$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: ipprBOH1+xUJ7qUMpG0/zoG/RnOBo+ppik39sz/Gwl8= Subject key identifier: 34:B1:94:E8:46:CB:BF:3C:0A:EC:2C:77:6C:D1:DA:06:2C:ED:DA:77 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 0FFF5ADA9D1F6F2906BF073D79054A984D2E99D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0209 Signing time: Sat 06 Sep 2025 14:31:03 +0000 Manifest this update: Sat 06 Sep 2025 14:26:03 +0000 Manifest next update: Wed 10 Sep 2025 00:13:03 +0000 Files and hashes: 1: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 2: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 3: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 4: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 5: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 6: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 7: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 8: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 9: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 10: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: dSldJDlsDYYH15F1jthMGJk/7fqg7nVZg6ReE/24p74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ff:5a:da:9d:1f:6f:29:06:bf:07:3d:79:05:4a:98:4d:2e:99:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Sep 6 14:26:03 2025 GMT Not After : Sep 10 00:13:03 2025 GMT Subject: CN=34B194E846CBBF3C0AEC2C776CD1DA062CEDDA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:1e:b1:4a:28:2e:33:0e:e9:76:1f:9d:9b: 97:21:b4:be:14:c8:76:a2:d7:c7:0e:72:6a:3a:3c: 1c:24:7c:70:fa:c6:36:9b:34:ee:3e:81:63:a0:c2: 2e:50:cb:16:8b:4a:44:36:61:b9:b9:54:d9:0d:f3: 1b:97:e5:61:4a:51:df:fc:03:d4:4b:8d:91:55:5d: e8:71:aa:f6:f1:7d:66:96:a6:53:41:f6:fa:b5:86: 36:82:df:c7:ec:ca:f3:de:cd:d2:66:d7:e7:5f:a5: 27:2a:88:ad:71:a1:13:b8:34:27:2c:30:31:74:05: 1e:7e:32:a1:ca:04:57:c2:61:52:15:0a:23:45:9f: 00:ab:b8:36:2a:22:51:ed:24:57:55:bb:94:25:1f: 39:6e:b1:4c:bf:68:99:21:b4:5b:87:43:f2:b0:fe: 23:4f:d7:5b:d3:29:ee:3c:9d:df:a6:54:95:14:30: 4b:a6:92:4b:81:e0:66:b0:4a:26:06:6d:17:bb:44: b9:eb:23:f1:34:bd:50:a8:8a:60:14:d1:d3:6f:75: e5:2e:19:d7:c8:7c:68:3d:1c:98:4f:83:45:0d:ed: 0e:3d:27:fa:13:27:b1:cf:f7:c2:7e:85:7e:c7:3f: b3:38:1d:d0:04:6e:b3:47:54:ce:90:05:a8:25:d9: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B1:94:E8:46:CB:BF:3C:0A:EC:2C:77:6C:D1:DA:06:2C:ED:DA:77 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1f:fb:7e:a4:6b:e3:ef:0f:6d:79:ea:cd:5a:44:8b:8d:dd: 5f:8f:ab:62:a4:8a:2c:c0:39:99:4d:92:81:ba:a6:b4:a3:d1: e4:9e:60:b1:f5:ac:2d:2a:53:0a:3b:8c:c6:b3:f8:a7:44:66: b4:e3:c1:25:6e:9a:f9:82:b3:cd:22:5f:12:80:c1:2d:2d:85: 16:d3:e5:06:31:c7:45:12:86:e3:09:96:6b:93:ba:09:ab:ef: 11:20:2f:4b:53:d4:94:27:bb:bc:dc:1d:9e:e1:27:32:fb:70: 90:74:b9:0f:0b:84:fd:05:e3:b1:b6:9c:da:4f:94:52:e9:45: af:ac:f6:30:cb:ed:38:39:2c:b1:5e:bf:d3:a6:11:30:92:c2: cc:0a:72:08:e5:7e:a0:13:eb:c7:e3:4f:13:5c:6f:3d:30:7f: c7:ff:75:1c:7b:7f:40:5a:1e:72:0a:8c:31:2c:3a:8e:40:f9: bc:43:57:73:4d:a8:c8:c5:76:d1:35:b3:e5:cf:a4:20:71:d8: dc:aa:97:71:fb:91:bb:b8:0b:13:04:28:e2:54:c5:e2:eb:7a: a5:bf:23:e7:7a:68:ca:c1:4e:b1:b5:3a:41:58:71:c9:73:5a: 01:41:56:61:3d:8c:a7:9a:78:b9:9e:89:4a:ff:45:f1:01:f3: c4:c2:8f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/9a2p0fbykGvwc9eQVKmE0umdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA5MDYxNDI2MDNaFw0yNTA5MTAwMDEzMDNaMDMxMTAvBgNV BAMTKDM0QjE5NEU4NDZDQkJGM0MwQUVDMkM3NzZDRDFEQTA2MkNFRERBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1B6xSiguMw7pdh+dm5chtL4U yHai18cOcmo6PBwkfHD6xjabNO4+gWOgwi5QyxaLSkQ2Ybm5VNkN8xuX5WFKUd/8 A9RLjZFVXehxqvbxfWaWplNB9vq1hjaC38fsyvPezdJm1+dfpScqiK1xoRO4NCcs MDF0BR5+MqHKBFfCYVIVCiNFnwCruDYqIlHtJFdVu5QlHzlusUy/aJkhtFuHQ/Kw /iNP11vTKe48nd+mVJUUMEumkkuB4GawSiYGbRe7RLnrI/E0vVCoimAU0dNvdeUu GdfIfGg9HJhPg0UN7Q49J/oTJ7HP98J+hX7HP7M4HdAEbrNHVM6QBagl2b5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLGU6EbLvzwK7Cx3bNHaBizt2ncwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcf+36ka+PvD2156s1aRIuN3V+Pq2KkiizA OZlNkoG6prSj0eSeYLH1rC0qUwo7jMaz+KdEZrTjwSVumvmCs80iXxKAwS0thRbT 5QYxx0UShuMJlmuTugmr7xEgL0tT1JQnu7zcHZ7hJzL7cJB0uQ8LhP0F47G2nNpP lFLpRa+s9jDL7Tg5LLFev9OmETCSwswKcgjlfqAT68fjTxNcbz0wf8f/dRx7f0Ba HnIKjDEsOo5A+bxDV3NNqMjFdtE1s+XPpCBx2Nyql3H7kbu4CxMEKOJUxeLreqW/ I+d6aMrBTrG1OkFYcclzWgFBVmE9jKeaeLmeiUr/RfEB88TCj9E= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client