$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: qJQCki6okzDyjLOl/mTp4vlN0Qs8AzWdOF/3RZlAEAA= Subject key identifier: 04:F2:EB:46:BA:CF:01:EB:BE:E6:B4:5B:F1:55:03:67:03:DC:56:FB Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 1F9B6498B5AF5CDC509C174E1AC46F69112F27E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 0194 Signing time: Thu 04 Sep 2025 14:41:38 +0000 Manifest this update: Thu 04 Sep 2025 14:36:38 +0000 Manifest next update: Mon 08 Sep 2025 02:13:38 +0000 Files and hashes: 1: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: ruGzzyOqbSdcUmFMjUcit/f5bM4+NJr6fqLKVvb3ONc=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:9b:64:98:b5:af:5c:dc:50:9c:17:4e:1a:c4:6f:69:11:2f:27:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Sep 4 14:36:38 2025 GMT Not After : Sep 8 02:13:38 2025 GMT Subject: CN=04F2EB46BACF01EBBEE6B45BF155036703DC56FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:1f:84:d5:c6:c9:29:a6:5e:75:b4:9b:f2: 10:16:5c:a1:f0:5e:e5:c7:dd:a2:25:75:f4:2a:2c: f0:61:0f:b4:65:4b:56:06:30:0f:d2:e7:77:c6:66: 91:32:ff:d6:3e:de:a5:43:79:a7:a2:0b:7d:82:4a: 80:64:13:55:5c:7a:16:bd:a2:d3:93:81:1a:b4:a6: ad:4f:39:57:07:18:fa:76:11:cb:9c:d6:e5:41:1b: d6:b4:aa:33:80:3d:97:ad:61:f0:b7:e6:7f:3f:26: ab:cc:77:e6:e7:c5:9c:43:4e:35:22:90:e5:a8:de: ae:7e:12:26:fc:11:ad:7a:3b:7b:c8:ad:a4:78:96: 2a:67:36:4e:e2:de:00:33:35:46:d2:e3:12:07:01: 94:f4:d6:00:41:8b:8b:ab:90:6d:46:1a:88:e7:84: 39:37:e3:ef:43:cf:70:94:25:be:61:06:98:26:e5: 58:af:b5:16:94:9b:3d:11:f4:51:f3:a1:0f:29:f0: 06:9d:30:d6:08:24:69:3e:7d:ee:0d:d2:6c:be:34: 52:36:e2:2a:b4:6e:9b:4c:ec:b4:8b:e1:0b:d6:10: cf:21:bf:c2:0c:c8:6b:64:a9:73:d2:8f:8f:9e:0a: f0:4a:52:29:b7:b1:22:ce:c1:73:7a:e1:49:cc:16: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:EB:46:BA:CF:01:EB:BE:E6:B4:5B:F1:55:03:67:03:DC:56:FB X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:06:52:65:9e:a2:ed:9a:1d:6c:e7:b8:37:28:b1:7d:41:1b: 50:5f:29:f8:8b:ae:45:5f:d0:22:e0:cf:9b:e8:57:c1:ea:a5: 96:68:c4:e8:20:56:c5:74:da:dd:1c:9b:9b:b9:be:30:f1:71: 45:82:8c:5d:67:c9:2e:33:19:f3:68:6d:a0:8c:98:40:e3:15: 0a:87:63:3e:06:e0:ce:27:b3:f3:dc:04:7c:76:76:ea:9a:2b: 82:0f:af:36:76:ac:3a:9b:f9:bb:53:38:69:d3:f5:b3:3f:42: 06:b0:f3:77:d4:df:f6:0d:f2:65:ec:57:40:80:12:d9:58:c3: 51:58:8e:2e:bf:95:58:63:4d:93:e9:a0:d9:0c:57:1e:12:9d: 6c:94:70:6c:51:ee:2b:1f:b1:71:6a:e9:d9:f5:bc:7f:36:80: ae:f5:6d:1b:4b:50:bc:a6:a3:88:6b:ae:d6:67:5d:6a:ae:00: 7e:00:b1:51:56:23:6c:c5:c3:d9:1e:db:19:59:e7:8c:31:00: 8f:20:db:db:bb:14:46:ec:e5:36:85:5a:0e:d1:1b:f5:60:2b: 5c:8d:ad:f5:43:65:3a:cf:07:08:39:ae:3b:0c:c1:cd:03:89: 08:c2:50:e1:9b:d0:29:e5:dd:57:44:a8:f6:9d:b0:b6:2f:cb: 83:2a:3a:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5tkmLWvXNxQnBdOGsRvaREvJ+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTA5MDQxNDM2MzhaFw0yNTA5MDgwMjEzMzhaMDMxMTAvBgNV BAMTKDA0RjJFQjQ2QkFDRjAxRUJCRUU2QjQ1QkYxNTUwMzY3MDNEQzU2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NR+E1cbJKaZedbSb8hAWXKHw XuXH3aIldfQqLPBhD7RlS1YGMA/S53fGZpEy/9Y+3qVDeaeiC32CSoBkE1Vceha9 otOTgRq0pq1POVcHGPp2Ecuc1uVBG9a0qjOAPZetYfC35n8/JqvMd+bnxZxDTjUi kOWo3q5+Eib8Ea16O3vIraR4lipnNk7i3gAzNUbS4xIHAZT01gBBi4urkG1GGojn hDk34+9Dz3CUJb5hBpgm5VivtRaUmz0R9FHzoQ8p8AadMNYIJGk+fe4N0my+NFI2 4iq0bptM7LSL4QvWEM8hv8IMyGtkqXPSj4+eCvBKUim3sSLOwXN64UnMFuoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPLrRrrPAeu+5rRb8VUDZwPcVvswHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoGUmWeou2aHWznuDcosX1BG1BfKfiLrkVf 0CLgz5voV8HqpZZoxOggVsV02t0cm5u5vjDxcUWCjF1nyS4zGfNobaCMmEDjFQqH Yz4G4M4ns/PcBHx2duqaK4IPrzZ2rDqb+btTOGnT9bM/Qgaw83fU3/YN8mXsV0CA EtlYw1FYji6/lVhjTZPpoNkMVx4SnWyUcGxR7isfsXFq6dn1vH82gK71bRtLULym o4hrrtZnXWquAH4AsVFWI2zFw9ke2xlZ54wxAI8g29u7FEbs5TaFWg7RG/VgK1yN rfVDZTrPBwg5rjsMwc0DiQjCUOGb0Cnl3VdEqPadsLYvy4MqOo8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:18 2025 by rpki-client