$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: eFBqF8uhtiM3GX2zrARzhwO7P22S1W2nX7hKfCZavZY= Subject key identifier: 78:92:55:7C:AF:56:18:1F:33:A9:1E:84:FD:94:2D:E7:49:8D:D1:AC Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 2040D67BDADBEA645CA88929AE4AC1A5262FB45C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02DE Signing time: Thu 04 Sep 2025 23:31:09 +0000 Manifest this update: Thu 04 Sep 2025 23:26:09 +0000 Manifest next update: Mon 08 Sep 2025 06:02:09 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: ipBMMEaqUGFetACIQljv9WqH8+uMhT/ahazWT52fEl8=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:40:d6:7b:da:db:ea:64:5c:a8:89:29:ae:4a:c1:a5:26:2f:b4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Sep 4 23:26:09 2025 GMT Not After : Sep 8 06:02:09 2025 GMT Subject: CN=7892557CAF56181F33A91E84FD942DE7498DD1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:b1:68:86:cf:c2:a6:ac:55:2a:22:93:51: bb:a3:05:1f:3e:40:ea:83:cb:0c:4c:d9:f6:83:7a: c6:7b:75:aa:24:a5:fc:80:52:f2:14:09:78:0d:39: 55:ed:05:d3:0c:32:ba:87:d8:fe:37:eb:ad:dc:9a: 81:ee:54:9f:3a:c4:73:c4:b9:ec:9f:2e:32:00:10: 79:2d:8f:e7:99:11:5b:6c:11:95:4b:ed:a6:89:be: 34:2e:71:a6:91:89:a5:fa:5c:dc:0a:a3:14:f3:ef: 9b:dc:b2:03:eb:e7:d2:15:ef:61:48:f6:01:54:49: df:d5:3c:b3:81:c0:01:7c:ff:bf:8a:f1:ca:d3:f8: 92:01:cd:17:28:1a:cf:26:c1:0f:a8:87:f7:2a:cf: 7d:5e:db:12:3c:a0:12:3e:30:6c:24:12:00:6d:c5: 96:0b:76:73:4d:ff:1f:25:04:e9:09:ca:28:91:56: aa:74:e9:47:92:9c:69:18:62:cd:48:44:1a:6e:ca: 1a:09:1e:b4:e2:88:dc:60:82:2f:5f:b0:d7:e7:05: dc:4f:79:cf:7b:c0:2a:8c:43:15:f5:56:ee:24:cc: 6c:e9:be:2b:5f:cf:7d:fb:47:c2:ea:7c:2e:4b:e5: 46:99:80:6d:27:84:c8:a3:2d:79:56:e1:99:8e:9e: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:92:55:7C:AF:56:18:1F:33:A9:1E:84:FD:94:2D:E7:49:8D:D1:AC X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:82:34:7e:81:6c:89:5e:ad:99:ff:5f:29:b0:77:5d:d8:22: c5:70:18:9a:5e:cb:f9:b4:c0:bd:46:d9:89:2d:7a:c6:e1:3b: 6c:0f:2f:51:37:55:98:dd:be:15:f4:8b:7c:76:91:6e:27:2b: 48:a1:66:f7:8b:48:f6:7a:ca:4e:28:e6:f5:e2:41:f7:35:fb: 58:da:02:d5:66:03:1d:41:dc:b9:87:64:72:58:24:d2:2f:29: a3:1d:77:cd:c1:ae:a4:0e:fb:33:54:e7:fb:1e:ea:d1:9e:e2: ca:b5:b7:c9:37:bc:90:1f:a4:6b:77:e8:71:1e:36:70:b3:8c: ac:b6:b5:42:9e:5d:24:4d:5c:37:ea:a0:ef:43:ea:97:8d:ef: 7b:67:0b:7e:5a:e3:15:1d:cc:44:f5:bb:4f:3f:45:6b:74:42: 8f:d9:2a:71:e7:e0:8f:a5:49:9e:a3:e6:76:d7:c3:97:37:25: 7c:ad:0a:98:4f:81:7f:cd:07:45:e4:4c:e5:cc:1c:9c:a3:7b: b4:96:dc:b0:31:1f:1b:2f:e4:29:ce:13:21:1f:6d:af:81:30: 22:d9:a7:29:2b:43:69:4b:97:b2:49:f6:14:70:fc:03:36:78: f2:51:b7:f2:4a:a4:ca:60:d6:62:e1:03:c6:64:45:ff:b5:bc: bb:23:06:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEDWe9rb6mRcqIkprkrBpSYvtFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA5MDQyMzI2MDlaFw0yNTA5MDgwNjAyMDlaMDMxMTAvBgNV BAMTKDc4OTI1NTdDQUY1NjE4MUYzM0E5MUU4NEZEOTQyREU3NDk4REQxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9LFohs/CpqxVKiKTUbujBR8+ QOqDywxM2faDesZ7daokpfyAUvIUCXgNOVXtBdMMMrqH2P43663cmoHuVJ86xHPE ueyfLjIAEHktj+eZEVtsEZVL7aaJvjQucaaRiaX6XNwKoxTz75vcsgPr59IV72FI 9gFUSd/VPLOBwAF8/7+K8crT+JIBzRcoGs8mwQ+oh/cqz31e2xI8oBI+MGwkEgBt xZYLdnNN/x8lBOkJyiiRVqp06UeSnGkYYs1IRBpuyhoJHrTiiNxggi9fsNfnBdxP ec97wCqMQxX1Vu4kzGzpvitfz337R8LqfC5L5UaZgG0nhMijLXlW4ZmOnosLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJJVfK9WGB8zqR6E/ZQt50mN0awwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaCNH6BbIlerZn/Xymwd13YIsVwGJpey/m0 wL1G2YktesbhO2wPL1E3VZjdvhX0i3x2kW4nK0ihZveLSPZ6yk4o5vXiQfc1+1ja AtVmAx1B3LmHZHJYJNIvKaMdd83BrqQO+zNU5/se6tGe4sq1t8k3vJAfpGt36HEe NnCzjKy2tUKeXSRNXDfqoO9D6peN73tnC35a4xUdzET1u08/RWt0Qo/ZKnHn4I+l SZ6j5nbXw5c3JXytCphPgX/NB0XkTOXMHJyje7SW3LAxHxsv5CnOEyEfba+BMCLZ pykrQ2lLl7JJ9hRw/AM2ePJRt/JKpMpg1mLhA8ZkRf+1vLsjBoc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:31 2025 by rpki-client