$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: l6qgcOjgRBFFdFKq5XSYTROdkMMKmR5Xa/TYV8Bilws= Subject key identifier: 99:5B:19:92:6A:80:2E:A2:6E:DF:B7:A8:76:EB:B1:CE:A6:6E:F0:41 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 1E44054874793C9EB08AD0A974184D5823F977C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03A4 Signing time: Sun 07 Sep 2025 22:01:56 +0000 Manifest this update: Sun 07 Sep 2025 21:56:56 +0000 Manifest next update: Thu 11 Sep 2025 01:55:56 +0000 Files and hashes: 1: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: DcGw7lQTaPXLVraXHq/DJ1NT4JfKZ0s9j/XX+gl0qRA=) 2: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=) 3: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=) 4: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=) 5: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=) 6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 01:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:44:05:48:74:79:3c:9e:b0:8a:d0:a9:74:18:4d:58:23:f9:77:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Sep 7 21:56:56 2025 GMT Not After : Sep 11 01:55:56 2025 GMT Subject: CN=995B19926A802EA26EDFB7A876EBB1CEA66EF041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:2a:2d:f8:bc:fa:58:38:37:d0:06:91:85: 93:de:c5:ab:19:59:0c:11:59:2c:8b:59:ba:5b:ad: 0a:2b:6f:39:53:6e:20:61:43:28:c5:c0:5c:76:bd: a6:82:9c:f4:e9:be:cd:73:03:77:2c:26:15:0f:1c: fd:01:96:81:b8:3f:b8:24:63:5f:83:a0:60:67:d5: 52:24:86:b2:73:65:79:26:0d:8a:9c:70:50:b3:a2: 3b:d3:45:38:83:1c:15:b7:9f:69:4a:6d:ee:5e:40: fd:14:de:ac:df:5c:40:b3:1c:1d:5e:72:8b:73:8e: 10:cd:7d:85:0f:3a:57:98:a6:6c:93:84:a1:fb:16: 59:8f:0e:02:a6:7b:0d:9d:b0:c0:29:77:ed:52:63: 08:2e:d4:ab:f5:78:f7:a3:c0:75:44:e6:16:8f:21: 22:fb:2d:70:6c:85:2c:de:b3:38:55:13:6d:c6:2b: e5:3a:62:7d:b1:05:4d:13:3d:70:7e:e2:79:f3:a6: ab:9e:5d:59:d5:85:0b:e8:6e:bc:96:15:3c:f6:42: 13:97:80:be:7b:ab:49:42:88:00:1c:ea:29:43:15: a8:c7:4e:19:d8:ed:6e:bb:a0:32:4c:7e:31:57:5f: 74:04:78:46:ef:bf:55:13:fb:a5:c5:f6:d0:f6:11: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:19:92:6A:80:2E:A2:6E:DF:B7:A8:76:EB:B1:CE:A6:6E:F0:41 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:02:91:3e:fa:9a:49:ec:95:8f:5d:f4:cb:52:2d:5f:b7:83: c1:b3:e4:cc:e0:9e:f6:bf:48:5d:bf:41:81:d0:f8:45:55:c6: 67:d2:9f:07:52:f0:cf:3d:ce:67:02:b7:27:00:be:bd:fa:a3: 0c:65:37:a0:49:e7:99:b0:66:42:01:38:0b:8d:e5:9a:97:2b: 5b:e0:82:bf:1e:d9:d6:ca:87:5e:58:30:6c:5b:2f:53:f3:82: da:ac:cc:c5:5f:34:83:7b:b5:4a:fd:8b:9a:bb:77:a6:cf:ba: e0:26:a8:3a:85:57:fa:8b:03:3a:32:30:1f:b2:8c:0b:86:bb: c2:9c:e4:1c:b7:40:c5:ba:f3:1a:a3:84:9a:87:26:a3:1b:85: b6:ee:e0:ff:c4:df:11:c3:32:4d:c7:ea:33:2e:72:76:62:fe: d6:27:b2:d0:0a:10:16:1c:2d:7a:5b:f5:3b:d1:8e:f3:ed:cb: 68:f3:ff:a3:88:95:c7:ee:ce:d9:01:cb:df:02:33:eb:f8:43: c6:66:71:58:e3:9e:64:2b:1b:8e:06:a6:2b:00:64:95:be:e9: 29:d9:fb:ee:52:1c:03:bd:2b:e2:2f:f9:fe:b3:d8:0a:2f:9d: c3:fb:70:bd:d7:bf:90:a1:34:b9:c6:cf:ce:cb:28:b2:81:4b: fb:d8:ab:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkQFSHR5PJ6witCpdBhNWCP5d8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTA5MDcyMTU2NTZaFw0yNTA5MTEwMTU1NTZaMDMxMTAvBgNV BAMTKDk5NUIxOTkyNkE4MDJFQTI2RURGQjdBODc2RUJCMUNFQTY2RUYwNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXISot+Lz6WDg30AaRhZPexasZ WQwRWSyLWbpbrQorbzlTbiBhQyjFwFx2vaaCnPTpvs1zA3csJhUPHP0BloG4P7gk Y1+DoGBn1VIkhrJzZXkmDYqccFCzojvTRTiDHBW3n2lKbe5eQP0U3qzfXECzHB1e cotzjhDNfYUPOleYpmyThKH7FlmPDgKmew2dsMApd+1SYwgu1Kv1ePejwHVE5haP ISL7LXBshSzeszhVE23GK+U6Yn2xBU0TPXB+4nnzpqueXVnVhQvobryWFTz2QhOX gL57q0lCiAAc6ilDFajHThnY7W67oDJMfjFXX3QEeEbvv1UT+6XF9tD2EXufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmVsZkmqALqJu37eoduuxzqZu8EEwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwCkT76mknslY9d9MtSLV+3g8Gz5Mzgnva/ SF2/QYHQ+EVVxmfSnwdS8M89zmcCtycAvr36owxlN6BJ55mwZkIBOAuN5ZqXK1vg gr8e2dbKh15YMGxbL1PzgtqszMVfNIN7tUr9i5q7d6bPuuAmqDqFV/qLAzoyMB+y jAuGu8Kc5By3QMW68xqjhJqHJqMbhbbu4P/E3xHDMk3H6jMucnZi/tYnstAKEBYc LXpb9TvRjvPty2jz/6OIlcfuztkBy98CM+v4Q8ZmcVjjnmQrG44GpisAZJW+6SnZ ++5SHAO9K+Iv+f6z2AovncP7cL3Xv5ChNLnGz87LKLKBS/vYq5w= -----END CERTIFICATE-----Generated at Tue Sep 9 13:40:36 2025 by rpki-client