$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: zFQJ7ceKvKy63us7avHZXT3TRhm3RgMAaMDbBIlOma4= Subject key identifier: D6:E5:6F:30:92:6D:76:BD:6B:5C:73:7B:08:C2:BF:ED:2F:34:CF:E2 Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 1E8110D9C556849930274326CA482EC1FB2FE0C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: C1 Signing time: Fri 29 Aug 2025 09:20:57 +0000 Manifest this update: Fri 29 Aug 2025 09:15:57 +0000 Manifest next update: Mon 01 Sep 2025 10:28:57 +0000 Files and hashes: 1: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: AxFMAQ0j8mU6UPMgrnTY3KOjvabRbKAFc0pACZQwiA0=) 2: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 3: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 4: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 10:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:81:10:d9:c5:56:84:99:30:27:43:26:ca:48:2e:c1:fb:2f:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Aug 29 09:15:57 2025 GMT Not After : Sep 1 10:28:57 2025 GMT Subject: CN=D6E56F30926D76BD6B5C737B08C2BFED2F34CFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:9f:26:eb:02:a0:4b:30:67:8b:49:6d:74: 04:cc:70:2e:e6:6f:9a:a3:fd:fa:8f:70:d5:87:c0: 5d:75:aa:67:ca:7f:5c:3c:7f:a7:a6:79:cf:5c:15: 6f:b4:63:a8:4a:7e:da:80:21:e4:5b:ab:67:82:2a: 76:2b:0a:6a:f9:bb:39:c3:82:be:bf:ab:ea:a6:2a: fc:4f:04:ec:c6:66:de:98:9d:95:f3:0f:98:81:00: 24:40:84:ac:c7:b0:fc:87:84:fa:8e:a9:a2:9a:04: 9e:34:da:ed:7c:df:2c:98:cc:46:2a:b1:9a:ee:68: bb:c8:b9:75:89:6c:e8:a0:87:54:25:5d:80:66:ed: 6f:da:27:9a:de:f2:fb:0c:c9:52:87:e6:0f:f0:46: 6f:c3:7d:dd:f6:54:89:01:9d:7f:33:e0:21:f5:25: 0b:bc:93:bd:53:3a:6e:7c:60:c5:01:ac:8d:42:eb: e5:0a:20:d9:23:04:54:bc:2d:70:c4:7d:a5:de:d3: 79:c4:cd:fb:90:1c:84:f7:b4:09:88:09:44:58:ad: de:bf:f3:35:08:5c:fc:4e:c9:e7:1a:b2:14:d4:7b: db:ac:8f:1a:ae:39:67:1b:95:3d:91:22:df:a5:e9: 64:62:c2:50:d2:b9:b0:c2:91:e6:46:f3:14:7c:e6: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E5:6F:30:92:6D:76:BD:6B:5C:73:7B:08:C2:BF:ED:2F:34:CF:E2 X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cf:ab:c4:75:c1:ba:2f:ea:67:33:1a:33:86:98:74:58:fe: ea:04:a6:00:13:7c:f6:d0:e9:fd:66:53:3a:4d:62:b2:dd:a9: 40:36:dd:7c:2b:53:7e:e9:ee:6e:2a:01:b3:7f:7f:32:08:52: f2:20:d8:0a:a0:1b:92:bf:fc:32:a9:51:40:56:3a:a1:0f:31: 66:7f:7d:30:d9:20:a5:d4:54:72:d2:f9:6a:b9:01:9e:4e:7b: 3b:ff:38:09:7d:37:83:19:c7:a0:d7:ee:35:67:38:b4:59:09: 26:d2:eb:02:0a:38:45:36:87:d7:19:e9:77:59:f2:14:a0:87: ea:2f:9e:9a:f3:2d:86:f3:33:2f:cc:65:97:d5:47:1c:da:38: 67:69:56:54:52:e4:df:d0:b7:4d:e3:fe:0a:c5:c3:e5:28:f0: 66:c1:63:03:aa:36:bf:b0:d2:17:5c:3b:57:c4:27:55:6b:99: 39:f6:94:b7:f7:34:53:f8:3a:ae:62:e3:de:40:de:b5:47:05: e4:62:b6:ba:4b:94:19:75:d2:7d:87:df:e9:c3:c7:f0:e8:9f: 49:13:f7:34:44:bd:b1:5b:fb:98:96:ad:3c:01:a8:48:fa:69: a4:27:08:21:1f:0a:6e:61:0e:31:44:e0:a3:18:3e:15:0b:ab: 35:05:96:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoEQ2cVWhJkwJ0Mmykguwfsv4MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNTA4MjkwOTE1NTdaFw0yNTA5MDExMDI4NTdaMDMxMTAvBgNV BAMTKEQ2RTU2RjMwOTI2RDc2QkQ2QjVDNzM3QjA4QzJCRkVEMkYzNENGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfeZ8m6wKgSzBni0ltdATMcC7m b5qj/fqPcNWHwF11qmfKf1w8f6emec9cFW+0Y6hKftqAIeRbq2eCKnYrCmr5uznD gr6/q+qmKvxPBOzGZt6YnZXzD5iBACRAhKzHsPyHhPqOqaKaBJ402u183yyYzEYq sZruaLvIuXWJbOigh1QlXYBm7W/aJ5re8vsMyVKH5g/wRm/Dfd32VIkBnX8z4CH1 JQu8k71TOm58YMUBrI1C6+UKINkjBFS8LXDEfaXe03nEzfuQHIT3tAmICURYrd6/ 8zUIXPxOyecashTUe9usjxquOWcblT2RIt+l6WRiwlDSubDCkeZG8xR85hZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uVvMJJtdr1rXHN7CMK/7S80z+IwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/Pq8R1wbov6mczGjOGmHRY/uoEpgATfPbQ 6f1mUzpNYrLdqUA23XwrU37p7m4qAbN/fzIIUvIg2AqgG5K//DKpUUBWOqEPMWZ/ fTDZIKXUVHLS+Wq5AZ5Oezv/OAl9N4MZx6DX7jVnOLRZCSbS6wIKOEU2h9cZ6XdZ 8hSgh+ovnprzLYbzMy/MZZfVRxzaOGdpVlRS5N/Qt03j/grFw+Uo8GbBYwOqNr+w 0hdcO1fEJ1VrmTn2lLf3NFP4Oq5i495A3rVHBeRitrpLlBl10n2H3+nDx/Don0kT 9zREvbFb+5iWrTwBqEj6aaQnCCEfCm5hDjFE4KMYPhULqzUFloI= -----END CERTIFICATE-----Generated at Sat Aug 30 17:02:26 2025 by rpki-client