$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: lC/0bEe74Mqfhc9EevzM4the3mX0vtL4bIOOtU84BNE= Subject key identifier: 09:9C:FE:F0:80:6C:A5:AF:23:D4:D6:11:11:D0:14:8D:95:17:D5:02 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 108CCEC3AD387D42BC6ECB9198FCEF4A67690539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 037B Signing time: Sun 07 Sep 2025 03:51:57 +0000 Manifest this update: Sun 07 Sep 2025 03:46:57 +0000 Manifest next update: Wed 10 Sep 2025 12:02:57 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: gPzV57SHZcnCxcJdIdjWafmljB9Dh2zK/JZhi3M4RYo=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8c:ce:c3:ad:38:7d:42:bc:6e:cb:91:98:fc:ef:4a:67:69:05:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Sep 7 03:46:57 2025 GMT Not After : Sep 10 12:02:57 2025 GMT Subject: CN=099CFEF0806CA5AF23D4D61111D0148D9517D502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:fb:23:45:3a:fd:a0:a0:39:33:01:31:c2: ca:a6:8e:53:11:b5:bf:ac:d7:a1:18:3c:3e:ba:8b: fa:b5:f1:3c:d1:dd:45:91:c6:0a:03:3e:d0:83:7c: 9c:56:06:07:ca:cc:b8:4c:b8:b2:34:23:b6:4e:dd: ae:62:5f:f0:60:d2:1f:f9:64:48:3c:07:86:a8:e7: 5f:74:b9:fa:a1:35:d9:f3:d6:e3:1a:97:f1:e4:41: e2:02:2d:5f:1f:3e:a5:2f:00:35:f2:3a:e9:c0:f2: fc:25:8f:a8:d6:57:a6:f5:11:d8:7f:43:3f:c5:bc: 0b:a5:c8:b5:98:d3:c1:10:4a:8e:0d:fa:e8:ad:73: d0:60:b7:cc:85:91:27:03:06:ee:7e:70:5f:47:a3: 51:f5:ea:62:b9:91:4a:b5:2d:1e:05:b2:60:8b:6b: 84:48:d9:7c:e1:dd:1f:48:01:ad:89:da:05:cb:69: c4:9c:b0:66:34:40:f3:6e:7b:89:26:00:99:87:37: a0:72:ed:a6:a1:30:90:a6:91:40:57:c4:44:6e:7d: 1d:2d:94:a9:81:a6:b4:70:2c:19:b3:7f:1b:76:b4: 80:27:e2:3f:e2:0a:2e:69:da:1d:7b:a5:79:13:5e: dc:2d:c6:02:8b:07:56:3b:27:84:ab:87:18:01:0f: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:FE:F0:80:6C:A5:AF:23:D4:D6:11:11:D0:14:8D:95:17:D5:02 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:72:a1:f3:88:71:51:36:53:6d:67:c3:ad:1d:17:da:84:b9: a2:58:d3:69:0f:61:16:69:ad:33:5a:45:be:09:80:d3:ee:4c: 49:85:14:8b:55:8b:b0:52:12:7b:77:fc:d8:c9:0e:2c:54:b0: 2e:92:70:ec:94:4d:22:5d:b5:49:1f:84:39:08:07:48:ad:55: 82:34:47:37:78:5b:0c:51:33:d1:cc:dc:5e:2a:57:4e:11:e3: 71:04:f8:d3:11:f8:16:04:95:bf:5e:f9:a8:95:c5:9b:ed:36: b5:e0:64:ab:80:b8:9f:67:1d:e0:50:78:c5:c5:73:49:ca:75: 44:cf:50:b9:bb:36:de:d7:36:a2:53:e9:a1:eb:22:f9:89:2e: e3:f5:c7:c9:7e:ad:7c:01:c9:62:72:89:87:52:03:07:24:e5: 51:d8:31:d9:e1:6a:8d:cf:a6:eb:88:03:71:ae:2e:99:cb:d2: 04:72:75:94:44:f6:85:2b:cd:75:7a:f9:59:71:52:71:66:af: 6c:9a:16:7a:75:0b:64:ba:34:d7:4a:94:70:6f:bb:fd:45:41: b8:4f:42:09:f7:53:b5:78:18:5a:3f:62:f2:02:3c:84:4d:98: c3:27:ca:de:ea:a9:1e:87:8a:4f:62:6e:5f:42:dd:7e:15:c3: bb:82:89:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIzOw604fUK8bsuRmPzvSmdpBTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA5MDcwMzQ2NTdaFw0yNTA5MTAxMjAyNTdaMDMxMTAvBgNV BAMTKDA5OUNGRUYwODA2Q0E1QUYyM0Q0RDYxMTExRDAxNDhEOTUxN0Q1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39vsjRTr9oKA5MwExwsqmjlMR tb+s16EYPD66i/q18TzR3UWRxgoDPtCDfJxWBgfKzLhMuLI0I7ZO3a5iX/Bg0h/5 ZEg8B4ao5190ufqhNdnz1uMal/HkQeICLV8fPqUvADXyOunA8vwlj6jWV6b1Edh/ Qz/FvAulyLWY08EQSo4N+uitc9Bgt8yFkScDBu5+cF9Ho1H16mK5kUq1LR4FsmCL a4RI2Xzh3R9IAa2J2gXLacScsGY0QPNue4kmAJmHN6By7aahMJCmkUBXxERufR0t lKmBprRwLBmzfxt2tIAn4j/iCi5p2h17pXkTXtwtxgKLB1Y7J4SrhxgBD1oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCZz+8IBspa8j1NYREdAUjZUX1QIwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtyofOIcVE2U21nw60dF9qEuaJY02kPYRZp rTNaRb4JgNPuTEmFFItVi7BSEnt3/NjJDixUsC6ScOyUTSJdtUkfhDkIB0itVYI0 Rzd4WwxRM9HM3F4qV04R43EE+NMR+BYElb9e+aiVxZvtNrXgZKuAuJ9nHeBQeMXF c0nKdUTPULm7Nt7XNqJT6aHrIvmJLuP1x8l+rXwByWJyiYdSAwck5VHYMdnhao3P puuIA3GuLpnL0gRydZRE9oUrzXV6+VlxUnFmr2yaFnp1C2S6NNdKlHBvu/1FQbhP Qgn3U7V4GFo/YvICPIRNmMMnyt7qqR6Hik9ibl9C3X4Vw7uCidY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:52 2025 by rpki-client