$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: cr6KfAyMtjuqbo0Sp1y1jT/wuLOlUUXxmxjBr9A9ZS8= Subject key identifier: 01:FC:9B:81:3E:5E:91:A7:26:7C:DE:06:78:46:6E:19:EA:06:99:97 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 4B534F108ECDC4B3CF23E5DF42561A0FC2E1BE39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: B1 Signing time: Mon 08 Sep 2025 02:41:07 +0000 Manifest this update: Mon 08 Sep 2025 02:36:07 +0000 Manifest next update: Thu 11 Sep 2025 10:27:07 +0000 Files and hashes: 1: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: bsGD/xDbhvtqLYGaLe9Yvf143zwOFX/12EKCLScoOO4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:53:4f:10:8e:cd:c4:b3:cf:23:e5:df:42:56:1a:0f:c2:e1:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Sep 8 02:36:07 2025 GMT Not After : Sep 11 10:27:07 2025 GMT Subject: CN=01FC9B813E5E91A7267CDE0678466E19EA069997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:ff:c4:9a:45:6a:78:ba:3a:2a:52:08:94: 3a:a9:b4:d3:57:65:87:98:60:ed:e3:0b:57:33:57: 56:f9:a2:6e:51:54:96:d5:7a:fe:8f:45:68:d6:48: fd:e7:b6:6c:dd:88:5a:10:80:bb:f7:c6:e7:21:cc: d4:e1:f8:97:28:30:fa:9f:15:c4:b1:ec:e5:6a:0e: 35:4a:b7:ac:8e:60:ff:d4:74:c3:ed:43:b2:29:ad: f5:22:23:68:26:18:c0:39:d4:4e:70:a8:5e:11:fb: 9b:d7:e5:ec:d5:f5:3d:9e:d7:40:da:ed:fd:2a:98: 49:1e:f5:ae:6d:3c:6a:dc:54:b0:bb:86:a6:67:f0: b2:09:23:f8:1b:3a:72:a5:c9:0a:fa:c8:10:aa:73: c0:d4:b0:2f:7e:de:6d:1d:1a:f4:7a:f9:fa:37:66: dc:e2:50:78:4c:0f:1e:19:e7:f7:0a:c7:21:94:c6: 80:45:a6:7f:3b:ac:b5:4b:13:4b:31:8e:5a:12:ea: a3:7d:7b:d3:eb:d4:3e:db:b3:83:5c:da:00:69:52: a3:56:b5:18:dd:ee:b4:1f:73:17:8d:a0:a3:d8:61: a4:c4:ae:93:78:97:c3:e0:00:18:07:c8:c9:cf:7b: db:67:ee:ce:e1:58:df:02:e5:04:c0:9d:53:b4:84: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:9B:81:3E:5E:91:A7:26:7C:DE:06:78:46:6E:19:EA:06:99:97 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e0:eb:5d:3d:24:76:b0:46:81:9a:c2:a0:14:71:73:e7:4b: 9c:4b:23:46:55:40:e5:1c:49:0f:f0:ba:a9:4f:a0:b4:c3:37: fa:dc:34:1e:32:18:c0:63:bd:cf:02:a7:a9:dd:8e:81:4b:d8: 56:32:cc:32:41:50:83:e1:f7:2c:91:81:fe:e6:6f:67:b6:7d: 58:6a:bf:fa:71:2c:84:ca:6d:4b:93:0d:d9:06:02:ff:95:a2: cc:88:b6:51:bd:6e:cf:03:87:61:08:e9:04:d0:59:26:46:0c: 76:4b:b2:bc:89:d5:a2:54:a6:21:e9:c6:1b:d0:7b:8c:f1:bf: 8f:8a:de:6a:fd:d4:1c:c8:93:7d:5b:21:57:89:86:26:e7:db: 0b:03:37:28:89:b2:fa:68:ff:f3:df:7a:83:39:61:f1:39:b5: ce:6e:3a:f0:c8:72:32:29:4e:f1:51:d3:de:ee:d1:36:cc:14: 5f:d4:59:a0:20:71:62:95:ca:8d:6a:7d:81:f2:97:67:00:90: 16:41:cb:cc:d3:c3:70:02:85:59:30:32:34:91:a9:e4:4b:95: 60:95:1f:b4:31:b2:15:6b:42:a9:cf:9f:a5:d8:b7:ab:80:27: 24:83:18:54:8c:2b:c1:5e:60:2e:08:ba:b2:08:da:60:f6:ee: a5:de:6d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1NPEI7NxLPPI+XfQlYaD8LhvjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA5MDgwMjM2MDdaFw0yNTA5MTExMDI3MDdaMDMxMTAvBgNV BAMTKDAxRkM5QjgxM0U1RTkxQTcyNjdDREUwNjc4NDY2RTE5RUEwNjk5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvP/EmkVqeLo6KlIIlDqptNNX ZYeYYO3jC1czV1b5om5RVJbVev6PRWjWSP3ntmzdiFoQgLv3xuchzNTh+JcoMPqf FcSx7OVqDjVKt6yOYP/UdMPtQ7IprfUiI2gmGMA51E5wqF4R+5vX5ezV9T2e10Da 7f0qmEke9a5tPGrcVLC7hqZn8LIJI/gbOnKlyQr6yBCqc8DUsC9+3m0dGvR6+fo3 ZtziUHhMDx4Z5/cKxyGUxoBFpn87rLVLE0sxjloS6qN9e9Pr1D7bs4Nc2gBpUqNW tRjd7rQfcxeNoKPYYaTErpN4l8PgABgHyMnPe9tn7s7hWN8C5QTAnVO0hIVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfybgT5ekacmfN4GeEZuGeoGmZcwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrg6109JHawRoGawqAUcXPnS5xLI0ZVQOUc SQ/wuqlPoLTDN/rcNB4yGMBjvc8Cp6ndjoFL2FYyzDJBUIPh9yyRgf7mb2e2fVhq v/pxLITKbUuTDdkGAv+VosyItlG9bs8Dh2EI6QTQWSZGDHZLsryJ1aJUpiHpxhvQ e4zxv4+K3mr91BzIk31bIVeJhibn2wsDNyiJsvpo//PfeoM5YfE5tc5uOvDIcjIp TvFR097u0TbMFF/UWaAgcWKVyo1qfYHyl2cAkBZBy8zTw3AChVkwMjSRqeRLlWCV H7QxshVrQqnPn6XYt6uAJySDGFSMK8FeYC4IurII2mD27qXebUA= -----END CERTIFICATE-----Generated at Mon Sep 8 05:06:20 2025 by rpki-client