$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: TaJIOGy7fwW1TZKVhJJ3TiplhOt3XJql/ti0B7hmO3c= Subject key identifier: 24:D7:61:96:BB:3B:27:6E:2A:90:FB:70:0D:69:07:59:31:22:94:4E Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 482E1F0C0B94211AA6750C3001FDD2DD61EC2DD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03F5 Signing time: Sun 07 Sep 2025 01:01:26 +0000 Manifest this update: Sun 07 Sep 2025 00:56:26 +0000 Manifest next update: Wed 10 Sep 2025 11:24:26 +0000 Files and hashes: 1: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 2: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 3: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 5: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 5jVQDpxL4NsJ5FdFWwfzLFRTHWHr0D518df0wcIUlB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2e:1f:0c:0b:94:21:1a:a6:75:0c:30:01:fd:d2:dd:61:ec:2d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Sep 7 00:56:26 2025 GMT Not After : Sep 10 11:24:26 2025 GMT Subject: CN=24D76196BB3B276E2A90FB700D6907593122944E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:d7:18:69:98:4f:72:00:d8:68:64:bb:3c: ac:b2:04:af:fd:af:a3:91:89:4b:da:a0:3a:54:d0: 9b:8c:33:90:22:ab:cc:f0:78:1a:e2:b4:11:de:32: a1:94:4a:c3:9a:ad:5f:cc:b9:fe:2d:17:05:a4:a6: 54:71:c1:4c:1d:cb:08:b4:8e:8e:07:e3:83:22:14: 7a:af:37:49:3c:b8:3b:23:ba:b6:15:0a:fa:9f:1b: 80:0f:69:ee:0a:3a:c6:50:8f:dd:dc:7b:41:d7:55: dd:d6:71:7f:82:5e:02:12:e0:9c:64:da:76:4b:40: 17:ab:7f:f0:9a:52:61:3e:49:9c:0f:b8:8a:7a:27: cb:6e:01:31:03:c1:65:34:5d:3c:5b:f4:97:3b:9a: 4b:de:a2:b4:d2:7c:9b:72:74:70:08:6e:55:d7:fe: 1a:52:93:a2:bd:a6:47:9c:20:17:1b:a3:28:ba:a1: 77:99:d0:18:11:65:df:09:11:16:5c:24:db:b1:bf: f2:2f:7a:b6:21:18:9b:25:3d:26:9e:25:b1:4d:00: 4b:1e:fb:23:f7:98:2d:67:b1:70:44:9a:48:7b:bb: 17:71:14:fb:9d:d4:52:26:f2:c3:49:ae:97:05:e1: e9:10:c5:b3:3b:9f:e9:47:b5:ba:b0:92:ab:cb:33: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:61:96:BB:3B:27:6E:2A:90:FB:70:0D:69:07:59:31:22:94:4E X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:04:42:75:f3:d4:bb:70:dc:42:7b:b3:ce:12:71:5b:59:24: 00:f0:a7:15:57:94:27:57:02:d8:f6:9d:ad:2b:77:6c:ae:e3: 20:66:51:2c:c9:94:af:ea:23:d4:4e:c7:4d:52:4f:09:5a:95: 58:2a:cf:bb:92:fa:25:46:af:09:21:3f:ea:2c:11:be:55:f7: 31:58:17:66:91:ee:97:83:ef:9b:6c:bb:c1:53:bd:de:f0:50: a6:ee:49:13:7e:da:d2:c9:31:ff:70:4c:2a:8b:43:9d:bf:aa: ae:f3:bc:1b:03:16:ae:66:e8:f9:b2:dd:ab:da:44:94:40:e9: b2:75:cf:c5:53:bd:d8:0d:a7:39:4b:a8:57:c9:42:17:4f:c4: 00:34:65:91:e0:ea:d3:e3:70:68:1b:0d:48:36:7e:6e:62:bf: 7a:b8:de:03:b5:f3:43:e8:34:af:f3:d3:c4:6a:92:ba:a2:1f: 34:c3:dc:e2:cb:0e:b5:d5:da:fb:97:6a:76:78:28:be:c4:36: b8:a9:5f:d0:08:4b:55:f3:40:59:01:52:13:27:c2:4c:f6:9b: c4:a2:9e:20:73:2e:b5:7b:21:1b:4d:28:c8:f8:fb:5b:36:2a: 4d:c4:f6:ef:50:43:51:b5:b8:75:ff:c1:a4:50:8e:09:02:ac: 34:70:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSC4fDAuUIRqmdQwwAf3S3WHsLdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA5MDcwMDU2MjZaFw0yNTA5MTAxMTI0MjZaMDMxMTAvBgNV BAMTKDI0RDc2MTk2QkIzQjI3NkUyQTkwRkI3MDBENjkwNzU5MzEyMjk0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/9cYaZhPcgDYaGS7PKyyBK/9 r6ORiUvaoDpU0JuMM5Aiq8zweBritBHeMqGUSsOarV/Muf4tFwWkplRxwUwdywi0 jo4H44MiFHqvN0k8uDsjurYVCvqfG4APae4KOsZQj93ce0HXVd3WcX+CXgIS4Jxk 2nZLQBerf/CaUmE+SZwPuIp6J8tuATEDwWU0XTxb9Jc7mkveorTSfJtydHAIblXX /hpSk6K9pkecIBcboyi6oXeZ0BgRZd8JERZcJNuxv/IverYhGJslPSaeJbFNAEse +yP3mC1nsXBEmkh7uxdxFPud1FIm8sNJrpcF4ekQxbM7n+lHtbqwkqvLM2MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNdhlrs7J24qkPtwDWkHWTEilE4wHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUEQnXz1Ltw3EJ7s84ScVtZJADwpxVXlCdX Atj2na0rd2yu4yBmUSzJlK/qI9ROx01STwlalVgqz7uS+iVGrwkhP+osEb5V9zFY F2aR7peD75tsu8FTvd7wUKbuSRN+2tLJMf9wTCqLQ52/qq7zvBsDFq5m6Pmy3ava RJRA6bJ1z8VTvdgNpzlLqFfJQhdPxAA0ZZHg6tPjcGgbDUg2fm5iv3q43gO180Po NK/z08RqkrqiHzTD3OLLDrXV2vuXanZ4KL7ENripX9AIS1XzQFkBUhMnwkz2m8Si niBzLrV7IRtNKMj4+1s2Kk3E9u9QQ1G1uHX/waRQjgkCrDRwFFo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:07 2025 by rpki-client