$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: pDAqg9FKLc3YBRe2r6bU+ReQ5P2qKV9N9pZqvaBgwr8= Subject key identifier: 8B:FA:1C:12:3E:01:3A:E5:DC:57:3C:98:B8:7D:AE:EC:C8:A7:4C:A8 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 58A5521BD7D90906146A7A9E9CD1F0CE2407184F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 026D Signing time: Sat 23 Aug 2025 11:40:03 +0000 Manifest this update: Sat 23 Aug 2025 11:35:03 +0000 Manifest next update: Tue 26 Aug 2025 15:23:03 +0000 Files and hashes: 1: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: R/Ybfh2qQ6/nfsHX9lYsy6IkFYfza/PesDle6ew2VYk=) 2: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a5:52:1b:d7:d9:09:06:14:6a:7a:9e:9c:d1:f0:ce:24:07:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Aug 23 11:35:03 2025 GMT Not After : Aug 26 15:23:03 2025 GMT Subject: CN=8BFA1C123E013AE5DC573C98B87DAEECC8A74CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:fd:a5:89:58:40:3e:7d:60:2f:20:72:46: e7:79:e7:13:46:e5:b3:6e:c7:12:69:53:b4:f3:c6: d4:27:77:c2:0f:67:41:5e:c7:9e:74:2c:31:19:de: 7a:04:38:6c:f4:a1:3d:53:45:10:4e:32:e5:55:5a: 98:7d:f5:b6:bb:f3:46:42:02:d1:a6:b4:78:3d:26: af:67:6f:ed:74:30:a1:cc:73:08:25:32:6c:60:56: 11:6d:ff:6f:4c:d2:68:a9:2d:9d:d9:7f:25:14:b0: 5f:2f:1d:51:21:e5:97:18:85:bd:88:94:20:ac:8d: 73:67:ad:aa:56:2f:b6:39:8a:8b:b6:97:71:95:77: a2:ec:49:23:7c:46:f8:ee:84:f6:18:ae:2b:f3:d2: 89:5a:7c:f0:72:74:44:4f:b0:d4:1d:3f:40:cb:c5: 7b:04:93:c7:0b:74:7f:82:25:1d:95:da:6d:b3:9d: f9:0b:55:e7:94:fd:05:d0:d6:91:63:97:0c:0b:f0: a6:97:4a:4a:f6:18:a7:de:18:92:3f:58:e5:f4:83: 96:e4:86:1c:a8:51:5a:30:24:a5:cd:1c:53:31:1e: 75:97:11:75:25:96:e1:43:d5:05:4f:89:f8:f1:c8: fa:5d:84:6f:0d:68:ca:c5:b5:e7:ca:47:37:7a:c4: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FA:1C:12:3E:01:3A:E5:DC:57:3C:98:B8:7D:AE:EC:C8:A7:4C:A8 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:18:a1:4e:50:74:92:38:87:ea:7e:f4:3a:26:bf:b2:4f:91: ac:b4:e4:4e:3e:a5:e4:c3:15:d7:e5:3c:28:a5:40:d4:b1:6a: a3:73:a2:ef:92:a5:1d:bb:63:11:54:b2:96:30:77:7d:33:c0: 7d:63:98:f5:c7:5d:91:37:f4:7f:52:8e:61:42:89:08:85:54: 80:cc:ed:a4:49:81:20:d5:2f:35:99:b2:29:d5:1d:fa:b5:21: 14:e1:24:4a:db:18:1a:4b:24:bc:dc:55:8a:8d:e1:60:f2:b9: 04:cd:a0:10:d7:ef:91:0c:fd:02:8f:a9:7e:51:0a:8a:01:b8: e4:84:3b:3c:4e:c5:43:d5:81:ae:28:27:65:7a:79:53:3f:42: 9e:21:be:b2:ae:5b:e6:a9:3c:06:d0:9c:55:c4:10:ad:94:15: a6:22:a4:3f:c5:64:3b:28:23:28:f4:c7:cf:b4:81:4a:28:7a: fa:9b:8b:5a:3d:05:a8:71:b5:ec:d9:52:94:55:c0:b5:b7:f3: 6e:4c:2e:d2:a9:75:5a:d4:21:b8:52:0e:1d:ad:36:be:4e:3a: 10:27:24:3a:e1:1a:35:8d:20:15:b4:97:64:52:55:e8:44:51: 60:3f:48:ff:61:e9:ee:3d:bb:24:a7:67:94:d7:3b:bb:5e:d8: 08:c7:7a:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKVSG9fZCQYUanqenNHwziQHGE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA4MjMxMTM1MDNaFw0yNTA4MjYxNTIzMDNaMDMxMTAvBgNV BAMTKDhCRkExQzEyM0UwMTNBRTVEQzU3M0M5OEI4N0RBRUVDQzhBNzRDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2P2liVhAPn1gLyByRud55xNG 5bNuxxJpU7TzxtQnd8IPZ0Fex550LDEZ3noEOGz0oT1TRRBOMuVVWph99ba780ZC AtGmtHg9Jq9nb+10MKHMcwglMmxgVhFt/29M0mipLZ3ZfyUUsF8vHVEh5ZcYhb2I lCCsjXNnrapWL7Y5iou2l3GVd6LsSSN8RvjuhPYYrivz0olafPBydERPsNQdP0DL xXsEk8cLdH+CJR2V2m2znfkLVeeU/QXQ1pFjlwwL8KaXSkr2GKfeGJI/WOX0g5bk hhyoUVowJKXNHFMxHnWXEXUlluFD1QVPifjxyPpdhG8NaMrFtefKRzd6xKyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/ocEj4BOuXcVzyYuH2u7MinTKgwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcYoU5QdJI4h+p+9Domv7JPkay05E4+peTD FdflPCilQNSxaqNzou+SpR27YxFUspYwd30zwH1jmPXHXZE39H9SjmFCiQiFVIDM 7aRJgSDVLzWZsinVHfq1IRThJErbGBpLJLzcVYqN4WDyuQTNoBDX75EM/QKPqX5R CooBuOSEOzxOxUPVga4oJ2V6eVM/Qp4hvrKuW+apPAbQnFXEEK2UFaYipD/FZDso Iyj0x8+0gUooevqbi1o9BahxtezZUpRVwLW3825MLtKpdVrUIbhSDh2tNr5OOhAn JDrhGjWNIBW0l2RSVehEUWA/SP9h6e49uySnZ5TXO7te2AjHemc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:50 2025 by rpki-client