$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: 2C49z3jmBEcuz92fafCZtkQeqmGp5skz895VwdGXOeY= Subject key identifier: 0C:D5:43:8E:2D:14:32:82:10:45:F4:84:CA:F2:99:76:84:3A:1F:5B Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 62A4426E22331F60E26D210EA548D1E31A625AE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 0447 Signing time: Sun 20 Jul 2025 14:51:01 +0000 Manifest this update: Sun 20 Jul 2025 14:46:01 +0000 Manifest next update: Wed 23 Jul 2025 23:10:01 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: U3Gs6gFYrqKdvd5j47kgxX4NaXmZB4E+Rz3ST2VSWc4=) 2: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: OtTI+HL6N+eqY2Q545VSPi09Kg29l+GIYI0J6EjPFJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a4:42:6e:22:33:1f:60:e2:6d:21:0e:a5:48:d1:e3:1a:62:5a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Jul 20 14:46:01 2025 GMT Not After : Jul 23 23:10:01 2025 GMT Subject: CN=0CD5438E2D1432821045F484CAF29976843A1F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:fd:1d:0a:60:f8:ea:b4:52:1a:dd:e0:d9: 24:06:0e:0b:f7:48:3f:38:c1:6e:27:02:81:12:a0: ee:c4:ee:64:a8:b3:4d:fb:25:91:3a:8b:e1:54:b9: 3c:31:30:50:e6:7a:32:5b:a2:18:f1:d2:a2:dc:15: e3:75:62:23:35:29:cf:f5:3f:fb:71:7a:f4:6d:93: c0:7b:1d:eb:db:73:8c:74:77:19:d4:fb:85:27:c3: 0b:36:2d:0f:db:55:71:25:6e:1a:b4:6f:b8:c4:a1: 2a:8c:b1:b5:ed:d9:c4:c1:1b:f2:4d:ca:6a:d0:e5: 23:e4:b3:32:e1:88:7c:fe:1d:19:85:c0:15:8d:57: 31:7d:6b:98:50:86:ae:18:80:d6:77:56:a1:a6:db: 0c:43:a4:35:a8:d7:35:13:ef:82:7f:04:aa:04:3d: 6a:d0:4e:20:1a:69:c9:ee:88:62:ce:9d:69:5e:29: 07:6b:1e:cf:dc:d7:97:92:f1:9b:e2:a7:56:a5:15: 92:0e:1b:d6:37:1f:89:72:d5:15:10:93:9b:f4:32: 0e:9a:df:28:fe:13:83:e8:f7:db:e9:e6:d6:1b:7b: 9b:bb:12:20:d1:fb:bb:96:d8:3b:e2:3e:93:e2:1d: cb:ab:07:09:4b:66:71:5c:49:70:c6:1f:e6:0e:ed: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:43:8E:2D:14:32:82:10:45:F4:84:CA:F2:99:76:84:3A:1F:5B X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:31:a5:5a:b9:9a:22:49:40:b8:2d:2d:75:78:56:a3:91:ab: 5e:5a:f7:28:03:8c:80:cb:20:5e:4b:1a:de:90:fd:c0:ff:71: 1a:9d:0a:2f:f4:12:e6:fa:55:84:eb:ba:df:e9:b8:41:8e:ff: 5e:b3:cc:5f:c8:a4:03:c4:b7:5a:d0:f9:d0:5e:89:34:1c:ff: ea:42:13:07:f6:72:95:8d:ca:ad:9e:0d:b3:24:09:32:f6:a4: 20:9e:4c:53:53:29:39:b9:e7:61:b6:f0:85:e3:8b:a5:4b:b9: d6:26:e7:68:11:ff:30:e8:dc:1e:fd:16:98:b6:d0:86:d6:ec: 13:cd:e2:26:f7:48:a8:19:03:af:c0:bd:29:53:d7:29:ef:8d: 1f:3b:b2:d1:9d:51:17:0f:20:e9:7b:59:e1:73:55:be:82:6e: 8d:9b:b2:f5:be:c5:b1:24:e2:73:17:f4:b9:ec:97:39:b4:ad: 31:e2:ba:39:e6:fb:fb:34:7d:85:07:34:0b:8c:da:95:b0:8f: e7:e9:26:bb:e1:6d:4c:5b:88:87:0f:a8:8b:c8:a3:4a:f9:41: 86:5a:55:fe:53:66:58:7e:4c:e9:eb:61:75:b0:50:1e:b6:18: aa:b0:19:47:64:02:6a:f9:6e:60:e3:4e:1a:73:3f:bf:81:76: 70:24:c5:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqRCbiIzH2DibSEOpUjR4xpiWuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTA3MjAxNDQ2MDFaFw0yNTA3MjMyMzEwMDFaMDMxMTAvBgNV BAMTKDBDRDU0MzhFMkQxNDMyODIxMDQ1RjQ4NENBRjI5OTc2ODQzQTFGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Iv0dCmD46rRSGt3g2SQGDgv3 SD84wW4nAoESoO7E7mSos037JZE6i+FUuTwxMFDmejJbohjx0qLcFeN1YiM1Kc/1 P/txevRtk8B7Hevbc4x0dxnU+4Unwws2LQ/bVXElbhq0b7jEoSqMsbXt2cTBG/JN ymrQ5SPkszLhiHz+HRmFwBWNVzF9a5hQhq4YgNZ3VqGm2wxDpDWo1zUT74J/BKoE PWrQTiAaacnuiGLOnWleKQdrHs/c15eS8Zvip1alFZIOG9Y3H4ly1RUQk5v0Mg6a 3yj+E4Po99vp5tYbe5u7EiDR+7uW2DviPpPiHcurBwlLZnFcSXDGH+YO7RwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNVDji0UMoIQRfSEyvKZdoQ6H1swHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcxpVq5miJJQLgtLXV4VqORq15a9ygDjIDL IF5LGt6Q/cD/cRqdCi/0Eub6VYTrut/puEGO/16zzF/IpAPEt1rQ+dBeiTQc/+pC Ewf2cpWNyq2eDbMkCTL2pCCeTFNTKTm552G28IXji6VLudYm52gR/zDo3B79Fpi2 0IbW7BPN4ib3SKgZA6/AvSlT1ynvjR87stGdURcPIOl7WeFzVb6Cbo2bsvW+xbEk 4nMX9Lnslzm0rTHiujnm+/s0fYUHNAuM2pWwj+fpJrvhbUxbiIcPqIvIo0r5QYZa Vf5TZlh+TOnrYXWwUB62GKqwGUdkAmr5bmDjThpzP7+BdnAkxUQ= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:23 2025 by rpki-client