$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: Z04DPms7OqKN3ZEVNXbuF27+ot9snM0cx0AJQh7xobw= Subject key identifier: 9B:60:74:DD:A2:E3:4D:DE:E6:5B:54:90:5A:ED:EF:C3:EA:78:59:5F Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 12BDAF1BBDA4B9024B1826B60B92F38BF26FE8F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02E9 Signing time: Sat 23 Aug 2025 00:11:12 +0000 Manifest this update: Sat 23 Aug 2025 00:06:12 +0000 Manifest next update: Tue 26 Aug 2025 01:47:12 +0000 Files and hashes: 1: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: 4NrzDGtjrXEEXKxZ+PDGo8KCrGMqoAJd7+myKrqY/Mw=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bd:af:1b:bd:a4:b9:02:4b:18:26:b6:0b:92:f3:8b:f2:6f:e8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Aug 23 00:06:12 2025 GMT Not After : Aug 26 01:47:12 2025 GMT Subject: CN=9B6074DDA2E34DDEE65B54905AEDEFC3EA78595F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:57:ca:0f:c0:6f:80:e9:c4:7d:03:66:e6:48: 67:47:af:99:51:d4:ad:08:c8:c4:2a:f2:6b:e7:7d: 84:8e:ae:d8:df:bd:07:2b:99:d4:90:fc:ce:c8:ef: b4:8e:2b:85:a0:5c:af:51:33:d5:a4:ae:9b:54:66: 1f:c0:42:cb:79:99:9b:15:17:8b:35:cf:5c:b2:8c: 9d:b2:cd:7f:fb:ea:61:d7:11:36:21:d6:1d:bf:87: 61:38:2c:c7:fb:c2:7b:b7:68:de:ea:6f:c1:40:4f: f9:1b:cc:89:bb:f6:82:96:4d:ab:b7:4f:38:02:47: 78:31:bd:56:c1:bb:e6:21:86:e2:b7:3c:4b:2f:da: 37:07:40:64:f9:10:5e:54:33:81:69:34:d6:8e:96: 23:87:d6:37:a6:16:b0:4f:0d:a6:3d:27:fe:c5:4e: 37:60:ab:97:13:b8:a9:28:eb:22:40:09:06:36:00: 52:ad:c9:e3:2a:c0:12:73:33:67:20:65:2d:f4:0a: 24:cb:46:94:8c:d9:aa:12:fb:d1:c8:89:cc:2c:61: 26:52:db:41:ed:67:d8:66:18:d4:13:a8:2f:20:96: db:5b:90:1b:95:da:69:55:d8:84:98:a6:ec:f9:83: 58:fe:4a:b0:71:53:37:97:4e:b8:d5:d6:29:58:b1: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:60:74:DD:A2:E3:4D:DE:E6:5B:54:90:5A:ED:EF:C3:EA:78:59:5F X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:89:15:e1:ca:e2:2b:53:b7:d9:b6:e0:ff:f3:d8:8e:1b:d3: 07:71:d1:4e:5e:a1:d8:ab:7d:91:83:30:7f:40:28:4e:e5:18: 8c:bd:eb:0f:4f:85:19:9d:1b:a6:ac:54:c7:14:02:e6:50:42: 2d:3a:28:88:b3:5f:53:6c:8f:63:90:3f:88:a4:02:5b:b4:12: 05:13:d5:51:0c:9b:3f:e2:29:5b:7e:b0:6d:a8:7b:b8:4d:55: f9:7f:bf:1f:c7:2c:8d:be:b2:56:36:e4:90:02:a5:8e:b0:fc: 84:81:f7:e0:10:e8:b0:00:ce:66:af:a9:fa:83:d1:0a:91:34: 2c:6c:71:78:9f:60:64:2f:c7:58:39:28:49:81:9a:86:c1:71: 50:4c:00:21:bc:92:3a:94:2e:8c:49:fa:b9:12:d6:bc:6c:d5: d6:b0:f1:d3:d8:5c:7b:27:f0:ca:20:db:10:c7:07:24:ea:af: 14:07:a0:6b:81:0c:79:c5:6b:a0:d0:d5:e2:bc:fd:f6:76:ed: 65:a2:14:c6:ad:35:8a:6c:5c:dc:17:30:92:d1:d7:4f:30:f9: 59:ed:6b:1d:0b:0a:c9:18:5c:3c:e3:1d:9e:ca:03:90:47:58: 22:31:d2:6b:28:9a:03:4c:0f:a7:c1:8a:4c:10:0d:25:7a:f3: d5:21:56:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEr2vG72kuQJLGCa2C5Lzi/Jv6PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTA4MjMwMDA2MTJaFw0yNTA4MjYwMTQ3MTJaMDMxMTAvBgNV BAMTKDlCNjA3NEREQTJFMzREREVFNjVCNTQ5MDVBRURFRkMzRUE3ODU5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuV8oPwG+A6cR9A2bmSGdHr5lR 1K0IyMQq8mvnfYSOrtjfvQcrmdSQ/M7I77SOK4WgXK9RM9WkrptUZh/AQst5mZsV F4s1z1yyjJ2yzX/76mHXETYh1h2/h2E4LMf7wnu3aN7qb8FAT/kbzIm79oKWTau3 TzgCR3gxvVbBu+YhhuK3PEsv2jcHQGT5EF5UM4FpNNaOliOH1jemFrBPDaY9J/7F Tjdgq5cTuKko6yJACQY2AFKtyeMqwBJzM2cgZS30CiTLRpSM2aoS+9HIicwsYSZS 20HtZ9hmGNQTqC8glttbkBuV2mlV2ISYpuz5g1j+SrBxUzeXTrjV1ilYsUT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2B03aLjTd7mW1SQWu3vw+p4WV8wHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiJFeHK4itTt9m24P/z2I4b0wdx0U5eodir fZGDMH9AKE7lGIy96w9PhRmdG6asVMcUAuZQQi06KIizX1Nsj2OQP4ikAlu0EgUT 1VEMmz/iKVt+sG2oe7hNVfl/vx/HLI2+slY25JACpY6w/ISB9+AQ6LAAzmavqfqD 0QqRNCxscXifYGQvx1g5KEmBmobBcVBMACG8kjqULoxJ+rkS1rxs1daw8dPYXHsn 8Mog2xDHByTqrxQHoGuBDHnFa6DQ1eK8/fZ27WWiFMatNYpsXNwXMJLR108w+Vnt ax0LCskYXDzjHZ7KA5BHWCIx0msomgNMD6fBikwQDSV689UhViE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:08 2025 by rpki-client