$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: ZXyaRsM0LU0hmpsrofg4oEUVSJ6ULP0SjT4Wgi8eJJk= Subject key identifier: E6:C9:FC:05:93:EE:DD:A3:A3:67:DC:FD:8A:14:CA:4B:C0:82:94:A1 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 35C537CF7985F46D2667F98773A3B909493A082F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 039D Signing time: Fri 22 Aug 2025 17:31:57 +0000 Manifest this update: Fri 22 Aug 2025 17:26:57 +0000 Manifest next update: Mon 25 Aug 2025 18:52:57 +0000 Files and hashes: 1: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) 2: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: MR0vuOK83eKQgL1Fy5JS8qbLGHJrbQXLpQoCt2clqOs=) 3: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: R8WYOqx1QH2Zg337nCSL5ft1oPGrrLeo2P+BSEWkkd0=) 4: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: L5BIjbBfOEx7SS/qKd8g58mpaMP4eQ6lbIGXrSSmvHc=) 5: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: PLxyzNMHDwWhigbWK1elnj9wmeVoOxOWWNDLZHzEEUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:37:cf:79:85:f4:6d:26:67:f9:87:73:a3:b9:09:49:3a:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Aug 22 17:26:57 2025 GMT Not After : Aug 25 18:52:57 2025 GMT Subject: CN=E6C9FC0593EEDDA3A367DCFD8A14CA4BC08294A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:c3:7c:e3:cb:93:2c:4c:40:e8:dd:ec:dc: 78:76:33:6a:d0:1d:12:93:c7:ff:e2:63:61:0b:59: 59:a8:a3:87:67:ed:b1:c8:2d:a9:6d:d0:01:4a:9e: 63:04:4a:43:b0:b9:aa:e2:c1:2c:c5:8c:d4:7b:b1: 8f:66:be:35:61:61:53:1c:a6:58:a6:71:13:7e:37: 18:71:ed:8d:8f:37:b9:92:9d:60:04:6b:9c:97:3e: ff:9b:d3:a7:c5:30:65:ac:90:79:a3:1c:8d:ee:04: 91:39:07:2a:d1:dd:d1:a9:8f:0c:9a:a1:6b:03:4c: 46:7e:50:76:c9:b3:33:92:1b:5c:e8:35:e4:ff:df: 8e:a3:f8:9c:93:fa:f2:72:28:e8:18:2e:db:3d:64: b1:b9:ac:c0:c1:ff:11:ed:c1:b0:e7:65:b2:88:6f: bb:19:a7:2d:fe:1d:51:d2:39:98:a6:2f:4a:6a:8a: ea:38:27:65:37:3e:1f:df:5d:63:d2:5b:f4:c3:c1: f1:f5:8f:f6:7f:a6:24:e9:c1:e1:f5:4f:a9:9a:ed: 8c:22:84:af:a0:73:4a:a5:94:b6:c4:d3:93:45:8d: 62:bb:e1:31:ef:03:68:9e:e2:3b:af:d3:a3:db:d4: f9:c9:67:0d:94:82:3b:9f:9d:54:76:78:e3:88:c7: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C9:FC:05:93:EE:DD:A3:A3:67:DC:FD:8A:14:CA:4B:C0:82:94:A1 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:72:88:4b:f9:0f:99:c2:7c:13:f5:e8:66:a5:44:8e:3c:3e: f3:dd:2c:36:3a:13:ae:ba:4b:3d:8a:e5:cd:6e:5c:e8:e1:3e: 55:e1:76:4e:e7:45:f7:ec:ed:a6:71:aa:ef:b3:c3:32:29:03: cf:8d:c9:ef:0c:15:ce:70:b4:58:91:2e:1a:0f:d6:2f:98:2c: b1:39:a9:3c:da:aa:55:d8:e5:8f:99:f3:6a:1b:d4:b6:d0:f9: 4d:8a:2c:d5:3c:79:d8:37:9b:be:f7:3c:e8:4d:1a:ad:33:48: 9f:bd:d8:4f:8a:36:29:5d:a3:f9:42:45:f1:47:d0:f1:92:ba: da:6f:36:88:41:c4:5d:e7:75:f8:90:d7:17:bf:8c:11:42:42: 4e:53:01:93:8a:15:1d:17:78:ae:62:e4:e8:a2:fc:37:f3:d2: 55:e2:34:e8:c9:c1:b8:0b:4a:a1:11:ef:19:77:99:f2:34:19: 59:01:35:e9:fd:0f:03:02:b7:09:64:9a:df:0d:ac:82:c6:d6: 29:f3:cd:24:2a:25:9d:74:49:a7:23:12:1c:48:46:48:4c:59: ea:d8:05:1c:bb:15:d2:1e:95:38:99:84:06:87:77:69:0b:0b: cb:cd:ca:f3:86:a2:8e:8c:63:9b:e4:41:9d:61:97:c6:fe:24: fe:54:3b:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcU3z3mF9G0mZ/mHc6O5CUk6CC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTA4MjIxNzI2NTdaFw0yNTA4MjUxODUyNTdaMDMxMTAvBgNV BAMTKEU2QzlGQzA1OTNFRUREQTNBMzY3RENGRDhBMTRDQTRCQzA4Mjk0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieMN848uTLExA6N3s3Hh2M2rQ HRKTx//iY2ELWVmoo4dn7bHILalt0AFKnmMESkOwuariwSzFjNR7sY9mvjVhYVMc plimcRN+Nxhx7Y2PN7mSnWAEa5yXPv+b06fFMGWskHmjHI3uBJE5ByrR3dGpjwya oWsDTEZ+UHbJszOSG1zoNeT/346j+JyT+vJyKOgYLts9ZLG5rMDB/xHtwbDnZbKI b7sZpy3+HVHSOZimL0pqiuo4J2U3Ph/fXWPSW/TDwfH1j/Z/piTpweH1T6ma7Ywi hK+gc0qllLbE05NFjWK74THvA2ie4juv06Pb1PnJZw2UgjufnVR2eOOIx7nDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sn8BZPu3aOjZ9z9ihTKS8CClKEwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxyiEv5D5nCfBP16GalRI48PvPdLDY6E666 Sz2K5c1uXOjhPlXhdk7nRffs7aZxqu+zwzIpA8+Nye8MFc5wtFiRLhoP1i+YLLE5 qTzaqlXY5Y+Z82ob1LbQ+U2KLNU8edg3m773POhNGq0zSJ+92E+KNildo/lCRfFH 0PGSutpvNohBxF3ndfiQ1xe/jBFCQk5TAZOKFR0XeK5i5Oii/Dfz0lXiNOjJwbgL SqER7xl3mfI0GVkBNen9DwMCtwlkmt8NrILG1inzzSQqJZ10SacjEhxIRkhMWerY BRy7FdIelTiZhAaHd2kLC8vNyvOGoo6MY5vkQZ1hl8b+JP5UO00= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:08 2025 by rpki-client