$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: wU06JvN6UYGTG1LJynjsRPVKq+Am6JuCO+xaZf3iVms= Subject key identifier: BB:3E:7E:A7:3F:6C:51:AE:37:D0:21:F8:7C:6A:BC:01:E9:D4:1E:4C Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 6DA6F53661AC1F24BBE60C5E98E7A8EC730DEBB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 0373 Signing time: Mon 08 Sep 2025 16:21:35 +0000 Manifest this update: Mon 08 Sep 2025 16:16:35 +0000 Manifest next update: Thu 11 Sep 2025 18:27:35 +0000 Files and hashes: 1: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: vagIMKImu4Zs/hOeAJyRqPH9hY16TNqQAf9b5U67Rs0=) 2: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: PrYj5n97L2nQAGs1kTrdjASmZwG4fwZx6UAuROK9MXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a6:f5:36:61:ac:1f:24:bb:e6:0c:5e:98:e7:a8:ec:73:0d:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Sep 8 16:16:35 2025 GMT Not After : Sep 11 18:27:35 2025 GMT Subject: CN=BB3E7EA73F6C51AE37D021F87C6ABC01E9D41E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:5d:24:07:e3:7a:b3:e7:35:be:2b:83:30: be:81:2c:5e:4a:47:33:0f:07:e6:a4:d5:fb:b6:f8: fc:bb:ee:7b:cc:f8:06:3f:c7:c9:35:24:f5:21:7d: 17:1c:a4:12:5a:58:4c:53:e6:f3:6f:93:dd:e8:2e: b4:cd:47:b3:7a:da:43:a1:ba:7f:25:d9:9b:2a:48: 96:0a:98:79:84:ad:d6:94:b5:8b:f6:3a:21:79:37: 86:d6:63:ef:74:11:3e:82:7c:95:eb:74:33:6a:40: a3:88:99:84:c1:9c:d2:93:0c:e6:e4:1c:89:06:d5: d8:48:53:54:68:54:a7:0f:b7:86:fd:b6:d7:58:a1: b2:17:42:09:17:61:86:f8:7a:90:24:da:51:49:42: 21:d2:c7:f4:e5:f9:dc:3b:af:85:1e:7e:06:2e:b3: 9d:16:41:41:85:2e:31:50:94:ed:09:bc:1d:76:3e: 99:18:bc:cb:b1:b1:76:3a:df:d3:bb:8b:0d:d3:39: a2:68:1b:8b:da:80:9d:1d:5d:36:b4:98:bc:20:36: 85:06:22:c8:ed:40:a9:d0:0e:a1:9a:a9:33:de:87: 17:f5:29:4e:7d:97:3e:d1:7e:41:2b:5c:0c:93:95: 81:ed:2a:9a:a4:08:85:65:37:fb:72:bb:ab:c1:82: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3E:7E:A7:3F:6C:51:AE:37:D0:21:F8:7C:6A:BC:01:E9:D4:1E:4C X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:59:79:b0:a8:42:66:9d:d8:f5:59:46:26:64:f2:fc:81: 9f:eb:a0:4e:3f:73:41:70:0e:85:e2:dd:24:95:ea:43:69:69: 0f:67:44:3b:8b:d2:19:f4:9d:7e:bf:e4:62:31:29:4e:be:b6: a4:4a:fa:99:6b:3e:7f:3f:94:63:c8:4a:a3:92:8b:d2:5f:31: 34:42:af:b4:65:6d:17:3c:99:2c:06:f9:2c:b1:8f:51:90:c6: c2:52:bb:24:88:f6:57:3a:82:05:be:1d:e4:db:b1:a7:08:74: f8:43:f0:22:04:e1:bc:e7:e2:c7:02:9d:10:37:6c:34:ec:4f: 81:d5:5f:08:22:fb:98:56:05:cd:39:3b:65:1a:04:29:a6:ed: e1:46:fc:0c:3b:18:2c:7d:25:17:b2:c7:5b:a5:ac:9a:61:18: 24:7c:ef:90:eb:96:d4:f4:90:ed:22:d4:05:6c:10:c4:e8:8f: 08:d5:7d:bb:38:96:3e:51:f4:46:6c:c7:88:99:87:0f:5a:c0: 0e:d9:a3:cb:d9:9a:2e:18:2b:b9:67:8d:cf:54:fa:f4:2c:82: fb:37:2e:7c:3b:16:d7:40:3c:e8:23:2c:7f:09:08:59:09:2f: cd:04:39:95:1d:d8:4c:b8:36:3d:e2:7f:98:be:a6:ad:c7:57: 2d:e4:31:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbab1NmGsHyS75gxemOeo7HMN67UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNTA5MDgxNjE2MzVaFw0yNTA5MTExODI3MzVaMDMxMTAvBgNV BAMTKEJCM0U3RUE3M0Y2QzUxQUUzN0QwMjFGODdDNkFCQzAxRTlENDFFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzW10kB+N6s+c1viuDML6BLF5K RzMPB+ak1fu2+Py77nvM+AY/x8k1JPUhfRccpBJaWExT5vNvk93oLrTNR7N62kOh un8l2ZsqSJYKmHmErdaUtYv2OiF5N4bWY+90ET6CfJXrdDNqQKOImYTBnNKTDObk HIkG1dhIU1RoVKcPt4b9ttdYobIXQgkXYYb4epAk2lFJQiHSx/Tl+dw7r4UefgYu s50WQUGFLjFQlO0JvB12PpkYvMuxsXY639O7iw3TOaJoG4vagJ0dXTa0mLwgNoUG IsjtQKnQDqGaqTPehxf1KU59lz7RfkErXAyTlYHtKpqkCIVlN/tyu6vBgu8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuz5+pz9sUa430CH4fGq8AenUHkwwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIInWXmwqEJmndj1WUYmZPL8gZ/roE4/c0Fw DoXi3SSV6kNpaQ9nRDuL0hn0nX6/5GIxKU6+tqRK+plrPn8/lGPISqOSi9JfMTRC r7RlbRc8mSwG+Syxj1GQxsJSuySI9lc6ggW+HeTbsacIdPhD8CIE4bzn4scCnRA3 bDTsT4HVXwgi+5hWBc05O2UaBCmm7eFG/Aw7GCx9JReyx1ulrJphGCR875DrltT0 kO0i1AVsEMTojwjVfbs4lj5R9EZsx4iZhw9awA7Zo8vZmi4YK7lnjc9U+vQsgvs3 Lnw7FtdAPOgjLH8JCFkJL80EOZUd2Ey4Nj3if5i+pq3HVy3kMS8= -----END CERTIFICATE-----Generated at Tue Sep 9 13:57:03 2025 by rpki-client