$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: N7Plajss3p+vS4wIKV+AFg84peGHzdbRwywPXvreJ8Y= Subject key identifier: 31:E2:2F:71:18:1D:9A:92:05:61:4D:94:2D:F6:38:78:B6:2F:89:45 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 463B8F78222B3338414588BE42E368D52266F7EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 0213 Signing time: Sat 23 Aug 2025 06:00:02 +0000 Manifest this update: Sat 23 Aug 2025 05:55:02 +0000 Manifest next update: Tue 26 Aug 2025 15:12:02 +0000 Files and hashes: 1: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 2: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: X9fDHoy5s/TbhS+f00sBScYqkKLZb7GBqc6CmqjfzpY=) 3: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 4: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 5: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 6: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3b:8f:78:22:2b:33:38:41:45:88:be:42:e3:68:d5:22:66:f7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Aug 23 05:55:02 2025 GMT Not After : Aug 26 15:12:02 2025 GMT Subject: CN=31E22F71181D9A9205614D942DF63878B62F8945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:88:bc:f4:b2:34:30:74:d9:10:24:2d:8e: fd:dc:53:6e:ab:c5:5a:ad:a9:12:7e:0e:46:0f:bc: bc:41:71:52:5c:b3:0c:c9:68:9a:a3:70:87:4d:4a: 4d:25:c8:3f:d6:61:91:dd:11:fc:46:14:d8:86:98: 4d:21:1a:97:94:0d:bc:f1:fe:60:7e:55:4c:35:05: ac:05:69:d8:fe:6a:f5:40:b7:46:d0:b4:ea:60:46: af:74:7e:47:04:72:24:2f:74:d1:64:32:49:62:f5: ca:d3:92:c1:db:b5:85:5f:3b:3c:3f:75:1e:cc:20: 7c:e5:45:a7:30:3a:6e:e8:00:52:b3:0a:12:9a:c2: 87:ff:31:d4:bb:e1:57:70:9f:ea:95:56:36:9d:29: 5d:a4:01:53:a3:39:d0:ea:d8:30:26:b2:a2:61:2b: d1:f8:bc:20:9b:86:c0:7f:e8:85:9f:84:85:3e:25: 30:6c:b8:ad:d3:04:11:21:7d:02:de:85:10:7f:a2: 5c:2e:09:2a:89:c5:0e:da:68:cb:3c:e3:86:43:8e: 6c:5a:93:72:ad:26:6a:9b:f9:c4:7b:a3:13:a3:fb: 22:18:10:68:be:07:76:5c:6d:45:67:88:87:b1:d0: 1b:2b:44:65:8f:61:d8:f3:5f:a9:95:7e:70:8d:f0: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:2F:71:18:1D:9A:92:05:61:4D:94:2D:F6:38:78:B6:2F:89:45 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b3:39:a7:41:c4:08:21:6a:21:fc:17:73:38:31:69:4b:ed: 83:e6:54:9a:af:00:e2:d1:29:22:17:3e:e4:a6:60:6f:b2:d8: 5e:0a:e3:21:ef:d0:0a:31:47:17:79:fb:a7:c1:57:2c:5b:9d: e0:16:81:02:dc:90:0b:d4:66:d1:ce:e7:2f:a3:1f:09:74:df: 7c:eb:b4:75:a2:90:f3:b9:64:56:74:30:4a:b0:1e:6f:c3:38: 45:46:c6:ce:ce:fe:b1:fd:d3:79:10:9c:86:de:39:c8:61:f9: 90:81:c0:39:37:40:3f:d6:1f:ca:5e:aa:6a:e7:b9:38:d6:83: 97:4d:56:55:f8:bd:ef:eb:51:ca:84:27:72:f7:ef:a8:4d:85: f5:4a:70:34:61:42:1e:32:a1:60:9f:2e:3f:ac:48:53:39:99: 2a:ca:6c:d8:b8:57:ff:c2:30:26:cd:2a:8a:30:b5:40:4f:3b: 05:2b:b0:e7:d2:2d:f4:c6:af:60:43:ca:df:2f:94:11:7b:88: 23:a0:a5:97:66:d6:d7:f1:85:4d:85:29:b1:b4:a7:bc:eb:59: e7:49:a7:f0:45:e8:94:a6:6e:d6:63:b5:4a:6e:ae:c8:21:b7: e9:ee:0a:48:78:b5:1c:11:ca:c3:90:53:2d:c0:52:b3:a1:36: 0c:ba:4d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjuPeCIrMzhBRYi+QuNo1SJm9+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA4MjMwNTU1MDJaFw0yNTA4MjYxNTEyMDJaMDMxMTAvBgNV BAMTKDMxRTIyRjcxMTgxRDlBOTIwNTYxNEQ5NDJERjYzODc4QjYyRjg5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQoi89LI0MHTZECQtjv3cU26r xVqtqRJ+DkYPvLxBcVJcswzJaJqjcIdNSk0lyD/WYZHdEfxGFNiGmE0hGpeUDbzx /mB+VUw1BawFadj+avVAt0bQtOpgRq90fkcEciQvdNFkMkli9crTksHbtYVfOzw/ dR7MIHzlRacwOm7oAFKzChKawof/MdS74Vdwn+qVVjadKV2kAVOjOdDq2DAmsqJh K9H4vCCbhsB/6IWfhIU+JTBsuK3TBBEhfQLehRB/olwuCSqJxQ7aaMs844ZDjmxa k3KtJmqb+cR7oxOj+yIYEGi+B3ZcbUVniIex0BsrRGWPYdjzX6mVfnCN8EwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMeIvcRgdmpIFYU2ULfY4eLYviUUwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2zOadBxAghaiH8F3M4MWlL7YPmVJqvAOLR KSIXPuSmYG+y2F4K4yHv0AoxRxd5+6fBVyxbneAWgQLckAvUZtHO5y+jHwl033zr tHWikPO5ZFZ0MEqwHm/DOEVGxs7O/rH903kQnIbeOchh+ZCBwDk3QD/WH8peqmrn uTjWg5dNVlX4ve/rUcqEJ3L376hNhfVKcDRhQh4yoWCfLj+sSFM5mSrKbNi4V//C MCbNKoowtUBPOwUrsOfSLfTGr2BDyt8vlBF7iCOgpZdm1tfxhU2FKbG0p7zrWedJ p/BF6JSmbtZjtUpursght+nuCkh4tRwRysOQUy3AUrOhNgy6Tf8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:08 2025 by rpki-client