$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: 1EHluIKZM/V7fdZP+z44r9kOe0aBJbDrpoCzonojRhM= Subject key identifier: EA:53:B3:C1:57:27:91:1D:4B:10:7E:40:C9:D8:1C:75:0F:77:5B:00 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 3795C02F8CDCF364FCA28EF469ABA396AAF888EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: 82 Signing time: Thu 28 Aug 2025 19:50:52 +0000 Manifest this update: Thu 28 Aug 2025 19:45:52 +0000 Manifest next update: Sun 31 Aug 2025 23:47:52 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: IMXqej13nX/y32IS6HrK0b9vTUytVKZq1jofauzBmsk=) 2: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: FvOPITybWRzIs1S1g5FFlGun2wfYZCtWZ4+3+p45v+s=) 3: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: eoNruYNwvZyUby6dZXw5bw0e22Qs6MDR2TbE8xL2nTA=) 4: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: UZ2c+ThLL1QqGmtgkxvmMRSAi3mGHUlg7C/782qBtEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 23:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:95:c0:2f:8c:dc:f3:64:fc:a2:8e:f4:69:ab:a3:96:aa:f8:88:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Aug 28 19:45:52 2025 GMT Not After : Aug 31 23:47:52 2025 GMT Subject: CN=EA53B3C15727911D4B107E40C9D81C750F775B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:6d:e3:46:d4:30:27:e9:30:f4:9c:e2:9d: 1f:d8:2c:1e:dc:5c:f5:5d:d9:d2:ec:d6:cf:d3:75: 91:b2:56:8f:72:9e:2d:ed:41:c2:08:a2:43:4b:05: 9a:83:b1:00:d3:34:2b:de:a3:ed:4f:6c:b2:3a:60: 3c:b9:30:7c:84:e3:2a:32:ce:e2:91:c5:f7:67:0d: 59:a6:93:10:00:af:d5:c7:4e:8b:4e:ac:a2:95:61: d0:08:96:35:ed:fe:8b:7b:4a:c0:91:45:4f:c7:60: 2a:6b:1e:2e:fd:3f:dc:0f:a9:06:21:f3:a4:16:64: e1:fb:4d:50:56:e5:16:d1:6c:ee:b6:75:a7:e0:d4: 5b:61:72:36:9c:7f:a0:f3:96:98:d5:d5:5b:10:c7: 69:f7:28:b0:ff:c3:44:c4:58:6f:a9:f9:11:45:f0: 6f:01:92:aa:2f:79:c5:00:8f:0b:ae:55:8c:22:1f: 0b:c0:9f:63:ff:aa:13:e7:c4:05:c2:6d:56:f5:74: 71:d8:f6:15:c5:3b:12:41:65:25:97:b0:c0:18:16: ff:da:bd:3e:43:ee:a8:d1:71:e5:a0:bd:6a:78:f6: 95:7c:b9:ed:af:a8:25:32:ed:6d:ac:8b:8f:eb:ea: 61:b9:aa:ce:73:be:d6:6d:9f:61:d4:6f:1f:b2:91: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:B3:C1:57:27:91:1D:4B:10:7E:40:C9:D8:1C:75:0F:77:5B:00 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:70:30:e7:1b:4c:55:cb:52:81:76:6f:4c:6a:21:b0:c1:c7: f7:bf:22:f8:80:6e:e1:1b:29:cf:3b:57:15:58:c9:7d:98:3d: 02:59:f6:91:af:e7:d3:3a:36:22:09:d7:70:8c:48:29:8d:e3: 68:c0:3b:47:67:b1:eb:0a:b0:13:58:87:44:2c:a2:ab:45:fb: 7d:d9:13:be:68:1b:35:60:37:5b:d3:d3:bb:69:b3:f4:82:18: d2:dd:d8:0b:1e:39:77:c3:95:95:49:c8:67:96:00:9d:f2:d8: 15:69:ff:93:04:77:26:e0:60:f8:05:fa:2d:ef:60:18:fb:4f: 11:5c:bc:38:a1:33:a5:6e:46:17:a2:39:f6:e6:cb:69:85:ed: 36:80:05:81:27:24:35:50:a7:14:49:be:4b:6b:70:b8:6e:8d: 21:5d:01:a9:59:47:1b:96:4e:09:63:00:e1:a6:80:8f:2c:fe: a8:55:7a:7a:a6:10:ca:b1:c2:32:bf:68:5c:f3:1b:df:03:54: b7:90:dc:07:af:75:fc:e5:2f:c5:ac:64:06:c0:7f:ef:75:dd: 5b:56:2b:15:d5:a9:8c:d5:f7:af:1b:65:55:3a:ea:a5:48:f6: 91:44:b6:69:9d:66:cc:cd:b7:76:ff:a2:b0:22:2d:4a:3c:b5: 82:e0:59:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5XAL4zc82T8oo70aaujlqr4iOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTA4MjgxOTQ1NTJaFw0yNTA4MzEyMzQ3NTJaMDMxMTAvBgNV BAMTKEVBNTNCM0MxNTcyNzkxMUQ0QjEwN0U0MEM5RDgxQzc1MEY3NzVCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9K23jRtQwJ+kw9JzinR/YLB7c XPVd2dLs1s/TdZGyVo9yni3tQcIIokNLBZqDsQDTNCveo+1PbLI6YDy5MHyE4yoy zuKRxfdnDVmmkxAAr9XHTotOrKKVYdAIljXt/ot7SsCRRU/HYCprHi79P9wPqQYh 86QWZOH7TVBW5RbRbO62dafg1Fthcjacf6DzlpjV1VsQx2n3KLD/w0TEWG+p+RFF 8G8BkqovecUAjwuuVYwiHwvAn2P/qhPnxAXCbVb1dHHY9hXFOxJBZSWXsMAYFv/a vT5D7qjRceWgvWp49pV8ue2vqCUy7W2si4/r6mG5qs5zvtZtn2HUbx+ykUYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6lOzwVcnkR1LEH5AydgcdQ93WwAwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhwMOcbTFXLUoF2b0xqIbDBx/e/IviAbuEb Kc87VxVYyX2YPQJZ9pGv59M6NiIJ13CMSCmN42jAO0dnsesKsBNYh0QsoqtF+33Z E75oGzVgN1vT07tps/SCGNLd2AseOXfDlZVJyGeWAJ3y2BVp/5MEdybgYPgF+i3v YBj7TxFcvDihM6VuRheiOfbmy2mF7TaABYEnJDVQpxRJvktrcLhujSFdAalZRxuW TgljAOGmgI8s/qhVenqmEMqxwjK/aFzzG98DVLeQ3AevdfzlL8WsZAbAf+913VtW KxXVqYzV968bZVU66qVI9pFEtmmdZszNt3b/orAiLUo8tYLgWd4= -----END CERTIFICATE-----Generated at Sat Aug 30 23:17:00 2025 by rpki-client