$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: QQCEqKcSFwsbxCMtxMM/0KYRujrAa7cAGI31umy6gsk= Subject key identifier: DE:F5:A3:E5:25:E9:B1:90:2E:80:4F:DE:E7:93:A5:EC:DC:E7:94:54 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 452D4492109C8CF97D596B5136359EEC0A30BE39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 8B Signing time: Mon 21 Jul 2025 11:01:25 +0000 Manifest this update: Mon 21 Jul 2025 10:56:25 +0000 Manifest next update: Thu 24 Jul 2025 11:42:25 +0000 Files and hashes: 1: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 2: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 3: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 4: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) 5: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: ruUyw3L01vZmFQe+fGRJZLkzRB8YttCbI634ndHlTh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2d:44:92:10:9c:8c:f9:7d:59:6b:51:36:35:9e:ec:0a:30:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Jul 21 10:56:25 2025 GMT Not After : Jul 24 11:42:25 2025 GMT Subject: CN=DEF5A3E525E9B1902E804FDEE793A5ECDCE79454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:f1:24:44:25:0f:40:9b:50:24:a0:b0:6d: 30:31:f9:9c:12:46:63:43:39:ba:17:2f:8b:99:d8: 40:9d:1c:8f:20:70:fa:f6:aa:a0:bc:ce:3b:22:b0: 7f:b2:8d:c9:93:e9:16:18:ac:7a:10:be:fc:55:e8: 5b:b4:dd:d9:4f:89:77:2d:d2:89:31:70:76:da:60: 08:ce:76:d2:1c:2b:8b:5c:68:e9:dc:4b:7a:e5:01: b1:1c:bf:1f:f2:23:f3:05:28:6d:fd:7a:03:3d:87: 60:b7:a3:0a:db:5a:ef:97:43:c7:24:db:06:05:e9: 23:8e:ef:24:91:17:f5:b4:fe:e0:b1:c7:a8:63:9e: 60:6d:8f:65:d3:60:ec:7e:43:15:53:b2:85:da:7e: 8a:3f:3d:bc:27:80:2f:2c:9b:ce:5b:e8:2c:93:f6: 58:60:6f:ee:80:32:e2:7d:1e:29:17:d8:d9:33:2b: 84:82:94:45:f4:83:52:72:5b:70:47:41:4d:89:50: 2d:bd:9b:b3:ba:04:ab:1f:52:55:5b:9a:f6:48:51: 2a:be:a0:85:1a:2a:b7:d9:80:ed:b9:b7:ca:60:3e: a8:2d:ec:9f:cb:e0:48:26:15:d6:b2:4a:3f:90:c0: df:ae:53:98:e2:ed:33:c8:7a:ac:b2:66:d1:a4:47: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F5:A3:E5:25:E9:B1:90:2E:80:4F:DE:E7:93:A5:EC:DC:E7:94:54 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a1:08:a8:b7:0b:ed:fc:13:cf:9b:cf:ce:54:30:9a:fe:a8: 99:75:31:ee:28:3e:0c:9e:b0:c5:50:83:3b:2e:8b:be:84:d0: 3a:50:5c:71:32:0d:85:be:86:58:12:45:21:a1:06:9d:c2:45: 80:b7:23:b0:b4:d4:ac:c0:79:1c:34:2e:08:0e:99:5b:cf:cc: 7a:5d:a9:d6:f3:33:62:dd:dd:fd:88:65:ea:30:8e:d2:7f:b7: f1:ad:7d:25:45:55:4f:2e:11:b9:12:8a:cf:8f:47:45:37:8b: b3:1c:c1:c4:86:71:4d:f9:06:87:51:df:ee:5e:53:2a:ee:c1: 5e:f6:db:6e:b5:33:c4:b5:81:4f:d8:fc:54:ea:4d:b5:34:b6: bf:d5:8f:27:d8:d4:d4:cf:83:46:f5:a3:8b:26:05:b5:82:f1: 74:a8:f7:8e:e1:39:51:d2:9f:4a:cc:de:23:5d:8b:5f:ca:38: b2:65:5a:ba:b7:ec:ee:00:59:72:f3:44:f9:18:77:83:6c:8a: a9:f2:aa:24:35:10:8c:48:3b:09:7e:a0:16:a2:3d:17:91:e8: 22:39:cf:df:60:4c:cf:68:ef:e1:41:22:56:6d:ad:80:25:38: 0a:23:b6:81:5e:53:86:e7:6e:3f:42:3f:d8:ca:f3:ce:08:73: c8:74:91:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS1EkhCcjPl9WWtRNjWe7AowvjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA3MjExMDU2MjVaFw0yNTA3MjQxMTQyMjVaMDMxMTAvBgNV BAMTKERFRjVBM0U1MjVFOUIxOTAyRTgwNEZERUU3OTNBNUVDRENFNzk0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkvEkRCUPQJtQJKCwbTAx+ZwS RmNDOboXL4uZ2ECdHI8gcPr2qqC8zjsisH+yjcmT6RYYrHoQvvxV6Fu03dlPiXct 0okxcHbaYAjOdtIcK4tcaOncS3rlAbEcvx/yI/MFKG39egM9h2C3owrbWu+XQ8ck 2wYF6SOO7ySRF/W0/uCxx6hjnmBtj2XTYOx+QxVTsoXafoo/PbwngC8sm85b6CyT 9lhgb+6AMuJ9HikX2NkzK4SClEX0g1JyW3BHQU2JUC29m7O6BKsfUlVbmvZIUSq+ oIUaKrfZgO25t8pgPqgt7J/L4EgmFdaySj+QwN+uU5ji7TPIeqyyZtGkR+ONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3vWj5SXpsZAugE/e55Ol7NznlFQwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmhCKi3C+38E8+bz85UMJr+qJl1Me4oPgye sMVQgzsui76E0DpQXHEyDYW+hlgSRSGhBp3CRYC3I7C01KzAeRw0LggOmVvPzHpd qdbzM2Ld3f2IZeowjtJ/t/GtfSVFVU8uEbkSis+PR0U3i7McwcSGcU35BodR3+5e UyruwV722261M8S1gU/Y/FTqTbU0tr/VjyfY1NTPg0b1o4smBbWC8XSo947hOVHS n0rM3iNdi1/KOLJlWrq37O4AWXLzRPkYd4NsiqnyqiQ1EIxIOwl+oBaiPReR6CI5 z99gTM9o7+FBIlZtrYAlOAojtoFeU4bnbj9CP9jK884Ic8h0kfU= -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:03 2025 by rpki-client