$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: txf+MPu41BCxmCBRuxdxvrNHRsVLNLvdvlcPBrtbQa8= Subject key identifier: 52:D2:9A:D2:48:C9:A1:AF:0D:4D:C5:95:51:95:0B:6B:FF:08:75:1A Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 05A866D7EA237BF98C65431E5D421876475ED5CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0213 Signing time: Fri 05 Sep 2025 20:52:21 +0000 Manifest this update: Fri 05 Sep 2025 20:47:21 +0000 Manifest next update: Tue 09 Sep 2025 07:30:21 +0000 Files and hashes: 1: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: 0g5BRbaqsH6xXKLXkmWZWCSdfAQew9bKkMUPwSYyab8=) 2: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a8:66:d7:ea:23:7b:f9:8c:65:43:1e:5d:42:18:76:47:5e:d5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Sep 5 20:47:21 2025 GMT Not After : Sep 9 07:30:21 2025 GMT Subject: CN=52D29AD248C9A1AF0D4DC59551950B6BFF08751A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:f2:af:4e:ac:9a:44:77:e9:7a:5b:02:27: 88:00:d7:87:91:dc:47:a2:42:68:5d:4f:f1:70:fb: 72:cd:dd:db:da:42:2b:16:73:7b:74:3a:05:c5:93: 29:38:35:16:21:b0:0b:0d:97:fe:dc:c0:e1:a2:b2: d0:63:b6:b0:59:26:69:ef:79:2a:4b:3b:65:3c:66: 98:a8:5c:57:0d:d5:0b:a9:3e:43:77:f4:9f:cc:35: d0:a7:2f:85:d8:08:34:b6:f5:f8:bc:07:c2:77:8f: d3:57:4c:15:58:21:ca:dc:1a:1e:b7:08:1d:d3:66: 67:34:52:1b:fd:f7:2c:f0:98:22:ff:4f:13:8b:94: 74:3f:5d:88:46:b3:07:62:a2:3b:25:f6:bb:09:1f: 68:bf:c7:de:82:86:ab:75:9a:db:a2:4f:3b:92:90: 51:10:c8:09:14:b6:af:f5:fd:ff:4d:84:fe:2c:ba: 76:e4:69:47:39:e5:d6:c8:cf:a0:53:3b:4c:8f:20: c5:62:bb:a7:b5:4f:a8:dc:89:c1:05:56:d8:a4:77: 28:9f:78:87:3f:5e:10:0d:25:dd:58:e1:96:f3:0b: 1a:44:43:c8:6f:3d:ae:7c:e3:20:35:0e:5c:06:77: 6e:dc:73:0f:a2:88:41:b9:3c:90:08:e1:5f:6f:20: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D2:9A:D2:48:C9:A1:AF:0D:4D:C5:95:51:95:0B:6B:FF:08:75:1A X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ff:73:b6:d5:6f:69:4d:2c:d0:77:76:b5:19:e7:90:93:51: c9:50:8f:d5:1a:d5:22:be:d6:8b:7b:53:ba:02:67:11:a4:5d: 9d:4b:4c:14:9a:52:f4:18:ca:4a:eb:0d:da:5c:6a:12:3e:c9: bb:8e:7b:f5:48:f5:af:6d:51:3e:fc:1c:b3:56:06:ab:c6:a5: f3:58:f3:8f:60:9c:d9:fa:f6:8a:98:47:53:42:2c:b3:e1:6d: b0:bb:35:2c:ce:02:74:cb:0a:d7:1b:0e:f9:9f:61:21:e8:07: e1:98:82:cb:6b:5a:a5:95:b1:12:df:c2:05:4b:2d:89:5b:53: ab:87:4f:fd:b7:49:b8:df:44:5f:87:49:95:c4:ee:ae:ba:36: ca:df:55:bb:6e:f5:27:21:39:91:2f:97:ac:ad:94:d8:78:d0: 48:e6:2f:44:8a:c0:7a:3b:ad:8e:97:b0:7d:52:b2:2d:7e:29: 16:18:41:cd:29:37:08:40:ef:a9:d2:8b:25:0d:20:67:30:47: f8:7d:b4:19:35:c2:f6:79:6d:a5:fe:cb:00:f1:a4:8f:4f:f4: c8:e0:8d:d5:d1:57:af:af:70:0f:f6:67:fe:d6:2d:11:81:7b: 5e:c3:3e:30:18:b3:b4:8e:9c:47:fe:a6:da:8e:38:de:6e:4a: 24:43:a9:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBahm1+oje/mMZUMeXUIYdkde1cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA5MDUyMDQ3MjFaFw0yNTA5MDkwNzMwMjFaMDMxMTAvBgNV BAMTKDUyRDI5QUQyNDhDOUExQUYwRDREQzU5NTUxOTUwQjZCRkYwODc1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVlPKvTqyaRHfpelsCJ4gA14eR 3EeiQmhdT/Fw+3LN3dvaQisWc3t0OgXFkyk4NRYhsAsNl/7cwOGistBjtrBZJmnv eSpLO2U8ZpioXFcN1QupPkN39J/MNdCnL4XYCDS29fi8B8J3j9NXTBVYIcrcGh63 CB3TZmc0Uhv99yzwmCL/TxOLlHQ/XYhGswdiojsl9rsJH2i/x96Chqt1mtuiTzuS kFEQyAkUtq/1/f9NhP4sunbkaUc55dbIz6BTO0yPIMViu6e1T6jcicEFVtikdyif eIc/XhANJd1Y4ZbzCxpEQ8hvPa584yA1DlwGd27ccw+iiEG5PJAI4V9vICqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtKa0kjJoa8NTcWVUZULa/8IdRowHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr/c7bVb2lNLNB3drUZ55CTUclQj9Ua1SK+ 1ot7U7oCZxGkXZ1LTBSaUvQYykrrDdpcahI+ybuOe/VI9a9tUT78HLNWBqvGpfNY 849gnNn69oqYR1NCLLPhbbC7NSzOAnTLCtcbDvmfYSHoB+GYgstrWqWVsRLfwgVL LYlbU6uHT/23SbjfRF+HSZXE7q66NsrfVbtu9SchOZEvl6ytlNh40EjmL0SKwHo7 rY6XsH1Ssi1+KRYYQc0pNwhA76nSiyUNIGcwR/h9tBk1wvZ5baX+ywDxpI9P9Mjg jdXRV6+vcA/2Z/7WLRGBe17DPjAYs7SOnEf+ptqOON5uSiRDqaE= -----END CERTIFICATE-----Generated at Sun Sep 7 16:14:46 2025 by rpki-client