$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: ZQi3Ad91uXIMYHzuR+4qhrlKTPAKFiSGknwIWqkePIw= Subject key identifier: 59:50:F5:83:1F:7D:21:46:F7:DC:8C:DF:96:82:27:EA:B6:15:C4:50 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 65B2890A1055561C9BA4C9FF3EB61E6A8CDAA17D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02D8 Signing time: Fri 22 Aug 2025 17:21:11 +0000 Manifest this update: Fri 22 Aug 2025 17:16:11 +0000 Manifest next update: Mon 25 Aug 2025 20:26:11 +0000 Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) 2: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: kzu+E14LKqaPkNUfWL6OlRXoGOmijjAv3bds2j6JtFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b2:89:0a:10:55:56:1c:9b:a4:c9:ff:3e:b6:1e:6a:8c:da:a1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Aug 22 17:16:11 2025 GMT Not After : Aug 25 20:26:11 2025 GMT Subject: CN=5950F5831F7D2146F7DC8CDF968227EAB615C450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:fc:ba:31:b1:ca:7e:22:83:0a:ff:82:0b: 23:e9:b2:ec:3c:7e:52:6e:14:23:10:1b:18:c6:61: 2e:34:97:c1:b4:7e:de:56:08:d6:77:d4:24:04:18: 13:e9:91:d2:78:b1:cf:4c:d6:1f:8e:27:05:b9:68: 29:5f:95:11:35:1e:6c:aa:60:b7:a2:5c:81:e2:85: b0:93:6c:33:b4:e8:71:83:4c:91:b9:cc:e1:60:a0: 31:d9:aa:aa:ea:17:20:29:17:8c:ae:10:0e:f0:fc: 97:52:a7:ac:97:fe:3b:c4:88:cd:a0:0c:81:8a:88: b3:39:70:04:1e:cb:be:dc:6f:4c:e3:62:b8:7f:91: dc:91:30:51:f4:da:b0:70:36:3a:df:51:3d:7d:74: 3b:54:b2:90:dc:36:8a:36:fb:e1:41:7b:68:3b:54: f2:d1:87:6f:b5:cf:ae:06:d5:9f:13:07:6a:05:58: 95:56:ce:e6:ea:0e:ec:cd:36:7f:92:f1:3f:fb:b6: c4:f9:4d:1c:5c:51:34:20:50:c3:f2:e0:fe:0a:fd: 47:66:58:32:25:d0:79:dd:c8:b9:81:22:1f:a5:d4: 32:3a:eb:1b:fd:cd:81:b4:f6:2f:46:6d:e0:d8:4d: af:41:15:4b:14:c4:9d:66:cc:fb:b9:45:1c:6b:98: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:50:F5:83:1F:7D:21:46:F7:DC:8C:DF:96:82:27:EA:B6:15:C4:50 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3d:d5:58:e1:1c:e8:5f:ce:06:78:a8:b1:e2:1c:c6:73:ca: 6d:d9:a3:04:ec:06:e1:df:51:20:8d:40:d9:25:13:cc:38:e7: 76:a4:7b:47:0d:2d:57:b1:e0:36:e9:8e:dd:e9:89:ba:2a:43: aa:16:01:ff:d1:bf:2b:16:99:b3:64:f3:31:35:65:59:71:f2: 1b:49:28:ab:74:a6:92:29:f8:94:b7:d8:63:11:f3:a4:fe:d8: 05:ff:51:91:bf:3d:7c:6d:ac:79:5b:84:18:26:3b:2b:9a:c4: fd:bb:17:b3:aa:7e:7a:07:ce:e0:85:5f:09:65:fa:33:60:5a: 76:89:b3:14:aa:2f:45:3e:c3:ba:8e:2e:69:c0:dc:8f:01:09: f4:5d:15:3f:b7:e2:9a:d9:f9:13:10:f1:59:23:05:eb:95:fe: 32:85:26:e0:56:6a:97:25:3c:9b:f7:c7:0d:dd:26:d8:58:f8: cb:c9:b5:7c:08:34:ac:63:61:90:cb:5d:76:a4:0d:0a:09:f7: 65:66:c0:66:0c:f0:78:3d:91:d8:da:31:6e:98:2a:30:fb:d8: 76:21:9c:55:31:9b:7c:20:27:d7:5a:fc:77:92:00:41:08:9c: e5:61:03:a9:41:fe:37:88:af:8c:40:16:34:e9:5d:26:c8:70: 2d:bb:59:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbKJChBVVhybpMn/PrYeaozaoX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA4MjIxNzE2MTFaFw0yNTA4MjUyMDI2MTFaMDMxMTAvBgNV BAMTKDU5NTBGNTgzMUY3RDIxNDZGN0RDOENERjk2ODIyN0VBQjYxNUM0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hfy6MbHKfiKDCv+CCyPpsuw8 flJuFCMQGxjGYS40l8G0ft5WCNZ31CQEGBPpkdJ4sc9M1h+OJwW5aClflRE1Hmyq YLeiXIHihbCTbDO06HGDTJG5zOFgoDHZqqrqFyApF4yuEA7w/JdSp6yX/jvEiM2g DIGKiLM5cAQey77cb0zjYrh/kdyRMFH02rBwNjrfUT19dDtUspDcNoo2++FBe2g7 VPLRh2+1z64G1Z8TB2oFWJVWzubqDuzNNn+S8T/7tsT5TRxcUTQgUMPy4P4K/Udm WDIl0HndyLmBIh+l1DI66xv9zYG09i9GbeDYTa9BFUsUxJ1mzPu5RRxrmJn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVD1gx99IUb33IzfloIn6rYVxFAwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI91VjhHOhfzgZ4qLHiHMZzym3ZowTsBuHf USCNQNklE8w453ake0cNLVex4Dbpjt3piboqQ6oWAf/RvysWmbNk8zE1ZVlx8htJ KKt0ppIp+JS32GMR86T+2AX/UZG/PXxtrHlbhBgmOyuaxP27F7OqfnoHzuCFXwll +jNgWnaJsxSqL0U+w7qOLmnA3I8BCfRdFT+34prZ+RMQ8VkjBeuV/jKFJuBWapcl PJv3xw3dJthY+MvJtXwINKxjYZDLXXakDQoJ92VmwGYM8Hg9kdjaMW6YKjD72HYh nFUxm3wgJ9da/HeSAEEInOVhA6lB/jeIr4xAFjTpXSbIcC27WQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:11 2025 by rpki-client