$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: BjdTBSi5geyiUP05cXVYQpXxmHqI5lNp4undIHmasGE= Subject key identifier: 3D:D9:BC:C8:96:54:D1:0B:4E:50:A3:3E:D4:5F:D1:3A:22:E3:9D:FB Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 04B1689E23AD709B34398D93E045B422C2553471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: BB Signing time: Sat 06 Sep 2025 09:51:25 +0000 Manifest this update: Sat 06 Sep 2025 09:46:25 +0000 Manifest next update: Tue 09 Sep 2025 20:29:25 +0000 Files and hashes: 1: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: G1RQecfE8YXGEj7O0LXu374zqVRN/iUzhN1aXGu33G0=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 3: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) 4: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:68:9e:23:ad:70:9b:34:39:8d:93:e0:45:b4:22:c2:55:34:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Sep 6 09:46:25 2025 GMT Not After : Sep 9 20:29:25 2025 GMT Subject: CN=3DD9BCC89654D10B4E50A33ED45FD13A22E39DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:57:f3:2f:a1:16:66:68:5a:6f:3f:f8:ea: 1d:51:bd:86:96:8f:5a:bf:e1:96:05:8d:38:ed:e6: 3b:53:b3:96:88:83:ef:95:bb:83:cf:7a:99:6e:d3: be:19:3d:2e:3d:24:0c:9c:b1:a9:16:a3:1a:6e:c7: 82:72:d5:12:43:53:20:1f:2b:10:75:a8:fc:4e:e6: 78:34:5d:f6:fb:d6:1d:01:5f:3c:a0:28:47:ec:c1: 4b:e9:dc:4b:4f:48:75:d9:21:76:3c:ad:de:77:31: 23:28:41:fa:a2:3e:4f:62:5e:99:16:f1:11:59:c4: 23:56:8e:95:c4:63:70:9e:59:5b:6c:27:9f:56:8c: da:49:c7:8f:03:e7:78:67:d1:c9:1d:30:9f:8b:b7: 92:23:59:09:4c:8d:89:f1:8c:12:49:93:5f:bb:5e: 70:8b:d3:06:b2:47:1f:f5:f9:f6:69:9c:34:c0:6f: c7:7b:93:f0:49:b5:b3:4b:0f:0c:d0:b4:fd:8e:4a: 47:46:48:9d:65:e1:c5:b2:53:ab:b7:77:d3:48:2a: 97:ec:ff:f5:5d:f1:b0:5a:b7:cd:17:61:ca:c2:d2: 25:1e:d9:a7:c8:09:e8:30:88:8c:d6:bd:95:af:b9: e8:9a:33:9a:2e:8f:39:68:15:0e:4e:88:ac:c7:6d: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D9:BC:C8:96:54:D1:0B:4E:50:A3:3E:D4:5F:D1:3A:22:E3:9D:FB X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:28:65:31:39:93:03:e2:8c:84:a2:0b:6b:1b:f8:c0:33: 93:6f:5a:d3:89:fe:51:b7:f4:f3:3a:bf:d2:4f:82:eb:d7:5b: 8a:5e:22:50:4b:75:cf:37:ec:b4:38:2f:0c:e1:0e:32:68:6a: f9:a8:92:47:2e:1d:f5:92:a3:2a:91:51:81:32:a9:5c:81:a4: 5d:12:75:2d:b3:e2:da:24:1d:1d:75:53:9b:03:7e:be:db:2d: 91:6e:e5:04:85:4f:17:bc:d3:fa:fb:a8:10:cb:a3:0a:9e:d2: 8d:ae:d6:c7:05:00:2e:7f:01:9e:00:31:08:15:c1:2f:f7:dd: 34:c5:ce:35:a1:9e:44:14:b7:4a:f0:2b:d7:01:cc:76:73:9c: 19:98:53:ff:46:11:70:97:d5:3d:3d:60:f4:4f:4c:9e:99:dc: ee:46:31:d3:52:11:61:9f:00:6f:f8:c9:d9:5a:df:ac:a3:5a: 0c:7f:04:ad:6d:63:12:c2:33:0b:bf:74:e6:19:70:8b:50:df: 02:25:53:aa:98:6e:a1:c5:e5:e3:39:eb:1c:90:7e:ed:af:0c: e4:06:fe:bd:97:35:fb:c5:98:9f:44:a4:d5:bc:db:47:82:fa: f0:70:39:63:cf:bf:c0:8e:e1:05:79:60:57:08:1d:5f:6c:f2: a6:b6:61:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLFoniOtcJs0OY2T4EW0IsJVNHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA5MDYwOTQ2MjVaFw0yNTA5MDkyMDI5MjVaMDMxMTAvBgNV BAMTKDNERDlCQ0M4OTY1NEQxMEI0RTUwQTMzRUQ0NUZEMTNBMjJFMzlERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GFfzL6EWZmhabz/46h1RvYaW j1q/4ZYFjTjt5jtTs5aIg++Vu4PPeplu074ZPS49JAycsakWoxpux4Jy1RJDUyAf KxB1qPxO5ng0Xfb71h0BXzygKEfswUvp3EtPSHXZIXY8rd53MSMoQfqiPk9iXpkW 8RFZxCNWjpXEY3CeWVtsJ59WjNpJx48D53hn0ckdMJ+Lt5IjWQlMjYnxjBJJk1+7 XnCL0wayRx/1+fZpnDTAb8d7k/BJtbNLDwzQtP2OSkdGSJ1l4cWyU6u3d9NIKpfs //Vd8bBat80XYcrC0iUe2afICegwiIzWvZWvueiaM5oujzloFQ5OiKzHbQuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdm8yJZU0QtOUKM+1F/ROiLjnfswHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCxKGUxOZMD4oyEogtrG/jAM5NvWtOJ/lG3 9PM6v9JPguvXW4peIlBLdc837LQ4LwzhDjJoavmokkcuHfWSoyqRUYEyqVyBpF0S dS2z4tokHR11U5sDfr7bLZFu5QSFTxe80/r7qBDLowqe0o2u1scFAC5/AZ4AMQgV wS/33TTFzjWhnkQUt0rwK9cBzHZznBmYU/9GEXCX1T09YPRPTJ6Z3O5GMdNSEWGf AG/4ydla36yjWgx/BK1tYxLCMwu/dOYZcItQ3wIlU6qYbqHF5eM56xyQfu2vDOQG /r2XNfvFmJ9EpNW820eC+vBwOWPPv8CO4QV5YFcIHV9s8qa2YRM= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:04 2025 by rpki-client