$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: k4+6vK1Fqj5hJ4PCAwqxiaop/q9DCwbeQD3gDvdEZnE= Subject key identifier: 55:10:93:73:A0:48:C5:94:D9:85:EA:12:14:9D:13:58:BD:3C:74:D8 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 0D674FB0EA5409892F3721FB3D7C9170880FC312 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0355 Signing time: Wed 23 Jul 2025 07:41:38 +0000 Manifest this update: Wed 23 Jul 2025 07:36:38 +0000 Manifest next update: Sat 26 Jul 2025 13:43:38 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: gyeJMWoxQlBdTYN7bVw8R2TD8++cCZU3pN780Z1Bp7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:4f:b0:ea:54:09:89:2f:37:21:fb:3d:7c:91:70:88:0f:c3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jul 23 07:36:38 2025 GMT Not After : Jul 26 13:43:38 2025 GMT Subject: CN=55109373A048C594D985EA12149D1358BD3C74D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:8b:12:dc:2d:6f:93:af:de:a9:27:82:8b: 5b:a8:de:d3:c9:ef:e8:d4:fa:2c:b2:cf:42:f4:d5: 5b:b3:ff:8b:f5:17:c2:24:23:39:b6:dd:2b:e4:f4: 52:c0:eb:2e:14:79:54:a6:47:e7:0f:3f:13:73:a2: 25:e6:9a:c4:1d:9f:9b:8c:05:20:89:ba:0c:fc:f7: 41:3f:40:01:e5:d2:65:4d:c8:4a:47:61:4e:02:af: c0:b5:dd:2c:24:be:4c:76:4a:c8:76:cf:42:ef:65: d2:fc:f9:84:c9:26:62:a1:2c:58:7f:c9:35:90:e2: ed:52:c3:95:b4:2a:a3:9f:2d:db:6e:8d:90:56:d9: 09:e3:84:54:90:c7:5a:d4:54:23:75:f0:e5:9f:67: 09:d9:df:b8:d3:14:07:f0:53:93:03:d7:a9:82:ff: 51:85:e5:53:5a:06:79:b4:f6:d9:48:f4:0e:04:b5: b9:0e:79:bd:07:b0:a1:ff:d7:46:50:7b:dc:90:83: 31:3a:27:f5:13:30:a2:60:1f:b0:57:57:21:b5:dd: d8:ff:2a:e0:79:4c:0a:45:e0:8e:ea:01:0e:52:c2: 14:94:9a:69:0d:95:52:61:2e:b2:9c:40:ba:d5:04: 14:54:db:38:fc:9d:a2:3c:fc:3c:13:86:91:6b:49: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:10:93:73:A0:48:C5:94:D9:85:EA:12:14:9D:13:58:BD:3C:74:D8 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:44:43:c8:cc:d0:4c:e4:a9:0a:94:c3:62:eb:ab:7d:8f:98: e8:25:cc:57:53:45:9c:39:51:18:d4:9c:d4:aa:de:51:19:c5: 44:03:47:ad:21:b8:03:36:d2:c0:71:a3:62:d4:d9:23:e3:2f: 8b:68:44:43:d6:3f:97:4f:29:ac:bd:71:63:83:1f:17:8b:8d: 70:6e:61:c1:5c:3d:a9:e8:1b:78:bc:bb:02:e9:b0:97:90:e7: 1f:7e:b8:9e:49:8c:75:fd:46:36:6d:3c:dd:ce:41:ed:3c:ba: 7d:a8:4b:8c:64:c7:85:3e:de:74:52:d8:ad:e7:64:1a:58:84: c2:a6:ab:63:ed:b2:2a:7b:5a:ef:2c:51:c7:bf:5e:d0:97:4c: 5d:a0:30:3b:64:57:2f:ca:2d:ca:42:c2:47:b4:c4:18:0c:07: 75:91:cd:96:12:37:11:9b:d2:0d:65:df:33:0f:8b:a7:cb:dc: f1:7b:65:fa:3d:0a:e6:fa:ad:6c:f0:98:9e:56:d8:83:57:c4: 25:c5:49:b9:3d:ef:4c:36:09:04:0e:8f:1b:56:ee:17:e9:96: 63:9d:bc:c3:f9:14:4e:69:da:70:ac:c3:42:ef:1b:04:62:d7: 9c:28:60:3d:55:36:45:3c:8d:7c:92:7d:d5:3a:37:c3:17:63: f9:98:61:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWdPsOpUCYkvNyH7PXyRcIgPwxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA3MjMwNzM2MzhaFw0yNTA3MjYxMzQzMzhaMDMxMTAvBgNV BAMTKDU1MTA5MzczQTA0OEM1OTREOTg1RUExMjE0OUQxMzU4QkQzQzc0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7osS3C1vk6/eqSeCi1uo3tPJ 7+jU+iyyz0L01Vuz/4v1F8IkIzm23Svk9FLA6y4UeVSmR+cPPxNzoiXmmsQdn5uM BSCJugz890E/QAHl0mVNyEpHYU4Cr8C13Swkvkx2Ssh2z0LvZdL8+YTJJmKhLFh/ yTWQ4u1Sw5W0KqOfLdtujZBW2QnjhFSQx1rUVCN18OWfZwnZ37jTFAfwU5MD16mC /1GF5VNaBnm09tlI9A4EtbkOeb0HsKH/10ZQe9yQgzE6J/UTMKJgH7BXVyG13dj/ KuB5TApF4I7qAQ5SwhSUmmkNlVJhLrKcQLrVBBRU2zj8naI8/DwThpFrSeU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRCTc6BIxZTZheoSFJ0TWL08dNgwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFEQ8jM0EzkqQqUw2Lrq32PmOglzFdTRZw5 URjUnNSq3lEZxUQDR60huAM20sBxo2LU2SPjL4toREPWP5dPKay9cWODHxeLjXBu YcFcPanoG3i8uwLpsJeQ5x9+uJ5JjHX9RjZtPN3OQe08un2oS4xkx4U+3nRS2K3n ZBpYhMKmq2Ptsip7Wu8sUce/XtCXTF2gMDtkVy/KLcpCwke0xBgMB3WRzZYSNxGb 0g1l3zMPi6fL3PF7Zfo9Cub6rWzwmJ5W2INXxCXFSbk970w2CQQOjxtW7hfplmOd vMP5FE5p2nCsw0LvGwRi15woYD1VNkU8jXySfdU6N8MXY/mYYf0= -----END CERTIFICATE-----Generated at Thu Jul 24 12:01:15 2025 by rpki-client