$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: IXOdR7ZQSvR63zVLN+NaZ9pA1TcI7aee+ITGAFhF/2Y= Subject key identifier: B3:5A:A6:97:4F:E8:9C:36:C1:FD:4B:43:18:FD:03:75:CF:97:23:88 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 644BF6A434E1DE62845A698010599B0EDD9E21EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 0273 Signing time: Sat 06 Sep 2025 09:20:03 +0000 Manifest this update: Sat 06 Sep 2025 09:15:03 +0000 Manifest next update: Tue 09 Sep 2025 19:05:03 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: xQC81i+3DWfjpD4r96fSRvKpXU1P1kbzTbf+8nxkzDs=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4b:f6:a4:34:e1:de:62:84:5a:69:80:10:59:9b:0e:dd:9e:21:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Sep 6 09:15:03 2025 GMT Not After : Sep 9 19:05:03 2025 GMT Subject: CN=B35AA6974FE89C36C1FD4B4318FD0375CF972388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:79:0d:e7:64:03:5b:82:5a:4c:d2:8a:5d: c6:f6:7f:bd:d3:d7:2b:f2:55:c0:a9:01:96:32:4f: c0:97:78:50:13:c5:2d:ef:c1:1b:c8:10:b7:b4:41: 41:3f:3c:97:ab:51:89:fd:42:88:da:f7:f1:b5:eb: 2b:0d:f4:93:16:26:1b:c3:22:0e:7b:d0:7b:d9:81: e9:1b:fa:98:85:46:96:11:a0:6b:3d:b8:b5:d0:38: 11:ab:af:07:ca:b2:19:ab:ff:74:25:74:8e:26:c2: a4:66:b8:b4:e0:90:94:7f:35:b8:bb:22:a6:22:12: 77:e9:55:ba:5a:f3:20:d1:d6:40:fd:16:a1:3b:9e: 3e:76:ef:d3:1d:5e:fa:95:7a:c5:ee:c2:c6:63:aa: 4d:db:47:59:ef:ad:bf:d4:7d:7a:cc:b0:fc:d6:1d: ca:47:af:6f:9f:fa:52:52:b8:a8:f4:18:4e:bd:87: 8a:32:5e:22:51:d5:4d:26:7f:a8:ae:ca:f7:d4:cb: 5f:e4:8a:8b:bc:2a:31:e5:e7:3e:3f:9f:9a:7f:e0: 90:fd:44:ee:5a:e3:cc:93:c3:81:d5:16:ce:06:fa: 15:27:a9:af:8f:89:96:47:53:ed:9f:de:28:61:80: 79:09:56:77:ec:dc:70:7d:32:2c:21:ac:ff:b6:ee: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:A6:97:4F:E8:9C:36:C1:FD:4B:43:18:FD:03:75:CF:97:23:88 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:19:06:50:24:d7:75:53:49:e2:de:8c:85:23:f7:69:28:fb: d2:9f:16:00:e2:d8:dd:0e:6e:70:8b:8b:a0:32:2a:76:e0:b2: 9d:5b:cd:cc:37:2f:74:e4:98:86:f9:02:dd:c5:7d:2a:8a:11: d0:ad:f4:b0:95:d6:8c:da:ce:f9:a1:1c:76:3a:7f:98:ed:25: 92:f1:21:0c:5a:24:83:cd:5e:74:da:31:df:9c:f3:00:6c:d5: 5c:35:b8:ed:40:b7:2f:ac:07:5b:36:f1:67:8b:03:13:12:03: 5e:63:e2:4f:dc:c5:0c:ff:71:ef:d4:f7:e4:11:d1:53:db:45: ad:36:db:1d:fc:31:ee:b3:7e:e0:87:e1:8e:62:f5:70:a9:dd: 6d:03:e9:a2:2c:e2:cd:bd:48:32:f2:51:6c:63:41:c1:cf:ea: 7f:26:63:22:73:44:ae:53:e9:37:65:5b:96:e3:5f:f2:01:c4: 1e:6c:f8:eb:a3:a2:1a:4f:a6:33:b8:66:ad:c5:e8:72:96:d9: 5c:31:47:4b:a9:5a:25:6f:c5:7d:38:0e:3b:95:9d:47:5d:0c: 51:ae:c7:90:6b:6d:28:ea:f8:70:a1:1f:1f:e7:67:17:5f:b7: 7c:4b:33:23:36:a4:b4:ca:c0:0e:6f:6d:be:cd:86:85:1d:68: 1f:c5:fe:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEv2pDTh3mKEWmmAEFmbDt2eIe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA5MDYwOTE1MDNaFw0yNTA5MDkxOTA1MDNaMDMxMTAvBgNV BAMTKEIzNUFBNjk3NEZFODlDMzZDMUZENEI0MzE4RkQwMzc1Q0Y5NzIzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXT3kN52QDW4JaTNKKXcb2f73T 1yvyVcCpAZYyT8CXeFATxS3vwRvIELe0QUE/PJerUYn9Qoja9/G16ysN9JMWJhvD Ig570HvZgekb+piFRpYRoGs9uLXQOBGrrwfKshmr/3QldI4mwqRmuLTgkJR/Nbi7 IqYiEnfpVbpa8yDR1kD9FqE7nj5279MdXvqVesXuwsZjqk3bR1nvrb/UfXrMsPzW HcpHr2+f+lJSuKj0GE69h4oyXiJR1U0mf6iuyvfUy1/kiou8KjHl5z4/n5p/4JD9 RO5a48yTw4HVFs4G+hUnqa+PiZZHU+2f3ihhgHkJVnfs3HB9MiwhrP+27ufHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1qml0/onDbB/UtDGP0Ddc+XI4gwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYZBlAk13VTSeLejIUj92ko+9KfFgDi2N0O bnCLi6AyKnbgsp1bzcw3L3TkmIb5At3FfSqKEdCt9LCV1ozazvmhHHY6f5jtJZLx IQxaJIPNXnTaMd+c8wBs1Vw1uO1Aty+sB1s28WeLAxMSA15j4k/cxQz/ce/U9+QR 0VPbRa022x38Me6zfuCH4Y5i9XCp3W0D6aIs4s29SDLyUWxjQcHP6n8mYyJzRK5T 6TdlW5bjX/IBxB5s+OujohpPpjO4Zq3F6HKW2VwxR0upWiVvxX04DjuVnUddDFGu x5BrbSjq+HChHx/nZxdft3xLMyM2pLTKwA5vbb7NhoUdaB/F/nk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:26 2025 by rpki-client