$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: klzFpuv5Rw57AA8Wk0KK1X702xqyh8Dh282UtQ9vHoc= Subject key identifier: 8B:C9:0B:61:A4:B8:BB:43:B3:73:E7:85:BC:DE:D4:C4:6C:55:56:7C Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 63542E7D89F0C33352C24D4BF8DCCA601FDA869C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: B1 Signing time: Sat 06 Sep 2025 18:31:12 +0000 Manifest this update: Sat 06 Sep 2025 18:26:12 +0000 Manifest next update: Wed 10 Sep 2025 00:50:12 +0000 Files and hashes: 1: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) 3: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: noTD8lHapoaSuGPFLnQn0osSnFjCrAK4WVGl/GU1u3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:54:2e:7d:89:f0:c3:33:52:c2:4d:4b:f8:dc:ca:60:1f:da:86:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Sep 6 18:26:12 2025 GMT Not After : Sep 10 00:50:12 2025 GMT Subject: CN=8BC90B61A4B8BB43B373E785BCDED4C46C55567C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6c:c8:5c:7b:c8:6c:51:15:da:02:0e:7b:ad: e5:4d:f3:56:93:d3:b1:f0:14:35:f5:cb:cc:e4:bf: 99:c3:fa:c7:fd:47:14:98:5e:28:93:95:7b:dc:72: e9:f7:0d:3f:50:da:f4:2f:83:8b:a7:18:e9:65:b2: 54:97:9d:29:5a:b4:fb:26:75:54:ea:f8:93:c8:e5: b2:86:dc:7c:f9:9d:dd:56:46:af:2f:51:10:91:45: a8:ba:16:8c:59:50:05:eb:15:89:be:bb:a1:46:ca: c8:8d:b3:d5:e7:d1:67:69:89:dc:2f:8a:b1:ce:0c: 05:8c:cb:3b:9c:86:5c:fd:22:e1:46:3c:69:2c:3b: 90:25:0e:f2:bf:d1:3c:7a:1e:64:f4:c0:86:6b:80: d6:21:63:67:12:f8:6b:51:cf:ac:3b:1b:27:c4:64: 65:20:1d:dd:64:71:c9:6c:3b:d3:46:34:b7:ab:c9: 75:b8:7a:58:49:dd:32:82:ea:41:44:cd:9d:b2:f3: e6:56:f7:1d:a2:5c:bd:a9:c3:70:30:d1:58:84:93: 5f:01:c5:23:40:ad:58:b7:ae:10:7c:59:63:93:f2: 3b:be:8e:d1:a9:48:2d:96:b1:20:3e:fe:ee:52:3e: 12:df:31:34:fe:9c:0b:1a:db:95:c2:73:3f:25:f0: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C9:0B:61:A4:B8:BB:43:B3:73:E7:85:BC:DE:D4:C4:6C:55:56:7C X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ce:ce:0b:34:01:37:3c:a6:1c:cb:41:d3:48:ea:79:13:35: c7:14:41:6e:db:6c:f4:53:8f:2d:a3:1d:93:45:bc:81:45:e3: e9:87:53:a5:68:c3:2f:ff:e7:92:b9:73:58:18:da:1f:b9:4b: fa:88:d2:0b:bf:20:76:24:7c:59:fe:74:d2:ad:7e:aa:46:87: cc:aa:03:69:16:9a:38:ee:cf:f8:5e:a7:89:75:09:c2:34:fd: f7:3c:35:41:7c:a6:d3:0e:7c:7e:16:f5:2a:a6:14:12:5b:6e: e8:95:31:65:14:c5:5c:a8:d6:56:63:60:7b:64:a2:2a:be:31: 4e:d3:37:97:91:b9:17:6f:ca:14:35:01:94:20:86:bc:a0:c5: c9:dc:8c:79:3d:f7:a1:ac:ec:02:14:f0:1e:2f:1c:60:c9:9e: 51:a1:b4:77:1a:0e:b5:53:68:fd:cf:34:72:11:17:e4:0c:02: b4:74:2f:6d:ba:67:66:21:f3:b9:da:f7:21:4e:04:51:9c:7a: a7:e2:5c:23:6f:e4:65:c8:e9:0f:25:34:32:d8:67:3c:04:f1: 89:14:95:80:3d:67:50:1e:83:92:90:77:d5:eb:a2:f4:7c:fa: f8:a5:64:ce:5c:6b:61:3e:fc:d6:77:8d:d0:59:57:46:07:f1: 47:5d:7c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1QufYnwwzNSwk1L+NzKYB/ahpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTA5MDYxODI2MTJaFw0yNTA5MTAwMDUwMTJaMDMxMTAvBgNV BAMTKDhCQzkwQjYxQTRCOEJCNDNCMzczRTc4NUJDREVENEM0NkM1NTU2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvbMhce8hsURXaAg57reVN81aT 07HwFDX1y8zkv5nD+sf9RxSYXiiTlXvccun3DT9Q2vQvg4unGOllslSXnSlatPsm dVTq+JPI5bKG3Hz5nd1WRq8vURCRRai6FoxZUAXrFYm+u6FGysiNs9Xn0Wdpidwv irHODAWMyzuchlz9IuFGPGksO5AlDvK/0Tx6HmT0wIZrgNYhY2cS+GtRz6w7GyfE ZGUgHd1kcclsO9NGNLeryXW4elhJ3TKC6kFEzZ2y8+ZW9x2iXL2pw3Aw0ViEk18B xSNArVi3rhB8WWOT8ju+jtGpSC2WsSA+/u5SPhLfMTT+nAsa25XCcz8l8Ox3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8kLYaS4u0Ozc+eFvN7UxGxVVnwwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfOzgs0ATc8phzLQdNI6nkTNccUQW7bbPRT jy2jHZNFvIFF4+mHU6Vowy//55K5c1gY2h+5S/qI0gu/IHYkfFn+dNKtfqpGh8yq A2kWmjjuz/hep4l1CcI0/fc8NUF8ptMOfH4W9SqmFBJbbuiVMWUUxVyo1lZjYHtk oiq+MU7TN5eRuRdvyhQ1AZQghrygxcncjHk996Gs7AIU8B4vHGDJnlGhtHcaDrVT aP3PNHIRF+QMArR0L226Z2Yh87na9yFOBFGceqfiXCNv5GXI6Q8lNDLYZzwE8YkU lYA9Z1Aeg5KQd9XrovR8+vilZM5ca2E+/NZ3jdBZV0YH8UddfLI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:27 2025 by rpki-client