$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: DUXGv23flv9XpWBdOUPO7iwNcxjqU/3lxzt/E82hEIg= Subject key identifier: DA:91:D2:1F:CD:CA:2A:9C:84:61:FC:77:A1:41:0E:8A:3F:9F:CD:E8 Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 4A03DC45534AD4DA9BE9EBF381F46D5274D414D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: BB Signing time: Sun 24 Aug 2025 03:10:04 +0000 Manifest this update: Sun 24 Aug 2025 03:05:04 +0000 Manifest next update: Wed 27 Aug 2025 08:28:04 +0000 Files and hashes: 1: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: SnZkrtP5eewwpklzNzIfbVAz7gJ2clnTH4OzEGsPEgI=) 2: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 3: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) 4: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:03:dc:45:53:4a:d4:da:9b:e9:eb:f3:81:f4:6d:52:74:d4:14:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Aug 24 03:05:04 2025 GMT Not After : Aug 27 08:28:04 2025 GMT Subject: CN=DA91D21FCDCA2A9C8461FC77A1410E8A3F9FCDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:b7:1b:f4:36:12:88:41:49:da:eb:85:cc: 0e:8e:58:d5:16:d9:d5:ae:9e:96:68:51:5a:17:de: cb:6b:38:78:fe:79:04:e6:b0:7e:3f:a4:d4:89:aa: cb:43:12:bf:ce:53:b2:68:ab:a5:04:bb:18:7c:67: 71:aa:ea:63:ff:87:40:dd:c0:84:f9:f5:68:d8:07: e0:c4:0c:7a:d3:28:b6:90:cd:21:7d:f4:b6:c4:c8: d0:e1:31:0f:62:23:04:24:aa:d6:a9:b2:e4:a7:58: e7:57:02:28:d9:cf:16:f9:20:87:33:bd:bc:e3:c4: 7f:6b:0b:c1:4e:92:5a:b1:2a:04:1e:be:70:2a:e4: 09:10:dc:90:78:a0:f9:53:1b:69:4e:c7:34:07:81: f5:12:6d:fb:4d:37:db:bf:3a:58:e4:50:33:cc:39: 35:af:18:98:cc:ba:be:9f:1e:e3:e3:2e:1c:f5:a8: 1e:e9:4e:aa:f4:b6:a4:96:81:1c:1f:e7:c2:e8:6e: f1:11:b3:e7:3b:22:57:dd:f9:5d:4d:53:86:a0:27: bb:de:e2:52:96:ec:ff:e8:c2:dc:02:d1:e9:80:bb: 44:11:d3:1d:00:f0:5c:2c:9f:ab:d1:88:71:85:1b: 92:3e:f1:e2:e0:68:20:4a:dd:a4:a1:72:7a:85:58: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:D2:1F:CD:CA:2A:9C:84:61:FC:77:A1:41:0E:8A:3F:9F:CD:E8 X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ea:83:41:fa:22:5d:1e:58:fc:1a:e7:49:c5:9c:98:6e:ad: ef:29:f2:37:76:1d:67:67:0b:70:d8:81:7d:bd:5a:f6:93:e6: 8d:32:9b:04:f0:83:9e:c3:c3:f1:0d:fa:ba:ee:4a:02:d1:32: c7:50:c4:b0:fd:f1:1b:ff:0c:f2:b0:be:02:7e:1c:31:ef:b8: 7a:da:70:0d:d1:7f:0b:e8:75:b4:03:da:9a:86:d8:e4:c7:3f: d0:f7:9e:0e:c3:1a:f3:38:33:97:94:a9:b6:d0:3f:0b:18:d6: 20:26:d5:e5:df:6f:fd:fc:c1:d6:74:db:13:12:57:fe:1d:3f: 65:3e:f7:d9:e4:1e:02:d1:32:f5:68:fd:74:2b:bc:a1:93:04: c5:56:03:77:a6:ee:52:57:ee:8a:45:5c:f7:e5:d2:07:40:55: fd:14:49:08:0d:be:cf:e5:c1:63:b8:6d:aa:d2:fc:d1:0c:cc: d0:9f:7a:21:27:29:b3:35:b9:da:2b:ec:d4:6a:d9:f0:ff:a3: 4d:cd:ac:7a:2c:b0:0e:84:b2:54:d3:6b:44:6f:15:8d:49:d0: 3d:25:9d:b3:95:d0:b5:e3:45:33:fa:60:27:8b:07:b1:17:11: 4c:5a:b9:57:76:f0:93:e7:05:7c:17:5b:da:71:74:64:85:9e: 47:ea:a0:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSgPcRVNK1Nqb6evzgfRtUnTUFNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNTA4MjQwMzA1MDRaFw0yNTA4MjcwODI4MDRaMDMxMTAvBgNV BAMTKERBOTFEMjFGQ0RDQTJBOUM4NDYxRkM3N0ExNDEwRThBM0Y5RkNERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsurcb9DYSiEFJ2uuFzA6OWNUW 2dWunpZoUVoX3strOHj+eQTmsH4/pNSJqstDEr/OU7Joq6UEuxh8Z3Gq6mP/h0Dd wIT59WjYB+DEDHrTKLaQzSF99LbEyNDhMQ9iIwQkqtapsuSnWOdXAijZzxb5IIcz vbzjxH9rC8FOklqxKgQevnAq5AkQ3JB4oPlTG2lOxzQHgfUSbftNN9u/OljkUDPM OTWvGJjMur6fHuPjLhz1qB7pTqr0tqSWgRwf58LobvERs+c7Ilfd+V1NU4agJ7ve 4lKW7P/owtwC0emAu0QR0x0A8Fwsn6vRiHGFG5I+8eLgaCBK3aShcnqFWMSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pHSH83KKpyEYfx3oUEOij+fzegwHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnqg0H6Il0eWPwa50nFnJhure8p8jd2HWdn C3DYgX29WvaT5o0ymwTwg57Dw/EN+rruSgLRMsdQxLD98Rv/DPKwvgJ+HDHvuHra cA3RfwvodbQD2pqG2OTHP9D3ng7DGvM4M5eUqbbQPwsY1iAm1eXfb/38wdZ02xMS V/4dP2U+99nkHgLRMvVo/XQrvKGTBMVWA3em7lJX7opFXPfl0gdAVf0USQgNvs/l wWO4barS/NEMzNCfeiEnKbM1udor7NRq2fD/o03NrHossA6EslTTa0RvFY1J0D0l nbOV0LXjRTP6YCeLB7EXEUxauVd28JPnBXwXW9pxdGSFnkfqoDk= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:55 2025 by rpki-client