$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: EXu3MVBDoNUyFVnwrK16xPBOUMFQPXU3ht9i/1TVdVg= Subject key identifier: B0:E7:D2:5C:18:2A:81:37:9E:78:5A:78:0D:B0:27:E4:BF:18:26:B9 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 3695069A5660E1136B6DED124F8954CDC0DC7507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 0288 Signing time: Wed 03 Sep 2025 06:50:38 +0000 Manifest this update: Wed 03 Sep 2025 06:45:38 +0000 Manifest next update: Sat 06 Sep 2025 15:32:38 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: F6BRLWrb1TexM2fxshljWCcevALtyrOD6D916kqxEWo=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: L7LqVXyoSRg8DgNZpOS04vg4NVwWiWJGcA0KRd2HUBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:95:06:9a:56:60:e1:13:6b:6d:ed:12:4f:89:54:cd:c0:dc:75:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Sep 3 06:45:38 2025 GMT Not After : Sep 6 15:32:38 2025 GMT Subject: CN=B0E7D25C182A81379E785A780DB027E4BF1826B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:8c:8f:35:04:d5:c7:31:0e:b3:89:76:45: 02:fa:eb:83:bc:f6:c4:58:89:68:84:36:51:f2:26: a8:0e:d5:4f:cc:4b:9d:2b:9c:02:85:dc:d0:da:5b: 92:cf:af:e3:c5:70:d8:e9:c7:13:b3:fa:e2:d6:4c: 9b:5e:3f:ae:5e:3b:67:b2:e2:53:96:98:1b:10:b7: 49:d0:0c:dd:b2:6a:3f:6c:a7:b6:fa:a7:dd:90:47: 15:f3:73:34:c9:7a:92:7b:8a:3d:07:51:4f:47:0b: 42:2d:a5:88:fc:e4:7f:12:82:94:60:8e:5f:1d:bb: 59:e7:46:ee:c3:4c:83:30:7a:16:56:b5:a2:c1:6b: 01:94:28:03:e9:d0:7c:c7:e4:6e:8d:8d:99:a3:88: 1a:72:ff:05:59:4b:18:fa:75:7d:66:64:8b:d4:06: c0:23:b5:8f:2e:2f:ea:08:93:f1:e3:f7:e0:07:6a: 3e:a4:35:f4:44:b0:8a:c8:26:7f:dc:56:a2:a7:36: c8:32:71:51:47:8d:24:c9:eb:3b:ef:77:47:c5:93: c0:1b:87:32:ff:be:d8:35:55:39:91:b3:a9:eb:ed: 2c:25:06:3d:87:46:68:99:f3:f4:a0:3e:c8:30:dd: 01:21:45:c8:93:04:de:f3:57:16:e7:40:bf:96:f1: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:D2:5C:18:2A:81:37:9E:78:5A:78:0D:B0:27:E4:BF:18:26:B9 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:aa:58:e7:4d:68:2a:3f:87:b0:02:88:99:65:c3:28:c6: bd:ca:37:aa:cf:b4:26:55:14:15:f8:94:07:7b:50:02:24:c8: 85:b7:46:83:1f:56:17:2a:f2:02:f7:e6:ae:70:2c:18:94:0b: 5d:84:b3:83:28:a9:99:52:72:9c:94:37:32:04:d7:8c:56:0e: aa:14:83:dd:f9:20:86:4a:11:e8:0f:a4:8c:9d:01:32:f3:66: 0e:d7:9e:49:f6:dc:02:8a:c4:cb:b3:8c:cf:05:76:d5:b6:a2: 42:73:b4:02:6d:21:0d:0b:df:96:78:33:82:fd:d3:c6:4e:97: 5d:11:1b:28:96:41:ce:e1:9b:1e:8b:6a:b6:b6:a9:e3:1a:64: 34:f6:08:de:b7:c3:97:a1:8d:b2:ba:28:36:65:b6:be:74:6f: 61:aa:91:32:a6:65:84:94:c5:d2:a0:75:60:ca:2d:93:0e:1c: b5:b6:03:ac:10:bb:bb:db:1a:39:46:45:92:fd:85:87:e0:fe: 38:8f:9e:cb:c9:3c:e3:24:08:2d:fa:51:7d:13:32:3b:e1:c8: 7e:cd:7e:97:09:26:27:3c:80:95:76:6b:90:47:1f:82:d3:4c: b0:58:b1:c1:59:84:21:6d:14:0b:70:1e:27:97:8d:56:6d:50: 93:39:86:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNpUGmlZg4RNrbe0ST4lUzcDcdQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTA5MDMwNjQ1MzhaFw0yNTA5MDYxNTMyMzhaMDMxMTAvBgNV BAMTKEIwRTdEMjVDMTgyQTgxMzc5RTc4NUE3ODBEQjAyN0U0QkYxODI2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AYyPNQTVxzEOs4l2RQL664O8 9sRYiWiENlHyJqgO1U/MS50rnAKF3NDaW5LPr+PFcNjpxxOz+uLWTJteP65eO2ey 4lOWmBsQt0nQDN2yaj9sp7b6p92QRxXzczTJepJ7ij0HUU9HC0ItpYj85H8SgpRg jl8du1nnRu7DTIMwehZWtaLBawGUKAPp0HzH5G6NjZmjiBpy/wVZSxj6dX1mZIvU BsAjtY8uL+oIk/Hj9+AHaj6kNfREsIrIJn/cVqKnNsgycVFHjSTJ6zvvd0fFk8Ab hzL/vtg1VTmRs6nr7SwlBj2HRmiZ8/SgPsgw3QEhRciTBN7zVxbnQL+W8eXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsOfSXBgqgTeeeFp4DbAn5L8YJrkwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKooqljnTWgqP4ewAoiZZcMoxr3KN6rPtCZV FBX4lAd7UAIkyIW3RoMfVhcq8gL35q5wLBiUC12Es4MoqZlScpyUNzIE14xWDqoU g935IIZKEegPpIydATLzZg7Xnkn23AKKxMuzjM8FdtW2okJztAJtIQ0L35Z4M4L9 08ZOl10RGyiWQc7hmx6Lara2qeMaZDT2CN63w5ehjbK6KDZltr50b2GqkTKmZYSU xdKgdWDKLZMOHLW2A6wQu7vbGjlGRZL9hYfg/jiPnsvJPOMkCC36UX0TMjvhyH7N fpcJJic8gJV2a5BHH4LTTLBYscFZhCFtFAtwHieXjVZtUJM5how= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:17 2025 by rpki-client