$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json) Hash identifier: eDThLf0SJ8tlXyXzPw/TXtCAkGO/b4XDaXvXV/G4KOc= Subject key identifier: C1:0A:48:F4:C2:12:F9:35:5B:4F:27:1C:FB:37:2B:1F:76:17:F5:48 Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Certificate serial: 07FEA72ABCBD0CD1555F6A9D8BC039AF4EDFFF9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft Manifest number: 0505 Signing time: Sat 06 Sep 2025 09:11:37 +0000 Manifest this update: Sat 06 Sep 2025 09:06:37 +0000 Manifest next update: Tue 09 Sep 2025 18:22:37 +0000 Files and hashes: 1: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: V1oVaDa+M4tiNXmSKcCtExiEntwXOl9qC700fxv0fTs=) 2: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=) 3: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=) 4: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fe:a7:2a:bc:bd:0c:d1:55:5f:6a:9d:8b:c0:39:af:4e:df:ff:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768 Validity Not Before: Sep 6 09:06:37 2025 GMT Not After : Sep 9 18:22:37 2025 GMT Subject: CN=C10A48F4C212F9355B4F271CFB372B1F7617F548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:a4:da:78:e1:eb:fa:92:ee:86:b7:f2:ca: 30:58:83:a0:40:b9:57:37:80:90:e4:e3:a6:45:50: d9:1f:03:c0:a5:e8:89:2d:a0:be:15:67:11:92:fe: b4:71:b6:e7:74:16:cb:82:fa:0c:b5:1a:d7:06:84: 69:76:2f:20:36:81:ac:90:79:57:09:31:4b:a5:bf: bf:fd:77:d1:6c:2f:52:32:a2:69:7a:f4:44:db:85: e3:ce:39:d7:96:5d:85:65:ea:23:b5:94:63:c8:e5: d7:c4:10:bb:c7:0b:54:84:1f:8c:d3:7f:8a:c8:8d: f2:8e:e7:3d:cf:8b:d5:99:a3:78:7b:bc:2f:55:18: 87:bd:42:e1:d1:e5:1c:9e:85:11:fb:0c:bb:98:b9: aa:1b:22:8b:fc:79:18:4b:46:84:ef:52:8a:ac:ca: 5b:30:17:b2:97:a3:ac:da:f3:fe:8b:8f:e4:6d:01: c5:d9:2c:5b:5c:16:b6:7a:02:23:e1:2c:e8:2f:bc: 47:72:1c:8c:6a:2d:c8:50:bb:1c:ff:87:15:e6:43: 3b:b4:b6:8b:55:e4:7a:e7:62:94:6c:d4:f5:14:ed: da:84:f8:17:a6:2d:1c:c5:f1:f2:51:bf:e6:1d:8a: c5:d1:9d:73:16:ca:92:de:1a:fe:5c:58:6d:71:7f: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:48:F4:C2:12:F9:35:5B:4F:27:1C:FB:37:2B:1F:76:17:F5:48 X509v3 Authority Key Identifier: keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8b:a3:02:06:b3:51:82:1f:25:49:06:5e:5f:e1:47:95:ad: de:0b:28:1f:29:ea:32:0f:45:9e:4a:fe:fe:eb:a2:f1:45:a4: 2b:00:3a:75:52:56:ab:de:c4:c1:51:38:75:52:f6:44:6e:99: fa:15:53:a7:20:90:ad:aa:86:42:7b:38:bb:cb:bf:46:96:6c: 46:55:86:d2:e3:d3:84:10:b3:34:87:6f:dc:b2:f3:5e:58:5f: fb:e6:ff:75:c5:45:75:4f:02:0e:7b:b3:1e:de:84:95:21:5a: 4a:a2:58:55:38:9d:cb:3b:5f:56:ea:11:b9:de:fe:b6:06:69: ff:3d:40:be:23:fd:33:86:4f:3a:fa:6e:cb:c5:df:6a:de:e2: 7b:dd:1d:4c:85:31:de:12:e3:a3:ad:5c:04:80:d9:4d:cf:b1: 6b:26:7a:0d:60:23:2d:88:65:29:ab:03:27:0f:e9:38:eb:53: 76:01:e6:a9:1d:d2:48:37:b4:3a:dd:0c:99:74:df:f4:9e:51: d3:06:13:eb:de:35:a4:ee:1d:59:36:82:de:19:2b:fb:82:ce: df:3c:93:3b:1e:50:b4:98:14:31:f7:5a:bb:c0:75:24:87:46: 71:87:cd:78:49:e5:b1:e4:b0:e5:13:66:24:ea:8b:91:29:35: 22:52:4d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/6nKry9DNFVX2qdi8A5r07f/58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0 MTcyODc2ODAeFw0yNTA5MDYwOTA2MzdaFw0yNTA5MDkxODIyMzdaMDMxMTAvBgNV BAMTKEMxMEE0OEY0QzIxMkY5MzU1QjRGMjcxQ0ZCMzcyQjFGNzYxN0Y1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwu6TaeOHr+pLuhrfyyjBYg6BA uVc3gJDk46ZFUNkfA8Cl6IktoL4VZxGS/rRxtud0FsuC+gy1GtcGhGl2LyA2gayQ eVcJMUulv7/9d9FsL1Iyoml69ETbhePOOdeWXYVl6iO1lGPI5dfEELvHC1SEH4zT f4rIjfKO5z3Pi9WZo3h7vC9VGIe9QuHR5RyehRH7DLuYuaobIov8eRhLRoTvUoqs ylswF7KXo6za8/6Lj+RtAcXZLFtcFrZ6AiPhLOgvvEdyHIxqLchQuxz/hxXmQzu0 totV5HrnYpRs1PUU7dqE+BemLRzF8fJRv+YdisXRnXMWypLeGv5cWG1xfygjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQpI9MIS+TVbTycc+zcrH3YX9UgwHwYDVR0j BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5 NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1 NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSLowIGs1GCHyVJBl5f4UeVrd4LKB8p6jIP RZ5K/v7rovFFpCsAOnVSVqvexMFROHVS9kRumfoVU6cgkK2qhkJ7OLvLv0aWbEZV htLj04QQszSHb9yy815YX/vm/3XFRXVPAg57sx7ehJUhWkqiWFU4ncs7X1bqEbne /rYGaf89QL4j/TOGTzr6bsvF32re4nvdHUyFMd4S46OtXASA2U3PsWsmeg1gIy2I ZSmrAycP6TjrU3YB5qkd0kg3tDrdDJl03/SeUdMGE+veNaTuHVk2gt4ZK/uCzt88 kzseULSYFDH3WrvAdSSHRnGHzXhJ5bHksOUTZiTqi5EpNSJSTcM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:39 2025 by rpki-client