$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: czxYitKF+eEO0bCaLP+5ANjwQdAhWcgr7Xtmpm3567w= Subject key identifier: DC:10:C9:2D:E8:47:25:5D:47:00:8B:27:0A:FF:9F:59:14:64:D8:24 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 560C6559AB74570339E55BF9C91C0EA7F47C4376 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0354 Signing time: Mon 21 Jul 2025 04:11:38 +0000 Manifest this update: Mon 21 Jul 2025 04:06:38 +0000 Manifest next update: Thu 24 Jul 2025 07:35:38 +0000 Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) 2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: 6EzFRtUcuWTHiP8tBnvSWoYzdQmxUA9ZpxRwOA68Qeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0c:65:59:ab:74:57:03:39:e5:5b:f9:c9:1c:0e:a7:f4:7c:43:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Jul 21 04:06:38 2025 GMT Not After : Jul 24 07:35:38 2025 GMT Subject: CN=DC10C92DE847255D47008B270AFF9F591464D824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:5e:cf:c3:4f:da:88:6a:5f:74:53:76:01: 0f:37:bc:00:f1:42:7e:34:34:f5:32:b7:22:b3:c8: 4a:33:1a:30:95:34:0f:49:b0:52:0e:31:1c:59:8f: 73:95:c9:7c:c0:7f:5c:81:db:50:35:ed:48:16:fa: 1d:0f:86:e9:b3:c5:43:71:4a:76:b5:74:28:71:85: 11:ac:66:1c:af:37:df:40:dc:2f:47:8d:70:1f:bd: c8:68:d6:ca:3f:1e:3e:40:b7:4e:be:a4:b7:dc:3b: 9f:57:8e:8d:6e:b0:f4:95:28:b0:b1:fc:3e:d5:df: 5f:2b:2f:66:ad:09:78:2d:cd:0f:26:03:91:ce:48: d8:9c:6b:66:fd:b9:32:0f:8e:c1:7f:1d:c0:39:40: 3e:07:7a:a2:47:24:f8:8a:00:68:cd:f9:0f:fb:6e: 8f:d0:af:14:17:af:86:af:86:aa:39:2e:25:fb:6d: c2:7e:af:73:af:ca:79:63:b6:29:b4:be:2d:0e:07: 97:ad:b3:2d:f6:0f:4d:f8:3c:a6:bf:05:bf:c1:d5: 2a:33:f3:23:63:f6:cc:80:13:5b:a9:d5:33:0c:57: 05:e0:8b:36:18:4c:c9:ed:9e:41:e9:7c:b7:57:80: 7b:d2:48:80:a5:90:d1:6f:df:13:68:a1:9c:91:bd: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:C9:2D:E8:47:25:5D:47:00:8B:27:0A:FF:9F:59:14:64:D8:24 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:27:7a:22:ef:51:78:5d:44:c2:22:66:a5:bb:b2:6f:fb:ed: 83:4c:9c:fd:aa:94:63:81:04:a7:49:a5:23:92:fa:f4:5f:11: ac:53:7a:88:ed:e5:4e:87:71:c5:16:c3:7b:80:76:b5:46:bf: 64:22:0f:7b:ce:df:9e:41:f6:81:49:bb:98:c2:6e:b6:f6:58: 59:e2:62:86:2b:80:59:bd:dc:00:05:6b:8d:cb:ec:51:eb:70: 3f:fa:a2:7e:0e:61:1c:f3:86:56:e4:ca:32:20:52:34:fe:a4: 2b:d2:50:8d:c9:f9:7c:ce:ad:38:38:ae:35:f0:27:9c:33:96: b6:e0:16:cb:94:fa:27:84:d1:ad:28:2a:78:d6:4e:e9:b8:c7: ba:8d:50:3b:79:bf:31:35:0b:2b:5c:92:42:22:b4:8a:4a:62: 3f:29:6f:37:9c:f4:ce:42:9c:56:91:09:f4:d1:94:e9:c1:72: 77:88:b6:61:61:11:31:2f:7d:35:37:ea:79:9c:91:df:51:f5: 66:7c:79:e9:0a:71:28:10:20:16:5f:82:91:8e:bb:f9:33:05: 94:57:02:26:e7:0f:86:85:bd:d0:cf:59:a2:97:ae:85:1e:50: 2e:91:bb:4a:fb:33:55:cf:8b:80:34:52:07:fb:5f:62:da:03: ce:fb:02:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgxlWat0VwM55Vv5yRwOp/R8Q3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA3MjEwNDA2MzhaFw0yNTA3MjQwNzM1MzhaMDMxMTAvBgNV BAMTKERDMTBDOTJERTg0NzI1NUQ0NzAwOEIyNzBBRkY5RjU5MTQ2NEQ4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fF7Pw0/aiGpfdFN2AQ83vADx Qn40NPUytyKzyEozGjCVNA9JsFIOMRxZj3OVyXzAf1yB21A17UgW+h0PhumzxUNx Sna1dChxhRGsZhyvN99A3C9HjXAfvcho1so/Hj5At06+pLfcO59Xjo1usPSVKLCx /D7V318rL2atCXgtzQ8mA5HOSNica2b9uTIPjsF/HcA5QD4HeqJHJPiKAGjN+Q/7 bo/QrxQXr4avhqo5LiX7bcJ+r3Ovynljtim0vi0OB5etsy32D034PKa/Bb/B1Soz 8yNj9syAE1up1TMMVwXgizYYTMntnkHpfLdXgHvSSIClkNFv3xNooZyRvQchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3BDJLehHJV1HAIsnCv+fWRRk2CQwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkneiLvUXhdRMIiZqW7sm/77YNMnP2qlGOB BKdJpSOS+vRfEaxTeojt5U6HccUWw3uAdrVGv2QiD3vO355B9oFJu5jCbrb2WFni YoYrgFm93AAFa43L7FHrcD/6on4OYRzzhlbkyjIgUjT+pCvSUI3J+XzOrTg4rjXw J5wzlrbgFsuU+ieE0a0oKnjWTum4x7qNUDt5vzE1CytckkIitIpKYj8pbzec9M5C nFaRCfTRlOnBcneItmFhETEvfTU36nmckd9R9WZ8eekKcSgQIBZfgpGOu/kzBZRX AibnD4aFvdDPWaKXroUeUC6Ru0r7M1XPi4A0Ugf7X2LaA877Ai0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:24:39 2025 by rpki-client