$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: GDFm0x1z+YOtnwFWaIy3T1Zhk/gFgpS6TKqH/PnpVXY= Subject key identifier: A0:B7:94:99:58:7A:E3:8B:FA:44:7B:FB:EF:DC:EF:82:A7:60:D2:A1 Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 54F682A9B054BFD0662EB1821A35C6639DBC6ADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03DF Signing time: Sat 19 Jul 2025 06:41:25 +0000 Manifest this update: Sat 19 Jul 2025 06:36:25 +0000 Manifest next update: Tue 22 Jul 2025 12:02:25 +0000 Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 3: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 4: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 5: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: EQ/MPj1BjnXhUqEqjSEuAmYvGpWQzTutuCho3oet9tg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f6:82:a9:b0:54:bf:d0:66:2e:b1:82:1a:35:c6:63:9d:bc:6a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Jul 19 06:36:25 2025 GMT Not After : Jul 22 12:02:25 2025 GMT Subject: CN=A0B79499587AE38BFA447BFBEFDCEF82A760D2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:8c:e2:8f:b8:06:4e:6f:8a:4c:f7:12:30: 3c:ae:19:e4:e6:9e:4e:32:ac:b6:dc:08:60:cf:7e: 55:82:82:fe:97:98:91:04:68:07:a7:af:7a:01:77: 60:bf:8a:fb:0a:2e:45:67:9a:45:02:0c:7e:ca:a2: 9c:1f:a3:b4:21:05:67:21:c3:42:c9:bb:1e:66:66: f5:dc:a6:8a:8f:67:7a:d8:c6:be:51:da:07:58:eb: 59:ee:c7:7c:7a:07:b9:10:62:5b:0e:97:d2:e7:d6: bb:0a:6a:44:e7:9a:52:79:ea:6d:f3:c0:fb:85:57: 5c:99:d5:0a:c2:98:e1:d1:e3:d3:e8:dc:57:58:81: 28:26:de:58:22:22:a2:8f:b0:15:55:7b:d9:ed:14: 15:0d:24:e0:ce:bb:79:c1:45:57:1b:c4:e9:f0:93: fa:30:1c:d4:3d:39:83:5e:50:d5:68:f0:e4:c2:4c: 1d:e1:0c:4b:58:a2:03:bc:2f:5c:8d:59:a1:60:59: c8:66:58:5a:49:50:91:1f:93:b3:20:a2:89:aa:ca: 10:84:e5:06:60:f5:9f:67:1c:d8:4b:b5:4f:09:87: fe:54:c5:2b:21:ac:11:e0:18:8e:0e:b3:66:8f:97: ed:36:73:e7:21:0d:e9:fe:b0:de:2e:3f:90:e2:32: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:94:99:58:7A:E3:8B:FA:44:7B:FB:EF:DC:EF:82:A7:60:D2:A1 X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a2:20:aa:0b:fd:2f:dd:75:4a:f1:46:31:1e:71:53:e3:01: cc:fa:93:ad:da:f7:ee:30:6d:57:f7:0f:1c:44:72:88:ec:4c: 19:12:b6:2f:ae:84:1a:38:49:fa:75:b8:e4:03:69:6b:75:cb: 0f:1a:d0:54:7c:48:eb:9b:ba:46:d6:42:87:0b:76:52:f0:ed: 82:e9:3a:b6:1f:c8:78:ed:bf:8f:c7:02:d2:86:ac:5d:2c:52: d8:e2:b4:54:92:0f:f0:e6:76:fc:c1:54:d5:12:e2:07:51:84: f7:ba:67:6a:45:04:88:f7:5d:e0:4f:cd:8d:6c:12:2a:88:b8: 9c:a3:17:86:5f:fb:5e:de:8f:2e:d6:f8:65:a2:1a:ae:b6:fc: 86:91:58:79:70:96:5a:52:f2:4b:c2:c5:ad:dc:07:b6:27:bb: 27:e3:08:c2:a1:3d:21:9a:cf:f3:37:44:76:1e:34:a3:f7:5d: 6a:46:b3:ad:91:f8:48:f3:ed:b8:4a:40:d6:ad:2f:e5:ce:21: ba:c8:7f:2e:ce:75:6c:81:e5:34:f3:0c:12:d3:20:41:be:64: b6:1c:f2:34:84:c9:e1:bb:32:09:f9:b7:eb:ef:d4:ba:b4:8c: 82:25:fb:80:e1:42:5a:6f:60:8f:00:d0:9d:5b:d4:5e:f7:08: 24:61:c7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPaCqbBUv9BmLrGCGjXGY528atowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA3MTkwNjM2MjVaFw0yNTA3MjIxMjAyMjVaMDMxMTAvBgNV BAMTKEEwQjc5NDk5NTg3QUUzOEJGQTQ0N0JGQkVGRENFRjgyQTc2MEQyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYIzij7gGTm+KTPcSMDyuGeTm nk4yrLbcCGDPflWCgv6XmJEEaAenr3oBd2C/ivsKLkVnmkUCDH7Kopwfo7QhBWch w0LJux5mZvXcpoqPZ3rYxr5R2gdY61nux3x6B7kQYlsOl9Ln1rsKakTnmlJ56m3z wPuFV1yZ1QrCmOHR49Po3FdYgSgm3lgiIqKPsBVVe9ntFBUNJODOu3nBRVcbxOnw k/owHNQ9OYNeUNVo8OTCTB3hDEtYogO8L1yNWaFgWchmWFpJUJEfk7MgoomqyhCE 5QZg9Z9nHNhLtU8Jh/5UxSshrBHgGI4Os2aPl+02c+chDen+sN4uP5DiMhFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLeUmVh644v6RHv779zvgqdg0qEwHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKiIKoL/S/ddUrxRjEecVPjAcz6k63a9+4w bVf3DxxEcojsTBkSti+uhBo4Sfp1uOQDaWt1yw8a0FR8SOubukbWQocLdlLw7YLp OrYfyHjtv4/HAtKGrF0sUtjitFSSD/DmdvzBVNUS4gdRhPe6Z2pFBIj3XeBPzY1s EiqIuJyjF4Zf+17ejy7W+GWiGq62/IaRWHlwllpS8kvCxa3cB7YnuyfjCMKhPSGa z/M3RHYeNKP3XWpGs62R+Ejz7bhKQNatL+XOIbrIfy7OdWyB5TTzDBLTIEG+ZLYc 8jSEyeG7Mgn5t+vv1Lq0jIIl+4DhQlpvYI8A0J1b1F73CCRhxw8= -----END CERTIFICATE-----Generated at Mon Jul 21 10:35:34 2025 by rpki-client