$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: /A5rGqworfMBfn8JKniqPFrpYWYTU2NhcSuGBERpEEc= Subject key identifier: E6:15:F5:F5:32:FE:29:30:DA:53:48:5F:D1:AC:F3:95:C9:B5:02:B5 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 3BAF847B3AD9D2064A7B13CCAC3852FA0D93A814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 0105 Signing time: Sun 07 Sep 2025 11:10:36 +0000 Manifest this update: Sun 07 Sep 2025 11:05:36 +0000 Manifest next update: Wed 10 Sep 2025 15:25:36 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: xNJqoS2w4doDiXesChtg5Kv8RVAyhcw8fadXeOjIJmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:af:84:7b:3a:d9:d2:06:4a:7b:13:cc:ac:38:52:fa:0d:93:a8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Sep 7 11:05:36 2025 GMT Not After : Sep 10 15:25:36 2025 GMT Subject: CN=E615F5F532FE2930DA53485FD1ACF395C9B502B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:81:ca:21:76:09:be:a7:98:f8:29:24:0b: b3:c8:7f:26:8a:ca:1a:08:cb:db:41:04:f7:d3:a2: df:1f:b0:f8:1f:1a:e2:48:69:aa:9a:dd:1f:22:a9: f8:fd:b1:73:27:b1:d3:d2:c2:c3:8f:5e:be:5d:98: 84:01:08:8d:64:88:12:c6:d7:a4:7a:de:5c:0d:56: db:31:43:ad:5e:32:2b:7f:ba:89:5b:90:7d:f9:c0: a9:32:3a:16:5d:e0:ec:f7:1e:d3:22:e8:a4:a0:74: c5:77:a0:d2:6f:f0:36:0d:15:fd:64:03:c7:9b:10: 43:cf:1b:93:6c:83:96:55:2c:a2:2a:3f:47:b2:10: 17:27:1d:5f:c6:58:12:9d:02:11:2e:d3:11:6e:7c: 29:82:eb:8f:fe:0a:53:4a:22:7a:23:c0:55:ed:9c: 26:50:50:0b:5c:2e:44:a8:ac:48:a5:13:64:1d:e0: 42:68:34:48:31:c8:29:a7:2f:3a:ef:56:77:18:18: 97:eb:1a:5e:90:63:52:e6:a1:31:2c:d5:70:10:e2: 09:8f:a6:74:42:cd:95:4c:65:8e:10:94:df:3f:21: d0:cc:5d:c8:b3:6e:52:09:62:46:18:21:c9:a2:da: bd:32:43:00:be:d8:a5:01:07:da:6e:9c:99:33:71: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:F5:F5:32:FE:29:30:DA:53:48:5F:D1:AC:F3:95:C9:B5:02:B5 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5b:c7:0f:c8:7d:96:0c:6e:be:e4:f8:2b:b6:30:8f:e9:55: 07:50:19:81:01:be:7f:8a:e3:1b:7b:63:b6:a7:a6:5a:b4:fb: a3:b1:07:9a:51:8b:f0:40:dc:94:97:5d:4a:67:cc:26:43:ac: 65:1f:ec:0d:2b:47:94:2a:79:cf:e3:8a:6b:11:82:83:a8:c6: 10:e7:74:b6:0b:19:d3:8d:7b:dc:50:7a:7a:42:1c:1c:31:1d: 3e:eb:cb:30:45:28:70:fb:35:78:3b:a3:fa:bc:86:ea:bc:96: fc:b4:cf:28:dc:43:28:26:11:eb:57:4b:4d:cf:01:d4:09:32: d6:d9:fd:61:22:00:97:ab:cd:7c:f9:9f:bb:c8:48:66:fd:9d: 8d:53:f4:96:75:6d:a8:89:72:6b:12:8d:96:ef:ed:fe:5b:64: cc:be:bd:5d:20:16:18:3a:2e:f9:03:54:21:8e:82:b3:31:1a: 0b:b7:b8:43:4a:2f:fa:64:92:3c:20:d4:d4:a8:05:a4:8d:f5: 8f:2f:d7:23:85:41:b8:72:c0:cd:60:d9:f5:17:d6:21:81:cc: d4:97:d8:be:c2:54:36:16:89:bb:8a:34:02:67:6f:94:22:90: 13:25:16:ba:72:51:aa:61:a5:63:ca:74:58:cd:76:13:45:7e: 6c:0d:18:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6+EezrZ0gZKexPMrDhS+g2TqBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA5MDcxMTA1MzZaFw0yNTA5MTAxNTI1MzZaMDMxMTAvBgNV BAMTKEU2MTVGNUY1MzJGRTI5MzBEQTUzNDg1RkQxQUNGMzk1QzlCNTAyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDYHKIXYJvqeY+CkkC7PIfyaK yhoIy9tBBPfTot8fsPgfGuJIaaqa3R8iqfj9sXMnsdPSwsOPXr5dmIQBCI1kiBLG 16R63lwNVtsxQ61eMit/uolbkH35wKkyOhZd4Oz3HtMi6KSgdMV3oNJv8DYNFf1k A8ebEEPPG5Nsg5ZVLKIqP0eyEBcnHV/GWBKdAhEu0xFufCmC64/+ClNKInojwFXt nCZQUAtcLkSorEilE2Qd4EJoNEgxyCmnLzrvVncYGJfrGl6QY1LmoTEs1XAQ4gmP pnRCzZVMZY4QlN8/IdDMXcizblIJYkYYIcmi2r0yQwC+2KUBB9punJkzcZKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hX19TL+KTDaU0hf0azzlcm1ArUwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZbxw/IfZYMbr7k+Cu2MI/pVQdQGYEBvn+K 4xt7Y7anplq0+6OxB5pRi/BA3JSXXUpnzCZDrGUf7A0rR5Qqec/jimsRgoOoxhDn dLYLGdONe9xQenpCHBwxHT7ryzBFKHD7NXg7o/q8huq8lvy0zyjcQygmEetXS03P AdQJMtbZ/WEiAJerzXz5n7vISGb9nY1T9JZ1baiJcmsSjZbv7f5bZMy+vV0gFhg6 LvkDVCGOgrMxGgu3uENKL/pkkjwg1NSoBaSN9Y8v1yOFQbhywM1g2fUX1iGBzNSX 2L7CVDYWibuKNAJnb5QikBMlFrpyUaphpWPKdFjNdhNFfmwNGCo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:18 2025 by rpki-client