$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: Qj5n66MLQ/1tkJx0YbM8wnoVS4v0nCn3yjb6/N2L1ts= Subject key identifier: 63:CE:FB:A6:28:22:55:3F:2D:67:EB:34:40:35:12:6C:83:D3:CB:13 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 17928473D4CDB5355C3C8E437B8810FF42863CFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 01FD Signing time: Thu 04 Sep 2025 13:51:49 +0000 Manifest this update: Thu 04 Sep 2025 13:46:49 +0000 Manifest next update: Mon 08 Sep 2025 00:48:49 +0000 Files and hashes: 1: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 2: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w=) 3: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 4: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: RtIsBFTV9VXci9zYVSDlObOFfuUebTDHxhSGdkf1C18=) 5: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 6: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 7: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 8: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 9: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 10: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 11: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 12: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 13: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 14: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 15: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: DZw3cfVpl9eMlsIinfHwKcH6/KtzgbcJ6EVoNMOzf5I=) 16: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 17: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:92:84:73:d4:cd:b5:35:5c:3c:8e:43:7b:88:10:ff:42:86:3c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Sep 4 13:46:49 2025 GMT Not After : Sep 8 00:48:49 2025 GMT Subject: CN=63CEFBA62822553F2D67EB344035126C83D3CB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:8d:54:36:4f:d8:a8:10:44:f6:c5:e1:3b: e4:5a:d0:ac:28:95:27:2c:f9:83:79:ae:1d:f5:65: ce:cd:15:06:e8:11:76:0a:cf:c1:96:3f:47:6d:48: 5d:f6:e8:e0:69:35:f6:eb:a5:10:1d:03:a7:39:dc: 26:29:fe:32:35:37:24:79:40:04:87:09:00:a5:7f: 25:1c:40:f9:85:d9:6e:5d:d2:2c:21:75:44:ad:ae: bf:34:49:16:b8:e9:c2:4f:50:01:24:d4:54:d4:10: 87:cb:1f:3d:eb:9f:e3:40:dc:2f:77:14:66:f8:51: 2e:6b:bf:c0:13:00:ad:b5:b2:b4:55:4c:37:14:48: f3:c4:35:1b:9f:9b:a4:d2:bc:0a:6e:56:5d:ae:c7: c5:ba:41:25:e1:8f:24:4b:0a:58:6d:a3:0e:8c:5d: ac:6f:f3:55:8e:b5:c7:54:14:0b:7c:ea:48:b8:1b: 39:60:ef:60:07:76:f8:9a:94:6c:37:d7:18:7c:60: 4b:ad:8e:14:ef:dd:25:b1:ea:80:98:c9:46:d9:dd: a0:e5:4d:58:13:11:4d:48:3f:90:6d:f7:b7:69:b1: 19:db:65:6e:49:8f:71:74:5a:fe:c6:ab:84:c7:82: 0b:21:5a:c5:a3:89:97:44:91:66:c7:7d:d2:ea:26: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CE:FB:A6:28:22:55:3F:2D:67:EB:34:40:35:12:6C:83:D3:CB:13 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:39:a7:7d:2a:1f:a3:02:8f:42:0e:5f:ba:59:29:72:29:6a: 03:bb:ce:81:7e:e4:85:67:7f:5f:50:48:7e:59:4c:ba:17:e8: b9:ab:63:dd:b2:d6:4b:52:4d:d0:70:ca:c8:6e:3f:aa:95:79: 74:7c:4b:6d:4e:7f:c6:8c:59:02:c7:0d:d5:4b:9a:e8:37:06: 4a:d2:80:2d:b7:25:f2:e9:bc:34:d2:1c:98:45:b5:1c:43:24: f5:12:7b:96:d3:26:70:53:d9:8f:d7:b3:ce:60:fc:20:12:c8: 0f:9a:4b:9d:a2:8a:b7:b8:0b:1d:1d:07:b0:a8:39:09:90:d6: 39:63:1f:7d:2f:dd:ab:ff:7f:db:f5:d4:74:0d:5d:b8:ea:7b: 84:6e:99:96:cb:ea:88:14:e8:97:8e:50:83:5b:02:68:60:3f: ec:1e:e1:6f:7c:24:b0:ac:db:68:79:83:72:61:01:41:9c:4d: 35:6e:a6:31:6c:e2:01:50:ef:c3:66:cd:f8:5c:93:46:a4:27: 06:47:1d:c3:47:34:ac:75:ba:2e:e5:3b:c1:ad:ef:03:3c:f3: 7e:cc:48:e5:03:f6:ef:31:84:30:db:32:12:55:dd:69:46:e1: 26:45:f1:a6:99:7f:11:eb:de:39:57:1a:43:48:0c:81:71:3e: d5:14:61:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5KEc9TNtTVcPI5De4gQ/0KGPPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA5MDQxMzQ2NDlaFw0yNTA5MDgwMDQ4NDlaMDMxMTAvBgNV BAMTKDYzQ0VGQkE2MjgyMjU1M0YyRDY3RUIzNDQwMzUxMjZDODNEM0NCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qY1UNk/YqBBE9sXhO+Ra0Kwo lScs+YN5rh31Zc7NFQboEXYKz8GWP0dtSF326OBpNfbrpRAdA6c53CYp/jI1NyR5 QASHCQClfyUcQPmF2W5d0iwhdUStrr80SRa46cJPUAEk1FTUEIfLHz3rn+NA3C93 FGb4US5rv8ATAK21srRVTDcUSPPENRufm6TSvApuVl2ux8W6QSXhjyRLClhtow6M Xaxv81WOtcdUFAt86ki4Gzlg72AHdvialGw31xh8YEutjhTv3SWx6oCYyUbZ3aDl TVgTEU1IP5Bt97dpsRnbZW5Jj3F0Wv7Gq4THggshWsWjiZdEkWbHfdLqJoeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY877pigiVT8tZ+s0QDUSbIPTyxMwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU5p30qH6MCj0IOX7pZKXIpagO7zoF+5IVn f19QSH5ZTLoX6LmrY92y1ktSTdBwyshuP6qVeXR8S21Of8aMWQLHDdVLmug3BkrS gC23JfLpvDTSHJhFtRxDJPUSe5bTJnBT2Y/Xs85g/CASyA+aS52iire4Cx0dB7Co OQmQ1jljH30v3av/f9v11HQNXbjqe4RumZbL6ogU6JeOUINbAmhgP+we4W98JLCs 22h5g3JhAUGcTTVupjFs4gFQ78Nmzfhck0akJwZHHcNHNKx1ui7lO8Gt7wM8837M SOUD9u8xhDDbMhJV3WlG4SZF8aaZfxHr3jlXGkNIDIFxPtUUYXI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client