$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: cor8R2JFR135s4PtWrlQphPajM8ftzdQHcgH7k9UNTw= Subject key identifier: 2E:4C:06:36:B8:B1:B7:8B:86:F7:F7:7F:CA:6F:6F:16:5A:97:8B:32 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 25E9C1FE02E82BE3D67C5DB91CE51BAAE2C022FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: BD Signing time: Fri 22 Aug 2025 23:22:11 +0000 Manifest this update: Fri 22 Aug 2025 23:17:11 +0000 Manifest next update: Tue 26 Aug 2025 07:41:11 +0000 Files and hashes: 1: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: ofzISWGXLuJsm0QJqlOcotgRWL8sJDcPr0QFFf5kJTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:c1:fe:02:e8:2b:e3:d6:7c:5d:b9:1c:e5:1b:aa:e2:c0:22:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Aug 22 23:17:11 2025 GMT Not After : Aug 26 07:41:11 2025 GMT Subject: CN=2E4C0636B8B1B78B86F7F77FCA6F6F165A978B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:50:49:ad:76:d9:55:65:87:81:7e:e0:f4: f1:20:38:9f:01:0b:e5:6a:a4:37:59:42:9d:ae:d4: 46:d0:c0:04:52:8e:0a:e7:32:16:7b:3c:a7:c5:e1: 71:bb:61:e7:75:49:39:7e:b8:92:f9:62:6d:09:ae: 79:54:54:de:f9:22:f2:4f:24:7c:2c:13:b7:b7:a3: bb:c8:fd:03:a2:e7:26:32:c4:e5:69:48:99:54:25: 91:96:6b:35:ee:14:b9:dc:1c:81:22:9d:bf:75:37: af:e8:68:d5:2e:7f:1a:51:94:69:e0:69:80:2d:e2: f4:36:1b:93:96:c2:d4:32:58:9c:63:76:0e:ce:8d: a8:5b:db:13:eb:47:0e:5e:75:4b:45:ca:44:f1:38: b6:1a:ea:b0:28:e8:38:e2:50:4a:8f:94:16:41:5a: ed:cf:56:fe:34:19:63:89:d2:ee:fa:32:d7:93:bb: 2a:a6:0d:ce:5a:9c:ce:94:14:ec:9a:00:1e:b2:e4: 61:0a:f8:26:c6:77:97:49:ca:bb:a3:13:01:cd:f5: dd:b2:30:ba:35:32:98:7b:59:ad:b9:6c:b6:d5:48: 4b:86:74:99:ce:8c:8c:22:bc:cd:f1:81:93:23:52: 54:c9:27:6c:3e:63:26:1b:db:87:14:41:04:42:c1: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:06:36:B8:B1:B7:8B:86:F7:F7:7F:CA:6F:6F:16:5A:97:8B:32 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:09:5f:90:9e:e4:0b:ac:dc:59:06:15:07:09:b5:2b:e3:ae: 1b:b1:80:3e:8c:3c:3f:c6:5c:77:fe:d5:f2:66:52:a2:17:47: 63:14:d9:b9:21:11:98:ef:1e:30:7b:7b:95:84:84:69:66:a4: f5:18:9e:eb:c9:fa:6d:e4:4f:4a:08:fd:f0:b3:2c:ca:be:bb: f3:df:d1:94:53:cc:70:bb:c5:f1:76:7e:96:ed:87:9a:1b:c2: ce:1a:d3:c9:ac:44:8a:30:41:0b:8e:b0:76:04:7f:5f:ca:74: b5:a3:35:85:db:4c:c2:fa:91:f8:70:b2:f2:25:d3:65:74:c0: 83:d6:9c:40:9f:a7:09:93:b9:33:7d:91:47:6a:a8:1c:03:31: 7a:6a:34:fe:22:64:19:f1:bb:05:4a:d6:ef:f4:a1:a3:b3:16: 38:3f:11:9e:ff:71:c3:06:13:6c:c2:ca:92:47:09:a8:f8:6a: 3a:2f:9d:87:03:3c:01:0b:8d:13:41:3d:ae:bb:d9:c8:0a:56: 96:0f:bf:01:c9:6b:17:e0:ef:9d:50:65:3d:7a:56:b4:7d:e8: 20:6d:8f:23:16:b1:85:5c:34:dc:55:47:03:31:b3:e3:b6:d5: 20:e9:2c:a3:1d:04:50:cf:2f:56:96:de:0e:d4:fb:04:18:32: 45:80:54:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJenB/gLoK+PWfF25HOUbquLAIv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA4MjIyMzE3MTFaFw0yNTA4MjYwNzQxMTFaMDMxMTAvBgNV BAMTKDJFNEMwNjM2QjhCMUI3OEI4NkY3Rjc3RkNBNkY2RjE2NUE5NzhCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn41BJrXbZVWWHgX7g9PEgOJ8B C+VqpDdZQp2u1EbQwARSjgrnMhZ7PKfF4XG7Yed1STl+uJL5Ym0JrnlUVN75IvJP JHwsE7e3o7vI/QOi5yYyxOVpSJlUJZGWazXuFLncHIEinb91N6/oaNUufxpRlGng aYAt4vQ2G5OWwtQyWJxjdg7Ojahb2xPrRw5edUtFykTxOLYa6rAo6DjiUEqPlBZB Wu3PVv40GWOJ0u76MteTuyqmDc5anM6UFOyaAB6y5GEK+CbGd5dJyrujEwHN9d2y MLo1Mph7Wa25bLbVSEuGdJnOjIwivM3xgZMjUlTJJ2w+YyYb24cUQQRCwbaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkwGNrixt4uG9/d/ym9vFlqXizIwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkJX5Ce5Aus3FkGFQcJtSvjrhuxgD6MPD/G XHf+1fJmUqIXR2MU2bkhEZjvHjB7e5WEhGlmpPUYnuvJ+m3kT0oI/fCzLMq+u/Pf 0ZRTzHC7xfF2fpbth5obws4a08msRIowQQuOsHYEf1/KdLWjNYXbTML6kfhwsvIl 02V0wIPWnECfpwmTuTN9kUdqqBwDMXpqNP4iZBnxuwVK1u/0oaOzFjg/EZ7/ccMG E2zCypJHCaj4ajovnYcDPAELjRNBPa672cgKVpYPvwHJaxfg751QZT16VrR96CBt jyMWsYVcNNxVRwMxs+O21SDpLKMdBFDPL1aW3g7U+wQYMkWAVF4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:17 2025 by rpki-client