$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: nJN4BkOwOP1GMRKxoeRkxitYihspAaZn3iaAHOhzrWc= Subject key identifier: 2E:33:DE:24:53:A6:4C:8D:8A:CE:43:FA:17:DD:2C:A2:2F:89:80:78 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 249597602B4410E9DEF23EF7F44A73EEB9572A28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 01A9 Signing time: Wed 03 Sep 2025 13:00:05 +0000 Manifest this update: Wed 03 Sep 2025 12:55:05 +0000 Manifest next update: Sat 06 Sep 2025 19:59:05 +0000 Files and hashes: 1: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=) 2: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=) 3: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=) 4: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: ElDVfSihpbrhzRvUIEFZ5EHXIiEvvVC87T0kDDqdV4c=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=) 6: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=) 7: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=) 8: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=) 9: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:95:97:60:2b:44:10:e9:de:f2:3e:f7:f4:4a:73:ee:b9:57:2a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Sep 3 12:55:05 2025 GMT Not After : Sep 6 19:59:05 2025 GMT Subject: CN=2E33DE2453A64C8D8ACE43FA17DD2CA22F898078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:41:49:75:8a:2c:70:cc:16:df:c5:aa:c8: fa:5f:cc:1e:7d:41:da:87:da:c7:01:a0:9d:0f:a1: 49:52:cf:c7:5e:e6:6c:66:f7:98:3a:52:13:5e:93: 6c:ba:c7:22:48:c2:40:6f:7d:97:e0:d5:33:9f:7e: 2a:a4:a0:c4:66:2a:45:81:7e:d7:32:00:ea:9f:10: a6:00:27:d1:17:2b:b5:93:11:c7:1e:0b:af:6a:9d: 36:54:8b:10:9d:57:48:58:18:ad:e2:d3:75:c6:b2: 26:e2:02:4d:ad:75:07:87:cf:27:2d:44:92:13:6a: 0c:72:a7:2a:f5:ab:6f:6f:21:38:3e:15:94:26:17: 7a:c2:a1:38:da:f0:2d:5a:16:c4:72:d7:3b:41:09: 00:f1:ef:98:13:72:0e:96:68:dc:e7:1e:02:59:d5: 61:17:67:e6:f4:6a:c9:e2:5d:37:7b:15:7f:60:22: 15:7a:52:04:0a:4a:69:6e:88:5e:e2:e2:4a:aa:c8: ae:f3:9b:fc:2c:63:b8:07:05:c3:90:8a:a2:ba:3a: 89:c7:36:a0:27:77:ea:72:cf:3a:88:e4:cc:72:c7: 22:af:bc:ab:42:a7:79:e1:ae:b5:ba:08:d4:60:2f: 20:ec:35:a4:97:e0:5e:a1:7f:e8:87:54:95:02:c7: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:DE:24:53:A6:4C:8D:8A:CE:43:FA:17:DD:2C:A2:2F:89:80:78 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:65:30:05:f6:28:e7:6f:34:d6:58:77:96:10:3a:5d:2c:26: e1:9e:1a:18:7b:7b:1e:35:f4:5e:34:d0:3c:b2:d2:6d:b3:ea: f2:b2:54:ba:af:91:64:a1:c8:af:32:11:02:d7:7a:55:10:ed: c0:82:cb:3c:ff:f3:45:df:89:72:27:2f:5c:ab:63:3e:63:02: d6:b7:92:c2:09:d4:77:b7:cf:62:d5:f5:ad:66:d6:aa:1b:3d: 7d:3b:d3:01:e2:3e:53:1c:f5:00:64:93:a4:11:19:fc:a4:95: b0:77:6f:d9:42:e7:9a:59:c7:de:7a:55:a3:1d:22:01:cc:74: ea:c0:b1:db:9d:5d:77:56:19:21:7a:2b:43:b8:bf:f0:78:4c: ba:16:81:3d:04:9d:2e:05:a6:19:09:cb:f7:10:b6:c1:1c:00: 7a:eb:9d:e5:48:03:75:6c:e5:54:52:75:be:63:93:4e:35:da: e6:07:7f:48:92:a8:f0:3f:9b:25:bc:e0:26:60:77:74:ce:db: 41:8e:9d:c1:33:82:f6:0b:6c:04:d7:8d:27:7c:d4:87:55:ba: 22:1d:8a:99:9c:78:bd:4c:4e:96:cb:5e:c3:72:98:76:d4:47: f9:e0:e0:75:87:cc:50:16:42:d7:d0:c8:6a:42:10:57:14:eb: c5:73:1e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJWXYCtEEOne8j739Epz7rlXKigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTA5MDMxMjU1MDVaFw0yNTA5MDYxOTU5MDVaMDMxMTAvBgNV BAMTKDJFMzNERTI0NTNBNjRDOEQ4QUNFNDNGQTE3REQyQ0EyMkY4OTgwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxkFJdYoscMwW38WqyPpfzB59 QdqH2scBoJ0PoUlSz8de5mxm95g6UhNek2y6xyJIwkBvfZfg1TOffiqkoMRmKkWB ftcyAOqfEKYAJ9EXK7WTEcceC69qnTZUixCdV0hYGK3i03XGsibiAk2tdQeHzyct RJITagxypyr1q29vITg+FZQmF3rCoTja8C1aFsRy1ztBCQDx75gTcg6WaNznHgJZ 1WEXZ+b0asniXTd7FX9gIhV6UgQKSmluiF7i4kqqyK7zm/wsY7gHBcOQiqK6OonH NqAnd+pyzzqI5MxyxyKvvKtCp3nhrrW6CNRgLyDsNaSX4F6hf+iHVJUCxyrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjPeJFOmTI2KzkP6F90soi+JgHgwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEllMAX2KOdvNNZYd5YQOl0sJuGeGhh7ex41 9F400Dyy0m2z6vKyVLqvkWShyK8yEQLXelUQ7cCCyzz/80XfiXInL1yrYz5jAta3 ksIJ1He3z2LV9a1m1qobPX070wHiPlMc9QBkk6QRGfyklbB3b9lC55pZx956VaMd IgHMdOrAsdudXXdWGSF6K0O4v/B4TLoWgT0EnS4FphkJy/cQtsEcAHrrneVIA3Vs 5VRSdb5jk0412uYHf0iSqPA/myW84CZgd3TO20GOncEzgvYLbATXjSd81IdVuiId ipmceL1MTpbLXsNymHbUR/ng4HWHzFAWQtfQyGpCEFcU68VzHoI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:14:10 2025 by rpki-client