$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: QV77BK9Tmd7k8vJXmgBZtGwnsSM2WQNMYivvvJTuELM= Subject key identifier: D3:CB:82:98:CA:47:C7:29:B8:F8:54:5C:FB:43:35:0C:19:99:92:AF Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 7B5ABE863301D2EEB038CBA5F0C293DF7C663BD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01C1 Signing time: Sun 07 Sep 2025 12:52:22 +0000 Manifest this update: Sun 07 Sep 2025 12:47:22 +0000 Manifest next update: Wed 10 Sep 2025 17:13:22 +0000 Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: UR0TWMWgXqudddMKhRSP7Y5sJnog+ckXeMzXSamPQ84=) 2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) 3: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: HIwoBbWMiJeTSxTtWUTBeSs75oTku9ThcKad8PIfypA=) 4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: 8bvQvtlBe7JNMYj2xQaIWZUm48/28VwMFP7AYXq8A30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5a:be:86:33:01:d2:ee:b0:38:cb:a5:f0:c2:93:df:7c:66:3b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Sep 7 12:47:22 2025 GMT Not After : Sep 10 17:13:22 2025 GMT Subject: CN=D3CB8298CA47C729B8F8545CFB43350C199992AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:b7:7d:60:65:e5:3e:c2:2a:c9:90:b5:1b: 1b:b4:53:a8:64:b1:25:9a:53:51:f1:b0:3c:d3:75: c4:cc:8a:a1:c6:e1:d0:41:fd:ad:79:ce:f6:f8:98: 06:a6:e3:d0:c4:d4:fc:80:ed:79:2b:3f:d7:ea:0c: 58:51:d8:11:bb:c0:e5:a6:33:9d:63:09:6a:98:a5: 5d:29:06:fe:c7:9f:0d:63:d7:ef:d8:41:c1:17:c5: 98:2a:3f:de:d9:e1:82:74:69:2c:2e:a5:e0:4f:89: bc:c7:72:92:97:0c:ed:96:1a:64:22:a9:37:98:14: f2:7e:9c:e1:48:4b:30:7c:39:56:f6:7a:69:a8:89: 12:60:5a:83:25:ad:a3:b5:09:bc:43:0c:fa:e9:d5: 30:aa:d6:23:56:94:a0:4d:92:ce:21:13:4a:f6:eb: ec:4a:f6:22:a5:09:41:10:5d:cb:13:68:4e:23:d8: 25:af:7b:97:72:db:fc:ec:8c:28:fd:ee:35:72:2c: f7:b0:14:6c:8c:41:50:48:a5:fd:f7:f9:c3:70:9e: 96:a1:8c:75:a8:ed:55:d1:a1:ed:bc:eb:e8:9c:2a: 1d:45:70:35:a5:c6:7b:e2:b2:0d:c0:94:32:9d:96: fe:a5:d3:44:d3:d0:73:26:5f:d7:70:0f:d9:3b:b4: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:82:98:CA:47:C7:29:B8:F8:54:5C:FB:43:35:0C:19:99:92:AF X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:79:d0:54:ab:92:ed:3c:4e:dd:f2:c5:4e:7a:94:e8:02:1b: 96:b6:94:60:28:e9:b0:62:96:24:1b:ae:05:e9:bb:67:e8:c9: ee:7a:d2:d8:ee:5d:fa:f8:ec:f2:f6:f4:07:92:9d:ad:4c:59: c8:06:0c:13:58:5f:dc:03:f6:b8:db:54:66:74:9d:a4:ee:2d: 7c:6a:6a:40:83:7d:50:6c:2f:53:64:2e:89:62:91:29:51:2b: f0:92:25:33:fc:c1:e5:16:c6:cd:19:c2:70:9f:7d:e0:95:81: 5a:90:65:82:39:b6:67:c5:e0:5a:c0:be:3c:1e:37:e9:d9:aa: a5:d9:6a:0e:a7:36:2b:c4:c4:d3:84:04:37:06:e0:d2:74:33: f0:ca:0c:52:98:05:f4:f5:41:5b:a2:eb:ab:0d:66:0a:7e:09: 03:cb:f0:d0:2f:5e:d8:39:76:6e:8d:a8:68:fd:75:de:d1:cc: 14:2b:35:93:cf:60:66:92:0a:3c:1f:b9:f8:63:07:19:b4:9c: 24:9e:55:31:6d:3c:c2:93:c5:d4:72:5f:e2:b8:cb:7e:86:85: b3:fd:a5:1b:c0:bb:b1:59:f9:38:74:a0:8f:88:16:c4:75:da: 2f:5d:f7:30:c8:5a:a2:84:bd:33:02:40:6a:08:0c:01:57:eb: df:0d:6c:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1q+hjMB0u6wOMul8MKT33xmO9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTA5MDcxMjQ3MjJaFw0yNTA5MTAxNzEzMjJaMDMxMTAvBgNV BAMTKEQzQ0I4Mjk4Q0E0N0M3MjlCOEY4NTQ1Q0ZCNDMzNTBDMTk5OTkyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnLd9YGXlPsIqyZC1Gxu0U6hk sSWaU1HxsDzTdcTMiqHG4dBB/a15zvb4mAam49DE1PyA7XkrP9fqDFhR2BG7wOWm M51jCWqYpV0pBv7Hnw1j1+/YQcEXxZgqP97Z4YJ0aSwupeBPibzHcpKXDO2WGmQi qTeYFPJ+nOFISzB8OVb2emmoiRJgWoMlraO1CbxDDPrp1TCq1iNWlKBNks4hE0r2 6+xK9iKlCUEQXcsTaE4j2CWve5dy2/zsjCj97jVyLPewFGyMQVBIpf33+cNwnpah jHWo7VXRoe286+icKh1FcDWlxnvisg3AlDKdlv6l00TT0HMmX9dwD9k7tP+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08uCmMpHxym4+FRc+0M1DBmZkq8wHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ50FSrku08Tt3yxU56lOgCG5a2lGAo6bBi liQbrgXpu2foye560tjuXfr47PL29AeSna1MWcgGDBNYX9wD9rjbVGZ0naTuLXxq akCDfVBsL1NkLolikSlRK/CSJTP8weUWxs0ZwnCffeCVgVqQZYI5tmfF4FrAvjwe N+nZqqXZag6nNivExNOEBDcG4NJ0M/DKDFKYBfT1QVui66sNZgp+CQPL8NAvXtg5 dm6NqGj9dd7RzBQrNZPPYGaSCjwfufhjBxm0nCSeVTFtPMKTxdRyX+K4y36GhbP9 pRvAu7FZ+Th0oI+IFsR12i9d9zDIWqKEvTMCQGoIDAFX698NbIU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:38 2025 by rpki-client