$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: opdXdw5c+GDw2tGB1Xqth9ubeaxcOISisA92/63tUUE= Subject key identifier: 55:D0:A9:AF:54:6F:7E:92:6E:76:E1:5D:30:B9:20:9B:67:37:A4:D3 Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 1CC35ADE0E750F4687995AA38A0FEB84B509AAC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: E8 Signing time: Fri 29 Aug 2025 04:02:17 +0000 Manifest this update: Fri 29 Aug 2025 03:57:17 +0000 Manifest next update: Mon 01 Sep 2025 15:09:17 +0000 Files and hashes: 1: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: 9eVofWeIFS8Crk151j0/NMPfu16/WIzHBkd3zoQlXqU=) 2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: 1Pdkn1XdCzdzum9mckCuLJVHTJHT6dxGV24ibjO79m0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 15:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c3:5a:de:0e:75:0f:46:87:99:5a:a3:8a:0f:eb:84:b5:09:aa:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Aug 29 03:57:17 2025 GMT Not After : Sep 1 15:09:17 2025 GMT Subject: CN=55D0A9AF546F7E926E76E15D30B9209B6737A4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:c2:38:8f:20:29:a6:04:7c:aa:28:78:dc: 9a:96:ca:0c:09:33:f0:8d:5a:cf:c7:8a:9c:f6:df: 08:35:ba:72:f7:98:b3:9d:06:2c:1d:62:bc:28:8a: e3:31:bd:9a:19:90:63:f0:db:ed:7e:0f:ff:94:b2: 4d:34:7f:d2:26:35:9a:56:03:e3:2c:2b:7e:f4:5c: 68:67:f9:55:d6:77:e9:b8:56:e9:b7:7a:d2:66:4c: 7a:5e:c0:b0:a8:bd:47:52:a3:b0:97:81:37:c5:f4: c7:52:c1:c4:ed:bc:b3:85:ca:49:8c:05:e4:87:34: 06:64:e7:af:e7:67:31:ec:de:43:a6:5b:97:26:96: 19:ec:f8:9d:fe:9d:a0:46:01:8b:c7:51:8c:52:ca: 8b:49:42:83:12:62:ac:a5:4f:d1:cc:3e:09:ef:ac: 04:67:f1:b3:cf:b7:d3:34:a9:77:d4:ad:a9:df:4b: 20:0d:61:4e:fb:75:74:0f:3d:02:6b:42:a7:98:1e: b5:13:41:cc:c7:a3:b4:ae:75:36:3b:5b:12:d8:c4: 28:c8:de:1f:48:dd:2a:0c:e7:4a:c4:61:29:71:65: 6d:f7:52:cc:80:31:d9:74:fb:5e:84:32:5e:56:f3: 16:2e:95:6d:2c:83:bc:75:c4:ab:9e:b7:53:96:d6: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D0:A9:AF:54:6F:7E:92:6E:76:E1:5D:30:B9:20:9B:67:37:A4:D3 X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ae:69:d3:3a:24:87:fe:6c:27:f7:84:ab:ca:28:40:ef:e0: 7c:c2:3f:24:31:65:b0:8b:55:06:27:0a:ef:42:ca:56:7d:f8: 91:1e:1e:ab:48:73:50:af:a6:df:d5:8c:ae:a8:77:bc:3b:6d: 22:47:81:f5:2a:30:cb:b4:03:03:ad:59:b4:dd:13:3f:f2:6c: 55:da:e0:58:02:65:b6:7d:9f:2f:80:3c:22:b3:de:a8:82:62: ea:50:d3:05:3d:5d:07:b2:02:2e:b2:a3:70:6d:49:c1:c8:c4: 71:1e:aa:31:f5:d7:80:de:59:36:b9:ea:7c:52:0b:4d:16:cf: 7c:7c:ee:05:d5:2d:5d:5b:34:83:80:f9:3d:d6:ac:0b:e2:3a: d9:cb:95:37:39:1a:23:0d:c8:50:e3:b2:37:1a:db:c4:2f:9e: d4:08:f9:b1:76:58:07:75:6f:47:59:8e:76:20:ba:fb:79:85: ca:3e:14:e1:d0:c7:47:6f:4b:fd:a5:ed:37:69:48:2b:ac:d5: 92:7d:16:50:eb:9c:73:08:92:b4:bc:a3:e7:6d:93:e8:8e:6e: 39:4e:37:15:6a:3f:c0:f6:c1:27:bd:e8:ae:b4:8d:d4:ba:3c: a9:4e:15:e7:c8:ae:e6:7a:dc:cd:0a:d1:b5:c7:b2:7a:4d:11: 0d:21:56:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMNa3g51D0aHmVqjig/rhLUJqsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNTA4MjkwMzU3MTdaFw0yNTA5MDExNTA5MTdaMDMxMTAvBgNV BAMTKDU1RDBBOUFGNTQ2RjdFOTI2RTc2RTE1RDMwQjkyMDlCNjczN0E0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOcI4jyAppgR8qih43JqWygwJ M/CNWs/Hipz23wg1unL3mLOdBiwdYrwoiuMxvZoZkGPw2+1+D/+Usk00f9ImNZpW A+MsK370XGhn+VXWd+m4Vum3etJmTHpewLCovUdSo7CXgTfF9MdSwcTtvLOFykmM BeSHNAZk56/nZzHs3kOmW5cmlhns+J3+naBGAYvHUYxSyotJQoMSYqylT9HMPgnv rARn8bPPt9M0qXfUranfSyANYU77dXQPPQJrQqeYHrUTQczHo7SudTY7WxLYxCjI 3h9I3SoM50rEYSlxZW33UsyAMdl0+16EMl5W8xYulW0sg7x1xKuet1OW1rhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdCpr1RvfpJuduFdMLkgm2c3pNMwHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyuadM6JIf+bCf3hKvKKEDv4HzCPyQxZbCL VQYnCu9CylZ9+JEeHqtIc1Cvpt/VjK6od7w7bSJHgfUqMMu0AwOtWbTdEz/ybFXa 4FgCZbZ9ny+APCKz3qiCYupQ0wU9XQeyAi6yo3BtScHIxHEeqjH114DeWTa56nxS C00Wz3x87gXVLV1bNIOA+T3WrAviOtnLlTc5GiMNyFDjsjca28QvntQI+bF2WAd1 b0dZjnYguvt5hco+FOHQx0dvS/2l7TdpSCus1ZJ9FlDrnHMIkrS8o+dtk+iObjlO NxVqP8D2wSe96K60jdS6PKlOFefIruZ63M0K0bXHsnpNEQ0hVg4= -----END CERTIFICATE-----Generated at Sun Aug 31 10:58:02 2025 by rpki-client