$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: 8dYY6AMLPE+k8NfpFIomMglxPRunDzCDW8ZYFYc/Wss= Subject key identifier: 92:62:71:8B:30:D5:71:EA:0A:2D:95:B9:B6:48:EE:73:29:F0:32:82 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 7BFBF6FD5284DE4ACAE0028C1D49BF3E46791AE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 025E Signing time: Sun 20 Jul 2025 11:10:03 +0000 Manifest this update: Sun 20 Jul 2025 11:05:03 +0000 Manifest next update: Wed 23 Jul 2025 11:50:03 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: GFh8Ar4J6O7xbYVhfs3L1hUBYVCVZg9wrcIpbEQvBmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 11:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fb:f6:fd:52:84:de:4a:ca:e0:02:8c:1d:49:bf:3e:46:79:1a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Jul 20 11:05:03 2025 GMT Not After : Jul 23 11:50:03 2025 GMT Subject: CN=9262718B30D571EA0A2D95B9B648EE7329F03282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:9f:ff:8c:fa:3c:a0:d2:27:ae:b0:c6:c9: 8b:77:e8:05:c6:61:94:4b:28:4b:28:c1:ff:56:0f: 65:9e:c5:69:26:70:10:96:03:cc:98:48:25:b9:f0: b4:36:ed:50:30:0e:ef:e7:2f:a5:21:92:ea:4f:e7: 80:b9:4c:0d:30:19:44:84:2d:60:ce:70:f4:2a:d9: a1:a8:99:f3:62:d4:34:c8:ce:d9:e3:3b:8b:25:d5: 13:e9:2c:5c:43:07:47:ab:12:2a:bc:c9:74:6a:91: f0:df:ee:2a:3d:94:cc:d3:19:1a:13:b0:51:d1:44: bc:e1:17:79:e5:cf:e9:c1:48:c2:8b:03:cd:b4:7d: 1c:2d:6a:92:28:b7:9e:f9:2d:79:e0:6a:44:55:3c: d2:c6:37:42:b2:f1:aa:7e:6a:e8:17:6b:fa:5a:9c: b4:79:09:dc:fb:ab:19:9c:bd:d9:73:32:74:32:12: 83:27:b5:20:a5:b4:7b:5c:ac:c2:e9:1d:3e:6e:e4: 59:6f:b8:ca:ec:c1:6d:bf:05:2f:84:65:b1:e4:03: a6:4d:d4:10:5f:bc:71:2b:5a:01:5d:5c:65:7f:f0: a8:cb:b6:30:0a:2b:ad:fe:0a:86:9f:3a:af:18:e7: 5a:98:f0:45:9d:5d:47:21:7d:40:d0:52:3f:0e:5a: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:62:71:8B:30:D5:71:EA:0A:2D:95:B9:B6:48:EE:73:29:F0:32:82 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:76:68:37:17:6e:6a:07:e5:4c:bc:71:6d:48:b4:26:27:ca: 90:20:1f:5d:32:56:fa:fa:8b:97:d1:59:40:39:56:6c:49:68: 22:13:da:d5:ee:05:6d:f2:dc:8d:c8:8b:9a:9b:ac:3d:b5:05: ea:32:93:9d:df:67:b9:31:6e:9a:80:56:4f:41:55:75:b5:0f: 72:ef:01:19:16:bc:03:79:41:4c:9c:e3:7c:13:0f:c3:07:b9: 90:78:b1:55:8f:39:66:f4:e6:92:f8:2c:c7:3a:c5:46:b1:7b: af:8b:23:1d:77:48:14:ca:ed:b5:25:19:7d:bc:8f:07:61:12: a7:5f:ca:7d:1a:7e:5c:43:4b:6c:45:1f:d3:f3:68:16:29:87: ee:c2:ee:a3:68:6d:56:30:55:02:9a:b9:fa:47:6f:7c:7c:9b: 1e:aa:27:b7:3f:6b:d4:f9:d7:9a:95:d8:88:d2:2a:22:65:02: 9e:55:87:ed:cf:49:db:ee:73:03:b0:18:a5:01:d6:55:b5:e5: 2f:10:a3:9f:6c:1c:12:61:87:64:65:48:cb:cf:6d:9f:74:62: 43:b7:18:58:d9:c9:d9:73:60:e9:ac:61:06:38:49:43:ee:ba: 46:8c:74:0d:45:d9:28:ab:60:db:16:0f:77:66:66:c3:5c:98: b6:49:d9:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/v2/VKE3krK4AKMHUm/PkZ5GucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA3MjAxMTA1MDNaFw0yNTA3MjMxMTUwMDNaMDMxMTAvBgNV BAMTKDkyNjI3MThCMzBENTcxRUEwQTJEOTVCOUI2NDhFRTczMjlGMDMyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LZ//jPo8oNInrrDGyYt36AXG YZRLKEsowf9WD2WexWkmcBCWA8yYSCW58LQ27VAwDu/nL6UhkupP54C5TA0wGUSE LWDOcPQq2aGomfNi1DTIztnjO4sl1RPpLFxDB0erEiq8yXRqkfDf7io9lMzTGRoT sFHRRLzhF3nlz+nBSMKLA820fRwtapIot575LXngakRVPNLGN0Ky8ap+augXa/pa nLR5Cdz7qxmcvdlzMnQyEoMntSCltHtcrMLpHT5u5FlvuMrswW2/BS+EZbHkA6ZN 1BBfvHErWgFdXGV/8KjLtjAKK63+CoafOq8Y51qY8EWdXUchfUDQUj8OWvpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkmJxizDVceoKLZW5tkjucynwMoIwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN2aDcXbmoH5Uy8cW1ItCYnypAgH10yVvr6 i5fRWUA5VmxJaCIT2tXuBW3y3I3Ii5qbrD21Beoyk53fZ7kxbpqAVk9BVXW1D3Lv ARkWvAN5QUyc43wTD8MHuZB4sVWPOWb05pL4LMc6xUaxe6+LIx13SBTK7bUlGX28 jwdhEqdfyn0aflxDS2xFH9PzaBYph+7C7qNobVYwVQKaufpHb3x8mx6qJ7c/a9T5 15qV2IjSKiJlAp5Vh+3PSdvucwOwGKUB1lW15S8Qo59sHBJhh2RlSMvPbZ90YkO3 GFjZydlzYOmsYQY4SUPuukaMdA1F2SirYNsWD3dmZsNcmLZJ2fk= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:04 2025 by rpki-client