$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: qtcD+BYAyE82RXAp0jP1Lqy9etqXiOSSMoVpDuZkbbI= Subject key identifier: B1:20:0E:E5:D4:A9:8F:2A:8B:91:16:E0:0C:A8:23:05:83:17:C2:9A Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 75E5F2A9485A8D35E8BCDD3CC07976DDA847BC64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01AF Signing time: Thu 04 Sep 2025 14:31:28 +0000 Manifest this update: Thu 04 Sep 2025 14:26:28 +0000 Manifest next update: Sun 07 Sep 2025 19:27:28 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: 6+MBoxhjfxejA/8gEIXsPsdnHy7epYLQJc/Tkz4E4pI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e5:f2:a9:48:5a:8d:35:e8:bc:dd:3c:c0:79:76:dd:a8:47:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Sep 4 14:26:28 2025 GMT Not After : Sep 7 19:27:28 2025 GMT Subject: CN=B1200EE5D4A98F2A8B9116E00CA823058317C29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:78:15:0c:df:31:6a:bb:34:c7:8c:91:c2: a4:43:d4:c6:2b:58:ac:d6:69:5a:be:ae:f1:4d:6e: 24:76:d9:61:17:21:76:82:78:72:96:c5:17:d6:c1: 91:05:c5:ba:48:88:1d:0c:b8:0e:a0:4f:84:c7:5a: 2c:2f:b6:51:b9:cb:20:98:0c:cb:8c:61:7e:42:26: ca:2c:2d:fb:84:12:f5:00:11:92:55:35:15:03:8a: 11:18:5c:a6:87:91:5d:f4:17:f0:ff:67:4b:2e:d0: de:5a:9c:d6:f2:33:c0:39:e2:12:f9:2d:58:b4:fc: 60:b0:a2:ea:d8:f8:b6:f8:e6:53:3a:97:05:f8:75: a5:05:da:d3:ba:cb:4e:aa:7c:07:2d:8f:fa:ee:8d: ec:46:aa:85:51:00:e7:ef:0f:12:55:56:95:34:f7: a7:fb:5e:a0:11:35:76:6f:36:86:c9:c6:23:97:fa: c7:1f:dc:58:89:7c:af:34:03:84:be:a8:21:58:24: 49:e7:c8:8b:5d:4a:b6:bf:e8:bc:af:1e:0c:41:42: 3f:45:0d:95:af:82:a7:e9:fc:96:e3:80:0d:15:da: c4:e5:29:2a:97:e4:5b:a6:9a:e2:e5:02:2c:45:16: 04:43:40:a1:46:20:de:2e:29:1b:34:37:e7:37:38: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:20:0E:E5:D4:A9:8F:2A:8B:91:16:E0:0C:A8:23:05:83:17:C2:9A X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:77:a8:ce:37:2d:9e:49:be:44:02:26:d3:13:0f:de:b0: 4c:4a:8b:9f:3c:07:63:bf:1c:05:ef:99:c2:db:00:66:b1:e1: a2:41:2a:3c:60:90:93:69:fb:9c:ec:0f:f4:57:aa:bb:2f:56: af:93:29:65:89:f5:fd:b8:79:dc:07:c9:77:19:1c:e1:fe:ab: 8e:da:c9:c2:b4:b4:00:ed:64:33:b1:99:f2:5e:01:27:2b:2f: 9e:b6:f6:9f:43:72:a7:5c:13:5d:7e:e8:a5:3f:5a:c0:29:67: b0:16:b8:91:2a:61:f6:34:a6:41:b5:6e:e0:26:90:7d:72:6e: 2a:a3:f1:1f:49:3b:fb:86:7f:07:33:2b:ac:46:ac:5b:b6:ec: 23:4d:db:da:06:fc:a1:15:c9:c3:83:97:ec:ba:ff:66:75:24: ce:56:0e:4f:22:db:04:49:6f:01:54:46:2c:0b:76:6f:29:47: 6c:40:92:a2:06:f1:1d:68:ff:66:e3:b7:9c:69:18:e1:6c:8c: b8:a6:db:b5:f1:95:b6:15:8b:b3:cf:88:2f:d1:24:1c:66:64: f6:e3:f3:7b:8c:93:7b:2e:b5:b2:02:72:af:eb:67:e0:51:b6: d3:5e:92:c0:2e:e6:5d:bd:a6:d8:2b:96:07:ef:ac:99:65:3d: 99:8a:b1:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeXyqUhajTXovN08wHl23ahHvGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTA5MDQxNDI2MjhaFw0yNTA5MDcxOTI3MjhaMDMxMTAvBgNV BAMTKEIxMjAwRUU1RDRBOThGMkE4QjkxMTZFMDBDQTgyMzA1ODMxN0MyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+53gVDN8xars0x4yRwqRD1MYr WKzWaVq+rvFNbiR22WEXIXaCeHKWxRfWwZEFxbpIiB0MuA6gT4THWiwvtlG5yyCY DMuMYX5CJsosLfuEEvUAEZJVNRUDihEYXKaHkV30F/D/Z0su0N5anNbyM8A54hL5 LVi0/GCwourY+Lb45lM6lwX4daUF2tO6y06qfActj/rujexGqoVRAOfvDxJVVpU0 96f7XqARNXZvNobJxiOX+scf3FiJfK80A4S+qCFYJEnnyItdSra/6LyvHgxBQj9F DZWvgqfp/JbjgA0V2sTlKSqX5FummuLlAixFFgRDQKFGIN4uKRs0N+c3ODyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSAO5dSpjyqLkRbgDKgjBYMXwpowHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBwd6jONy2eSb5EAibTEw/esExKi588B2O/ HAXvmcLbAGax4aJBKjxgkJNp+5zsD/RXqrsvVq+TKWWJ9f24edwHyXcZHOH+q47a ycK0tADtZDOxmfJeAScrL5629p9DcqdcE11+6KU/WsApZ7AWuJEqYfY0pkG1buAm kH1ybiqj8R9JO/uGfwczK6xGrFu27CNN29oG/KEVycODl+y6/2Z1JM5WDk8i2wRJ bwFURiwLdm8pR2xAkqIG8R1o/2bjt5xpGOFsjLim27XxlbYVi7PPiC/RJBxmZPbj 83uMk3sutbICcq/rZ+BRttNeksAu5l29ptgrlgfvrJllPZmKsRM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:18 2025 by rpki-client