$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: WGwzwiZn+4k/h0TSDdwD/rl3Vg3FeZetzB0bK3O+AGE= Subject key identifier: B8:C2:1D:83:95:C0:10:83:47:AC:9D:7E:38:5D:45:05:42:46:19:09 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 7F2F8418E5D4D1B90A8C87AFEEE5EF93D3627E14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: BE Signing time: Sat 30 Aug 2025 18:50:04 +0000 Manifest this update: Sat 30 Aug 2025 18:45:04 +0000 Manifest next update: Wed 03 Sep 2025 00:11:04 +0000 Files and hashes: 1: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: PqLMK8q7WfH7aNby1pYD254dntgvKPHSaUsM2J7dUvw=) 2: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 3: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2f:84:18:e5:d4:d1:b9:0a:8c:87:af:ee:e5:ef:93:d3:62:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Aug 30 18:45:04 2025 GMT Not After : Sep 3 00:11:04 2025 GMT Subject: CN=B8C21D8395C0108347AC9D7E385D450542461909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:24:f2:df:4f:12:13:24:c5:e9:ff:48:e5: 36:8a:8b:0e:a7:a2:ff:b1:78:66:f7:ec:5e:bb:c2: 7e:4c:68:b4:92:50:40:78:72:91:c5:00:ba:b0:7f: f5:ab:94:bc:a4:2e:c2:67:d4:02:86:6b:57:2c:e2: f1:b8:13:55:82:f0:db:a3:e1:84:8d:a1:e5:4e:df: 24:73:40:12:16:15:e0:3d:6e:5f:33:13:b4:17:d9: 1d:db:8f:2c:95:c1:90:c9:78:fc:0a:9b:3a:19:15: 5a:2a:55:fa:82:d3:14:fc:0e:6d:c8:a8:51:d4:df: c5:a9:70:4e:13:d4:c4:7c:6c:6b:23:00:27:f1:0e: 48:53:d4:03:98:3b:74:57:29:f2:9c:23:3e:23:2f: 24:ca:50:cd:02:9c:75:b4:f9:77:2a:a8:85:dc:b6: e8:6f:4e:d0:2c:d1:bd:fe:0d:d0:51:05:06:df:a5: 26:85:24:1d:d6:63:ce:64:0d:e7:e4:67:22:9f:c5: cd:b2:00:a7:15:00:fa:70:0f:f9:8e:7a:6e:6e:26: e9:7c:70:98:e8:42:3f:dd:8f:20:1b:3a:a6:75:23: bd:6b:79:6c:b7:b7:0e:23:f7:fd:84:49:56:db:ab: 48:01:69:0c:65:15:94:7d:86:83:0e:bd:e2:f1:e8: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C2:1D:83:95:C0:10:83:47:AC:9D:7E:38:5D:45:05:42:46:19:09 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bf:21:c6:ba:f5:27:3d:2b:f9:25:86:4c:91:48:bd:6f:27: bb:6d:e8:4f:05:ac:34:44:63:0e:a1:8a:ff:c9:23:f0:cd:4a: e1:c9:5f:b1:69:61:22:34:10:62:52:de:36:64:04:72:af:2f: 10:79:e4:17:e3:95:9f:90:d0:3f:b4:1c:d8:cf:8d:df:fb:a2: 61:22:82:b2:24:00:22:34:67:85:12:0b:16:b7:9c:1a:12:b9: f8:78:d4:d4:e7:87:a2:dd:4c:42:b3:ab:3c:d5:88:50:79:82: bd:90:5c:7e:c8:95:8f:ae:21:9c:ca:e4:41:f2:7e:0d:ab:18: 05:10:57:8e:3b:c9:6a:4e:03:22:79:a3:bb:24:27:fb:99:76: 9c:dc:41:86:e1:0d:c2:2e:7c:c6:98:78:de:9a:89:1c:ff:4f: 18:a3:3c:f0:4d:e2:8c:a6:9c:cd:41:c5:58:a7:df:ed:a9:71: 10:2d:aa:55:af:ca:c8:31:65:51:7c:71:81:62:d5:a3:59:bd: 9d:be:06:15:87:4f:2c:e7:db:cd:b2:2e:3e:6d:95:70:6b:44: a2:b4:7a:30:fb:70:3f:d8:6f:93:a2:11:14:85:7c:86:3a:5c: dc:b6:5d:f5:be:ba:1a:db:be:87:8a:4e:ce:03:a9:e4:6f:23: d5:33:69:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfy+EGOXU0bkKjIev7uXvk9NifhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTA4MzAxODQ1MDRaFw0yNTA5MDMwMDExMDRaMDMxMTAvBgNV BAMTKEI4QzIxRDgzOTVDMDEwODM0N0FDOUQ3RTM4NUQ0NTA1NDI0NjE5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxiTy308SEyTF6f9I5TaKiw6n ov+xeGb37F67wn5MaLSSUEB4cpHFALqwf/WrlLykLsJn1AKGa1cs4vG4E1WC8Nuj 4YSNoeVO3yRzQBIWFeA9bl8zE7QX2R3bjyyVwZDJePwKmzoZFVoqVfqC0xT8Dm3I qFHU38WpcE4T1MR8bGsjACfxDkhT1AOYO3RXKfKcIz4jLyTKUM0CnHW0+XcqqIXc tuhvTtAs0b3+DdBRBQbfpSaFJB3WY85kDefkZyKfxc2yAKcVAPpwD/mOem5uJul8 cJjoQj/djyAbOqZ1I71reWy3tw4j9/2ESVbbq0gBaQxlFZR9hoMOveLx6BmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMIdg5XAEINHrJ1+OF1FBUJGGQkwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu/Ica69Sc9K/klhkyRSL1vJ7tt6E8FrDRE Yw6hiv/JI/DNSuHJX7FpYSI0EGJS3jZkBHKvLxB55BfjlZ+Q0D+0HNjPjd/7omEi grIkACI0Z4USCxa3nBoSufh41NTnh6LdTEKzqzzViFB5gr2QXH7IlY+uIZzK5EHy fg2rGAUQV447yWpOAyJ5o7skJ/uZdpzcQYbhDcIufMaYeN6aiRz/TxijPPBN4oym nM1BxVin3+2pcRAtqlWvysgxZVF8cYFi1aNZvZ2+BhWHTyzn282yLj5tlXBrRKK0 ejD7cD/Yb5OiERSFfIY6XNy2XfW+uhrbvoeKTs4DqeRvI9UzaSI= -----END CERTIFICATE-----Generated at Sun Aug 31 13:44:09 2025 by rpki-client