$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: 0R+/j1dQbUby2hGs54UZiPQV3X1TdMF6MwVHRQsDKGU= Subject key identifier: 35:A3:39:42:30:FF:9B:87:D8:EF:2D:09:23:CF:FB:8F:48:57:B5:B4 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 67027EE64209B1B6FB3B89EC0FEF27995A1F3F3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 0211 Signing time: Fri 05 Sep 2025 12:30:00 +0000 Manifest this update: Fri 05 Sep 2025 12:25:00 +0000 Manifest next update: Mon 08 Sep 2025 20:11:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: /3D7IhPEPJ+klEMJ+nvQTpwMO+/p3Y9eoF11LKynNdE=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:02:7e:e6:42:09:b1:b6:fb:3b:89:ec:0f:ef:27:99:5a:1f:3f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Sep 5 12:25:00 2025 GMT Not After : Sep 8 20:11:00 2025 GMT Subject: CN=35A3394230FF9B87D8EF2D0923CFFB8F4857B5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:1c:14:50:93:59:79:a8:92:05:da:21:8e: fc:78:71:f9:bb:20:c1:cc:d5:ea:1d:f9:cf:93:ac: 91:94:03:f3:69:1a:1c:b7:d6:c3:ec:f0:74:d5:7a: 22:0c:50:2e:0b:81:29:6e:89:d6:b7:75:dd:81:66: e3:f3:29:64:51:64:79:90:3d:25:6f:d2:1f:ec:17: 9b:54:0d:76:97:c6:08:6d:ee:d6:96:ab:6f:26:22: da:a3:b7:07:92:90:36:c8:18:47:74:6f:86:6f:8a: 4a:2e:3d:bb:31:4b:81:8e:b3:55:33:17:27:1d:93: 0b:51:01:09:4f:61:ba:9a:d8:4d:8a:04:95:cb:94: 5e:63:cd:70:5b:9f:56:61:d2:ea:de:bb:d8:6a:f2: c1:15:a1:bf:a9:c7:7c:bb:32:18:22:f4:26:bb:69: fe:8e:c4:7c:22:00:2f:ca:cd:a6:a0:8f:c1:b0:5e: 70:76:80:8f:9b:59:e9:6e:17:1f:65:21:8c:1a:58: a9:cc:47:20:13:29:bc:31:55:ff:85:38:ac:3f:42: 5e:d9:53:a6:fc:6b:48:11:8c:7e:45:2c:12:2a:d1: 51:81:47:28:aa:59:f0:21:85:af:3f:62:92:09:c1: 74:d5:3c:d6:30:40:2a:7d:6d:b4:c6:88:72:df:38: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:39:42:30:FF:9B:87:D8:EF:2D:09:23:CF:FB:8F:48:57:B5:B4 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:48:19:0f:26:a3:09:08:27:f6:da:49:bc:9d:ec:0e:49:38: 24:bd:7f:32:28:8f:bd:fb:3e:ee:86:b8:7c:57:c6:88:97:d4: 4c:53:e8:a3:df:ad:0e:19:92:ee:68:62:35:ac:87:2e:39:7a: 12:b8:c2:fc:ac:08:71:26:4c:85:35:68:72:a3:53:08:71:02: 61:8c:79:df:25:20:57:a5:0b:3f:03:eb:4a:2b:9f:f9:77:23: 45:bb:32:18:3a:bc:70:3b:ae:3a:98:91:c6:1a:c6:69:af:c8: 42:75:81:26:f1:0e:0e:2b:a0:38:17:b5:34:be:7d:49:5f:f8: 0a:ef:71:ed:45:1f:07:ae:95:f1:bf:1f:d1:32:8a:a8:6d:6f: ea:2f:89:2f:9f:eb:20:91:65:6f:55:b4:d0:d7:c2:c7:41:74: d1:e1:d0:f5:5d:35:fd:f6:4b:bf:2c:18:ea:b0:45:80:8b:2e: 57:91:62:e5:c2:ee:58:eb:60:db:4d:2b:31:a7:21:f8:2b:30: 73:c4:29:3f:f2:bf:e5:29:a0:01:68:1f:44:53:24:6f:d2:2c: c9:1a:a9:f9:37:81:92:4f:a5:20:20:2f:e2:af:61:d6:68:91: a3:e8:9d:6f:c0:3a:fa:f7:c3:07:e6:06:2e:83:da:ad:bd:82: 8f:82:31:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwJ+5kIJsbb7O4nsD+8nmVofPzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA5MDUxMjI1MDBaFw0yNTA5MDgyMDExMDBaMDMxMTAvBgNV BAMTKDM1QTMzOTQyMzBGRjlCODdEOEVGMkQwOTIzQ0ZGQjhGNDg1N0I1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2xwUUJNZeaiSBdohjvx4cfm7 IMHM1eod+c+TrJGUA/NpGhy31sPs8HTVeiIMUC4LgSluida3dd2BZuPzKWRRZHmQ PSVv0h/sF5tUDXaXxght7taWq28mItqjtweSkDbIGEd0b4ZvikouPbsxS4GOs1Uz FycdkwtRAQlPYbqa2E2KBJXLlF5jzXBbn1Zh0ureu9hq8sEVob+px3y7Mhgi9Ca7 af6OxHwiAC/Kzaagj8GwXnB2gI+bWeluFx9lIYwaWKnMRyATKbwxVf+FOKw/Ql7Z U6b8a0gRjH5FLBIq0VGBRyiqWfAhha8/YpIJwXTVPNYwQCp9bbTGiHLfOMFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNaM5QjD/m4fY7y0JI8/7j0hXtbQwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxIGQ8mowkIJ/baSbyd7A5JOCS9fzIoj737 Pu6GuHxXxoiX1ExT6KPfrQ4Zku5oYjWshy45ehK4wvysCHEmTIU1aHKjUwhxAmGM ed8lIFelCz8D60orn/l3I0W7Mhg6vHA7rjqYkcYaxmmvyEJ1gSbxDg4roDgXtTS+ fUlf+Arvce1FHweulfG/H9Eyiqhtb+oviS+f6yCRZW9VtNDXwsdBdNHh0PVdNf32 S78sGOqwRYCLLleRYuXC7ljrYNtNKzGnIfgrMHPEKT/yv+UpoAFoH0RTJG/SLMka qfk3gZJPpSAgL+KvYdZokaPonW/AOvr3wwfmBi6D2q29go+CMYE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client