$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: WxQhZ2SiAHj2IoK/P/+ie9Mb3racgxfYzUEMIUO3QuA= Subject key identifier: 3F:EB:8E:4B:F6:C2:9B:C3:8A:F3:49:DE:D9:5B:F4:E1:C7:21:44:6D Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 711016592E264EC98FDB71847009EA1A48D322DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 020C Signing time: Thu 21 Aug 2025 22:02:25 +0000 Manifest this update: Thu 21 Aug 2025 21:57:25 +0000 Manifest next update: Mon 25 Aug 2025 01:46:25 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: nSW5JjBakDCEsYZ7Bfb3s3zgOq5u8QUst2z0PfQLpIU=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: BYIutVVDMQPpCjuKk9MfFJeb9yvMjAqJ/CCA9nZfH2g=) 3: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: CzqvaqOLfa4k2VZwK3XFS5fy/aeqCZo5bzzRGviSmME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:10:16:59:2e:26:4e:c9:8f:db:71:84:70:09:ea:1a:48:d3:22:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Aug 21 21:57:25 2025 GMT Not After : Aug 25 01:46:25 2025 GMT Subject: CN=3FEB8E4BF6C29BC38AF349DED95BF4E1C721446D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:75:4e:fd:9f:73:00:0b:0c:23:ea:ee:50: e1:c0:a6:fc:b6:dd:42:1d:b9:8d:14:ad:4e:a3:72: 5b:18:3e:37:eb:c3:39:c5:85:b3:89:28:14:5c:1a: 6b:d5:0b:8b:f4:17:5a:25:34:e3:07:e6:cc:8b:83: 6c:81:54:7c:32:cf:2f:ac:54:8c:c6:f5:00:8c:d1: 88:d9:43:a5:1a:b6:be:c4:b3:13:14:ea:dc:8e:b4: 4e:17:6a:5d:47:0f:aa:89:22:8d:04:5a:62:a6:4b: 87:1a:02:e0:37:9a:ce:86:78:5a:2d:e6:0a:73:27: 2a:29:5c:b1:56:cd:34:82:d9:1e:21:d5:85:88:8f: 0c:f9:40:0d:0d:57:f8:23:6a:83:91:e2:6e:2c:72: 31:a2:b6:de:e3:74:2a:cc:d7:09:13:a6:37:76:0f: 81:6e:bf:10:14:86:69:e4:d9:e4:f5:ad:51:b3:04: 3c:ac:10:b3:cd:c2:04:68:81:e8:bd:1a:19:0d:e7: 99:e3:89:1b:a2:1d:44:1d:18:c8:4e:0d:9a:fc:7c: 01:d6:18:05:fb:e1:d8:b5:51:a6:5b:99:b4:b4:bc: 86:2f:87:63:03:97:d8:3c:07:af:b4:3c:34:1d:14: c3:75:08:c9:47:ea:d6:34:06:fe:95:62:1f:76:92: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:8E:4B:F6:C2:9B:C3:8A:F3:49:DE:D9:5B:F4:E1:C7:21:44:6D X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ac:52:d1:d2:17:df:e6:1f:f7:ea:d1:d9:27:7d:7c:5c:7d: 86:53:4e:f2:cc:70:8b:3a:63:16:92:74:c2:18:52:5f:cc:05: 93:9a:cc:4f:1c:05:ea:b0:e8:28:89:36:f7:8a:2d:e1:6a:61: 49:c4:07:5b:9f:54:dd:1f:35:4c:2b:89:15:43:9c:f1:73:fe: f4:95:5c:e2:a5:30:85:f0:47:82:9f:d7:d6:47:f6:bb:17:f8: 2e:62:4d:a1:ad:58:23:f1:01:d7:dd:48:77:4e:ff:f2:23:7a: fd:30:2e:01:a1:90:c2:b7:ed:eb:71:0a:87:e5:9e:38:76:b9: 53:89:f1:36:7d:5a:95:ae:8a:f1:20:46:e5:ce:89:85:65:e6: f7:45:85:bc:d6:19:97:31:d8:5a:81:3b:17:3a:45:56:21:1a: 5b:9a:73:d4:e5:23:ae:56:79:ec:f5:fc:cf:01:c3:c3:a9:79: 93:8b:1d:cc:23:46:1e:e2:89:f8:0d:43:53:16:17:ae:46:4e: c7:be:12:35:f5:be:b9:e6:79:f4:c8:ea:1d:14:bb:bc:40:d1: 44:82:ac:03:36:c3:0b:cd:57:28:4b:60:05:64:99:29:ce:15: fb:7a:25:cc:ea:95:0a:9c:8e:49:4e:61:81:81:26:79:a5:a4: 30:b1:ab:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRAWWS4mTsmP23GEcAnqGkjTIt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTA4MjEyMTU3MjVaFw0yNTA4MjUwMTQ2MjVaMDMxMTAvBgNV BAMTKDNGRUI4RTRCRjZDMjlCQzM4QUYzNDlERUQ5NUJGNEUxQzcyMTQ0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSXVO/Z9zAAsMI+ruUOHApvy2 3UIduY0UrU6jclsYPjfrwznFhbOJKBRcGmvVC4v0F1olNOMH5syLg2yBVHwyzy+s VIzG9QCM0YjZQ6Uatr7EsxMU6tyOtE4Xal1HD6qJIo0EWmKmS4caAuA3ms6GeFot 5gpzJyopXLFWzTSC2R4h1YWIjwz5QA0NV/gjaoOR4m4scjGitt7jdCrM1wkTpjd2 D4FuvxAUhmnk2eT1rVGzBDysELPNwgRogei9GhkN55njiRuiHUQdGMhODZr8fAHW GAX74di1UaZbmbS0vIYvh2MDl9g8B6+0PDQdFMN1CMlH6tY0Bv6VYh92klp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+uOS/bCm8OK80ne2Vv04cchRG0wHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6sUtHSF9/mH/fq0dknfXxcfYZTTvLMcIs6 YxaSdMIYUl/MBZOazE8cBeqw6CiJNveKLeFqYUnEB1ufVN0fNUwriRVDnPFz/vSV XOKlMIXwR4Kf19ZH9rsX+C5iTaGtWCPxAdfdSHdO//Ijev0wLgGhkMK37etxCofl njh2uVOJ8TZ9WpWuivEgRuXOiYVl5vdFhbzWGZcx2FqBOxc6RVYhGluac9TlI65W eez1/M8Bw8OpeZOLHcwjRh7iifgNQ1MWF65GTse+EjX1vrnmefTI6h0Uu7xA0USC rAM2wwvNVyhLYAVkmSnOFft6JczqlQqcjklOYYGBJnmlpDCxqx4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:50 2025 by rpki-client