$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: ynizddnGSDYzMEHdHoxLbP+LQ+4nB1npb3qwgNhaUzY= Subject key identifier: 53:2A:2D:B1:9D:39:B6:8D:B6:21:2A:46:4F:0C:4C:9C:31:2C:A9:19 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 6EC2CD89C858B7C091D91B3FFF80F3A0F5F466F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01A9 Signing time: Thu 21 Aug 2025 20:41:38 +0000 Manifest this update: Thu 21 Aug 2025 20:36:38 +0000 Manifest next update: Mon 25 Aug 2025 07:39:38 +0000 Files and hashes: 1: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: wIOKIhZqd0HHYa/7eK2GFAelh1S7JBRWNRtWIZ+CNts=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c2:cd:89:c8:58:b7:c0:91:d9:1b:3f:ff:80:f3:a0:f5:f4:66:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Aug 21 20:36:38 2025 GMT Not After : Aug 25 07:39:38 2025 GMT Subject: CN=532A2DB19D39B68DB6212A464F0C4C9C312CA919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:7d:c8:a0:7c:91:de:ab:fd:13:f1:78:f5: 13:07:95:44:9f:15:91:93:a2:1b:85:0c:b5:83:30: 8a:e9:fc:97:a1:f9:ef:b1:e3:f1:cf:fc:0f:16:94: 47:2f:48:43:36:e1:97:fc:93:ab:0c:8d:36:fe:14: 81:e6:dc:51:b7:c9:a3:49:cd:38:73:5a:c9:30:58: b1:94:da:b3:95:a9:f6:4b:e3:33:99:9b:33:16:a4: b7:5d:1c:1e:6a:42:b5:57:7a:4b:86:21:22:21:2b: 80:d5:ba:90:41:89:b3:b6:c5:35:50:ac:7d:1c:fd: 90:b2:55:9d:d0:9a:d3:8d:5d:94:47:fc:b5:9f:0e: 90:2c:6a:ad:66:f2:f9:9d:97:75:4d:d8:b0:a2:9f: 4f:7b:71:e9:b4:6a:27:ec:63:9d:5d:01:24:4d:16: ba:5f:50:40:03:9f:95:2e:09:42:8f:9a:43:95:ce: 75:be:04:e9:dc:b1:a8:ed:17:01:e2:4f:d9:54:5e: eb:15:82:d3:bc:46:6a:4e:24:ab:7d:89:00:93:ca: b1:fa:ae:13:a6:13:bf:24:c3:6c:e4:9b:6d:df:4e: c3:1b:9b:79:f5:01:2d:7a:e3:e1:3a:fa:63:66:ad: d3:d8:42:81:cc:a4:f7:7c:e7:57:e7:5c:e8:a3:24: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:2D:B1:9D:39:B6:8D:B6:21:2A:46:4F:0C:4C:9C:31:2C:A9:19 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1b:c7:97:7e:d5:84:d6:f6:e4:f1:f9:3d:99:6d:fa:24:c6: b7:2e:12:16:f2:2b:d6:0d:ec:38:d8:22:5f:fd:c7:0b:9a:84: e2:15:68:37:34:fc:d3:fb:40:05:a9:bc:62:09:f9:b3:05:75: 5b:6a:d0:c4:d6:3e:92:25:d8:39:93:56:51:ba:aa:26:50:84: 86:d3:d2:ed:8f:dd:f9:59:3e:c2:99:5c:c6:cb:b3:de:b7:60: ac:1d:19:dd:b1:4a:7f:11:4c:e6:3c:64:eb:c4:a0:eb:db:e8: b2:71:ea:23:3c:31:7e:3f:85:98:91:be:61:c7:1a:b6:d6:7b: 99:45:d4:e8:32:94:4d:65:62:e9:54:cc:ed:8e:7e:3a:83:e1: d2:1d:11:55:7d:dd:99:a3:71:13:e7:9c:9b:75:7a:00:25:22: 80:a3:fc:f8:5b:73:93:99:56:d4:87:f2:bd:55:11:93:72:d4: 51:52:dc:df:b7:3d:82:91:d0:1a:65:09:ab:fd:cd:83:9e:76: f6:95:92:e8:37:fe:79:be:b7:f7:76:52:28:3f:c8:3e:e6:a1: 73:12:4f:ae:c1:8a:96:eb:33:37:a2:1f:14:51:30:80:89:aa: 2c:7a:7d:89:40:6c:dd:a6:10:bd:07:98:e5:ab:dd:30:35:7b: d6:bc:3a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsLNichYt8CR2Rs//4DzoPX0ZvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTA4MjEyMDM2MzhaFw0yNTA4MjUwNzM5MzhaMDMxMTAvBgNV BAMTKDUzMkEyREIxOUQzOUI2OERCNjIxMkE0NjRGMEM0QzlDMzEyQ0E5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z33IoHyR3qv9E/F49RMHlUSf FZGTohuFDLWDMIrp/Jeh+e+x4/HP/A8WlEcvSEM24Zf8k6sMjTb+FIHm3FG3yaNJ zThzWskwWLGU2rOVqfZL4zOZmzMWpLddHB5qQrVXekuGISIhK4DVupBBibO2xTVQ rH0c/ZCyVZ3QmtONXZRH/LWfDpAsaq1m8vmdl3VN2LCin097cem0aifsY51dASRN FrpfUEADn5UuCUKPmkOVznW+BOncsajtFwHiT9lUXusVgtO8RmpOJKt9iQCTyrH6 rhOmE78kw2zkm23fTsMbm3n1AS164+E6+mNmrdPYQoHMpPd851fnXOijJMnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUyotsZ05to22ISpGTwxMnDEsqRkwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYbx5d+1YTW9uTx+T2ZbfokxrcuEhbyK9YN 7DjYIl/9xwuahOIVaDc0/NP7QAWpvGIJ+bMFdVtq0MTWPpIl2DmTVlG6qiZQhIbT 0u2P3flZPsKZXMbLs963YKwdGd2xSn8RTOY8ZOvEoOvb6LJx6iM8MX4/hZiRvmHH GrbWe5lF1OgylE1lYulUzO2OfjqD4dIdEVV93ZmjcRPnnJt1egAlIoCj/Phbc5OZ VtSH8r1VEZNy1FFS3N+3PYKR0BplCav9zYOedvaVkug3/nm+t/d2Uig/yD7moXMS T67BipbrMzeiHxRRMICJqix6fYlAbN2mEL0HmOWr3TA1e9a8Oik= -----END CERTIFICATE-----Generated at Sat Aug 23 12:33:57 2025 by rpki-client