$ rpki-client -vvf repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft File: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft (raw, json) Hash identifier: Zb0wtmJU0uHy0b+B/SxIlALaQB8iiFvcObJ2PSBwDZ8= Subject key identifier: 19:58:98:EB:AC:C8:D6:C8:67:FF:8B:44:F5:B7:52:BD:BD:C6:60:B4 Authority key identifier: 9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC Certificate issuer: /CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Certificate serial: 56BCAFA9E6E3D63B929E402970293E54576B867C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft Manifest number: 044A Signing time: Sun 07 Sep 2025 10:32:02 +0000 Manifest this update: Sun 07 Sep 2025 10:27:02 +0000 Manifest next update: Wed 10 Sep 2025 13:20:02 +0000 Files and hashes: 1: 9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl (hash: Y+D7BXi3+9wrhEUZt5PZewhMJYYrFsHOTm5E/zeTs0o=) 2: 3130332e3136332e3133382e302f32332d3234203d3e203535363838.roa (hash: SleQnUegZrn9t/Esz5KijLNSBfhEPCbzYWCC+8Yfuac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bc:af:a9:e6:e3:d6:3b:92:9e:40:29:70:29:3e:54:57:6b:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E22CCCB20898F95647D9A55FA112ABE8CE58EEC Validity Not Before: Sep 7 10:27:02 2025 GMT Not After : Sep 10 13:20:02 2025 GMT Subject: CN=195898EBACC8D6C867FF8B44F5B752BDBDC660B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:7e:8d:29:1d:cf:d3:96:32:f1:3f:b1:98: 59:6b:da:42:b2:3e:23:7b:e4:e4:9b:90:fc:30:0c: 8a:49:21:bc:67:21:e1:b9:03:12:31:a7:b0:ad:a0: f9:88:83:44:d5:b9:86:01:03:8a:73:39:a7:82:9f: 95:e0:eb:86:c5:10:a5:e3:eb:bd:80:dd:09:ac:90: 7e:d7:89:f7:53:88:91:84:48:02:65:07:b9:18:12: 6d:c4:a0:88:17:74:89:76:ac:1b:72:0f:b7:77:76: af:80:e2:f5:b0:45:28:d8:12:1b:77:c4:13:74:af: 98:5f:57:a2:3e:fb:40:10:af:61:c8:a0:36:4f:5a: b0:9a:b8:71:4c:d2:bf:1c:b0:82:06:c4:90:30:d3: cb:01:e6:d1:7e:41:8f:2e:80:cc:16:71:b4:42:82: 7c:dc:93:c9:39:0e:2e:b7:bc:bd:99:a9:29:5a:dc: 3a:50:61:19:99:7b:5d:82:e3:ac:cb:1d:da:db:2a: 2b:33:64:ef:30:25:a0:c7:7e:56:f7:5f:c9:8e:5b: 3a:18:64:d7:72:58:48:cc:e5:35:91:61:2a:03:a0: a9:64:92:2c:f4:83:13:23:9b:50:1b:7e:34:b0:65: a8:5d:33:38:79:20:c1:99:59:86:75:f8:c1:29:ad: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:98:EB:AC:C8:D6:C8:67:FF:8B:44:F5:B7:52:BD:BD:C6:60:B4 X509v3 Authority Key Identifier: keyid:9E:22:CC:CB:20:89:8F:95:64:7D:9A:55:FA:11:2A:BE:8C:E5:8E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/efe21c69-7b77-43a0-92a6-f555b6ed1ffc/0/9E22CCCB20898F95647D9A55FA112ABE8CE58EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1c:95:b8:e5:db:75:5d:d4:90:5d:7d:d3:45:7a:7a:4b:f5: 8f:6d:42:d7:a2:35:79:aa:13:3f:4d:f2:5c:13:f9:38:24:a0: 63:1a:b4:25:ec:8a:75:58:a7:71:4f:82:f5:68:47:95:26:c3: 2d:ed:1f:02:1e:f8:5b:1f:d4:b1:23:33:69:ee:4c:50:c0:a3: 92:bb:3f:64:ac:82:7f:14:7a:b4:c6:a0:3b:30:8c:69:58:cd: ab:38:42:95:07:08:70:61:63:da:21:bf:b7:5d:f9:71:42:d7: 29:d1:7e:4b:eb:7b:18:ca:f2:b3:4b:83:3e:5f:ca:cd:1c:6d: 68:b4:12:57:aa:61:80:6f:b6:c3:33:b4:2a:e2:95:20:6b:5a: 6f:b1:d6:99:cc:c8:fc:6b:37:57:80:b8:ae:3b:27:20:41:09: b7:12:35:ff:e6:c8:ed:cd:14:0f:c9:b6:49:f2:4e:a2:5d:43: d7:a6:b5:1d:c8:3b:75:e1:2d:8e:bb:81:4e:0c:a3:bc:50:3b: 55:1e:44:22:5a:7d:0d:31:fe:1a:62:2b:64:b4:3f:82:1f:72: 08:8c:a4:f9:81:8c:11:a8:6a:1c:c8:f3:eb:db:f4:ef:c2:45: f8:1d:34:ec:17:e7:ac:46:ed:5e:1f:cd:14:37:c5:53:f6:61: dd:c7:6a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVryvqebj1juSnkApcCk+VFdrhnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4 Q0U1OEVFQzAeFw0yNTA5MDcxMDI3MDJaFw0yNTA5MTAxMzIwMDJaMDMxMTAvBgNV BAMTKDE5NTg5OEVCQUNDOEQ2Qzg2N0ZGOEI0NEY1Qjc1MkJEQkRDNjYwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Fn6NKR3P05Yy8T+xmFlr2kKy PiN75OSbkPwwDIpJIbxnIeG5AxIxp7CtoPmIg0TVuYYBA4pzOaeCn5Xg64bFEKXj 672A3QmskH7XifdTiJGESAJlB7kYEm3EoIgXdIl2rBtyD7d3dq+A4vWwRSjYEht3 xBN0r5hfV6I++0AQr2HIoDZPWrCauHFM0r8csIIGxJAw08sB5tF+QY8ugMwWcbRC gnzck8k5Di63vL2ZqSla3DpQYRmZe12C46zLHdrbKiszZO8wJaDHflb3X8mOWzoY ZNdyWEjM5TWRYSoDoKlkkiz0gxMjm1AbfjSwZahdMzh5IMGZWYZ1+MEprdKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGViY66zI1shn/4tE9bdSvb3GYLQwHwYDVR0j BBgwFoAUniLMyyCJj5VkfZpV+hEqvozljuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZmUyMWM2OS03Yjc3LTQzYTAtOTJhNi1mNTU1YjZlZDFmZmMvMC85RTIyQ0NDQjIw ODk4Rjk1NjQ3RDlBNTVGQTExMkFCRThDRTU4RUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJBQkU4Q0U1 OEVFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWZlMjFjNjktN2I3Ny00M2EwLTky YTYtZjU1NWI2ZWQxZmZjLzAvOUUyMkNDQ0IyMDg5OEY5NTY0N0Q5QTU1RkExMTJB QkU4Q0U1OEVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8clbjl23Vd1JBdfdNFenpL9Y9tQteiNXmq Ez9N8lwT+TgkoGMatCXsinVYp3FPgvVoR5Umwy3tHwIe+Fsf1LEjM2nuTFDAo5K7 P2Ssgn8UerTGoDswjGlYzas4QpUHCHBhY9ohv7dd+XFC1ynRfkvrexjK8rNLgz5f ys0cbWi0EleqYYBvtsMztCrilSBrWm+x1pnMyPxrN1eAuK47JyBBCbcSNf/myO3N FA/JtknyTqJdQ9emtR3IO3XhLY67gU4Mo7xQO1UeRCJafQ0x/hpiK2S0P4IfcgiM pPmBjBGoahzI8+vb9O/CRfgdNOwX56xG7V4fzRQ3xVP2Yd3Haj0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:25 2025 by rpki-client