$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: rI+PaeKLb5+GHMFvlLx8IUFp8VKX28cZlZt1VKnzgsA= Subject key identifier: FD:9D:0F:20:16:B9:03:9B:A7:B5:8F:50:F2:E8:08:92:E9:D8:C7:3C Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 11AA2CE37662E24F9D8FC4C145BE95C4932D898F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: 92 Signing time: Sat 06 Sep 2025 08:40:05 +0000 Manifest this update: Sat 06 Sep 2025 08:35:05 +0000 Manifest next update: Tue 09 Sep 2025 15:23:05 +0000 Files and hashes: 1: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: 2vOFpMrWWhmXtH2czuxrUQ7FxJ6zJ2c/aChdVcEbsFo=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: qQpFLnjSrZjdy07FM2TviIie4W5UxekPgT0NJm9BT0c=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: WF2EQ4NoWy0FUwj/4wZEsZYgK5I+o6WegPxbWofx25Q=) 4: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: iMRx2/fycoUNnADpURoZKgG+Fnid0mUKuiDUMMFE+zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:aa:2c:e3:76:62:e2:4f:9d:8f:c4:c1:45:be:95:c4:93:2d:89:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Sep 6 08:35:05 2025 GMT Not After : Sep 9 15:23:05 2025 GMT Subject: CN=FD9D0F2016B9039BA7B58F50F2E80892E9D8C73C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:ac:cf:7e:8f:97:53:95:9b:a1:0c:20:a8: 99:2c:ca:32:c9:30:72:ee:10:57:58:29:a5:32:98: 12:de:68:36:56:50:9a:e5:fe:ab:8e:bc:65:92:59: 2d:14:25:97:ce:97:88:fc:63:8a:8b:b5:b6:49:a1: 7d:52:c8:bf:19:80:de:2a:49:d0:4a:12:ef:82:d1: 62:5f:a4:08:f8:01:3f:4f:06:d1:ca:2e:c8:c3:d8: d1:c6:c6:ef:e6:5e:11:d2:69:f3:52:e3:78:b9:8e: e7:f0:ad:24:20:c3:4f:bd:c5:13:ad:0c:f3:76:3e: fa:34:48:0c:fb:dd:af:93:75:b4:0a:79:cd:69:8c: 0c:88:93:19:7a:fc:4d:17:06:13:d3:2c:03:ce:40: 70:ad:0b:f7:ac:51:47:12:94:cf:8e:19:d4:ac:2b: 59:37:3c:6c:b4:e8:72:6e:a0:1d:15:12:c0:0c:d9: 21:d5:83:77:99:6a:35:d5:2c:bf:5c:a4:44:b6:b2: 1a:4c:4b:7e:ec:e8:34:93:26:3c:54:44:33:4c:de: 80:24:5c:a7:f9:a4:79:48:55:38:6d:1f:a6:6a:87: 4f:33:67:7b:da:83:90:c9:ce:eb:63:06:59:75:0e: bf:e8:6d:f0:cb:4e:96:a2:b9:8f:90:35:78:49:18: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:0F:20:16:B9:03:9B:A7:B5:8F:50:F2:E8:08:92:E9:D8:C7:3C X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ba:f2:1b:f0:ba:e1:d3:29:dd:0d:da:06:a0:ed:77:8a:85: ca:ae:e1:56:b5:49:c7:40:e2:8c:d2:ff:ea:d6:a0:49:11:e2: 40:d8:55:83:10:7d:56:2b:df:3a:1a:54:7d:11:95:a7:11:ff: 1a:2c:57:0d:ce:3c:2b:8c:77:1a:6f:1e:60:7b:e2:1c:59:4f: 3e:16:2b:73:e4:a4:cc:ee:08:46:ef:75:0d:d2:bf:7f:d2:97: 44:b0:c1:a7:a4:48:5f:ba:9b:7f:f8:2c:f2:6e:7b:2e:a2:f5: 10:db:84:f7:58:7e:5c:41:d1:84:29:ce:20:6d:91:b8:4f:86: 10:ec:4b:86:18:ca:8e:9e:c5:66:75:38:01:4a:1c:5d:c7:ab: e8:12:3a:c3:8e:ec:66:32:80:ba:1a:52:3a:e7:e5:88:d0:4c: 07:4a:42:9e:81:44:71:ec:1d:d1:89:79:cb:ae:af:74:b3:3a: 41:cd:e5:5d:44:58:98:59:2e:1b:bb:4d:68:d0:50:0e:90:82: 2b:b8:9c:44:5d:9d:c6:f6:c0:7f:db:80:74:4d:92:28:0a:35: 06:41:8e:a0:2c:f5:57:98:c5:33:37:c5:e5:c7:3c:28:8b:2d: 46:d9:46:6f:4e:c0:48:43:b7:83:62:53:ff:e0:03:85:da:e8: 54:ef:b4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaos43Zi4k+dj8TBRb6VxJMtiY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNTA5MDYwODM1MDVaFw0yNTA5MDkxNTIzMDVaMDMxMTAvBgNV BAMTKEZEOUQwRjIwMTZCOTAzOUJBN0I1OEY1MEYyRTgwODkyRTlEOEM3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsqzPfo+XU5WboQwgqJksyjLJ MHLuEFdYKaUymBLeaDZWUJrl/quOvGWSWS0UJZfOl4j8Y4qLtbZJoX1SyL8ZgN4q SdBKEu+C0WJfpAj4AT9PBtHKLsjD2NHGxu/mXhHSafNS43i5jufwrSQgw0+9xROt DPN2Pvo0SAz73a+TdbQKec1pjAyIkxl6/E0XBhPTLAPOQHCtC/esUUcSlM+OGdSs K1k3PGy06HJuoB0VEsAM2SHVg3eZajXVLL9cpES2shpMS37s6DSTJjxURDNM3oAk XKf5pHlIVThtH6Zqh08zZ3vag5DJzutjBll1Dr/obfDLTpaiuY+QNXhJGDObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Z0PIBa5A5untY9Q8ugIkunYxzwwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO68hvwuuHTKd0N2gag7XeKhcqu4Va1ScdA 4ozS/+rWoEkR4kDYVYMQfVYr3zoaVH0RlacR/xosVw3OPCuMdxpvHmB74hxZTz4W K3PkpMzuCEbvdQ3Sv3/Sl0SwwaekSF+6m3/4LPJuey6i9RDbhPdYflxB0YQpziBt kbhPhhDsS4YYyo6exWZ1OAFKHF3Hq+gSOsOO7GYygLoaUjrn5YjQTAdKQp6BRHHs HdGJecuur3SzOkHN5V1EWJhZLhu7TWjQUA6Qgiu4nERdncb2wH/bgHRNkigKNQZB jqAs9VeYxTM3xeXHPCiLLUbZRm9OwEhDt4NiU//gA4Xa6FTvtHw= -----END CERTIFICATE-----Generated at Mon Sep 8 05:14:24 2025 by rpki-client