$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: WGAoSxgmG1byrwx5w/atuDP1IcUKomiYibNZqWcltgQ= Subject key identifier: 9E:69:2F:C4:DB:06:A9:D3:3C:ED:6D:89:7B:0E:BC:D3:C8:4F:F6:58 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 232242D6415089F1DDDFBE9D428385B1494910E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: B9 Signing time: Sat 06 Sep 2025 04:21:57 +0000 Manifest this update: Sat 06 Sep 2025 04:16:57 +0000 Manifest next update: Tue 09 Sep 2025 04:41:57 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: 3Km0q0WpTw6wwz2XeD4eFwj/1YqNmTqX6BQ0hTuhPbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:22:42:d6:41:50:89:f1:dd:df:be:9d:42:83:85:b1:49:49:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Sep 6 04:16:57 2025 GMT Not After : Sep 9 04:41:57 2025 GMT Subject: CN=9E692FC4DB06A9D33CED6D897B0EBCD3C84FF658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:6f:10:54:87:bc:31:2b:04:9a:b6:f8:98: 2b:be:ae:5a:74:26:f1:d2:8b:e1:7a:e9:a6:b4:d8: 55:3e:8f:9b:78:d3:3b:20:9a:ee:08:60:c5:e8:3b: 66:7e:28:12:a4:9d:74:47:e9:27:39:43:59:96:bb: 44:40:1e:c1:fa:11:7c:b3:1c:4b:dc:64:e6:7e:39: 5a:db:52:f2:fb:2a:d0:e7:55:0b:3a:6c:c9:ea:28: aa:c1:bd:2b:d0:79:46:01:95:c6:4f:ac:ee:e2:dd: 09:45:12:ab:c1:4f:07:0d:ea:84:5f:17:ac:ac:56: 48:b4:c3:c3:3d:d9:db:91:18:aa:ef:74:a0:d7:48: 6f:39:e0:db:a3:00:33:3d:a0:34:1e:c3:38:c8:c4: 1b:49:65:8c:b1:f4:a5:82:df:ed:b2:8c:9e:70:08: 1a:84:6a:6d:41:dd:81:df:4d:c1:25:4a:06:24:bf: db:8c:9d:94:3d:2f:37:11:58:c7:b1:52:d9:6c:4e: bb:0c:bf:a9:84:0e:74:00:ec:2c:15:88:3f:35:64: 13:f1:11:1f:ec:a8:56:1c:c4:d0:06:35:fe:89:8e: 26:36:26:e0:df:9a:dc:10:c8:91:2f:96:fe:f5:34: 35:6a:e6:de:92:d9:a3:6f:5c:c8:ac:e5:bb:a0:9a: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:69:2F:C4:DB:06:A9:D3:3C:ED:6D:89:7B:0E:BC:D3:C8:4F:F6:58 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bb:f2:ad:93:e4:49:9c:14:1f:eb:69:94:e7:cd:af:1b:1e: 26:15:07:6e:7f:d7:a7:e8:8b:e6:ff:c9:37:6c:50:ea:9c:c4: 69:d5:a4:ab:bb:67:c1:2b:fc:2f:55:80:1d:af:0b:5a:46:83: d1:90:55:6d:4d:c6:5d:f1:ff:e3:e1:1d:9a:5a:e8:b7:14:aa: 57:df:39:2c:76:b1:d9:4d:65:96:f4:cb:95:fa:3f:26:e0:13: 4c:d1:ca:52:a1:24:5e:5b:ea:c8:70:ac:23:6a:54:21:6e:e4: d2:be:0a:7b:87:d0:19:e2:76:b1:30:75:9e:ce:2e:7d:d5:c5: 1c:a9:99:31:fa:38:f8:4e:8d:f8:21:89:9f:10:ef:d5:94:41: 1d:2b:27:ab:9c:5f:49:7d:55:d0:57:2c:db:44:6c:96:de:66: e8:01:d2:4c:f0:2b:da:d8:c0:63:46:99:89:6c:9a:d0:21:ae: 1a:da:aa:48:41:29:e7:7a:ab:f9:60:66:65:6e:fc:94:70:33: d6:88:bd:bf:71:f4:cc:5e:d0:3f:af:2b:11:78:ce:a7:46:4e: 9a:b2:05:9b:e2:42:17:4e:4b:07:3c:d8:4b:e7:c8:01:39:5d: 10:e8:c5:d7:37:a7:88:03:3a:4f:74:dc:7c:2e:50:8c:b0:4b: 2b:a4:4a:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyJC1kFQifHd376dQoOFsUlJEOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA5MDYwNDE2NTdaFw0yNTA5MDkwNDQxNTdaMDMxMTAvBgNV BAMTKDlFNjkyRkM0REIwNkE5RDMzQ0VENkQ4OTdCMEVCQ0QzQzg0RkY2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+G8QVIe8MSsEmrb4mCu+rlp0 JvHSi+F66aa02FU+j5t40zsgmu4IYMXoO2Z+KBKknXRH6Sc5Q1mWu0RAHsH6EXyz HEvcZOZ+OVrbUvL7KtDnVQs6bMnqKKrBvSvQeUYBlcZPrO7i3QlFEqvBTwcN6oRf F6ysVki0w8M92duRGKrvdKDXSG854NujADM9oDQewzjIxBtJZYyx9KWC3+2yjJ5w CBqEam1B3YHfTcElSgYkv9uMnZQ9LzcRWMexUtlsTrsMv6mEDnQA7CwViD81ZBPx ER/sqFYcxNAGNf6JjiY2JuDfmtwQyJEvlv71NDVq5t6S2aNvXMis5bugmimxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmkvxNsGqdM87W2Jew6808hP9lgwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa78q2T5EmcFB/raZTnza8bHiYVB25/16fo i+b/yTdsUOqcxGnVpKu7Z8Er/C9VgB2vC1pGg9GQVW1Nxl3x/+PhHZpa6LcUqlff OSx2sdlNZZb0y5X6PybgE0zRylKhJF5b6shwrCNqVCFu5NK+CnuH0BnidrEwdZ7O Ln3VxRypmTH6OPhOjfghiZ8Q79WUQR0rJ6ucX0l9VdBXLNtEbJbeZugB0kzwK9rY wGNGmYlsmtAhrhraqkhBKed6q/lgZmVu/JRwM9aIvb9x9Mxe0D+vKxF4zqdGTpqy BZviQhdOSwc82EvnyAE5XRDoxdc3p4gDOk903HwuUIywSyukStA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:10 2025 by rpki-client