$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: 3EI+4/sZLxTTnlgMNiMYnUV+B7kwEMQapwUrLvzUBys= Subject key identifier: 66:0F:90:CB:BF:7B:4F:2A:32:1E:A9:71:13:60:8F:AE:1E:A6:7B:56 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 0FD16CD0A0752B2A1C1F5E9C00A7ACA5262BFB24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 0204 Signing time: Fri 05 Sep 2025 07:11:32 +0000 Manifest this update: Fri 05 Sep 2025 07:06:32 +0000 Manifest next update: Mon 08 Sep 2025 14:15:32 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: mT1rpbl1CUTieYJFOIipbmjWASTbybc9NGFw0r1A53U=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d1:6c:d0:a0:75:2b:2a:1c:1f:5e:9c:00:a7:ac:a5:26:2b:fb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Sep 5 07:06:32 2025 GMT Not After : Sep 8 14:15:32 2025 GMT Subject: CN=660F90CBBF7B4F2A321EA97113608FAE1EA67B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:44:4c:b3:09:56:a8:7b:a6:30:70:3e:16: 4c:7f:31:90:91:57:be:5d:fa:32:5d:ef:23:75:73: 4f:08:74:e8:89:20:9e:9e:db:0a:cb:71:b9:87:0d: 8d:36:df:06:57:95:ef:ed:72:96:70:2a:87:18:95: 91:d2:8a:02:97:39:6b:83:bd:90:80:d9:29:ec:e9: 20:96:2c:ab:8a:8d:7c:ee:a6:ca:cf:b5:c9:1c:41: 92:70:7b:20:c3:b1:f1:76:93:82:9f:d1:45:22:8d: 49:26:2e:00:ed:fb:bb:1b:f5:47:19:0a:d1:3c:5a: 93:0e:0d:1b:03:d7:9f:ef:ad:c3:15:04:3e:78:70: 5b:60:e0:bd:55:46:b0:23:ec:d6:34:73:d9:f7:e3: 9d:30:fb:e3:68:4c:64:77:f3:1f:de:3a:4f:54:1c: 79:1b:7c:63:ef:be:2f:fc:d0:ef:d6:9b:5d:35:91: f9:43:27:35:d3:08:4e:87:71:e4:64:d8:f2:79:07: 49:3f:a6:19:0c:5b:eb:6a:69:0a:06:32:21:71:3e: 83:48:63:09:80:79:63:dd:98:72:47:e1:ac:5e:d4: 8e:1f:93:e0:d6:7a:6e:94:b0:67:27:df:87:b8:95: ac:bf:1f:ed:4a:24:1b:8c:d2:8c:b3:70:a5:56:eb: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0F:90:CB:BF:7B:4F:2A:32:1E:A9:71:13:60:8F:AE:1E:A6:7B:56 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:91:6c:d3:45:b6:1f:69:d7:e7:f3:ce:db:ed:4b:5b:f6:e3: 2a:41:1f:d4:31:93:d9:d4:99:7c:6a:ef:c8:e5:7a:4a:1a:fc: 8d:27:39:32:2d:10:2f:35:b9:f5:8a:99:9b:0d:5a:81:89:cc: 96:12:bb:d8:43:f9:98:de:50:91:71:51:56:b5:71:1a:f2:4f: 29:4c:2f:b7:9c:d1:de:58:1f:b2:ef:5c:62:21:f8:3f:dc:60: 0a:f0:c5:9c:4a:f3:ee:35:d7:9c:10:28:48:2e:3a:11:fa:64: 19:30:4a:32:fa:b2:53:ac:2e:3e:6e:4d:d8:bc:cf:59:f0:4d: 86:68:79:f6:d0:c3:b4:87:11:b6:ef:e1:eb:53:80:b9:b2:e2: d6:9d:bb:54:9c:09:0c:ab:a0:04:c5:28:81:78:aa:62:e1:27: 9e:14:94:ad:60:fc:7e:d2:44:60:07:b3:47:3c:25:14:31:df: cd:ce:3d:72:1d:a1:47:ba:0c:ec:c9:f3:64:9d:07:ba:95:6f: d6:e8:0b:f5:d0:46:cb:31:53:19:f2:e0:80:7f:87:e7:97:55: 53:c8:76:00:46:c9:20:1c:c6:07:53:c4:30:53:51:f9:21:80: 88:ee:20:85:49:7a:22:1f:ee:c4:1c:ca:ef:da:fc:d3:ad:19: e3:d6:d1:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9Fs0KB1KyocH16cAKespSYr+yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTA5MDUwNzA2MzJaFw0yNTA5MDgxNDE1MzJaMDMxMTAvBgNV BAMTKDY2MEY5MENCQkY3QjRGMkEzMjFFQTk3MTEzNjA4RkFFMUVBNjdCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S0RMswlWqHumMHA+Fkx/MZCR V75d+jJd7yN1c08IdOiJIJ6e2wrLcbmHDY023wZXle/tcpZwKocYlZHSigKXOWuD vZCA2Sns6SCWLKuKjXzupsrPtckcQZJweyDDsfF2k4Kf0UUijUkmLgDt+7sb9UcZ CtE8WpMODRsD15/vrcMVBD54cFtg4L1VRrAj7NY0c9n3450w++NoTGR38x/eOk9U HHkbfGPvvi/80O/Wm101kflDJzXTCE6HceRk2PJ5B0k/phkMW+tqaQoGMiFxPoNI YwmAeWPdmHJH4axe1I4fk+DWem6UsGcn34e4lay/H+1KJBuM0oyzcKVW60sDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZg+Qy797TyoyHqlxE2CPrh6me1YwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCRbNNFth9p1+fzztvtS1v24ypBH9Qxk9nU mXxq78jlekoa/I0nOTItEC81ufWKmZsNWoGJzJYSu9hD+ZjeUJFxUVa1cRryTylM L7ec0d5YH7LvXGIh+D/cYArwxZxK8+4115wQKEguOhH6ZBkwSjL6slOsLj5uTdi8 z1nwTYZoefbQw7SHEbbv4etTgLmy4tadu1ScCQyroATFKIF4qmLhJ54UlK1g/H7S RGAHs0c8JRQx383OPXIdoUe6DOzJ82SdB7qVb9boC/XQRssxUxny4IB/h+eXVVPI dgBGySAcxgdTxDBTUfkhgIjuIIVJeiIf7sQcyu/a/NOtGePW0dY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:41:01 2025 by rpki-client