$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: F30CLr/mzHFGdrJLHP1rGkTrPY6Z7/wpEyCO158sqS4= Subject key identifier: C1:32:F7:47:78:CD:1C:B5:18:24:35:D6:C4:D9:FC:80:74:CC:83:BF Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 122224C96E471AE67233F16D2516D8C25CED5927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 0112 Signing time: Fri 05 Sep 2025 18:02:18 +0000 Manifest this update: Fri 05 Sep 2025 17:57:18 +0000 Manifest next update: Mon 08 Sep 2025 19:16:18 +0000 Files and hashes: 1: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY=) 2: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: STKFnlwqPZr4eJH++MZXNL0qo3x0NNW3UDtQyrDTC0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:22:24:c9:6e:47:1a:e6:72:33:f1:6d:25:16:d8:c2:5c:ed:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Sep 5 17:57:18 2025 GMT Not After : Sep 8 19:16:18 2025 GMT Subject: CN=C132F74778CD1CB5182435D6C4D9FC8074CC83BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:7c:76:2f:bd:1f:97:62:76:6a:98:64:f8: 64:8a:38:bb:b8:eb:c9:b6:0f:90:95:34:31:35:e4: 4d:d8:f6:d2:1e:f8:ca:bd:f3:42:da:a4:37:fa:0f: c6:73:33:20:4a:44:05:4f:22:9e:10:4e:4f:a6:26: 5b:10:b5:82:44:46:82:8b:92:93:d1:30:4f:df:28: 23:1b:ba:62:e9:6e:83:de:a2:87:24:1f:6c:fb:7f: d3:69:a1:e2:bf:39:03:ca:24:da:99:6a:c2:95:7a: b6:07:3a:18:e7:57:13:eb:a4:fc:b4:9f:eb:a6:71: 06:35:6c:a3:2d:ce:92:6e:6c:cb:fb:0d:82:51:4e: 6d:00:b8:8d:31:06:ce:91:a9:48:68:ab:1e:ef:52: a1:4f:34:db:4b:a6:ab:46:44:d0:fe:89:df:fd:ce: c4:cb:9a:78:87:23:77:9f:cc:a7:dc:db:f7:ab:1c: a2:9a:ac:ed:74:12:29:dc:16:2f:68:ad:66:40:44: 77:14:3c:31:3b:b8:ee:f3:27:0f:fc:34:b9:75:14: 44:34:5a:a1:40:e7:8a:8d:e0:7f:ea:f2:1c:ef:de: 27:62:01:29:4e:d2:6f:5b:a7:ba:61:22:e9:b8:c0: 10:47:80:a9:0b:56:57:a1:31:4a:84:0e:63:1f:63: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:F7:47:78:CD:1C:B5:18:24:35:D6:C4:D9:FC:80:74:CC:83:BF X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2b:2d:76:b7:d6:8d:b4:fd:55:fc:d1:05:29:1a:9a:b9:f4: ce:d8:0a:bc:85:9c:44:21:92:5b:b1:f4:a1:bf:22:b0:22:94: 92:eb:59:24:9b:6d:4c:6f:4d:b8:63:22:e4:c3:f9:83:65:59: 91:0f:b1:4d:6a:b5:55:dc:5b:ca:cf:6d:7a:f2:65:a0:50:37: 4f:c9:70:0f:e6:f3:b1:d0:db:b2:7a:1d:e3:ee:8c:1e:23:ee: b6:e6:db:4e:e2:1f:2b:ee:fc:77:8a:ac:3f:1a:64:19:ba:22: 5c:b9:48:1d:fc:f5:c2:10:48:33:52:6e:54:75:72:b0:4d:73: 53:cf:cc:c7:54:b0:49:8a:2b:76:85:70:a6:e1:f2:8e:09:86: ea:7e:33:38:20:ea:98:39:1d:77:73:dd:85:40:ff:02:de:9d: a4:35:51:15:75:dc:a0:96:34:ff:38:ac:5f:78:53:a0:58:eb: 77:15:80:2b:d6:b6:d7:cb:48:14:ba:3c:66:41:18:b8:5f:0c: 00:ed:49:61:ea:ab:a3:1e:14:23:43:68:92:f1:5c:cc:27:bc: 97:6e:d0:35:00:28:1d:41:3c:08:90:92:07:52:fb:09:b3:79: fd:d6:5b:45:e6:18:76:59:82:10:a1:ad:34:75:71:c6:41:f7: 6d:ef:d2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEiIkyW5HGuZyM/FtJRbYwlztWScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTA5MDUxNzU3MThaFw0yNTA5MDgxOTE2MThaMDMxMTAvBgNV BAMTKEMxMzJGNzQ3NzhDRDFDQjUxODI0MzVENkM0RDlGQzgwNzRDQzgzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAHx2L70fl2J2aphk+GSKOLu4 68m2D5CVNDE15E3Y9tIe+Mq980LapDf6D8ZzMyBKRAVPIp4QTk+mJlsQtYJERoKL kpPRME/fKCMbumLpboPeoockH2z7f9NpoeK/OQPKJNqZasKVerYHOhjnVxPrpPy0 n+umcQY1bKMtzpJubMv7DYJRTm0AuI0xBs6RqUhoqx7vUqFPNNtLpqtGRND+id/9 zsTLmniHI3efzKfc2/erHKKarO10EincFi9orWZARHcUPDE7uO7zJw/8NLl1FEQ0 WqFA54qN4H/q8hzv3idiASlO0m9bp7phIum4wBBHgKkLVlehMUqEDmMfY5UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTL3R3jNHLUYJDXWxNn8gHTMg78wHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAArLXa31o20/VX80QUpGpq59M7YCryFnEQh klux9KG/IrAilJLrWSSbbUxvTbhjIuTD+YNlWZEPsU1qtVXcW8rPbXryZaBQN0/J cA/m87HQ27J6HePujB4j7rbm207iHyvu/HeKrD8aZBm6Ily5SB389cIQSDNSblR1 crBNc1PPzMdUsEmKK3aFcKbh8o4Jhup+Mzgg6pg5HXdz3YVA/wLenaQ1URV13KCW NP84rF94U6BY63cVgCvWttfLSBS6PGZBGLhfDADtSWHqq6MeFCNDaJLxXMwnvJdu 0DUAKB1BPAiQkgdS+wmzef3WW0XmGHZZghChrTR1ccZB923v0jc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:12 2025 by rpki-client