$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: 7JlYrwHD8c5GL39StUi+830r4weremptWpfwetdCM5c= Subject key identifier: BE:4F:B0:EC:CB:79:07:D4:DD:27:81:91:B4:84:02:7D:1F:19:FB:5B Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 1A7CAD013F838CE65C2C7B70F332376538EFF9E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 03EE Signing time: Fri 22 Aug 2025 11:21:25 +0000 Manifest this update: Fri 22 Aug 2025 11:16:25 +0000 Manifest next update: Mon 25 Aug 2025 22:41:25 +0000 Files and hashes: 1: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: 0Awtg6B32GW5NWll2qH+GxCAvBSSeLSwfPyArxlbT7c=) 2: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: crpaOCx3kY0T7I/j3xZ/n6sW+eaOViCs86ZdsVyaof0=) 3: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: r4dRgJ8SHnUUKoB3O1sCp6MXKZbAKmA3ZhpWKqUU8uA=) 4: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 5: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: ZMHJMCRlbfX0ZGSAFDFmStmzgJaDKqrjE1p0fojnPoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7c:ad:01:3f:83:8c:e6:5c:2c:7b:70:f3:32:37:65:38:ef:f9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Aug 22 11:16:25 2025 GMT Not After : Aug 25 22:41:25 2025 GMT Subject: CN=BE4FB0ECCB7907D4DD278191B484027D1F19FB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:d2:a9:72:5d:09:cf:8f:03:0a:fe:0f:b4: e0:aa:d0:32:50:b6:66:07:5e:46:72:60:19:be:c2: 4f:25:b8:82:41:33:7b:cb:13:a5:d8:d8:40:8f:c2: e0:62:7a:ec:57:99:a4:a3:1d:07:a1:05:eb:21:f4: de:6c:e1:ea:87:3c:cd:c1:e2:b4:30:65:54:85:5f: 02:b8:83:2b:39:55:69:95:88:53:ef:7f:90:ae:a4: 36:5e:40:19:2c:75:3b:5b:6b:1e:34:90:d0:a1:37: 52:48:36:2e:92:ac:6b:97:d8:19:07:13:69:f5:51: 3f:2b:bb:61:6c:3b:78:3b:cf:5f:cf:58:b1:90:59: 92:bd:e8:76:49:03:03:b8:50:e5:62:53:3c:dc:b5: b3:55:9c:80:69:92:85:05:41:88:38:9d:3b:ab:c8: 3d:7d:67:c9:28:1f:2b:34:2c:66:d4:f6:69:a2:4d: 0f:f2:59:8e:81:8b:56:c8:f8:d2:d7:30:46:32:36: a0:df:96:f0:18:12:9e:ab:56:a7:da:e4:00:4d:ce: 5c:fc:51:23:92:96:b8:3e:06:fa:c3:f6:3d:28:e0: 7e:5c:ce:dd:2a:82:9a:d0:38:74:13:55:50:68:85: eb:27:bb:54:fc:71:2c:8e:68:0c:3b:13:23:2e:09: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4F:B0:EC:CB:79:07:D4:DD:27:81:91:B4:84:02:7D:1F:19:FB:5B X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0b:83:e5:0b:55:fa:b4:41:9f:af:f3:0d:02:26:d8:a3:9e: 69:05:c2:1b:28:ec:d9:5b:c8:ac:77:3b:22:da:05:a4:4d:57: de:2d:ee:6a:c2:9c:d2:61:69:50:54:90:45:4d:1f:04:6a:83: 2f:f3:e9:75:75:26:72:fb:60:83:52:4c:18:69:0e:d9:2f:43: 5e:5b:01:99:30:4c:74:16:4e:8e:5f:9d:04:57:78:32:30:e5: 49:f6:b8:17:04:69:4f:c9:36:af:a2:db:3a:68:8a:fb:02:3b: 3c:97:d9:ad:31:51:fc:3c:b4:de:7f:68:94:46:e9:56:05:30: 0a:6c:b4:8f:eb:67:63:5e:81:da:fe:c2:03:b9:3d:fa:3f:94: 0a:13:41:c8:2a:96:97:7d:08:fb:42:be:4d:a2:20:5a:66:c7: 1d:f8:98:16:78:0c:0f:72:18:9b:b6:4a:02:f5:38:60:e1:33: 96:38:c5:88:36:ca:68:e0:48:f2:ba:4c:27:4d:80:15:3c:8b: 29:08:cd:91:67:d5:75:ea:42:42:4d:84:44:9b:72:7b:fa:e1: cc:6f:fe:6b:73:c5:74:87:d2:80:79:e8:3b:2c:ec:24:25:ef: 68:0e:87:e5:64:7e:84:1f:f4:49:25:cd:78:38:ed:f6:10:3d: e2:af:63:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnytAT+DjOZcLHtw8zI3ZTjv+eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNTA4MjIxMTE2MjVaFw0yNTA4MjUyMjQxMjVaMDMxMTAvBgNV BAMTKEJFNEZCMEVDQ0I3OTA3RDRERDI3ODE5MUI0ODQwMjdEMUYxOUZCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChtKpcl0Jz48DCv4PtOCq0DJQ tmYHXkZyYBm+wk8luIJBM3vLE6XY2ECPwuBieuxXmaSjHQehBesh9N5s4eqHPM3B 4rQwZVSFXwK4gys5VWmViFPvf5CupDZeQBksdTtbax40kNChN1JINi6SrGuX2BkH E2n1UT8ru2FsO3g7z1/PWLGQWZK96HZJAwO4UOViUzzctbNVnIBpkoUFQYg4nTur yD19Z8koHys0LGbU9mmiTQ/yWY6Bi1bI+NLXMEYyNqDflvAYEp6rVqfa5ABNzlz8 USOSlrg+BvrD9j0o4H5czt0qgprQOHQTVVBohesnu1T8cSyOaAw7EyMuCSOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvk+w7Mt5B9TdJ4GRtIQCfR8Z+1swHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJULg+ULVfq0QZ+v8w0CJtijnmkFwhso7Nlb yKx3OyLaBaRNV94t7mrCnNJhaVBUkEVNHwRqgy/z6XV1JnL7YINSTBhpDtkvQ15b AZkwTHQWTo5fnQRXeDIw5Un2uBcEaU/JNq+i2zpoivsCOzyX2a0xUfw8tN5/aJRG 6VYFMApstI/rZ2Negdr+wgO5Pfo/lAoTQcgqlpd9CPtCvk2iIFpmxx34mBZ4DA9y GJu2SgL1OGDhM5Y4xYg2ymjgSPK6TCdNgBU8iykIzZFn1XXqQkJNhESbcnv64cxv /mtzxXSH0oB56Dss7CQl72gOh+VkfoQf9EklzXg47fYQPeKvY9g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:53 2025 by rpki-client