$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: 3HcR3b11c1aCXCpz6OvYKkXkn7hPeOLSEzVc5fj1OXI= Subject key identifier: BA:B4:1C:82:93:73:3A:83:DF:2A:0B:57:73:D2:B2:46:81:AD:BD:68 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 4EC9A490C6AE1BFE38DE57443AE3732AB51376FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 9A Signing time: Sat 23 Aug 2025 03:51:25 +0000 Manifest this update: Sat 23 Aug 2025 03:46:25 +0000 Manifest next update: Tue 26 Aug 2025 14:52:25 +0000 Files and hashes: 1: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 3: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: Lpxy/JluIKWxtidhxSDQdnUk69jddRWq1mCMMlbDjkI=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c9:a4:90:c6:ae:1b:fe:38:de:57:44:3a:e3:73:2a:b5:13:76:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Aug 23 03:46:25 2025 GMT Not After : Aug 26 14:52:25 2025 GMT Subject: CN=BAB41C8293733A83DF2A0B5773D2B24681ADBD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:bb:a9:8d:8b:90:27:df:7f:33:3e:f2:6e: 96:60:a3:8e:0e:12:37:e1:06:28:16:d5:11:2d:6c: 23:14:8c:c6:de:18:89:31:97:42:bc:28:57:b9:22: 7f:90:bc:77:50:96:0c:e9:61:17:b9:92:88:64:90: c1:fa:36:57:f1:33:98:3b:93:b4:e4:7a:c6:ce:07: bb:48:fd:ed:d3:22:b1:e7:d4:00:7b:49:c1:33:9e: cb:61:76:b2:95:72:3f:11:17:03:0d:69:0f:11:1f: 34:8f:34:87:88:0a:76:52:97:99:3d:c5:9d:7a:b5: ff:1e:93:4e:5e:de:33:7c:b3:8e:44:ab:1b:37:61: c2:57:48:f8:bf:46:c3:32:0f:96:d3:b9:a3:e2:fe: ff:b1:bb:4d:5b:47:da:6f:55:be:54:56:49:49:a3: 32:35:d7:93:71:1c:61:45:e2:42:71:c7:e7:11:09: b6:c5:32:85:ef:b2:98:91:c3:ef:3d:a2:bd:72:e0: e4:91:85:49:fa:b1:e4:3e:fc:53:a9:a6:18:1f:fc: ba:c9:e0:0c:f8:f8:e2:10:40:4d:69:6a:3d:ed:97: a9:38:d3:1e:03:09:d0:ea:ae:de:c3:34:63:c0:fa: 5d:28:bc:13:7d:6c:a7:b7:f7:37:cc:a5:b0:ba:75: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:1C:82:93:73:3A:83:DF:2A:0B:57:73:D2:B2:46:81:AD:BD:68 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:26:52:76:11:21:6c:6f:5d:dd:e2:c5:94:b9:1a:6f:7b:67: 5e:e4:bd:3b:c3:bc:09:95:c4:81:8f:76:e2:d1:64:46:98:48: 93:ed:7c:c1:5a:5a:fd:4a:fc:7a:a4:42:4e:6a:ad:45:1b:85: bd:6d:ca:78:b1:13:63:3b:20:1d:fd:6f:bb:ef:ac:c5:a4:9e: e9:e0:bb:dc:15:13:ad:ff:a5:7a:26:30:05:11:c5:b1:6a:e9: b1:ca:4f:ea:e3:1f:27:83:b8:44:91:1a:45:29:0c:0c:6d:bf: 72:d0:43:bd:7e:5e:c9:ac:88:e4:4e:9e:ed:5d:4d:98:6d:57: 1a:0f:24:a5:4b:21:1c:38:53:e1:78:77:c0:9d:79:a9:71:4a: 8f:83:b4:9e:74:ab:bb:c1:78:f8:89:b3:32:ab:12:dd:ce:fc: 32:5a:73:b7:68:c9:ee:0e:43:86:86:be:1d:04:64:a0:54:ac: 0a:5b:b1:63:f1:19:5c:39:59:59:b2:b0:c1:f4:97:5a:6c:02: d5:2f:b8:24:e0:d3:99:44:3d:37:66:16:ed:eb:b6:3b:59:08: 4b:73:06:13:e8:66:af:68:bb:96:9a:59:4a:e3:75:d3:ae:29: ad:08:76:de:4f:1e:66:87:8e:6a:41:b8:58:02:49:f8:46:4c: 33:b6:6d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsmkkMauG/443ldEOuNzKrUTdv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA4MjMwMzQ2MjVaFw0yNTA4MjYxNDUyMjVaMDMxMTAvBgNV BAMTKEJBQjQxQzgyOTM3MzNBODNERjJBMEI1NzczRDJCMjQ2ODFBREJENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpLupjYuQJ99/Mz7ybpZgo44O EjfhBigW1REtbCMUjMbeGIkxl0K8KFe5In+QvHdQlgzpYRe5kohkkMH6NlfxM5g7 k7TkesbOB7tI/e3TIrHn1AB7ScEznsthdrKVcj8RFwMNaQ8RHzSPNIeICnZSl5k9 xZ16tf8ek05e3jN8s45Eqxs3YcJXSPi/RsMyD5bTuaPi/v+xu01bR9pvVb5UVklJ ozI115NxHGFF4kJxx+cRCbbFMoXvspiRw+89or1y4OSRhUn6seQ+/FOpphgf/LrJ 4Az4+OIQQE1paj3tl6k40x4DCdDqrt7DNGPA+l0ovBN9bKe39zfMpbC6dYqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUurQcgpNzOoPfKgtXc9KyRoGtvWgwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAmUnYRIWxvXd3ixZS5Gm97Z17kvTvDvAmV xIGPduLRZEaYSJPtfMFaWv1K/HqkQk5qrUUbhb1tynixE2M7IB39b7vvrMWknung u9wVE63/pXomMAURxbFq6bHKT+rjHyeDuESRGkUpDAxtv3LQQ71+XsmsiOROnu1d TZhtVxoPJKVLIRw4U+F4d8CdealxSo+DtJ50q7vBePiJszKrEt3O/DJac7doye4O Q4aGvh0EZKBUrApbsWPxGVw5WVmysMH0l1psAtUvuCTg05lEPTdmFu3rtjtZCEtz BhPoZq9ou5aaWUrjddOuKa0Idt5PHmaHjmpBuFgCSfhGTDO2baU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:37 2025 by rpki-client