$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: 2N6TeGdmU93xtfOWaGTnYdazJuTt3VqiunRTUWBaXMg= Subject key identifier: 64:91:2E:66:2F:74:FD:B6:8D:B9:5E:47:43:D2:37:0D:68:C2:33:B8 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 508CD9F9FEAEFF6163E1AF2D4BE01FCC1A8084E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0503 Signing time: Fri 05 Sep 2025 08:02:09 +0000 Manifest this update: Fri 05 Sep 2025 07:57:09 +0000 Manifest next update: Mon 08 Sep 2025 15:42:09 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: 4u+jv2eLps211lLzG30EEJOC0yLO8k5jTbOlfyarN3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8c:d9:f9:fe:ae:ff:61:63:e1:af:2d:4b:e0:1f:cc:1a:80:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Sep 5 07:57:09 2025 GMT Not After : Sep 8 15:42:09 2025 GMT Subject: CN=64912E662F74FDB68DB95E4743D2370D68C233B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:c9:03:c3:c3:0f:d7:95:b9:f5:d2:80:77: 56:eb:7b:0b:91:6c:38:43:c6:e7:b4:4b:6b:42:56: 21:e1:a0:54:7c:48:a8:41:b7:21:a4:a2:44:52:75: 47:17:ef:d3:72:1a:3e:c8:57:c0:b9:a8:1a:9f:5b: 76:ed:a2:f2:b7:b2:50:8a:96:24:f4:ab:ec:d6:71: b4:3f:54:15:9b:c6:dc:8e:36:58:25:7b:b3:57:84: 2b:1b:2f:95:18:22:a7:64:f5:06:3b:1f:7e:82:92: 3e:53:b7:73:03:e1:0d:d2:33:d1:97:c7:cc:83:cb: 96:cc:27:2d:9a:79:47:f9:6c:ab:0d:2a:80:71:68: 45:14:5d:6f:8e:f5:31:d1:3f:42:10:38:0c:3d:d4: 9a:a8:84:46:77:46:6b:69:43:e6:30:8b:35:27:c7: 71:aa:0f:9c:a3:33:d7:9a:e2:6c:e4:e5:9e:29:99: 3f:7b:9e:3d:ab:b9:0e:a3:3c:e3:b6:23:aa:2b:7f: df:ab:dc:2f:a4:18:40:79:8f:cf:1c:3d:dd:49:d2: 3d:6b:1e:f6:29:70:32:6b:7e:8e:8f:d5:2f:77:f8: 72:2e:bf:69:c2:a5:dd:11:2a:8d:25:21:1f:e0:6c: 5e:43:0c:ab:c5:72:8c:4f:cb:07:a2:56:71:56:ee: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:2E:66:2F:74:FD:B6:8D:B9:5E:47:43:D2:37:0D:68:C2:33:B8 X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fc:de:09:b4:6b:09:6b:2c:82:56:ff:15:ca:8e:30:ab:df: 58:f3:0e:3e:99:67:c6:d1:9c:31:73:3d:8d:be:f1:4e:ab:29: b1:75:db:d5:3e:ac:2a:38:85:1b:9e:2b:d5:37:60:dc:25:54: 83:da:df:49:d7:6a:90:d1:f1:b7:b2:e9:fa:74:2c:f5:28:ee: d2:96:40:0a:a9:51:74:19:d7:af:2d:2a:59:0b:e4:09:3d:ce: bb:f9:0b:5d:cc:72:4b:b2:31:e5:b4:a4:26:72:35:31:61:48: e6:ff:5f:59:11:c5:c9:48:a6:5f:58:f9:de:01:3d:f3:d2:91: 6f:45:27:62:b3:f5:d6:30:4f:92:49:2c:b5:2e:0f:e9:05:79: f2:5b:62:f4:cb:e1:5d:6e:7e:42:2b:63:ed:97:22:7f:6d:d8: 73:7e:2d:0f:c2:56:a8:3c:4d:c2:6a:56:fc:2e:5e:e4:10:52: 55:ce:5e:3e:39:f0:0f:60:97:e9:64:45:61:5e:0f:40:84:fb: 20:90:39:ed:c2:33:74:8f:4f:14:43:c2:43:cb:64:fa:43:1b: 97:85:28:1b:7e:bf:82:ad:a8:a2:b2:14:ec:82:71:11:4b:45: 35:72:9e:28:b1:df:03:ce:c6:e2:03:e1:bf:fb:dc:0a:e0:9e: 5f:a2:fe:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIzZ+f6u/2Fj4a8tS+AfzBqAhOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA5MDUwNzU3MDlaFw0yNTA5MDgxNTQyMDlaMDMxMTAvBgNV BAMTKDY0OTEyRTY2MkY3NEZEQjY4REI5NUU0NzQzRDIzNzBENjhDMjMzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXMkDw8MP15W59dKAd1brewuR bDhDxue0S2tCViHhoFR8SKhBtyGkokRSdUcX79NyGj7IV8C5qBqfW3btovK3slCK liT0q+zWcbQ/VBWbxtyONlgle7NXhCsbL5UYIqdk9QY7H36Ckj5Tt3MD4Q3SM9GX x8yDy5bMJy2aeUf5bKsNKoBxaEUUXW+O9THRP0IQOAw91JqohEZ3RmtpQ+YwizUn x3GqD5yjM9ea4mzk5Z4pmT97nj2ruQ6jPOO2I6orf9+r3C+kGEB5j88cPd1J0j1r HvYpcDJrfo6P1S93+HIuv2nCpd0RKo0lIR/gbF5DDKvFcoxPyweiVnFW7poPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJEuZi90/baNuV5HQ9I3DWjCM7gwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT83gm0awlrLIJW/xXKjjCr31jzDj6ZZ8bR nDFzPY2+8U6rKbF129U+rCo4hRueK9U3YNwlVIPa30nXapDR8bey6fp0LPUo7tKW QAqpUXQZ168tKlkL5Ak9zrv5C13MckuyMeW0pCZyNTFhSOb/X1kRxclIpl9Y+d4B PfPSkW9FJ2Kz9dYwT5JJLLUuD+kFefJbYvTL4V1ufkIrY+2XIn9t2HN+LQ/CVqg8 TcJqVvwuXuQQUlXOXj458A9gl+lkRWFeD0CE+yCQOe3CM3SPTxRDwkPLZPpDG5eF KBt+v4KtqKKyFOyCcRFLRTVyniix3wPOxuID4b/73Argnl+i/tk= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:43 2025 by rpki-client