$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: VNS6LuHQOyswKMw6XhxMfof8jH0TV6Bmd9FbewyrlvM= Subject key identifier: 72:04:CE:72:CA:01:64:39:ED:3B:85:1D:E6:F0:E5:25:FD:40:2B:66 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 3E5E23895EE3EB5A5F649A9809F8750AB6F1D5F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 0362 Signing time: Thu 21 Aug 2025 21:41:44 +0000 Manifest this update: Thu 21 Aug 2025 21:36:44 +0000 Manifest next update: Mon 25 Aug 2025 05:25:44 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: 7AYPLqUxfSg38rGc+SpREj0QBeRtvkRCmHnbWJ2RYd0=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: qucHtO3uMMibb76sBUwIFQbYOd1/nWt3/V8e5wQjGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5e:23:89:5e:e3:eb:5a:5f:64:9a:98:09:f8:75:0a:b6:f1:d5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Aug 21 21:36:44 2025 GMT Not After : Aug 25 05:25:44 2025 GMT Subject: CN=7204CE72CA016439ED3B851DE6F0E525FD402B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:11:04:7e:58:ff:93:b7:94:a6:77:8a:bb: 68:a5:76:d2:23:f9:6f:ae:68:e5:9c:18:5b:c9:d3: c1:7b:97:b0:c1:0e:e6:33:c3:75:ec:10:bb:59:63: 70:d4:47:3e:39:ae:16:f5:0d:41:b8:4f:b6:3a:ee: 04:59:f4:dd:2b:93:b1:cd:0f:26:a5:0a:91:74:ff: e7:ad:b3:12:dd:ed:11:50:67:bb:b3:1c:db:1d:85: 09:c2:30:96:46:28:82:bd:b8:2d:f9:46:0b:6f:7c: 52:e1:08:e6:14:f7:c3:1b:a8:d4:cb:68:be:2f:bb: 6a:60:02:46:a0:0b:10:f7:b0:5f:31:f0:22:ae:f8: 62:1a:d0:2a:63:da:6e:11:52:f7:5a:68:f9:a1:78: 0f:16:1f:c8:19:db:1c:25:39:d3:99:8e:d3:cd:95: 24:79:89:6f:91:a7:3b:02:a7:5e:a9:4c:14:ca:d4: bb:42:fe:c2:70:2d:97:ed:cb:ff:c9:f0:95:17:05: e2:30:52:58:bb:04:69:b4:52:b1:df:47:04:8f:8c: 62:0f:13:29:1e:c1:ce:fc:1e:34:a2:09:be:62:c3: 23:74:fc:ae:d4:fa:10:c9:2e:57:e1:fa:b5:39:cc: bb:f6:ac:40:f8:13:1a:9c:31:01:7b:fa:50:93:cd: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:CE:72:CA:01:64:39:ED:3B:85:1D:E6:F0:E5:25:FD:40:2B:66 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3c:71:e2:17:ed:c6:60:7c:e8:eb:6f:53:f6:fd:49:b7:84: 56:8d:dd:aa:16:2f:e0:21:80:8c:c4:09:51:ab:1e:4a:2d:71: a7:07:84:56:fa:fc:76:78:92:ae:6d:cd:ab:99:29:d1:47:b7: 16:3a:44:11:25:cb:ba:9d:5e:1a:30:0e:33:70:a8:06:89:e4: a9:84:0b:d2:71:66:62:37:85:51:5b:4d:ff:a5:c5:6a:35:77: eb:ce:a6:d4:2c:fc:65:ab:fe:cb:d9:3f:ca:69:30:7e:ce:cc: cd:42:0e:13:45:89:69:12:78:46:5c:3a:77:85:88:a6:3d:6e: df:c0:97:5a:89:45:8d:b0:55:1f:81:a2:4a:6c:a5:1e:d8:9e: e4:84:8b:14:4b:53:b7:21:c1:18:15:a0:23:9a:0f:cf:6b:79: 82:44:1e:c8:52:41:59:e4:05:1e:c6:8c:24:e8:eb:17:26:23: 65:7d:1e:88:5e:cc:fb:8d:c8:4e:d9:13:84:c5:f9:60:ef:e7: ab:4f:d2:77:d7:5b:67:0a:4a:b2:31:1c:31:64:44:14:06:1e: f8:93:49:a5:f8:e2:87:92:97:46:37:89:f4:ea:ef:a8:c4:b5: 89:03:35:3e:69:4b:ca:8a:17:8f:16:78:87:95:73:0b:60:5c: a1:3a:cf:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPl4jiV7j61pfZJqYCfh1Crbx1fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNTA4MjEyMTM2NDRaFw0yNTA4MjUwNTI1NDRaMDMxMTAvBgNV BAMTKDcyMDRDRTcyQ0EwMTY0MzlFRDNCODUxREU2RjBFNTI1RkQ0MDJCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoyhEEflj/k7eUpneKu2ildtIj +W+uaOWcGFvJ08F7l7DBDuYzw3XsELtZY3DURz45rhb1DUG4T7Y67gRZ9N0rk7HN DyalCpF0/+etsxLd7RFQZ7uzHNsdhQnCMJZGKIK9uC35RgtvfFLhCOYU98MbqNTL aL4vu2pgAkagCxD3sF8x8CKu+GIa0Cpj2m4RUvdaaPmheA8WH8gZ2xwlOdOZjtPN lSR5iW+RpzsCp16pTBTK1LtC/sJwLZfty//J8JUXBeIwUli7BGm0UrHfRwSPjGIP Eykewc78HjSiCb5iwyN0/K7U+hDJLlfh+rU5zLv2rED4ExqcMQF7+lCTzd5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcgTOcsoBZDntO4Ud5vDlJf1AK2YwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg8ceIX7cZgfOjrb1P2/Um3hFaN3aoWL+Ah gIzECVGrHkotcacHhFb6/HZ4kq5tzauZKdFHtxY6RBEly7qdXhowDjNwqAaJ5KmE C9JxZmI3hVFbTf+lxWo1d+vOptQs/GWr/svZP8ppMH7OzM1CDhNFiWkSeEZcOneF iKY9bt/Al1qJRY2wVR+BokpspR7YnuSEixRLU7chwRgVoCOaD89reYJEHshSQVnk BR7GjCTo6xcmI2V9HohezPuNyE7ZE4TF+WDv56tP0nfXW2cKSrIxHDFkRBQGHviT SaX44oeSl0Y3ifTq76jEtYkDNT5pS8qKF48WeIeVcwtgXKE6z14= -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:40 2025 by rpki-client