$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: DIaeRsQvPfCQ6vrflnhAXCu/RW2mJESKhLIFYMkzob0= Subject key identifier: 72:8A:0E:71:FE:75:97:5E:0A:AE:E2:F1:F0:13:C8:1A:8E:DD:70:AF Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 12A2F4F872DAA17321AE5B849C60855EE514DE5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: AA Signing time: Fri 22 Aug 2025 00:51:11 +0000 Manifest this update: Fri 22 Aug 2025 00:46:11 +0000 Manifest next update: Mon 25 Aug 2025 09:57:11 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: 0dstGwzjasGyhJELiYlb8RFI1x7YWgQrRxWi2AunaNY=) 2: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) 3: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a2:f4:f8:72:da:a1:73:21:ae:5b:84:9c:60:85:5e:e5:14:de:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Aug 22 00:46:11 2025 GMT Not After : Aug 25 09:57:11 2025 GMT Subject: CN=728A0E71FE75975E0AAEE2F1F013C81A8EDD70AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:6e:f5:b8:d4:48:ca:4b:38:e1:e4:b7:07: 3b:1d:40:9a:c7:84:af:a0:7c:6f:a2:95:f9:0e:54: 0e:70:e5:27:79:9d:88:70:d1:d4:2f:41:82:e0:61: a0:63:26:98:39:f2:d9:1e:cc:b3:6e:9f:b3:21:81: 16:30:8b:e1:00:da:c4:80:93:76:8b:11:20:1d:dd: e0:79:91:b5:6d:92:04:ea:41:fb:bb:4f:e3:95:78: af:50:df:7d:a9:f7:c0:c6:48:25:89:37:8b:1a:4b: 4d:88:bc:ba:ca:2f:55:54:61:94:3c:5c:a2:9b:f9: 94:9d:32:ed:af:ac:9f:4d:96:30:80:74:99:d6:ba: 12:27:ff:c9:f4:35:43:3d:7f:25:0f:c3:76:7e:b1: 1e:b0:a5:71:1d:5a:74:53:b7:68:3f:aa:7f:06:56: 1a:dc:17:10:45:f9:32:f2:1e:f2:c7:0d:85:b8:ea: 69:31:e4:90:f8:aa:96:77:3b:0e:0c:72:35:0f:64: cc:25:66:f6:2f:2b:60:96:f3:6d:3c:cf:aa:51:59: 2f:9c:e8:5c:53:93:95:16:39:d2:f7:20:d7:39:6b: aa:fd:bb:5b:36:00:76:7a:86:aa:fa:ee:7b:c8:88: fa:4a:05:9c:20:06:f2:51:20:96:cc:1a:f8:c9:7e: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8A:0E:71:FE:75:97:5E:0A:AE:E2:F1:F0:13:C8:1A:8E:DD:70:AF X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d2:ad:02:04:3f:b2:cb:7e:c8:df:68:7b:12:73:d1:69:ec: 5c:2c:76:5a:c4:d7:f5:a9:b3:36:48:dd:47:33:84:dd:b6:43: 15:32:4a:67:bf:da:74:7e:ce:a1:e7:8d:4b:6a:7a:58:9e:c9: cf:11:e3:1e:1a:6b:8e:62:a6:50:19:09:cb:4b:d8:c0:56:72: 2b:c2:f3:fe:2f:64:54:e0:a6:7f:e9:28:a0:d2:4f:fc:11:69: 06:6e:b7:bf:4b:60:59:ca:78:3f:00:c5:3c:1e:5b:5a:c5:37: 0d:14:3e:5f:27:a7:bf:e0:2b:eb:ee:48:90:63:cb:ac:44:ca: 89:7e:72:17:0a:9e:e8:bf:9d:9f:30:0c:0f:b3:c3:55:62:6a: bd:24:83:93:c2:3d:f6:aa:d5:59:c2:45:6e:ae:b3:4e:ce:56: 0e:cb:2c:9e:15:e8:5e:49:c6:7f:c2:36:7c:9e:c3:6e:cd:ad: f9:42:8f:72:7d:18:6f:41:b7:4b:d4:bf:e9:c2:a9:80:b6:45: 16:96:53:35:ae:19:98:ad:d1:76:fe:60:c6:4c:d6:b4:bb:f5: 5d:fa:9b:da:9e:16:6b:b9:86:a8:c8:72:3f:07:81:7c:12:a9: ed:f6:cc:a8:9a:43:5e:7c:9a:16:04:55:40:80:8f:72:ba:7d: 74:b5:f6:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqL0+HLaoXMhrluEnGCFXuUU3l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTA4MjIwMDQ2MTFaFw0yNTA4MjUwOTU3MTFaMDMxMTAvBgNV BAMTKDcyOEEwRTcxRkU3NTk3NUUwQUFFRTJGMUYwMTNDODFBOEVERDcwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd271uNRIyks44eS3BzsdQJrH hK+gfG+ilfkOVA5w5Sd5nYhw0dQvQYLgYaBjJpg58tkezLNun7MhgRYwi+EA2sSA k3aLESAd3eB5kbVtkgTqQfu7T+OVeK9Q332p98DGSCWJN4saS02IvLrKL1VUYZQ8 XKKb+ZSdMu2vrJ9NljCAdJnWuhIn/8n0NUM9fyUPw3Z+sR6wpXEdWnRTt2g/qn8G VhrcFxBF+TLyHvLHDYW46mkx5JD4qpZ3Ow4McjUPZMwlZvYvK2CW8208z6pRWS+c 6FxTk5UWOdL3INc5a6r9u1s2AHZ6hqr67nvIiPpKBZwgBvJRIJbMGvjJfrCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcooOcf51l14KruLx8BPIGo7dcK8wHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXSrQIEP7LLfsjfaHsSc9Fp7FwsdlrE1/Wp szZI3UczhN22QxUySme/2nR+zqHnjUtqelieyc8R4x4aa45iplAZCctL2MBWcivC 8/4vZFTgpn/pKKDST/wRaQZut79LYFnKeD8AxTweW1rFNw0UPl8np7/gK+vuSJBj y6xEyol+chcKnui/nZ8wDA+zw1Viar0kg5PCPfaq1VnCRW6us07OVg7LLJ4V6F5J xn/CNnyew27NrflCj3J9GG9Bt0vUv+nCqYC2RRaWUzWuGZit0Xb+YMZM1rS79V36 m9qeFmu5hqjIcj8HgXwSqe32zKiaQ158mhYEVUCAj3K6fXS19mc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:08 2025 by rpki-client