$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: bQOI8OsicxyAhk0YsgWD1bNkiHJcgqr/81idIsAvG9w= Subject key identifier: D0:6C:63:A5:FA:C8:FD:5E:3A:8E:ED:80:C6:8C:78:FD:58:A5:23:00 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 0521619F4778B41BE0D16A9258393BD358DF7CAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 03:12:08 +0000 Manifest this update: Sun 20 Jul 2025 03:07:08 +0000 Manifest next update: Wed 23 Jul 2025 05:35:08 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: Xv+2l4y7l4Xdz8lA4JfKdgZYUIt6OasxYSLuSWF8X8E=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:21:61:9f:47:78:b4:1b:e0:d1:6a:92:58:39:3b:d3:58:df:7c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Jul 20 03:07:08 2025 GMT Not After : Jul 23 05:35:08 2025 GMT Subject: CN=D06C63A5FAC8FD5E3A8EED80C68C78FD58A52300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:18:90:2a:81:c6:83:56:bf:cc:e9:7b:b6: 6e:a1:60:64:dd:fa:9a:3e:92:63:dc:6f:57:51:c4: 53:cc:64:b7:d3:17:6d:8e:a6:33:c2:93:79:ae:74: cc:2c:6b:a5:90:c9:90:b5:00:4d:61:d9:6a:78:05: ca:e8:6d:2d:26:d9:6c:47:07:87:17:e1:1e:c0:19: 22:11:8c:31:77:6f:e8:bc:5c:67:59:11:15:83:39: d6:d1:d5:41:f7:7f:dc:1d:15:3f:7d:7c:4b:ae:63: e7:06:65:0e:f6:b3:b1:70:d4:fb:3d:b8:aa:26:c4: 46:43:86:38:9c:26:a1:c4:db:d1:28:0d:64:8f:bb: 4f:2b:0f:00:67:46:bd:4b:fe:5e:0e:c9:3c:15:ae: b3:68:8b:27:6b:83:7e:9b:16:73:c3:09:05:50:a8: b8:6f:be:9c:f9:da:69:5f:95:5a:4a:56:c9:19:98: eb:f4:9b:8a:2d:15:00:5f:31:ee:e4:22:38:cf:f7: be:e9:89:18:fb:f1:3f:82:86:d0:c3:1f:ba:4a:29: c5:f3:3f:cd:39:b9:0b:39:b2:08:25:30:c8:9e:57: 25:91:cf:d0:d5:1f:a8:ee:e8:77:e4:8a:2b:22:85: 38:20:b2:24:c1:3b:16:45:c2:4e:66:07:95:4c:ac: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6C:63:A5:FA:C8:FD:5E:3A:8E:ED:80:C6:8C:78:FD:58:A5:23:00 X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:ce:d6:7d:42:f4:cc:ec:ac:8a:94:ed:7f:18:44:2e:64: 15:71:0f:63:21:b2:2f:5d:c1:16:c0:e5:39:89:1f:3e:3d:0b: df:4d:7f:45:95:14:e4:4c:9b:34:ab:9b:92:32:60:48:6c:58: 91:0f:1b:c2:0c:bd:43:48:ac:76:db:b9:72:82:2e:70:3c:56: d7:5a:3a:29:b0:1e:5f:4c:aa:a5:6f:65:ee:fe:c5:3d:35:e5: ac:9d:08:d7:d3:d9:f5:ad:88:78:4a:d4:78:6b:d3:1d:bb:f0: ac:93:29:53:77:52:d2:43:db:f8:a8:22:a5:69:8c:8e:b1:3e: 72:5e:28:e1:51:25:c5:30:bf:57:f4:47:17:b9:52:77:e9:c5: 64:61:84:34:3c:58:d9:ab:2c:d9:35:b2:71:97:f7:e2:99:e5: ba:87:69:47:ba:05:fd:fb:3d:0d:45:72:77:4c:65:f3:df:88: 64:95:dc:8a:8a:a4:44:b3:df:da:50:da:1e:33:b3:41:e2:c7: dc:9e:c4:46:9d:1a:cc:8b:fa:92:96:43:3b:c0:4b:a9:1b:df: 28:16:0e:e2:96:8f:fb:97:b9:34:67:28:1c:70:a3:8e:ed:ec: 86:e3:65:01:11:40:4a:91:96:24:c9:f3:0a:91:90:55:93:84: 34:fc:fb:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSFhn0d4tBvg0WqSWDk701jffKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA3MjAwMzA3MDhaFw0yNTA3MjMwNTM1MDhaMDMxMTAvBgNV BAMTKEQwNkM2M0E1RkFDOEZENUUzQThFRUQ4MEM2OEM3OEZENThBNTIzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2BiQKoHGg1a/zOl7tm6hYGTd +po+kmPcb1dRxFPMZLfTF22OpjPCk3mudMwsa6WQyZC1AE1h2Wp4BcrobS0m2WxH B4cX4R7AGSIRjDF3b+i8XGdZERWDOdbR1UH3f9wdFT99fEuuY+cGZQ72s7Fw1Ps9 uKomxEZDhjicJqHE29EoDWSPu08rDwBnRr1L/l4OyTwVrrNoiydrg36bFnPDCQVQ qLhvvpz52mlflVpKVskZmOv0m4otFQBfMe7kIjjP977piRj78T+ChtDDH7pKKcXz P805uQs5sgglMMieVyWRz9DVH6ju6HfkiisihTggsiTBOxZFwk5mB5VMrA5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0GxjpfrI/V46ju2Axox4/VilIwAwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtsztZ9QvTM7KyKlO1/GEQuZBVxD2Mhsi9d wRbA5TmJHz49C99Nf0WVFORMmzSrm5IyYEhsWJEPG8IMvUNIrHbbuXKCLnA8Vtda OimwHl9MqqVvZe7+xT015aydCNfT2fWtiHhK1Hhr0x278KyTKVN3UtJD2/ioIqVp jI6xPnJeKOFRJcUwv1f0Rxe5UnfpxWRhhDQ8WNmrLNk1snGX9+KZ5bqHaUe6Bf37 PQ1FcndMZfPfiGSV3IqKpESz39pQ2h4zs0Hix9yexEadGsyL+pKWQzvAS6kb3ygW DuKWj/uXuTRnKBxwo47t7IbjZQERQEqRliTJ8wqRkFWThDT8+zI= -----END CERTIFICATE-----Generated at Tue Jul 22 06:15:15 2025 by rpki-client