWKxbUwPIuW3xoE 9aMDNYYZ0ZEEwNGI0mrQcxCcNOsNl9TXOq0kjJ45IFvcyNRlSm1X93n6cwDIksFc 2B2lW1cwqXkdxEqWEsQvTHAMPL+8es+Ipfl7lSodJ9iYPKQNeA/3iG7v3fxcC8m0 cn1FWVAD6gqCEJ+9T2rnzy9HhciCjEEsYpfPnpaPAic58hpUBvGwlPhKSqCczsCF 0pWcKcZvZg8+FjvwKJ27HWI7Epgl2vGxBmyNz2FB4Oq9j3/DFS44vlKqW07wbh6t 4E+PQjKwhIAn8x0YP6bFEHUyv/etw7WvNQqiQe8IAkrYXGDywTi7UrQr9RvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6w0bfqoTKv+VfHBFVspGV3V/M8wHwYDVR0j BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4 MkIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjY5MjZjODItYzhlNS00Zjk3LTg5 OTQtMmM0MDY1MzgxN2NlLzAvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUy QzQwQkI4MkIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5bNJM9+sp/l0dKrP1qLwUade0uNCWsuDuy qpec56hjrucvxYvUjF2AMfZfEnsjr03929voaRmeHyMT+ktcpazOwpAECMhz82sq mxgR7lzI2ttBeZmNJhZ1TYARRPhkhLzcEmHAwTi9sAu87SxUsOdYV9kNoqP7zAt6 rhG9Q6APtQB40nS18ZjygFSXKHHCchBUWbeFbjiV6EqH1A/g4QFnaE6Ie3IKfEUB Rwfr7EcVk6ya/VJE37HScBS8oNv+YeLBNzhvtrF6UDWcG4ZVb7gjWjj751yJ6A78 xsikcVhH3+4bXOO5z80rhdJs7emuJ9tNujIgnxHrBfVe/CUirp0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:10 2025 by rpki-client