$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: fnJDm+IELVdEwQwTVuN4huFuaOQ6OykWfhGOWFsyX6Q= Subject key identifier: 94:F2:88:2D:D3:33:9B:BD:91:7C:3E:8E:78:4C:F6:8D:9E:19:20:CA Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 29B94D9D3D42B8F5151B8C3F01BA13E003366E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: D1 Signing time: Sat 06 Sep 2025 02:30:35 +0000 Manifest this update: Sat 06 Sep 2025 02:25:35 +0000 Manifest next update: Tue 09 Sep 2025 10:11:35 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 3: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: 5mLYG+1ATe9S5BwlU5P8GFwrREQqWixMrwONLZBJOXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:4d:9d:3d:42:b8:f5:15:1b:8c:3f:01:ba:13:e0:03:36:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Sep 6 02:25:35 2025 GMT Not After : Sep 9 10:11:35 2025 GMT Subject: CN=94F2882DD3339BBD917C3E8E784CF68D9E1920CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:f8:f0:8a:bc:99:b8:36:a5:a7:be:af:db: 69:3e:39:02:fa:6f:7d:13:15:30:36:b2:52:9d:85: ef:3b:0f:4e:f3:e8:f9:7f:8f:36:70:a5:b1:71:b8: 89:1b:59:6d:80:5b:97:1e:ef:13:42:01:c2:59:5e: 82:ed:97:bd:10:03:c8:02:66:cb:59:3e:b8:64:52: 0b:24:ca:81:2e:b9:b9:8b:1d:b2:43:27:b6:0e:23: d7:2f:7c:89:df:66:34:bf:3a:8d:e5:ce:be:f9:d8: d3:e0:09:b0:a5:fc:42:9d:2a:36:27:6c:a2:3b:77: bf:57:56:40:ca:40:c6:17:e8:07:19:a4:95:c1:13: 63:9c:79:55:27:32:34:49:b6:00:14:19:00:c8:90: 5d:fa:a0:49:06:8d:71:fc:1a:3a:e9:5f:3d:f1:bc: d0:b4:3b:82:71:64:5e:10:96:32:8d:24:01:2c:fb: bf:ce:1e:6f:27:a0:23:5c:e7:ad:77:25:ad:b8:ab: 9f:27:83:2d:6b:73:b0:3f:b4:9f:ec:11:a7:ec:2f: 1d:f9:bc:d3:f9:54:c1:46:65:e2:ee:d2:78:40:bc: f1:81:f6:6f:36:c7:eb:30:5a:03:fa:24:a0:f3:d5: 94:8f:21:a0:77:b9:f3:e6:e1:8c:d8:2f:1a:eb:dc: 5e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:88:2D:D3:33:9B:BD:91:7C:3E:8E:78:4C:F6:8D:9E:19:20:CA X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:97:79:ee:40:f2:25:28:d0:53:de:4a:24:5f:e4:a4:47:6f: 52:e5:8d:35:cf:6c:65:33:b4:80:fb:88:64:06:61:d4:71:3d: e4:3f:73:05:83:69:b3:fd:0a:79:fd:70:0c:ce:73:21:a3:11: 52:fa:c2:7a:38:3a:18:5d:30:03:26:f0:10:d2:60:90:06:40: 53:a8:44:72:4c:1b:2a:a8:b6:08:b8:17:a7:65:78:08:64:66: 1d:fc:0d:74:94:d7:02:ec:e3:99:5b:ce:b4:f3:7b:3e:d9:79: 76:45:fa:a8:e7:5f:03:3f:70:59:5f:67:44:cf:18:e5:6c:15: 48:6c:97:b7:12:ad:b4:c1:3f:39:73:e9:89:1d:10:30:d4:79: d0:4f:4a:59:bf:3c:45:87:8a:c2:20:3f:87:fb:fc:e0:21:ea: ac:04:50:d9:26:3e:39:c9:a0:8b:96:38:79:09:cd:47:6c:94: 5d:1a:d2:77:c4:fb:4d:6e:24:76:0d:ef:b5:da:e0:cf:e8:8e: 65:d7:9f:9f:ca:d4:2c:40:4e:3f:20:9e:96:a8:b4:57:89:a6: af:a4:00:a4:68:e7:f8:9d:f6:81:8a:0f:37:7b:16:40:62:ad: 68:90:c3:29:21:67:c4:ef:3d:27:1f:85:00:b5:59:d0:74:8b: e0:65:77:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKblNnT1CuPUVG4w/AboT4AM2bgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTA5MDYwMjI1MzVaFw0yNTA5MDkxMDExMzVaMDMxMTAvBgNV BAMTKDk0RjI4ODJERDMzMzlCQkQ5MTdDM0U4RTc4NENGNjhEOUUxOTIwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhPjwiryZuDalp76v22k+OQL6 b30TFTA2slKdhe87D07z6Pl/jzZwpbFxuIkbWW2AW5ce7xNCAcJZXoLtl70QA8gC ZstZPrhkUgskyoEuubmLHbJDJ7YOI9cvfInfZjS/Oo3lzr752NPgCbCl/EKdKjYn bKI7d79XVkDKQMYX6AcZpJXBE2OceVUnMjRJtgAUGQDIkF36oEkGjXH8GjrpXz3x vNC0O4JxZF4QljKNJAEs+7/OHm8noCNc5613Ja24q58ngy1rc7A/tJ/sEafsLx35 vNP5VMFGZeLu0nhAvPGB9m82x+swWgP6JKDz1ZSPIaB3ufPm4YzYLxrr3F6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPKILdMzm72RfD6OeEz2jZ4ZIMowHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKXee5A8iUo0FPeSiRf5KRHb1LljTXPbGUz tID7iGQGYdRxPeQ/cwWDabP9Cnn9cAzOcyGjEVL6wno4OhhdMAMm8BDSYJAGQFOo RHJMGyqotgi4F6dleAhkZh38DXSU1wLs45lbzrTzez7ZeXZF+qjnXwM/cFlfZ0TP GOVsFUhsl7cSrbTBPzlz6YkdEDDUedBPSlm/PEWHisIgP4f7/OAh6qwEUNkmPjnJ oIuWOHkJzUdslF0a0nfE+01uJHYN77Xa4M/ojmXXn5/K1CxATj8gnpaotFeJpq+k AKRo5/id9oGKDzd7FkBirWiQwykhZ8TvPScfhQC1WdB0i+Bld24= -----END CERTIFICATE-----Generated at Mon Sep 8 05:08:56 2025 by rpki-client