$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: oTuOPKeR5JYxuMqaU/t1h6vi3I6KZE2cK4tpIq9iQTs= Subject key identifier: CB:AA:23:C6:3C:78:75:D6:CF:3D:21:79:AD:6F:1C:FA:47:D3:FD:D0 Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 218427ABBC5C5057EF7BB28B17CF70964653D1F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 018A Signing time: Fri 05 Sep 2025 05:41:33 +0000 Manifest this update: Fri 05 Sep 2025 05:36:33 +0000 Manifest next update: Mon 08 Sep 2025 09:23:33 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) 2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: uiwRay9eZVxoNVzd91b8v63JZfdO9q9URdHlIK3c69o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:84:27:ab:bc:5c:50:57:ef:7b:b2:8b:17:cf:70:96:46:53:d1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Sep 5 05:36:33 2025 GMT Not After : Sep 8 09:23:33 2025 GMT Subject: CN=CBAA23C63C7875D6CF3D2179AD6F1CFA47D3FDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:c5:f5:e6:18:c7:f4:aa:3d:87:df:27:23: 4d:5d:35:1b:d5:8c:fd:2f:21:ec:3f:2e:76:4c:92: e0:e4:31:1a:72:7c:60:63:af:24:60:24:54:a3:9e: 9b:89:03:1b:83:9d:57:fb:19:71:cf:d0:01:98:1d: 5e:9e:fe:cb:c8:56:f2:30:86:a3:85:01:86:be:23: 09:bb:73:6a:7b:66:94:8a:6f:49:12:d3:83:75:79: 8f:bf:60:d5:25:de:66:0c:33:b3:b4:45:ea:86:8f: f7:c4:22:4c:05:51:73:e1:c2:33:e0:be:ba:a3:6f: 46:18:6d:1e:35:34:2d:f2:34:0f:d8:53:78:c5:cc: 81:e4:83:c1:b8:77:95:1c:b6:57:85:8c:78:97:5e: 18:26:cb:04:fd:8b:87:71:bc:27:3c:96:86:ad:3f: 9c:44:18:51:b8:2c:ef:31:ee:4b:e2:0d:8f:8f:f6: d5:53:cb:62:c7:fd:43:69:70:e0:c7:7a:5b:cb:24: 9b:56:67:63:22:58:f3:59:28:fe:62:10:e6:74:5a: 60:8b:ba:54:ae:47:3c:f8:ab:35:34:c5:27:a9:39: 17:e8:2e:9a:47:af:8c:3f:0e:07:9b:db:97:78:63: 2a:10:9d:51:5a:50:8d:8b:23:89:d7:0a:b0:26:84: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AA:23:C6:3C:78:75:D6:CF:3D:21:79:AD:6F:1C:FA:47:D3:FD:D0 X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:f0:97:e3:e9:bc:92:84:9b:94:42:33:0e:14:66:e4:61: ae:0b:c2:fd:34:26:6b:27:93:bf:aa:a4:f8:85:ce:47:7c:21: dd:e7:c7:80:4d:2c:15:a3:89:0f:cf:31:88:dc:b0:ae:4c:14: 56:e3:e1:9e:bb:4c:fb:53:2e:76:06:e7:9a:e7:37:40:0f:f4: 70:6e:20:a5:98:da:c6:23:ea:0b:f1:ba:67:28:ac:d9:b0:57: 62:66:98:82:58:7d:a1:62:2a:19:3d:2c:43:c9:7c:22:e7:56: 3a:81:12:5f:f7:63:7b:40:47:7d:47:8b:36:0c:b2:91:78:11: 70:9a:36:c0:d4:92:55:45:46:0a:7d:46:c9:65:c7:6d:e1:43: 13:f2:8d:f1:84:ff:bb:97:df:d7:c0:be:19:8f:31:07:a9:ca: 18:27:70:ab:f0:2b:53:d3:ed:14:33:e1:65:9a:35:c9:f4:d7: 9a:af:29:68:2e:49:21:ba:3f:fa:de:ad:69:88:53:f0:15:21: 3e:ad:89:c5:95:75:e2:32:a1:0c:8b:f4:ed:37:21:e4:5c:4b: bc:c0:6c:c3:6a:23:e0:b6:a8:7d:6c:94:de:70:0c:dd:6a:11: 2c:db:9c:06:21:cb:86:e9:df:a4:54:90:d6:61:49:3a:6a:dc: 8f:79:d4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYQnq7xcUFfve7KLF89wlkZT0fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTA5MDUwNTM2MzNaFw0yNTA5MDgwOTIzMzNaMDMxMTAvBgNV BAMTKENCQUEyM0M2M0M3ODc1RDZDRjNEMjE3OUFENkYxQ0ZBNDdEM0ZERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcG8X15hjH9Ko9h98nI01dNRvV jP0vIew/LnZMkuDkMRpyfGBjryRgJFSjnpuJAxuDnVf7GXHP0AGYHV6e/svIVvIw hqOFAYa+Iwm7c2p7ZpSKb0kS04N1eY+/YNUl3mYMM7O0ReqGj/fEIkwFUXPhwjPg vrqjb0YYbR41NC3yNA/YU3jFzIHkg8G4d5UctleFjHiXXhgmywT9i4dxvCc8loat P5xEGFG4LO8x7kviDY+P9tVTy2LH/UNpcODHelvLJJtWZ2MiWPNZKP5iEOZ0WmCL ulSuRzz4qzU0xSepORfoLppHr4w/Dgeb25d4YyoQnVFaUI2LI4nXCrAmhInfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6ojxjx4ddbPPSF5rW8c+kfT/dAwHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo/8Jfj6byShJuUQjMOFGbkYa4Lwv00Jmsn k7+qpPiFzkd8Id3nx4BNLBWjiQ/PMYjcsK5MFFbj4Z67TPtTLnYG55rnN0AP9HBu IKWY2sYj6gvxumcorNmwV2JmmIJYfaFiKhk9LEPJfCLnVjqBEl/3Y3tAR31HizYM spF4EXCaNsDUklVFRgp9Rsllx23hQxPyjfGE/7uX39fAvhmPMQepyhgncKvwK1PT 7RQz4WWaNcn015qvKWguSSG6P/rerWmIU/AVIT6ticWVdeIyoQyL9O03IeRcS7zA bMNqI+C2qH1slN5wDN1qESzbnAYhy4bp36RUkNZhSTpq3I951PQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client