$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: kB85zIiiiRZcIQBrl8joYf26tX9vn7O3+6p1VzUd2rY= Subject key identifier: BA:86:17:C6:DC:92:A7:5B:DD:FA:B3:89:77:C9:F1:72:38:6B:DB:BC Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 78FDD024EB23381C87152F3D0748115E99940912 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 03:22:11 +0000 Manifest this update: Sat 23 Aug 2025 03:17:11 +0000 Manifest next update: Tue 26 Aug 2025 05:02:11 +0000 Files and hashes: 1: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: l8asY0U5hgaU/ZNfBZh08Jv15qQgEkbDiaftyM+1m2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fd:d0:24:eb:23:38:1c:87:15:2f:3d:07:48:11:5e:99:94:09:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Aug 23 03:17:11 2025 GMT Not After : Aug 26 05:02:11 2025 GMT Subject: CN=BA8617C6DC92A75BDDFAB38977C9F172386BDBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:65:7f:07:27:6c:c5:13:3a:a1:62:23:c6: a8:d2:d1:4d:68:23:f3:0d:df:f7:37:d4:09:5a:7d: 4c:54:9a:09:bc:41:46:99:5e:90:42:d6:c3:69:be: cd:d9:73:3a:65:04:c1:0c:68:48:f1:48:73:fc:ac: 69:40:1e:ed:58:41:62:74:0e:e4:9c:25:07:e5:de: b6:1f:3b:21:88:48:45:69:17:32:b8:37:a6:3b:f8: 4b:3b:9a:c1:ec:6a:88:e8:1f:1c:90:ec:14:60:ef: a6:b4:28:ba:ae:2e:58:03:52:33:10:e3:23:64:5c: 7c:2c:5f:3e:6c:f6:80:45:7c:93:6b:47:99:7b:23: 93:81:f7:78:0d:72:0f:88:82:38:40:dc:d0:64:24: 65:ff:2b:ff:82:8c:6e:19:8a:d2:91:b3:cd:0b:42: 37:be:7f:c6:f7:86:be:d4:ae:7f:94:75:8b:bf:f8: dd:29:ab:71:ae:0f:2e:f8:24:bd:c2:fa:a0:38:b5: 96:da:a8:a4:73:4c:51:df:37:3f:5e:f5:58:6d:53: 6f:e9:73:99:19:5f:5b:e3:8b:4c:ac:4f:d7:b3:7e: 04:29:e6:13:45:71:9d:2e:06:de:0c:de:39:45:b6: 75:7c:9b:ec:b1:02:f3:a8:eb:1a:e0:e1:54:02:3f: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:17:C6:DC:92:A7:5B:DD:FA:B3:89:77:C9:F1:72:38:6B:DB:BC X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:45:ac:9d:21:77:fe:13:09:ab:14:04:09:70:c8:08:0d:69: 14:87:97:fb:37:aa:5b:a1:2e:fb:ac:a7:30:bd:08:8a:a7:2c: 96:39:7a:f0:44:03:63:54:a4:80:63:28:aa:e8:f6:64:b3:cc: 10:32:4f:a7:32:d8:ee:f1:13:8c:34:8b:f6:f7:d6:7b:f3:48: 71:1e:87:39:cc:5a:2b:12:29:47:7f:96:b8:32:ae:17:07:b3: d4:3c:70:63:dc:4b:3a:d6:98:8c:62:9f:79:9c:21:4c:c0:cc: 38:28:58:7f:93:b5:62:23:59:44:57:1c:2d:ec:48:49:9e:78: 67:0a:dd:f2:88:98:67:f4:d1:e4:af:58:66:fd:9e:3f:13:69: ad:bc:3c:7b:47:b4:c5:49:3b:34:cf:bf:67:70:bc:12:ff:37: a3:21:72:da:68:6b:26:01:47:2d:7f:38:d1:f0:9b:7d:e1:38: 41:95:01:87:01:69:35:3f:18:2b:ac:19:15:c4:a2:b1:00:df: be:f3:38:9c:72:09:04:51:3c:15:55:70:02:3a:6d:fb:36:bc: 1d:4e:96:f9:0d:9e:70:93:1f:c2:be:fd:89:c8:95:a1:02:07: bb:59:3d:59:2e:18:58:05:37:6e:58:ff:35:33:e1:30:4e:22: 62:e2:ea:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeP3QJOsjOByHFS89B0gRXpmUCRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNTA4MjMwMzE3MTFaFw0yNTA4MjYwNTAyMTFaMDMxMTAvBgNV BAMTKEJBODYxN0M2REM5MkE3NUJEREZBQjM4OTc3QzlGMTcyMzg2QkRCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxWV/BydsxRM6oWIjxqjS0U1o I/MN3/c31AlafUxUmgm8QUaZXpBC1sNpvs3ZczplBMEMaEjxSHP8rGlAHu1YQWJ0 DuScJQfl3rYfOyGISEVpFzK4N6Y7+Es7msHsaojoHxyQ7BRg76a0KLquLlgDUjMQ 4yNkXHwsXz5s9oBFfJNrR5l7I5OB93gNcg+IgjhA3NBkJGX/K/+CjG4ZitKRs80L Qje+f8b3hr7Urn+UdYu/+N0pq3GuDy74JL3C+qA4tZbaqKRzTFHfNz9e9VhtU2/p c5kZX1vji0ysT9ezfgQp5hNFcZ0uBt4M3jlFtnV8m+yxAvOo6xrg4VQCP1rdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuoYXxtySp1vd+rOJd8nxcjhr27wwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdFrJ0hd/4TCasUBAlwyAgNaRSHl/s3qluh LvuspzC9CIqnLJY5evBEA2NUpIBjKKro9mSzzBAyT6cy2O7xE4w0i/b31nvzSHEe hznMWisSKUd/lrgyrhcHs9Q8cGPcSzrWmIxin3mcIUzAzDgoWH+TtWIjWURXHC3s SEmeeGcK3fKImGf00eSvWGb9nj8Taa28PHtHtMVJOzTPv2dwvBL/N6MhctpoayYB Ry1/ONHwm33hOEGVAYcBaTU/GCusGRXEorEA377zOJxyCQRRPBVVcAI6bfs2vB1O lvkNnnCTH8K+/YnIlaECB7tZPVkuGFgFN25Y/zUz4TBOImLi6io= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:16 2025 by rpki-client