$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: mogtg0D6AWMGvzLyseXILzx5+c38rAqiFoFiVQBWhLw= Subject key identifier: 8B:04:0E:67:3F:A4:97:8F:E8:67:C1:45:EE:1F:5C:9B:E9:F7:8F:7C Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 645463C42AF0D00FFA071AC8E339DF8DE0FF3918 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: BE Signing time: Thu 04 Sep 2025 12:30:05 +0000 Manifest this update: Thu 04 Sep 2025 12:25:05 +0000 Manifest next update: Sun 07 Sep 2025 18:42:05 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 2: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 3: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: NCa+GGSq3yT3mQagCDKq6Gw5W/C1zRiWNAtTo6ViycU=) 4: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 5: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 6: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 7: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: JxpxIBdwS7o4vHOBx2dOxd2iEbKp5DGTS498M10fMjc=) 8: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) 9: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:54:63:c4:2a:f0:d0:0f:fa:07:1a:c8:e3:39:df:8d:e0:ff:39:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Sep 4 12:25:05 2025 GMT Not After : Sep 7 18:42:05 2025 GMT Subject: CN=8B040E673FA4978FE867C145EE1F5C9BE9F78F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:d9:68:64:81:81:6a:e8:94:2b:3a:78:c9: 0b:2c:b4:37:82:e8:2c:57:83:fa:d7:28:39:b5:b7: 15:64:b7:a5:46:aa:c7:db:fc:47:36:dd:45:65:89: e7:ed:b0:04:a4:e2:d7:e4:2d:1c:40:f8:69:3d:a6: 87:5b:1b:ec:bd:f0:96:a6:47:21:2c:96:83:2d:02: 5c:5c:cf:1d:46:89:90:2f:62:80:b9:d9:8a:9c:20: db:8c:3e:27:20:47:8a:79:c1:4b:09:be:6e:6e:97: 4a:0a:ef:1b:da:80:65:3b:a2:f1:70:8b:38:35:41: 17:4e:ce:ec:aa:44:e4:4e:d7:30:7b:9f:8b:63:f7: 62:50:c2:f5:cd:83:33:d2:4e:0e:1f:61:2b:c2:91: 67:2d:f5:7c:0d:68:97:79:81:bf:92:5c:81:6c:b3: 17:d8:96:04:5e:78:99:64:3b:0e:de:ea:76:07:e8: 64:c8:33:ec:23:23:47:44:01:66:04:92:83:99:17: 79:2e:5c:d4:be:3d:ff:52:e0:85:66:5f:67:28:b0: 9b:b6:e3:d0:01:2f:31:6f:d7:2a:41:88:a1:b0:73: 10:60:e7:88:4f:62:ea:9b:08:89:7b:44:43:17:34: f7:36:6c:12:dc:f9:5c:98:27:64:da:89:b9:2d:a2: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:0E:67:3F:A4:97:8F:E8:67:C1:45:EE:1F:5C:9B:E9:F7:8F:7C X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:72:ce:c3:5d:1a:6e:50:2c:cd:a5:4b:bd:16:04:57:01: 54:0b:15:fd:78:50:30:0b:d0:db:7c:cc:5e:88:d0:6d:10:ab: cc:6e:1a:1f:51:d4:ea:fa:2f:dc:ee:0e:75:ce:ae:4a:d4:d6: 63:40:6e:61:cc:c6:98:59:71:94:11:70:b7:57:a0:08:01:b7: fd:ba:c9:68:f3:9c:b8:c4:e5:45:0c:13:fc:85:bb:81:a0:ba: c2:13:ca:40:a1:ca:86:69:73:1b:fb:89:84:d6:34:9d:0b:02: 33:23:1b:5a:7d:66:c2:18:45:5c:38:e3:96:36:b6:ae:2c:2e: 56:4e:ed:93:e2:5d:16:92:37:41:dd:b1:45:c8:8a:35:0d:ee: a1:20:05:34:00:20:80:ca:dc:55:05:97:7e:44:a3:eb:b7:af: b4:16:8d:ed:e3:61:1e:b0:a2:5e:cc:15:3e:9a:5e:08:12:a2: 88:9a:ab:cc:52:f9:cd:f7:52:b0:95:35:df:0d:f5:32:61:7c: 49:e4:e8:ee:76:58:8d:f5:72:4a:04:f9:bd:29:43:a9:86:3c: 39:e5:a3:d7:34:34:8c:9f:6c:44:b0:b5:b0:df:ae:e2:36:93: 74:28:bf:3b:96:82:53:87:b4:89:8e:6b:66:12:52:78:3e:09: eb:47:6b:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFRjxCrw0A/6BxrI4znfjeD/ORgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA5MDQxMjI1MDVaFw0yNTA5MDcxODQyMDVaMDMxMTAvBgNV BAMTKDhCMDQwRTY3M0ZBNDk3OEZFODY3QzE0NUVFMUY1QzlCRTlGNzhGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpL9loZIGBauiUKzp4yQsstDeC 6CxXg/rXKDm1txVkt6VGqsfb/Ec23UVlieftsASk4tfkLRxA+Gk9podbG+y98Jam RyEsloMtAlxczx1GiZAvYoC52YqcINuMPicgR4p5wUsJvm5ul0oK7xvagGU7ovFw izg1QRdOzuyqRORO1zB7n4tj92JQwvXNgzPSTg4fYSvCkWct9XwNaJd5gb+SXIFs sxfYlgReeJlkOw7e6nYH6GTIM+wjI0dEAWYEkoOZF3kuXNS+Pf9S4IVmX2cosJu2 49ABLzFv1ypBiKGwcxBg54hPYuqbCIl7REMXNPc2bBLc+VyYJ2TaibktoldLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwQOZz+kl4/oZ8FF7h9cm+n3j3wwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5Fcs7DXRpuUCzNpUu9FgRXAVQLFf14UDAL 0Nt8zF6I0G0Qq8xuGh9R1Or6L9zuDnXOrkrU1mNAbmHMxphZcZQRcLdXoAgBt/26 yWjznLjE5UUME/yFu4GgusITykChyoZpcxv7iYTWNJ0LAjMjG1p9ZsIYRVw445Y2 tq4sLlZO7ZPiXRaSN0HdsUXIijUN7qEgBTQAIIDK3FUFl35Eo+u3r7QWje3jYR6w ol7MFT6aXggSooiaq8xS+c33UrCVNd8N9TJhfEnk6O52WI31ckoE+b0pQ6mGPDnl o9c0NIyfbESwtbDfruI2k3QovzuWglOHtImOa2YSUng+CetHa9g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:34 2025 by rpki-client