$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: QBbfF1XoFvfjcqIZdclobFEXc1qrEqlLzUQlEwNz8uo= Subject key identifier: 1A:6A:87:52:1D:B5:98:2E:AC:EC:1A:63:91:B6:7D:B9:AA:54:DB:AA Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 507C85A5B33E38D053376327FB124F86BDF0BC0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 0113 Signing time: Wed 03 Sep 2025 17:21:17 +0000 Manifest this update: Wed 03 Sep 2025 17:16:17 +0000 Manifest next update: Sat 06 Sep 2025 22:33:17 +0000 Files and hashes: 1: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: hfP8kB+b9BsDNLIciI1qFzRthEePtpOdhgo357DkKXM=) 2: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) 3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 4: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7c:85:a5:b3:3e:38:d0:53:37:63:27:fb:12:4f:86:bd:f0:bc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Sep 3 17:16:17 2025 GMT Not After : Sep 6 22:33:17 2025 GMT Subject: CN=1A6A87521DB5982EACEC1A6391B67DB9AA54DBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:dd:f5:f4:3b:f1:3c:28:15:2b:06:e0:16: 1c:72:70:b5:b0:78:93:a5:24:64:26:50:04:d1:02: c5:a1:28:1e:01:61:8d:d1:8d:02:a9:b4:ea:b8:f4: 82:8d:79:55:be:c9:03:7f:a1:a6:65:b1:9d:3d:7a: 7a:66:dc:c4:bd:bd:01:6e:fc:9c:8e:5f:fc:fd:73: 1e:59:e9:df:3c:a6:4b:e9:6c:2d:97:39:d8:89:84: bc:bf:7a:85:ee:90:da:0e:b6:f2:dc:e0:1a:93:85: 83:e5:53:07:74:93:85:53:c0:88:ba:97:e5:c9:a3: b0:60:f2:6a:ef:59:f9:ab:27:90:1e:fa:4a:5e:9c: 41:c5:1e:80:ac:46:28:f8:09:82:65:ba:c9:e0:83: 75:6b:9b:5b:9f:b1:c0:90:0e:41:9d:9c:0d:d6:70: 48:ce:3f:d0:87:3d:74:70:9f:99:e7:da:73:7a:ac: 04:47:06:90:45:3a:a2:d7:fb:5a:83:08:6b:99:3b: 81:fc:16:3a:6c:52:41:55:b1:06:b0:42:93:25:ac: 92:d9:c2:8e:59:39:71:7f:eb:3c:a8:8a:c4:a1:05: fc:6a:96:e1:72:22:39:77:0a:f5:c1:03:52:3e:39: bb:16:fa:59:5d:e2:ee:f8:a6:c1:a1:72:c1:ee:93: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:87:52:1D:B5:98:2E:AC:EC:1A:63:91:B6:7D:B9:AA:54:DB:AA X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:32:44:11:16:f4:06:27:58:77:21:b8:e9:5d:a9:c3:cd:0e: 9b:ef:80:91:bd:1c:27:da:dc:59:94:37:3d:3d:e8:99:87:59: 50:b4:db:0d:9d:8a:21:46:41:32:8b:9b:28:90:17:68:1d:94: 0c:ff:4e:53:7a:d7:34:8e:9e:32:e2:80:4f:94:71:90:2e:ed: 0a:ca:fb:34:8b:9a:ab:a4:0c:89:2c:0c:99:1e:1d:b8:3f:7f: 20:22:1e:5a:e9:85:7a:2c:35:1b:96:0f:97:09:49:a1:5c:0c: 80:fa:ce:2f:72:8d:6c:48:73:26:6b:dd:db:57:aa:f0:6a:39: 7e:b7:0d:81:19:ea:b8:6b:f6:53:74:ba:b6:76:d2:5d:70:51: 17:eb:bc:75:b5:7c:84:03:b6:0d:80:83:3d:a4:44:8e:42:34: f7:fc:da:80:93:18:7c:0e:bc:8a:d5:dd:c8:b7:33:da:ac:3b: bc:14:21:32:d7:30:1f:db:ba:6d:4c:39:51:01:34:08:c7:1f: 14:43:4b:9d:98:d6:62:2f:8a:69:75:bc:d2:35:2a:a5:b4:35: f9:56:3a:a9:32:28:24:eb:c9:63:e6:f9:76:f8:78:3f:bb:fd: 81:fd:98:5d:5a:00:f4:13:26:74:ee:3b:ad:2c:38:b6:0c:65: 78:28:fc:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHyFpbM+ONBTN2Mn+xJPhr3wvAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA5MDMxNzE2MTdaFw0yNTA5MDYyMjMzMTdaMDMxMTAvBgNV BAMTKDFBNkE4NzUyMURCNTk4MkVBQ0VDMUE2MzkxQjY3REI5QUE1NERCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmN319DvxPCgVKwbgFhxycLWw eJOlJGQmUATRAsWhKB4BYY3RjQKptOq49IKNeVW+yQN/oaZlsZ09enpm3MS9vQFu /JyOX/z9cx5Z6d88pkvpbC2XOdiJhLy/eoXukNoOtvLc4BqThYPlUwd0k4VTwIi6 l+XJo7Bg8mrvWfmrJ5Ae+kpenEHFHoCsRij4CYJlusngg3Vrm1ufscCQDkGdnA3W cEjOP9CHPXRwn5nn2nN6rARHBpBFOqLX+1qDCGuZO4H8FjpsUkFVsQawQpMlrJLZ wo5ZOXF/6zyoisShBfxqluFyIjl3CvXBA1I+ObsW+lld4u74psGhcsHuk/U/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmqHUh21mC6s7BpjkbZ9uapU26owHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkyRBEW9AYnWHchuOldqcPNDpvvgJG9HCfa 3FmUNz096JmHWVC02w2diiFGQTKLmyiQF2gdlAz/TlN61zSOnjLigE+UcZAu7QrK +zSLmqukDIksDJkeHbg/fyAiHlrphXosNRuWD5cJSaFcDID6zi9yjWxIcyZr3dtX qvBqOX63DYEZ6rhr9lN0urZ20l1wURfrvHW1fIQDtg2Agz2kRI5CNPf82oCTGHwO vIrV3ci3M9qsO7wUITLXMB/bum1MOVEBNAjHHxRDS52Y1mIviml1vNI1KqW0NflW OqkyKCTryWPm+Xb4eD+7/YH9mF1aAPQTJnTuO60sOLYMZXgo/M4= -----END CERTIFICATE-----Generated at Fri Sep 5 12:03:31 2025 by rpki-client