$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: M6D0wwStjuSOytrla0qPrNFbuR4/uWDRBlA/JCGjooM= Subject key identifier: 0E:C9:F6:3E:EE:A7:73:E7:1A:9B:19:A6:B3:A4:FF:75:D5:7B:95:AB Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 597A9846E4165C72FD19EA39C1535E70337BE6CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 037B Signing time: Mon 08 Sep 2025 10:30:53 +0000 Manifest this update: Mon 08 Sep 2025 10:25:53 +0000 Manifest next update: Thu 11 Sep 2025 20:02:53 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: 8CE9yRXDEKXgZnboMfZS3yM7Ck3fUjRl2dPssRaMfco=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 12:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7a:98:46:e4:16:5c:72:fd:19:ea:39:c1:53:5e:70:33:7b:e6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Sep 8 10:25:53 2025 GMT Not After : Sep 11 20:02:53 2025 GMT Subject: CN=0EC9F63EEEA773E71A9B19A6B3A4FF75D57B95AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:da:3e:77:17:bf:e8:aa:94:c3:53:aa:4a: b2:31:42:d4:b9:3d:50:c5:4a:41:b2:33:15:c7:38: 66:e3:40:cf:b2:1e:d4:11:4a:c4:5a:85:0f:94:5c: c3:4b:b6:60:d0:86:2d:a0:77:a9:8f:9a:a0:36:4e: 5c:ea:ea:dd:48:70:d2:da:e5:82:90:72:d6:14:8f: 43:57:16:48:66:09:ea:33:15:9f:68:ce:32:55:e1: de:59:46:b2:8f:9a:9b:82:ca:10:5b:68:48:46:b7: fc:b9:51:83:ec:d8:ce:76:8a:bd:38:c6:4f:f9:1d: 0b:55:f4:31:e5:33:c4:3e:eb:1d:2e:65:87:4c:c1: cc:15:f1:ee:ca:69:8e:a5:4f:d4:3b:95:a6:d5:0a: 00:8e:0b:6d:9d:0b:ef:ea:82:4f:b5:05:c9:dd:e8: f2:08:85:18:9c:f7:cf:60:b3:5b:30:44:cb:f4:41: 21:30:6d:a4:52:b5:ef:fc:4f:73:80:93:74:f6:bb: d0:57:fe:43:29:0b:0a:98:b4:a1:ea:01:f9:74:47: c5:1a:92:74:76:f9:b4:8f:52:9c:d9:09:2b:3b:73: 5f:85:b7:41:1c:19:fb:04:20:4c:7b:37:f6:9b:ae: 9a:f0:7c:bd:90:29:e6:bf:4e:1d:9e:aa:d9:92:e2: 5c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:F6:3E:EE:A7:73:E7:1A:9B:19:A6:B3:A4:FF:75:D5:7B:95:AB X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:9c:29:23:ac:10:5a:90:a3:90:e4:98:e1:b9:1b:6c:b8: ea:20:6c:0d:60:c2:3e:c7:a6:03:2b:78:2d:15:5c:c7:2b:d3: 4e:21:14:39:d1:d9:b7:f9:b0:ee:20:ef:3b:ce:59:86:fc:52: d7:d8:1d:a4:ca:80:59:7a:9f:35:d0:22:b8:76:dc:06:35:d9: 9a:98:05:6a:5d:f9:e7:97:77:07:a8:76:8f:67:39:c4:a2:a2: 27:7f:39:af:35:04:1b:37:ac:90:d1:9e:d1:34:0f:3c:8f:d0: 4e:da:49:64:4c:01:b9:4e:6b:85:61:30:e4:e2:c1:61:cf:d6: 9c:e7:d8:37:4e:a1:53:90:db:7a:15:3c:1d:2a:f7:d1:42:37: 97:0f:96:c0:be:30:f8:b1:61:6e:c1:27:1b:e1:90:f0:f3:fd: af:12:e4:33:25:a5:ee:f3:a6:2e:97:52:40:51:32:0b:02:36: b5:1b:88:10:3c:e9:d8:b4:f3:82:ae:d7:39:05:65:fe:bd:59: b1:7d:65:d5:64:c3:19:e8:a1:5e:75:ad:6d:89:e9:ea:c7:2e: 67:fd:4c:db:25:3f:7e:ea:14:4d:b7:04:ee:21:88:d0:72:57: 8d:eb:a2:df:98:99:fd:97:ce:06:fd:16:55:1f:75:df:eb:36: fa:f4:3a:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXqYRuQWXHL9Geo5wVNecDN75swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTA5MDgxMDI1NTNaFw0yNTA5MTEyMDAyNTNaMDMxMTAvBgNV BAMTKDBFQzlGNjNFRUVBNzczRTcxQTlCMTlBNkIzQTRGRjc1RDU3Qjk1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPto+dxe/6KqUw1OqSrIxQtS5 PVDFSkGyMxXHOGbjQM+yHtQRSsRahQ+UXMNLtmDQhi2gd6mPmqA2Tlzq6t1IcNLa 5YKQctYUj0NXFkhmCeozFZ9ozjJV4d5ZRrKPmpuCyhBbaEhGt/y5UYPs2M52ir04 xk/5HQtV9DHlM8Q+6x0uZYdMwcwV8e7KaY6lT9Q7labVCgCOC22dC+/qgk+1Bcnd 6PIIhRic989gs1swRMv0QSEwbaRSte/8T3OAk3T2u9BX/kMpCwqYtKHqAfl0R8Ua knR2+bSPUpzZCSs7c1+Ft0EcGfsEIEx7N/abrprwfL2QKea/Th2eqtmS4lzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsn2Pu6nc+camxmms6T/ddV7laswHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/MnCkjrBBakKOQ5JjhuRtsuOogbA1gwj7H pgMreC0VXMcr004hFDnR2bf5sO4g7zvOWYb8UtfYHaTKgFl6nzXQIrh23AY12ZqY BWpd+eeXdweodo9nOcSioid/Oa81BBs3rJDRntE0DzyP0E7aSWRMAblOa4VhMOTi wWHP1pzn2DdOoVOQ23oVPB0q99FCN5cPlsC+MPixYW7BJxvhkPDz/a8S5DMlpe7z pi6XUkBRMgsCNrUbiBA86di084Ku1zkFZf69WbF9ZdVkwxnooV51rW2J6erHLmf9 TNslP37qFE23BO4hiNByV43rot+Ymf2Xzgb9FlUfdd/rNvr0Opc= -----END CERTIFICATE-----Generated at Mon Sep 8 12:45:47 2025 by rpki-client