$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: LPZeCx9g3MGTT2iX+neDQZ+cxZEky3kbe4UiOQeN3Pw= Subject key identifier: C5:0D:DC:98:43:6E:5C:07:B4:71:0D:9F:DB:45:90:BB:D9:3C:CF:72 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 6C09EFC713072B14D7AC9F900C494688C47BCBD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: C9 Signing time: Sat 06 Sep 2025 18:30:39 +0000 Manifest this update: Sat 06 Sep 2025 18:25:39 +0000 Manifest next update: Wed 10 Sep 2025 02:19:39 +0000 Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 2: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) 3: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: Gwz0x8RoS9zrKs8leJUI5gJGNptyPWzGTXfKTUVuwY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:09:ef:c7:13:07:2b:14:d7:ac:9f:90:0c:49:46:88:c4:7b:cb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Sep 6 18:25:39 2025 GMT Not After : Sep 10 02:19:39 2025 GMT Subject: CN=C50DDC98436E5C07B4710D9FDB4590BBD93CCF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c2:54:bf:d6:ab:03:5f:3d:4b:9c:e2:af:d5: 51:0d:48:c2:dd:9f:8f:a0:e3:96:4f:ac:41:d3:fc: 41:ea:bc:c1:ed:91:e8:5c:22:02:04:a2:45:02:87: 6a:7c:33:48:99:2c:49:70:43:04:6a:2d:bc:e7:f3: 3f:8f:b5:cb:92:d5:ad:9c:3c:0c:10:d5:99:db:a1: 43:7d:68:62:af:65:70:52:16:d8:80:ab:a3:42:30: 06:95:11:23:38:80:d9:66:ba:da:7e:02:a1:e9:c6: bd:d9:53:46:7d:e9:01:2f:03:3d:69:7c:15:b2:54: 39:82:2b:a7:52:dd:bf:d5:e4:7a:6b:2f:e3:2a:dc: c5:51:00:b1:fa:bb:44:88:36:b0:63:0b:27:44:e2: 65:b6:34:06:00:cc:0b:4e:aa:64:2f:2d:5f:55:98: 78:2f:4c:34:61:c3:dc:81:41:95:44:b1:a9:c6:96: 10:77:0e:aa:49:29:96:a7:0e:dc:ff:31:f0:d4:8f: 2b:95:b9:40:48:6e:56:a8:7a:df:26:6d:af:95:cf: b3:ed:79:9c:02:d2:8d:6a:99:9d:3e:d1:6d:80:63: 24:79:e9:23:6b:ee:c2:69:b7:4f:b8:5f:54:0c:bf: e2:95:00:78:50:22:c2:ed:6f:e0:b2:09:e2:cd:6f: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0D:DC:98:43:6E:5C:07:B4:71:0D:9F:DB:45:90:BB:D9:3C:CF:72 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:e4:b4:2f:0f:75:20:5d:75:b6:20:53:d6:e5:75:dc:b3: 38:fd:3e:e0:e2:dd:d9:68:a0:6e:82:4e:ca:03:4f:61:bb:4b: ae:88:c6:56:d3:f6:3e:c2:e8:8b:f1:89:ac:19:42:a6:91:12: 68:e7:e7:62:11:cc:a9:ce:62:74:91:eb:1d:be:59:cc:85:38: 5a:8d:10:f4:a7:c7:05:63:f3:d0:34:71:2c:11:9b:e2:60:d4: bc:20:ce:9f:ab:fb:46:36:96:05:f8:27:3e:a9:de:0a:2f:b1: dd:33:f0:34:c1:61:a7:c9:b3:2a:4e:ed:96:74:c5:0b:cc:c6: 06:2f:58:c5:07:c3:35:3b:da:be:78:08:95:26:7d:d2:53:0f: 77:8c:98:df:21:be:24:3e:d2:3c:f4:f5:a2:ea:ec:3e:95:53: 8e:39:a2:bf:f9:f6:48:1c:f4:ce:9a:b9:d4:7c:4b:be:67:35: 59:26:ca:61:d2:69:2f:14:69:49:18:14:b5:bb:49:95:6f:71: 03:a2:68:28:02:cc:46:7b:db:94:c0:ec:b5:63:00:ff:08:61: bc:2c:8a:52:a3:c9:53:42:02:1c:51:ee:ad:0b:6c:cb:4e:06: b9:e8:52:50:b1:16:4d:0d:74:49:aa:04:c4:5f:03:e0:03:af: c3:01:8c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAnvxxMHKxTXrJ+QDElGiMR7y9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA5MDYxODI1MzlaFw0yNTA5MTAwMjE5MzlaMDMxMTAvBgNV BAMTKEM1MEREQzk4NDM2RTVDMDdCNDcxMEQ5RkRCNDU5MEJCRDkzQ0NGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowlS/1qsDXz1LnOKv1VENSMLd n4+g45ZPrEHT/EHqvMHtkehcIgIEokUCh2p8M0iZLElwQwRqLbzn8z+PtcuS1a2c PAwQ1ZnboUN9aGKvZXBSFtiAq6NCMAaVESM4gNlmutp+AqHpxr3ZU0Z96QEvAz1p fBWyVDmCK6dS3b/V5HprL+Mq3MVRALH6u0SINrBjCydE4mW2NAYAzAtOqmQvLV9V mHgvTDRhw9yBQZVEsanGlhB3DqpJKZanDtz/MfDUjyuVuUBIblaoet8mba+Vz7Pt eZwC0o1qmZ0+0W2AYyR56SNr7sJpt0+4X1QMv+KVAHhQIsLtb+CyCeLNb+WpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQ3cmENuXAe0cQ2f20WQu9k8z3IwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzq5LQvD3UgXXW2IFPW5XXcszj9PuDi3dlo oG6CTsoDT2G7S66IxlbT9j7C6IvxiawZQqaREmjn52IRzKnOYnSR6x2+WcyFOFqN EPSnxwVj89A0cSwRm+Jg1Lwgzp+r+0Y2lgX4Jz6p3govsd0z8DTBYafJsypO7ZZ0 xQvMxgYvWMUHwzU72r54CJUmfdJTD3eMmN8hviQ+0jz09aLq7D6VU445or/59kgc 9M6audR8S75nNVkmymHSaS8UaUkYFLW7SZVvcQOiaCgCzEZ725TA7LVjAP8IYbws ilKjyVNCAhxR7q0LbMtOBrnoUlCxFk0NdEmqBMRfA+ADr8MBjIc= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:38 2025 by rpki-client