$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: rbGWLZfc+51X2XMnPfMsoYxVcAhxTJnigTZ2MHCCwK4= Subject key identifier: D4:EA:AA:29:A0:84:54:59:50:16:C8:88:88:51:00:04:25:07:EF:0C Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 0E4C5C891F5B5917F6A0A2DA4FE99A7017436E00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: AD Signing time: Mon 21 Jul 2025 07:01:19 +0000 Manifest this update: Mon 21 Jul 2025 06:56:19 +0000 Manifest next update: Thu 24 Jul 2025 11:51:19 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: MX0u/Ic2WAVMpCoIAuNfOUrOjDEx4/qQFFOr22nHrXU=) 2: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) 3: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4c:5c:89:1f:5b:59:17:f6:a0:a2:da:4f:e9:9a:70:17:43:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Jul 21 06:56:19 2025 GMT Not After : Jul 24 11:51:19 2025 GMT Subject: CN=D4EAAA29A08454595016C888885100042507EF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:f7:d1:d2:29:8d:e3:03:7b:36:42:72:5c: 8e:5a:c3:91:bd:a9:c1:9e:0b:d3:e3:02:77:3e:90: 1c:8d:cc:64:8a:55:f1:24:ea:86:96:83:a4:5b:da: 9b:5f:87:37:d1:b5:35:bf:6f:7e:58:da:8f:d6:44: f6:39:ed:ce:39:2d:03:d4:78:da:93:9a:7a:13:55: 05:eb:66:ff:58:37:5d:d3:04:5d:35:4e:a7:74:08: af:a2:be:86:1f:e5:f8:9b:d5:db:69:94:43:7c:7e: 9f:b3:82:47:3a:36:ef:5c:f6:b0:b2:2b:64:43:c7: 28:ff:e9:74:7d:c4:6a:fa:f8:b8:8f:d8:27:89:90: 70:04:d0:19:6e:1b:b7:72:b5:9c:84:a0:27:70:0f: c0:d5:8a:b8:1e:ec:88:0c:b2:f3:f7:42:a3:5d:39: 16:a4:c8:78:bf:4a:20:7e:ed:3b:99:11:e8:87:ee: 90:00:eb:6e:9b:66:7a:49:b6:d0:4c:cb:e7:f3:9d: 41:1d:cf:ab:14:db:95:75:af:ee:1e:54:ef:8a:1a: ce:54:98:c0:c3:19:95:49:a4:26:b6:b3:f6:28:15: 87:f8:83:a5:83:19:d5:c7:24:45:c8:61:d5:7c:3d: 81:48:98:b1:64:99:d3:58:a5:c1:5f:b2:98:94:87: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:AA:29:A0:84:54:59:50:16:C8:88:88:51:00:04:25:07:EF:0C X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:aa:cf:96:1e:53:45:2e:49:cf:8f:61:3e:39:0d:54:9b:91: 1e:18:65:e1:00:f3:b0:91:54:a7:86:d8:3d:1a:69:1b:50:71: 51:3c:ce:eb:c9:46:e4:a3:c4:71:b7:2c:17:dc:de:6b:07:50: 3d:64:a0:fe:20:d6:26:f8:d1:1b:d4:27:a0:29:c0:12:5b:3d: 2c:6c:83:88:4e:a9:16:c5:41:39:f2:35:5a:ba:74:d2:a3:ec: ee:5e:db:3b:ef:75:f4:0f:65:2d:1f:4c:50:05:35:34:02:43: e9:2c:84:ad:e9:92:93:c2:7a:7e:a4:dc:77:f2:cd:b5:68:78: 87:ae:4f:cb:98:ca:15:d5:9b:60:8c:03:da:d2:be:50:b9:ef: fd:78:7b:e2:a3:f5:de:70:ba:c6:ef:af:b3:5b:86:ba:a1:e8: 50:36:ee:84:3e:92:4e:d7:32:a8:53:c4:8b:df:fe:10:17:28: 96:4a:e7:bb:29:17:44:92:12:52:2c:3f:df:00:ab:da:b3:09: 99:db:28:b0:f0:b5:75:2d:f1:2f:8c:9e:51:4e:5d:ec:ba:db: c9:1a:d7:03:29:b7:f4:d2:b0:5b:7c:18:ea:53:01:63:6c:47: 33:05:b9:ec:05:aa:ec:0d:99:c5:89:c5:1c:a7:05:73:5a:a2: 7e:b8:f7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkxciR9bWRf2oKLaT+macBdDbgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTA3MjEwNjU2MTlaFw0yNTA3MjQxMTUxMTlaMDMxMTAvBgNV BAMTKEQ0RUFBQTI5QTA4NDU0NTk1MDE2Qzg4ODg4NTEwMDA0MjUwN0VGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWvfR0imN4wN7NkJyXI5aw5G9 qcGeC9PjAnc+kByNzGSKVfEk6oaWg6Rb2ptfhzfRtTW/b35Y2o/WRPY57c45LQPU eNqTmnoTVQXrZv9YN13TBF01Tqd0CK+ivoYf5fib1dtplEN8fp+zgkc6Nu9c9rCy K2RDxyj/6XR9xGr6+LiP2CeJkHAE0BluG7dytZyEoCdwD8DVirge7IgMsvP3QqNd ORakyHi/SiB+7TuZEeiH7pAA626bZnpJttBMy+fznUEdz6sU25V1r+4eVO+KGs5U mMDDGZVJpCa2s/YoFYf4g6WDGdXHJEXIYdV8PYFImLFkmdNYpcFfspiUh3GJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OqqKaCEVFlQFsiIiFEABCUH7wwwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyqz5YeU0UuSc+PYT45DVSbkR4YZeEA87CR VKeG2D0aaRtQcVE8zuvJRuSjxHG3LBfc3msHUD1koP4g1ib40RvUJ6ApwBJbPSxs g4hOqRbFQTnyNVq6dNKj7O5e2zvvdfQPZS0fTFAFNTQCQ+kshK3pkpPCen6k3Hfy zbVoeIeuT8uYyhXVm2CMA9rSvlC57/14e+Kj9d5wusbvr7Nbhrqh6FA27oQ+kk7X MqhTxIvf/hAXKJZK57spF0SSElIsP98Aq9qzCZnbKLDwtXUt8S+MnlFOXey628ka 1wMpt/TSsFt8GOpTAWNsRzMFuewFquwNmcWJxRynBXNaon6499I= -----END CERTIFICATE-----Generated at Tue Jul 22 19:29:14 2025 by rpki-client