$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: wrpnUBaQzn6o2qyXnV8FtKHyHfMyF8izcGomMuYCZAo= Subject key identifier: 12:EB:08:83:CF:17:07:AC:47:97:CE:59:82:D7:45:37:EA:66:17:24 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 3AD54EF2BC157842A63FE5D2986BF66FCD0787C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: B3 Signing time: Sat 19 Jul 2025 04:02:12 +0000 Manifest this update: Sat 19 Jul 2025 03:57:12 +0000 Manifest next update: Tue 22 Jul 2025 15:58:12 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: A54Eou5YjNGaHZh4iFAF7qMVM7/Klj+jcd/MUODWWJY=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d5:4e:f2:bc:15:78:42:a6:3f:e5:d2:98:6b:f6:6f:cd:07:87:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Jul 19 03:57:12 2025 GMT Not After : Jul 22 15:58:12 2025 GMT Subject: CN=12EB0883CF1707AC4797CE5982D74537EA661724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:a4:ad:01:13:96:69:16:ea:5f:f2:7b:88: fb:f3:23:b0:8e:94:cc:0e:e6:b2:14:e4:23:6e:d2: df:a2:ce:e5:23:d8:fe:f7:b2:c2:0b:85:33:4b:d7: ce:27:78:98:84:9d:b7:a0:91:7f:2c:e2:c8:39:79: 9d:3c:49:ab:91:e1:f9:b8:d1:41:f3:f8:30:e3:ef: ea:0d:9f:d2:06:a0:cb:7c:b8:77:80:20:79:29:12: 9a:43:25:6c:79:f3:2f:d0:38:22:a1:28:d2:55:19: 32:46:b8:ec:4f:08:d9:55:9d:08:23:11:7b:c0:19: f6:9b:eb:88:2c:e7:5a:19:41:5c:4c:f3:e6:83:8f: ee:5b:da:9b:e3:49:c8:d3:d4:8e:15:97:bb:b6:ce: 8d:0a:0b:a7:b4:b9:dc:2e:ac:1d:3c:f0:ef:0c:ad: 1f:e8:41:ce:35:b5:91:3c:cb:17:f8:0f:b5:e4:ac: 99:c4:61:07:e5:ac:c7:c5:ec:32:16:c9:b1:86:fa: 23:8e:d2:30:24:64:f2:bd:1f:27:23:1c:19:81:67: 99:8e:14:99:b0:54:15:8a:96:45:2a:72:4e:e8:88: 03:d7:45:0c:bd:4d:dc:61:58:3a:49:81:ea:6f:f3: 2c:2d:22:6d:86:54:bc:f0:11:be:c7:96:6e:d2:f5: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:08:83:CF:17:07:AC:47:97:CE:59:82:D7:45:37:EA:66:17:24 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:eb:73:cc:25:57:01:88:3f:da:2c:eb:e0:8a:72:c9:8a:73: f6:e1:87:6b:dd:c7:40:6a:99:18:7b:4f:36:80:13:6f:81:22: 72:d9:e4:31:18:aa:6c:4a:ed:0a:a7:8c:6e:84:61:23:19:5c: ef:65:5b:dd:d4:6e:65:03:91:2f:4f:b7:47:4f:84:51:e2:b8: 37:fd:a5:f1:48:21:8d:6e:87:9d:fd:2d:56:cf:38:31:0a:c4: 7a:37:e0:8c:cc:3e:bc:0c:50:cc:a9:c5:30:d0:42:fc:e2:67: e6:55:87:98:84:48:6e:98:65:7d:2e:20:3d:df:9b:95:38:34: 53:36:d1:b6:eb:91:6d:b5:61:7b:dc:20:4f:37:77:14:df:32: 7b:78:ea:e7:02:79:6a:74:73:f3:3a:4a:04:29:9f:b3:5f:a2: 05:f8:f4:5b:7b:11:5b:d1:60:0b:27:10:eb:a5:4d:f1:9e:4e: 11:d9:17:c2:f2:44:19:93:12:82:32:35:6f:a2:92:9c:be:96: 78:fe:ab:51:1a:8b:ab:c5:4f:30:5c:0f:4b:ac:23:fb:2e:ff: aa:d0:35:c0:5b:3e:05:01:e6:83:84:e6:00:9f:ae:12:e7:ad: 5b:39:b1:2a:c8:58:e6:6b:75:ad:55:92:54:bd:4f:24:3f:a2: a0:af:f3:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtVO8rwVeEKmP+XSmGv2b80Hh8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTA3MTkwMzU3MTJaFw0yNTA3MjIxNTU4MTJaMDMxMTAvBgNV BAMTKDEyRUIwODgzQ0YxNzA3QUM0Nzk3Q0U1OTgyRDc0NTM3RUE2NjE3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJaStAROWaRbqX/J7iPvzI7CO lMwO5rIU5CNu0t+izuUj2P73ssILhTNL184neJiEnbegkX8s4sg5eZ08SauR4fm4 0UHz+DDj7+oNn9IGoMt8uHeAIHkpEppDJWx58y/QOCKhKNJVGTJGuOxPCNlVnQgj EXvAGfab64gs51oZQVxM8+aDj+5b2pvjScjT1I4Vl7u2zo0KC6e0udwurB088O8M rR/oQc41tZE8yxf4D7XkrJnEYQflrMfF7DIWybGG+iOO0jAkZPK9HycjHBmBZ5mO FJmwVBWKlkUqck7oiAPXRQy9TdxhWDpJgepv8ywtIm2GVLzwEb7Hlm7S9ZP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEusIg88XB6xHl85ZgtdFN+pmFyQwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfrc8wlVwGIP9os6+CKcsmKc/bhh2vdx0Bq mRh7TzaAE2+BInLZ5DEYqmxK7QqnjG6EYSMZXO9lW93UbmUDkS9Pt0dPhFHiuDf9 pfFIIY1uh539LVbPODEKxHo34IzMPrwMUMypxTDQQvziZ+ZVh5iESG6YZX0uID3f m5U4NFM20bbrkW21YXvcIE83dxTfMnt46ucCeWp0c/M6SgQpn7NfogX49Ft7EVvR YAsnEOulTfGeThHZF8LyRBmTEoIyNW+ikpy+lnj+q1Eai6vFTzBcD0usI/su/6rQ NcBbPgUB5oOE5gCfrhLnrVs5sSrIWOZrda1VklS9TyQ/oqCv8zI= -----END CERTIFICATE-----Generated at Mon Jul 21 10:44:19 2025 by rpki-client