$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: az42Uc9+U3LTFB7YXDXxS+1B0XADiq5Wh9d9mVOVVm0= Subject key identifier: 1D:A2:3D:B2:DD:07:B8:77:8C:75:B6:4E:19:07:EB:21:58:15:C2:A8 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 12E3FED59607E3B0BEFB186B30E62508EA424BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01A8 Signing time: Thu 04 Sep 2025 15:00:51 +0000 Manifest this update: Thu 04 Sep 2025 14:55:51 +0000 Manifest next update: Sun 07 Sep 2025 17:17:51 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: zPlbs8lJR2/9Bi9P5Nl5oTi3EPvHbB9fZ4G/Bx40IZ0=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e3:fe:d5:96:07:e3:b0:be:fb:18:6b:30:e6:25:08:ea:42:4b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Sep 4 14:55:51 2025 GMT Not After : Sep 7 17:17:51 2025 GMT Subject: CN=1DA23DB2DD07B8778C75B64E1907EB215815C2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:8a:84:4b:ca:dc:8e:fa:2c:66:a6:2c:bd: 3d:b9:15:2d:72:39:c9:e0:1c:a4:b9:c2:44:7a:d0: 36:93:4b:f5:a8:7f:e1:c2:1f:29:d2:d7:38:e6:6e: c9:ce:f8:73:f0:9c:33:4a:dd:47:c3:b3:f2:ba:04: 07:48:08:3d:03:79:a4:f9:6b:cf:87:29:18:5c:48: 92:98:5e:d7:68:4b:74:ee:d7:90:6c:69:b7:cc:6f: 93:01:db:e0:ee:33:e6:76:eb:20:90:38:6d:4c:23: 20:aa:c3:41:d2:09:a9:cf:19:78:08:72:11:af:1b: 83:29:39:a2:51:41:82:60:f2:f4:55:27:f1:f6:f2: b7:80:98:6a:0b:47:14:8f:d7:a6:e5:c6:30:dd:b5: 52:b9:6a:6f:de:e0:58:a1:46:3d:a3:c9:e5:c5:d2: cc:31:f8:58:a3:ac:1c:27:97:3a:3b:5f:b1:e0:a8: c7:a8:5f:1f:39:0b:9e:19:9b:39:6e:85:8e:ec:96: 95:a9:a2:b6:81:e5:12:88:98:08:fa:dc:6e:16:4a: bc:e0:97:66:71:d5:e4:90:3d:9d:13:5b:01:90:89: b7:ce:99:9d:99:93:a0:71:4d:d7:9a:1f:61:4f:58: 04:5f:c6:d9:b7:5b:ca:0a:b7:b0:da:66:4f:65:45: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:3D:B2:DD:07:B8:77:8C:75:B6:4E:19:07:EB:21:58:15:C2:A8 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:7b:69:a6:e5:4a:3c:f4:11:9a:51:93:24:5e:52:10:ad: fc:32:e0:aa:af:ef:8c:c7:fa:c8:68:17:53:60:a9:9c:56:ea: 0b:eb:c5:d5:b2:4b:25:58:fc:1b:80:fe:5d:54:d1:50:7a:0e: dd:d8:ab:c8:18:5f:09:52:e8:2e:0f:07:b7:70:88:65:e4:40: 36:57:88:64:1e:e2:a7:39:20:13:b4:ae:41:98:c4:0b:c6:83: 89:4c:c9:b0:6f:3a:f2:ff:ff:bf:74:80:90:d8:29:11:80:f6: ce:d5:d7:5a:f5:39:60:0e:98:82:0a:2d:69:25:2d:36:8a:6c: 17:bc:0a:37:97:15:34:93:96:eb:df:ff:a7:ea:a0:c4:98:b9: c9:45:83:00:ae:ca:7a:ab:e6:bc:67:3d:1f:56:9d:2d:01:ee: ae:f3:1b:bf:8f:60:45:20:83:bc:ae:f0:b6:f9:ff:ba:f5:df: 9f:0c:dd:94:5e:b3:18:b8:34:44:21:e1:69:de:19:4e:a2:45: a4:70:b1:f4:12:fe:8e:53:52:4c:22:b3:e9:fb:2f:af:5a:40: e0:6a:45:17:39:5c:d8:cd:bc:8a:a0:79:71:c8:0e:1c:c5:df: 84:3d:b3:96:08:d8:00:dc:9e:12:91:f3:03:84:06:2d:3e:74: a5:dd:8c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuP+1ZYH47C++xhrMOYlCOpCS9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA5MDQxNDU1NTFaFw0yNTA5MDcxNzE3NTFaMDMxMTAvBgNV BAMTKDFEQTIzREIyREQwN0I4Nzc4Qzc1QjY0RTE5MDdFQjIxNTgxNUMyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLoqES8rcjvosZqYsvT25FS1y OcngHKS5wkR60DaTS/Wof+HCHynS1zjmbsnO+HPwnDNK3UfDs/K6BAdICD0DeaT5 a8+HKRhcSJKYXtdoS3Tu15BsabfMb5MB2+DuM+Z26yCQOG1MIyCqw0HSCanPGXgI chGvG4MpOaJRQYJg8vRVJ/H28reAmGoLRxSP16blxjDdtVK5am/e4FihRj2jyeXF 0swx+FijrBwnlzo7X7HgqMeoXx85C54ZmzluhY7slpWporaB5RKImAj63G4WSrzg l2Zx1eSQPZ0TWwGQibfOmZ2Zk6BxTdeaH2FPWARfxtm3W8oKt7DaZk9lRfZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaI9st0HuHeMdbZOGQfrIVgVwqgwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4xe2mm5Uo89BGaUZMkXlIQrfwy4Kqv74zH +shoF1NgqZxW6gvrxdWySyVY/BuA/l1U0VB6Dt3Yq8gYXwlS6C4PB7dwiGXkQDZX iGQe4qc5IBO0rkGYxAvGg4lMybBvOvL//790gJDYKRGA9s7V11r1OWAOmIIKLWkl LTaKbBe8CjeXFTSTluvf/6fqoMSYuclFgwCuynqr5rxnPR9WnS0B7q7zG7+PYEUg g7yu8Lb5/7r1358M3ZResxi4NEQh4WneGU6iRaRwsfQS/o5TUkwis+n7L69aQOBq RRc5XNjNvIqgeXHIDhzF34Q9s5YI2ADcnhKR8wOEBi0+dKXdjAI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client