$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: lb7/h8SWgP/Fpsz6M/lrntDIARXJUjfG/P5OPEyIKPU= Subject key identifier: 92:1D:43:3E:D5:E7:97:B7:5A:C6:2B:B7:1F:A7:8A:11:6A:9A:AB:A7 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 7523F71E2801956F5231A968E71EA2DD6EADEE21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: A5 Signing time: Sun 20 Jul 2025 22:41:24 +0000 Manifest this update: Sun 20 Jul 2025 22:36:24 +0000 Manifest next update: Wed 23 Jul 2025 22:46:24 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: 3vGT588I0QVV/sCRiOtRSKMKdrf4JVct9iPV7wFvL6o=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: qmcuoQswPf+QFvs3385xW2BmFD8fV2DaQGSSFxpeEbc=) 3: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: C1h/gP0b7mzkNJrkJZy9ztjg9YLXwh4qvcrt7nQY9DY=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: AXGEppwKEnj8pzoDY2hiI66PJ1bCCf9npLO9Neh2WCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:23:f7:1e:28:01:95:6f:52:31:a9:68:e7:1e:a2:dd:6e:ad:ee:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Jul 20 22:36:24 2025 GMT Not After : Jul 23 22:46:24 2025 GMT Subject: CN=921D433ED5E797B75AC62BB71FA78A116A9AABA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:fc:87:6a:b8:20:25:53:17:da:fa:d5:7f: 21:a0:15:cf:04:97:b0:d2:04:97:5b:98:e1:6e:73: 8f:19:32:20:7d:30:b9:7a:e2:99:5e:6c:08:76:b4: 99:55:47:c9:9b:5b:e0:d7:8f:55:19:c5:59:0c:2d: 78:7c:81:4a:8b:a7:d6:c7:41:7f:59:b5:5f:76:08: 85:2b:8b:42:da:44:f5:09:ac:d8:88:d1:75:44:60: d8:59:1b:6f:62:bb:40:4c:0f:08:7c:4f:bc:8a:0f: 6f:e6:a0:df:72:53:32:d7:25:de:ea:ea:4e:cc:23: 85:13:6a:37:c9:2b:80:40:b1:34:29:b4:36:6c:ad: e2:1c:d0:66:fb:dd:99:bf:c2:5c:6e:0a:46:ad:7b: 10:11:96:7a:02:72:dd:af:e8:ce:e2:5f:63:54:cc: 4d:5c:53:ee:fe:b5:e0:dc:d2:fd:31:2c:2c:0b:67: c7:7b:ff:05:ab:3f:46:1d:d7:39:7c:35:38:fe:78: f1:d3:fb:8a:98:27:d4:28:e0:dd:c0:a6:24:e6:05: 15:23:03:38:39:4c:d3:6c:a6:c2:a4:9d:a1:66:9d: f3:8d:43:d7:45:05:fa:2e:19:3e:e0:62:bf:b0:90: 39:e6:25:ce:09:33:d8:85:d5:3a:0e:66:7b:e1:36: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1D:43:3E:D5:E7:97:B7:5A:C6:2B:B7:1F:A7:8A:11:6A:9A:AB:A7 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e9:40:b2:4f:46:bd:8d:9b:00:b0:10:f4:3a:1b:44:81:da: f8:3a:1e:9e:d6:37:b8:6b:a7:5d:ce:1b:30:eb:8e:a0:cc:26: 18:91:6a:cb:fc:3f:48:72:d3:f3:ce:8e:ad:cd:8d:ad:06:bc: 81:1e:57:ab:a2:b3:f7:28:4d:60:11:8d:e0:ca:ac:eb:92:52: 81:d9:85:2a:94:50:5f:00:7a:1b:89:3a:8b:28:01:16:0c:78: 27:d7:eb:fe:24:79:65:35:ea:66:a5:54:f4:f1:2a:db:41:19: 35:0c:2b:ca:bb:13:30:94:ee:52:db:66:7d:b0:9d:ff:a0:8a: 07:6e:05:ea:43:ca:76:c0:90:0e:fc:c9:40:76:2a:49:43:f9: 45:fc:4e:d3:af:00:87:86:83:e3:cc:31:16:9e:f1:47:72:21: b7:21:0f:c3:16:df:05:af:1c:71:df:03:45:57:34:10:44:aa: cb:bd:e2:25:9d:92:8f:74:76:12:89:6e:9d:02:0a:fc:6c:f3: 0f:20:7f:d8:da:f5:e8:3c:6d:cf:76:7e:71:60:97:8c:39:ba: 04:8c:17:63:1e:00:86:15:dd:9e:82:1a:be:25:ef:c8:91:00: 71:02:79:c3:c9:45:09:26:75:c6:0f:40:bd:f3:d2:18:0f:e1: 92:2d:b2:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSP3HigBlW9SMalo5x6i3W6t7iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA3MjAyMjM2MjRaFw0yNTA3MjMyMjQ2MjRaMDMxMTAvBgNV BAMTKDkyMUQ0MzNFRDVFNzk3Qjc1QUM2MkJCNzFGQTc4QTExNkE5QUFCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcPyHarggJVMX2vrVfyGgFc8E l7DSBJdbmOFuc48ZMiB9MLl64plebAh2tJlVR8mbW+DXj1UZxVkMLXh8gUqLp9bH QX9ZtV92CIUri0LaRPUJrNiI0XVEYNhZG29iu0BMDwh8T7yKD2/moN9yUzLXJd7q 6k7MI4UTajfJK4BAsTQptDZsreIc0Gb73Zm/wlxuCkatexARlnoCct2v6M7iX2NU zE1cU+7+teDc0v0xLCwLZ8d7/wWrP0Yd1zl8NTj+ePHT+4qYJ9Qo4N3ApiTmBRUj Azg5TNNspsKknaFmnfONQ9dFBfouGT7gYr+wkDnmJc4JM9iF1ToOZnvhNuDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkh1DPtXnl7daxiu3H6eKEWqaq6cwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/pQLJPRr2NmwCwEPQ6G0SB2vg6Hp7WN7hr p13OGzDrjqDMJhiRasv8P0hy0/POjq3Nja0GvIEeV6uis/coTWARjeDKrOuSUoHZ hSqUUF8AehuJOosoARYMeCfX6/4keWU16malVPTxKttBGTUMK8q7EzCU7lLbZn2w nf+gigduBepDynbAkA78yUB2KklD+UX8TtOvAIeGg+PMMRae8UdyIbchD8MW3wWv HHHfA0VXNBBEqsu94iWdko90dhKJbp0CCvxs8w8gf9ja9eg8bc92fnFgl4w5ugSM F2MeAIYV3Z6CGr4l78iRAHECecPJRQkmdcYPQL3z0hgP4ZItsoY= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:59 2025 by rpki-client