$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: lW5dAXTOFGL4ysxGGVseK5yBD0a2uy1icBZACs+HLfI= Subject key identifier: FF:0D:A5:53:92:AF:8B:62:CE:91:D9:2B:69:2E:C9:F8:D9:87:26:A5 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 50C68AE6C35AC1668163BDD36D6B70F59AB6A6F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 9B Signing time: Sun 20 Jul 2025 09:31:06 +0000 Manifest this update: Sun 20 Jul 2025 09:26:06 +0000 Manifest next update: Wed 23 Jul 2025 16:27:06 +0000 Files and hashes: 1: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 3: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: yN6LQCD/E7jpsgrxFBpMmcUXT6ra2Cr+0Zd2Ph087YI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c6:8a:e6:c3:5a:c1:66:81:63:bd:d3:6d:6b:70:f5:9a:b6:a6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Jul 20 09:26:06 2025 GMT Not After : Jul 23 16:27:06 2025 GMT Subject: CN=FF0DA55392AF8B62CE91D92B692EC9F8D98726A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:4a:79:e6:e0:07:59:74:3e:61:f2:4b:95: 52:a3:35:b2:79:2d:fb:df:e5:6c:69:71:f1:2c:4f: 31:d1:92:45:08:67:b3:1c:d1:79:7c:93:2f:4e:07: 63:06:2b:dd:2c:a6:b7:61:c3:e7:4a:e4:0f:ad:53: d3:73:a3:35:66:dd:9a:e0:8d:09:93:4c:a6:90:a6: a1:ac:db:eb:bc:d1:1f:6e:b8:97:dd:18:1d:ab:44: bc:36:45:ad:2e:bb:14:d9:97:fd:7e:e2:0e:77:fb: b2:38:de:e7:bf:db:30:4b:36:f0:6c:c6:54:77:9d: 9a:46:05:0a:91:23:0e:c0:c6:62:da:50:3e:12:80: cf:f4:5e:09:81:9d:26:e1:82:f2:d1:c2:21:24:0d: b2:fd:62:d3:94:2b:ef:a1:4f:85:0b:16:f9:c8:ac: 44:ce:a2:8f:74:73:e5:77:fb:7c:64:57:a7:84:b0: 48:b7:83:07:01:82:18:5d:51:5f:3b:20:92:b7:1f: 2b:2c:37:a5:c7:1b:0e:54:f3:df:ba:0b:e2:1d:0b: 58:35:22:d2:d9:b4:a2:3a:df:ca:8d:2c:b0:06:22: 2e:d2:65:7c:71:4b:10:d5:3f:96:70:ce:f8:1d:ae: aa:a4:a2:16:24:26:fc:a3:a4:d2:b2:4b:0d:cd:24: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0D:A5:53:92:AF:8B:62:CE:91:D9:2B:69:2E:C9:F8:D9:87:26:A5 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:90:f7:91:00:17:4d:8b:65:4d:bd:3c:80:fc:11:00:ca:c4: 9a:20:6a:b3:b0:16:d9:0c:32:d3:79:8e:2b:55:dc:22:75:3e: 7d:8f:52:4a:9a:53:e7:ed:4d:f2:94:a4:0c:ff:27:6e:15:b5: df:14:63:56:49:cc:85:67:59:cb:4d:20:11:cc:05:4a:15:62: 38:97:0e:54:e3:03:6b:d5:86:35:8d:f6:4b:e6:31:69:4d:a9: c5:12:80:03:3a:d5:0b:6b:70:7e:8e:48:f1:a6:ff:e9:70:af: ec:53:27:d3:63:d7:6f:ac:8f:62:4a:9b:92:b2:0d:db:98:c3: ea:11:e3:87:a6:60:5a:77:e7:1a:a8:b6:10:be:8e:f7:23:f0: 8e:e9:01:36:6a:5a:39:f2:de:2a:fe:c2:a1:d5:90:7a:a8:60: b3:8e:bf:a2:65:b2:ae:84:35:98:95:fb:cf:ce:66:2f:61:bd: 34:36:29:9d:c7:68:fe:55:aa:a0:0e:4c:c7:b6:a5:1e:e3:be: 3d:b6:40:09:1f:37:2b:39:67:29:59:0a:76:be:11:bc:d1:2d: 42:82:54:9a:e2:96:78:c3:ac:c6:67:e9:17:e0:c4:0e:48:21: de:2b:1c:ca:10:b9:4c:13:40:45:22:b1:6d:49:05:c2:93:21: 96:d9:40:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMaK5sNawWaBY73TbWtw9Zq2pvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA3MjAwOTI2MDZaFw0yNTA3MjMxNjI3MDZaMDMxMTAvBgNV BAMTKEZGMERBNTUzOTJBRjhCNjJDRTkxRDkyQjY5MkVDOUY4RDk4NzI2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDk0p55uAHWXQ+YfJLlVKjNbJ5 Lfvf5WxpcfEsTzHRkkUIZ7Mc0Xl8ky9OB2MGK90sprdhw+dK5A+tU9NzozVm3Zrg jQmTTKaQpqGs2+u80R9uuJfdGB2rRLw2Ra0uuxTZl/1+4g53+7I43ue/2zBLNvBs xlR3nZpGBQqRIw7AxmLaUD4SgM/0XgmBnSbhgvLRwiEkDbL9YtOUK++hT4ULFvnI rETOoo90c+V3+3xkV6eEsEi3gwcBghhdUV87IJK3HyssN6XHGw5U89+6C+IdC1g1 ItLZtKI638qNLLAGIi7SZXxxSxDVP5ZwzvgdrqqkohYkJvyjpNKySw3NJCbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/w2lU5Kvi2LOkdkraS7J+NmHJqUwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Q95EAF02LZU29PID8EQDKxJogarOwFtkM MtN5jitV3CJ1Pn2PUkqaU+ftTfKUpAz/J24Vtd8UY1ZJzIVnWctNIBHMBUoVYjiX DlTjA2vVhjWN9kvmMWlNqcUSgAM61QtrcH6OSPGm/+lwr+xTJ9Nj12+sj2JKm5Ky DduYw+oR44emYFp35xqothC+jvcj8I7pATZqWjny3ir+wqHVkHqoYLOOv6Jlsq6E NZiV+8/OZi9hvTQ2KZ3HaP5VqqAOTMe2pR7jvj22QAkfNys5ZylZCna+EbzRLUKC VJrilnjDrMZn6RfgxA5IId4rHMoQuUwTQEUisW1JBcKTIZbZQNk= -----END CERTIFICATE-----Generated at Tue Jul 22 00:28:58 2025 by rpki-client