$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: t+ag68wkVNGCrKOXTn+FMfQaYEaTinYNl74AmWsJJQ8= Subject key identifier: 6B:3E:B4:96:4D:56:81:BD:33:5D:19:8A:86:9A:9E:C9:79:7D:27:CA Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 4D6DA0F83B27EAC40B55876B63FAC75AF29D4D9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: C0 Signing time: Fri 29 Aug 2025 15:52:11 +0000 Manifest this update: Fri 29 Aug 2025 15:47:11 +0000 Manifest next update: Mon 01 Sep 2025 21:55:11 +0000 Files and hashes: 1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: rTIHP8f9fn3Je2FNd52ZUjAjBM9xCDzI6bC/bVMT2pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 21:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6d:a0:f8:3b:27:ea:c4:0b:55:87:6b:63:fa:c7:5a:f2:9d:4d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Aug 29 15:47:11 2025 GMT Not After : Sep 1 21:55:11 2025 GMT Subject: CN=6B3EB4964D5681BD335D198A869A9EC9797D27CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:1d:01:b5:5f:ed:44:06:e6:a5:3f:f0:35: 65:6f:73:de:19:fd:6f:d3:a0:f5:48:06:6d:54:eb: a1:17:01:60:a2:3c:e1:d0:60:3d:02:3c:12:e1:6d: 9b:57:79:cb:e4:6b:64:80:66:21:49:2a:78:6d:cf: a7:a5:19:e6:4d:1b:ca:bc:36:cc:7a:83:97:b9:10: 82:5c:a2:1d:c8:9c:87:6a:92:04:ab:0d:05:5d:d9: 4b:8b:26:a9:47:c5:30:79:5c:eb:87:aa:7f:ed:11: 68:48:e7:13:7b:68:d8:f7:3f:94:b0:44:09:1a:17: 3a:b0:4c:b5:51:37:33:3f:30:69:b9:b6:c2:90:15: 86:9b:3a:19:70:ad:ad:64:19:5d:b2:d6:ba:f2:75: 24:ab:9f:b1:43:f2:6f:15:04:71:1d:c1:ac:78:3b: bf:5e:c6:a9:33:13:d0:af:2d:b1:53:84:3d:f2:71: 06:20:4a:73:e6:da:54:c1:d2:e3:f5:a3:b0:10:54: e9:25:8c:88:40:89:bb:cd:e8:09:cb:16:c6:ba:8a: fb:03:63:db:e8:d3:3f:06:d1:34:b4:6a:ca:ac:aa: b8:66:82:a0:9c:34:22:f9:5a:97:c6:40:c9:0b:77: 79:07:23:8d:1a:81:17:dc:ad:1f:aa:bb:55:ed:26: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:B4:96:4D:56:81:BD:33:5D:19:8A:86:9A:9E:C9:79:7D:27:CA X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4a:f1:f8:73:2b:f6:75:97:80:c5:40:d4:10:13:e7:88:4a: 2f:e3:73:5b:0e:4f:fa:b9:46:ce:d2:44:52:ec:1c:37:98:d7: ae:67:e8:2d:95:09:fe:7a:f4:b1:4f:86:e6:59:0b:ce:3d:fb: 1a:1e:82:bb:60:ac:f2:22:fa:81:65:8e:b8:00:0b:24:b7:34: b1:96:da:80:8c:03:e4:9b:0b:3d:cf:c4:6d:59:e4:3d:fa:76: e7:3d:9e:0d:17:56:3b:a7:8a:19:25:0a:ad:bc:d9:42:a8:0c: ad:a9:d6:49:18:6c:9e:be:ce:1c:ac:d3:64:67:57:a1:30:db: 68:d9:fd:b6:e8:fb:bc:21:5f:1f:d0:94:c6:53:55:78:36:db: d5:c2:6a:7f:97:c6:5d:15:9e:ce:04:74:98:2b:20:31:ed:76: 98:82:87:4f:73:da:1b:33:36:86:e8:8d:cd:a3:d5:04:19:21: 41:6c:7d:07:0a:f0:18:bf:9a:bb:ad:26:13:83:bb:b9:01:59: 54:85:84:a5:4d:24:28:07:01:d1:d0:88:75:7f:7d:48:38:0d: 1f:3b:94:67:a5:5d:0e:33:d1:ec:5e:a7:30:59:b4:70:0c:ab: 8b:1c:16:c6:de:9a:9a:e1:f4:bd:cf:20:25:04:ab:15:3c:82: d7:ae:f9:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTW2g+Dsn6sQLVYdrY/rHWvKdTZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA4MjkxNTQ3MTFaFw0yNTA5MDEyMTU1MTFaMDMxMTAvBgNV BAMTKDZCM0VCNDk2NEQ1NjgxQkQzMzVEMTk4QTg2OUE5RUM5Nzk3RDI3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0h0BtV/tRAbmpT/wNWVvc94Z /W/ToPVIBm1U66EXAWCiPOHQYD0CPBLhbZtXecvka2SAZiFJKnhtz6elGeZNG8q8 Nsx6g5e5EIJcoh3InIdqkgSrDQVd2UuLJqlHxTB5XOuHqn/tEWhI5xN7aNj3P5Sw RAkaFzqwTLVRNzM/MGm5tsKQFYabOhlwra1kGV2y1rrydSSrn7FD8m8VBHEdwax4 O79exqkzE9CvLbFThD3ycQYgSnPm2lTB0uP1o7AQVOkljIhAibvN6AnLFsa6ivsD Y9vo0z8G0TS0asqsqrhmgqCcNCL5WpfGQMkLd3kHI40agRfcrR+qu1XtJuTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaz60lk1Wgb0zXRmKhpqeyXl9J8owHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtK8fhzK/Z1l4DFQNQQE+eISi/jc1sOT/q5 Rs7SRFLsHDeY165n6C2VCf569LFPhuZZC849+xoegrtgrPIi+oFljrgACyS3NLGW 2oCMA+SbCz3PxG1Z5D36duc9ng0XVjunihklCq282UKoDK2p1kkYbJ6+zhys02Rn V6Ew22jZ/bbo+7whXx/QlMZTVXg229XCan+Xxl0Vns4EdJgrIDHtdpiCh09z2hsz Nobojc2j1QQZIUFsfQcK8Bi/mrutJhODu7kBWVSFhKVNJCgHAdHQiHV/fUg4DR87 lGelXQ4z0exepzBZtHAMq4scFsbemprh9L3PICUEqxU8gteu+Yg= -----END CERTIFICATE-----Generated at Sun Aug 31 22:06:18 2025 by rpki-client