$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: UdfwOSOEduBmSqO9eGgZU1/Zxqji4boKvhNOTix6XiA= Subject key identifier: C3:EB:96:F3:06:41:B2:95:89:B7:A0:A3:70:0A:1D:07:DE:77:57:74 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 7041E9F15FAA087732ACCE902D505230E15607E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02C9 Signing time: Sat 19 Jul 2025 11:02:22 +0000 Manifest this update: Sat 19 Jul 2025 10:57:22 +0000 Manifest next update: Tue 22 Jul 2025 22:20:22 +0000 Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) 2: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: AJqGc8hAiGOmarJQGIEqq70XOF968ax3WBgSfpv0wfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:41:e9:f1:5f:aa:08:77:32:ac:ce:90:2d:50:52:30:e1:56:07:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Jul 19 10:57:22 2025 GMT Not After : Jul 22 22:20:22 2025 GMT Subject: CN=C3EB96F30641B29589B7A0A3700A1D07DE775774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:b5:cc:e8:e4:cc:35:80:7d:98:d1:ef:cf: f4:28:96:55:d3:6d:7d:51:bf:25:72:1a:62:1e:17: fe:04:16:7b:e4:3a:fe:fc:6d:4d:1b:ee:e2:a0:75: c4:39:94:94:e8:97:f0:eb:4c:22:b2:fe:13:22:bc: 62:e7:7b:c0:7c:da:6f:01:71:8d:29:96:98:16:92: 06:69:64:d6:d1:9b:48:e4:85:a2:c0:b3:22:18:f8: ea:25:2c:13:ea:0f:15:a9:bc:cf:f1:76:52:03:e5: 75:3a:09:5d:f1:4c:11:07:47:07:66:92:cd:8f:9a: 11:2f:55:e5:b6:ef:ac:e6:f3:dd:e4:88:79:1e:8d: 8a:45:a7:bb:9c:c2:08:aa:27:42:b4:02:bb:06:cb: 84:ce:a8:4a:76:9a:73:1b:8c:77:8d:97:74:7a:c3: 18:12:fa:50:de:90:e9:92:88:75:4c:6e:f2:35:66: e2:e9:26:7d:df:7a:35:85:7a:6b:ff:07:6d:70:2d: bf:be:0d:0e:cc:3d:ae:4d:84:4a:61:08:73:9e:c6: 19:3a:b3:de:75:44:fe:1c:71:97:64:87:bf:29:b9: 01:fb:01:8e:8e:02:fc:57:c2:17:6f:27:c0:af:0c: d7:31:49:82:5d:7a:d7:ff:a2:1a:42:b4:7f:35:a3: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:96:F3:06:41:B2:95:89:B7:A0:A3:70:0A:1D:07:DE:77:57:74 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:94:81:57:a0:e0:d1:f7:c0:b0:34:2a:b4:e8:a6:6c:4c:a8: c6:96:42:57:77:19:8b:cd:e2:3a:db:20:7e:35:e1:0e:c1:16: f9:a2:a4:d7:fb:2a:a5:ac:9e:26:87:2d:78:54:b4:a3:38:7c: 76:aa:b7:60:47:4a:1b:5b:47:76:6e:45:29:1e:d2:46:0f:b3: fd:19:c2:a4:64:8e:50:c2:ac:ca:7c:a7:8c:9d:13:76:75:1a: f8:68:93:05:91:ec:5a:4e:09:f8:22:d0:0e:fb:ef:25:3c:f5: a7:16:8f:66:e3:e2:59:74:99:ff:dc:59:00:ba:58:d3:a5:e0: c1:8e:2b:9a:e9:c8:0d:72:ea:64:02:31:0a:c4:26:22:ca:01: fb:b7:38:00:bf:4d:4a:02:ca:f9:8c:81:16:72:25:16:3e:2e: f4:0b:7b:12:c2:9a:26:93:41:e4:6e:1c:60:f4:fd:94:d7:67: ce:5b:26:6e:c1:fe:e7:56:87:5f:17:a6:b6:e6:61:8d:92:b9: e9:27:5d:b9:63:fe:1c:98:b8:4f:c6:79:59:9f:0b:e1:a5:3f: 7d:ca:22:b4:44:c5:a7:91:ba:66:0d:df:16:b5:e5:14:25:92: ce:0b:fa:29:40:e6:12:dc:1b:d0:9e:65:78:c0:0f:9e:a1:76: b5:76:f7:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEHp8V+qCHcyrM6QLVBSMOFWB+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA3MTkxMDU3MjJaFw0yNTA3MjIyMjIwMjJaMDMxMTAvBgNV BAMTKEMzRUI5NkYzMDY0MUIyOTU4OUI3QTBBMzcwMEExRDA3REU3NzU3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsjbXM6OTMNYB9mNHvz/QollXT bX1RvyVyGmIeF/4EFnvkOv78bU0b7uKgdcQ5lJTol/DrTCKy/hMivGLne8B82m8B cY0plpgWkgZpZNbRm0jkhaLAsyIY+OolLBPqDxWpvM/xdlID5XU6CV3xTBEHRwdm ks2PmhEvVeW276zm893kiHkejYpFp7ucwgiqJ0K0ArsGy4TOqEp2mnMbjHeNl3R6 wxgS+lDekOmSiHVMbvI1ZuLpJn3fejWFemv/B21wLb++DQ7MPa5NhEphCHOexhk6 s951RP4ccZdkh78puQH7AY6OAvxXwhdvJ8CvDNcxSYJdetf/ohpCtH81o4n3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+uW8wZBspWJt6CjcAodB953V3QwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6UgVeg4NH3wLA0KrTopmxMqMaWQld3GYvN 4jrbIH414Q7BFvmipNf7KqWsniaHLXhUtKM4fHaqt2BHShtbR3ZuRSke0kYPs/0Z wqRkjlDCrMp8p4ydE3Z1GvhokwWR7FpOCfgi0A777yU89acWj2bj4ll0mf/cWQC6 WNOl4MGOK5rpyA1y6mQCMQrEJiLKAfu3OAC/TUoCyvmMgRZyJRY+LvQLexLCmiaT QeRuHGD0/ZTXZ85bJm7B/udWh18XprbmYY2SueknXblj/hyYuE/GeVmfC+GlP33K IrRExaeRumYN3xa15RQlks4L+ilA5hLcG9CeZXjAD56hdrV29y4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:52 2025 by rpki-client