$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: L13qQ3D++nYFb4FFejYXvuqOXjmJMGOl1G7rMUZc+Y0= Subject key identifier: CC:C2:50:61:FA:38:AD:7B:E8:DF:26:4D:46:13:08:55:F6:96:A2:B7 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 2E147427760C187FBA7EE2534BAE988D56EBCE39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: CF Signing time: Mon 18 Aug 2025 22:11:17 +0000 Manifest this update: Mon 18 Aug 2025 22:06:17 +0000 Manifest next update: Fri 22 Aug 2025 02:33:17 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 2: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: MN1uf7DKYxchvbjjU+XDvBg0h0NM7O5z1Lpz2Hh2F7I=) 3: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 4: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 02:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:14:74:27:76:0c:18:7f:ba:7e:e2:53:4b:ae:98:8d:56:eb:ce:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Aug 18 22:06:17 2025 GMT Not After : Aug 22 02:33:17 2025 GMT Subject: CN=CCC25061FA38AD7BE8DF264D46130855F696A2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:80:18:05:40:22:54:5b:f5:32:64:95:bc: 3c:14:37:8e:dd:a5:3b:59:49:9e:47:76:aa:a9:98: aa:fd:d9:4c:e1:59:d5:ba:9f:94:b4:93:30:3b:97: d0:91:16:6f:d9:b4:6c:fe:88:7e:3b:1d:f1:b8:a0: 95:c4:f7:ae:48:45:ce:df:ec:df:f1:ff:22:86:79: b1:2d:ff:93:79:fd:b7:3e:c0:1f:8f:d2:b3:d7:da: a3:3e:eb:b4:42:1c:0d:5e:df:bb:73:73:c2:9b:a0: 5f:b5:7d:b8:d0:f6:13:eb:42:be:48:9d:28:6e:f8: 1e:2e:b3:39:e8:5a:42:bb:e0:ac:c7:fd:89:56:3b: 2d:36:5c:16:0b:bf:1a:3f:fa:c6:75:00:fd:54:b7: 3a:a9:c9:1d:07:91:a9:ab:9f:a1:06:53:0f:a4:82: 33:a3:ce:8f:32:68:16:35:73:c4:df:f2:71:5e:98: 8c:1f:0e:3e:63:4e:25:44:43:43:76:df:b9:ef:96: d5:59:8c:b2:74:a7:d9:12:9f:9c:f7:91:45:d0:ef: 63:14:e0:de:9b:bd:b0:33:d0:b4:c7:71:1e:75:f1: 04:30:22:45:06:ec:46:cc:00:da:9a:31:cc:7f:05: ac:11:03:fb:ab:d5:fb:0a:0e:2c:55:c1:63:87:a7: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C2:50:61:FA:38:AD:7B:E8:DF:26:4D:46:13:08:55:F6:96:A2:B7 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a6:bc:35:e8:64:f6:3c:fe:2b:72:dd:4d:bc:89:75:44:79: 2b:3a:26:ab:99:13:f6:29:b4:bd:5a:4c:65:89:50:45:72:53: 2e:70:92:4c:75:cd:7d:0d:c5:64:57:40:ee:cc:ed:6c:02:fd: 43:9a:2a:e6:0c:5e:33:49:ee:94:7e:bb:e4:68:3a:3d:f6:ec: 01:6f:fb:9f:fb:e5:84:d6:4e:01:a5:89:bf:c6:ca:17:8b:91: f6:33:80:ca:c8:5c:d8:93:37:53:22:e1:90:8e:ab:1b:21:59: 10:22:a5:d8:f0:8b:a4:e2:fa:74:c4:0d:bc:96:af:1c:cb:dc: 99:b2:20:c5:d2:7b:56:9b:4c:42:13:05:f7:31:9b:8b:c5:fd: 18:04:ae:6a:03:b8:a8:93:ee:88:60:d5:e2:bd:92:48:97:60: b3:74:8d:c2:4a:78:bb:b6:0c:28:88:54:5f:fb:3a:10:8b:4e: 18:d7:7e:9d:dc:cf:0f:a9:9f:d0:41:94:ff:44:1b:84:60:f3: fc:0d:e5:ef:3e:b2:24:ea:72:17:2b:0d:99:20:d4:ad:e6:47: b2:6a:a5:a3:36:b8:7a:a7:49:95:64:56:a6:13:da:61:0e:14: 17:15:74:c2:d8:4f:70:94:af:de:d1:39:e9:7b:39:34:9c:14: 07:1c:0e:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhR0J3YMGH+6fuJTS66YjVbrzjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA4MTgyMjA2MTdaFw0yNTA4MjIwMjMzMTdaMDMxMTAvBgNV BAMTKENDQzI1MDYxRkEzOEFEN0JFOERGMjY0RDQ2MTMwODU1RjY5NkEyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhoAYBUAiVFv1MmSVvDwUN47d pTtZSZ5HdqqpmKr92UzhWdW6n5S0kzA7l9CRFm/ZtGz+iH47HfG4oJXE965IRc7f 7N/x/yKGebEt/5N5/bc+wB+P0rPX2qM+67RCHA1e37tzc8KboF+1fbjQ9hPrQr5I nShu+B4usznoWkK74KzH/YlWOy02XBYLvxo/+sZ1AP1UtzqpyR0Hkamrn6EGUw+k gjOjzo8yaBY1c8Tf8nFemIwfDj5jTiVEQ0N237nvltVZjLJ0p9kSn5z3kUXQ72MU 4N6bvbAz0LTHcR518QQwIkUG7EbMANqaMcx/BawRA/ur1fsKDixVwWOHpwK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMJQYfo4rXvo3yZNRhMIVfaWorcwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOmvDXoZPY8/ity3U28iXVEeSs6JquZE/Yp tL1aTGWJUEVyUy5wkkx1zX0NxWRXQO7M7WwC/UOaKuYMXjNJ7pR+u+RoOj327AFv +5/75YTWTgGlib/GyheLkfYzgMrIXNiTN1Mi4ZCOqxshWRAipdjwi6Ti+nTEDbyW rxzL3JmyIMXSe1abTEITBfcxm4vF/RgErmoDuKiT7ohg1eK9kkiXYLN0jcJKeLu2 DCiIVF/7OhCLThjXfp3czw+pn9BBlP9EG4Rg8/wN5e8+siTqchcrDZkg1K3mR7Jq paM2uHqnSZVkVqYT2mEOFBcVdMLYT3CUr97ROel7OTScFAccDp8= -----END CERTIFICATE-----Generated at Wed Aug 20 15:28:10 2025 by rpki-client