$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: Ip9ZyGWcvC2/hQQB3mpYMr1IXKYGT9pL95vB61luLvs= Subject key identifier: C7:B7:46:F3:A7:27:15:CC:3E:D1:F8:38:2B:20:03:B7:82:03:58:AD Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 4954348725358929407E29DCAC2C2FE1ABF8E07E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 6B Signing time: Wed 30 Jul 2025 11:51:31 +0000 Manifest this update: Wed 30 Jul 2025 11:46:31 +0000 Manifest next update: Sat 02 Aug 2025 18:15:31 +0000 Files and hashes: 1: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: +acapEC8dEzGNYLzlxcV5XAV/XKTAdwvwXXbCNOaLqA=) 2: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 18:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:54:34:87:25:35:89:29:40:7e:29:dc:ac:2c:2f:e1:ab:f8:e0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Jul 30 11:46:31 2025 GMT Not After : Aug 2 18:15:31 2025 GMT Subject: CN=C7B746F3A72715CC3ED1F8382B2003B7820358AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:7d:49:aa:e3:ae:d4:21:78:1e:76:4a:85: 15:7e:4e:37:86:6e:46:de:e9:7c:6e:b1:26:ee:24: a0:1b:99:d4:bf:ce:ac:a3:9a:54:d9:6f:60:de:57: 2c:a9:e7:6b:ae:2b:90:37:b1:aa:86:16:3d:37:6a: 7a:ad:d0:79:79:9c:64:04:be:f7:40:b7:bd:4d:0e: af:e0:fe:c4:e2:06:f3:23:8a:1d:fa:cc:77:73:87: 54:7e:81:6b:21:74:9d:a7:a3:28:ad:b4:2f:5a:08: 9b:69:60:13:50:9b:1f:f1:4a:fb:a8:bc:1b:0c:6a: 8f:61:c4:63:94:ae:2b:f8:ea:b5:ef:2e:e2:f5:33: a8:6f:08:08:3e:bd:a9:90:9c:f2:91:0a:7c:4a:d5: 52:c8:f4:6f:bc:dd:7f:fd:e6:bc:2a:3d:aa:d4:f5: 72:6b:e0:c6:0d:f8:d5:c0:b3:88:ab:5f:63:92:54: ec:94:a9:0a:11:72:59:11:08:8a:d4:cd:8d:47:08: 01:32:b1:3a:9a:de:d2:9a:2b:fd:ee:8c:2d:3c:12: b7:2d:81:a9:94:f9:b7:15:42:86:a6:7e:6e:bd:11: 53:9f:fb:bb:3f:ff:69:9d:0b:e2:fc:b8:c8:0d:ca: 85:aa:8e:9a:81:c4:24:82:c7:f3:19:32:53:3e:19: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B7:46:F3:A7:27:15:CC:3E:D1:F8:38:2B:20:03:B7:82:03:58:AD X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:4c:b5:3d:75:ec:4a:4a:cc:7a:18:36:a6:9e:a0:be:c3:2c: 36:ff:35:64:0f:b6:c2:b5:a3:31:e1:4d:5a:67:64:10:70:90: 15:61:d9:59:d6:8f:4c:18:4e:ab:c5:5a:a6:73:2f:78:6c:02: b3:03:af:9f:d1:f7:3d:d7:cf:be:ea:2b:1c:28:60:9a:f6:9a: 06:b4:5c:9d:26:64:88:42:db:32:b4:f3:0a:0c:13:8b:34:e4: 02:d5:37:3b:8e:5b:fa:0f:ad:30:ad:84:8d:2c:56:1f:93:15: 74:ec:7f:0d:6b:78:4b:48:98:68:db:7a:f1:ee:c6:d5:ae:af: ac:c3:27:58:1a:0b:36:f5:a2:3e:c1:b5:7d:9a:95:bf:c7:25: 6d:e6:18:9b:ea:92:29:1d:14:82:de:fd:51:b6:48:a5:b8:b9: 0b:f0:dd:7d:86:75:68:2f:00:3e:af:0d:7c:9a:7a:d4:05:52: 98:f5:d3:99:9b:ed:ff:c9:2d:cf:7b:3c:a7:24:b2:62:26:ad: 8c:79:23:e8:e6:eb:68:be:fd:e9:a7:fe:fe:ec:0c:cb:f7:5d: 05:cf:f6:14:8f:31:b4:0f:e3:43:90:40:41:5e:e9:97:58:63: 6b:92:11:df:34:80:d5:af:a9:38:b4:fc:4f:a4:c0:64:54:cc: 6f:e3:28:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVQ0hyU1iSlAfincrCwv4av44H4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA3MzAxMTQ2MzFaFw0yNTA4MDIxODE1MzFaMDMxMTAvBgNV BAMTKEM3Qjc0NkYzQTcyNzE1Q0MzRUQxRjgzODJCMjAwM0I3ODIwMzU4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE031JquOu1CF4HnZKhRV+TjeG bkbe6XxusSbuJKAbmdS/zqyjmlTZb2DeVyyp52uuK5A3saqGFj03anqt0Hl5nGQE vvdAt71NDq/g/sTiBvMjih36zHdzh1R+gWshdJ2noyittC9aCJtpYBNQmx/xSvuo vBsMao9hxGOUriv46rXvLuL1M6hvCAg+vamQnPKRCnxK1VLI9G+83X/95rwqParU 9XJr4MYN+NXAs4irX2OSVOyUqQoRclkRCIrUzY1HCAEysTqa3tKaK/3ujC08Erct gamU+bcVQoamfm69EVOf+7s//2mdC+L8uMgNyoWqjpqBxCSCx/MZMlM+GQI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7dG86cnFcw+0fg4KyADt4IDWK0wHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOVMtT117EpKzHoYNqaeoL7DLDb/NWQPtsK1 ozHhTVpnZBBwkBVh2VnWj0wYTqvFWqZzL3hsArMDr5/R9z3Xz77qKxwoYJr2mga0 XJ0mZIhC2zK08woME4s05ALVNzuOW/oPrTCthI0sVh+TFXTsfw1reEtImGjbevHu xtWur6zDJ1gaCzb1oj7BtX2alb/HJW3mGJvqkikdFILe/VG2SKW4uQvw3X2GdWgv AD6vDXyaetQFUpj105mb7f/JLc97PKcksmImrYx5I+jm62i+/emn/v7sDMv3XQXP 9hSPMbQP40OQQEFe6ZdYY2uSEd80gNWvqTi0/E+kwGRUzG/jKBA= -----END CERTIFICATE-----Generated at Thu Jul 31 12:28:57 2025 by rpki-client