$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: 1lh3oXoUXOqWcthfLrhAToMfDT3ig7XrD4vrK34o24c= Subject key identifier: D9:A0:3D:3F:52:38:18:DA:91:79:20:83:49:08:AE:8C:1D:14:86:1F Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 0B745D10B3A1625E2252C459EC401431E72EDAC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 82 Signing time: Mon 30 Jun 2025 21:31:26 +0000 Manifest this update: Mon 30 Jun 2025 21:26:26 +0000 Manifest next update: Fri 04 Jul 2025 04:34:26 +0000 Files and hashes: 1: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 3: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: hEuiHgxYcG6r12ZdAR5/YHpRboIAbUbaH/aTCrowQ5U=) 4: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) 5: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:74:5d:10:b3:a1:62:5e:22:52:c4:59:ec:40:14:31:e7:2e:da:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Jun 30 21:26:26 2025 GMT Not After : Jul 4 04:34:26 2025 GMT Subject: CN=D9A03D3F523818DA917920834908AE8C1D14861F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:5e:36:80:af:fd:99:ef:49:da:70:a1:54: 1a:dc:28:cf:2f:ae:bc:37:33:a2:19:95:73:43:f1: dc:3c:bf:18:55:fd:e6:2c:59:8c:75:ec:ab:01:e3: 33:ec:e5:9f:d5:ed:6f:28:f8:73:d8:7a:73:31:00: c0:1e:66:8d:a4:f8:c1:a9:ca:5f:ea:b9:96:70:85: 4a:cf:1c:4b:08:2f:9b:01:d9:df:1c:27:25:37:74: 79:08:ca:71:6c:15:da:7e:56:45:2e:fb:b0:c0:1e: 14:f7:50:f9:20:a0:bc:3d:ee:b1:82:c8:22:90:1c: 3e:78:89:54:7e:be:27:f7:53:77:20:7b:22:46:01: 85:a3:ab:7c:cb:2c:f6:21:91:63:c1:54:d0:d9:d6: de:74:bb:36:91:da:4f:22:03:3a:47:d9:4c:c4:e0: b3:df:2c:5e:07:99:85:09:6c:f9:fe:47:4f:aa:b7: fb:9d:31:6a:cd:56:da:95:4f:bd:af:8f:92:c0:41: 90:2e:a7:11:cf:11:be:ef:de:6a:5c:ff:82:14:7d: ef:77:e0:5d:07:7a:0b:2e:59:40:e5:89:aa:9a:56: b1:78:31:43:9d:50:2f:32:f3:2a:c0:2c:7f:3e:a0: be:c2:c4:e3:15:f4:9f:50:5b:81:de:2d:9a:aa:18: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A0:3D:3F:52:38:18:DA:91:79:20:83:49:08:AE:8C:1D:14:86:1F X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:88:09:f3:b0:0c:e4:c5:86:48:fb:d4:29:ce:99:37:3e:e1: 2a:17:93:08:31:17:3b:a6:29:0b:47:1f:0b:f8:61:c6:3d:f4: 7f:4e:2f:7c:94:6f:b9:d3:2d:81:de:fb:8e:33:82:78:44:16: 03:6c:4c:75:08:4f:7b:f8:46:dd:19:25:57:5f:df:cc:b2:f8: 41:4e:af:5d:9f:67:60:22:70:78:72:35:7d:90:25:f9:da:dc: 6f:94:86:48:4b:39:2f:40:fb:b4:b3:7d:8c:45:e6:84:23:46: d8:99:1e:52:e0:78:41:28:83:0e:fa:ff:ec:2b:ee:92:4a:ab: f2:f9:f2:cc:dc:c3:55:b2:09:0c:13:d0:30:43:15:55:6b:51: 7d:4a:f5:a5:c3:aa:e5:6a:c3:3b:ac:11:6e:9c:df:c1:b7:90: 88:25:01:ce:b2:f3:91:f5:60:1a:30:fc:17:af:a3:04:f9:af: ca:55:43:55:28:1f:ab:ce:dd:7f:7f:d7:5c:16:0f:71:53:12: 06:71:ad:57:04:06:2b:5e:7d:7a:b4:5f:03:71:c6:65:4a:c4: 0f:06:b6:6d:ca:ef:1b:24:40:e5:50:57:0a:9f:c3:3d:5d:90: ae:7e:c4:70:27:f1:0e:0f:d0:f1:dd:a0:75:8c:29:46:00:ce: bd:93:02:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3RdELOhYl4iUsRZ7EAUMecu2sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA2MzAyMTI2MjZaFw0yNTA3MDQwNDM0MjZaMDMxMTAvBgNV BAMTKEQ5QTAzRDNGNTIzODE4REE5MTc5MjA4MzQ5MDhBRThDMUQxNDg2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++l42gK/9me9J2nChVBrcKM8v rrw3M6IZlXND8dw8vxhV/eYsWYx17KsB4zPs5Z/V7W8o+HPYenMxAMAeZo2k+MGp yl/quZZwhUrPHEsIL5sB2d8cJyU3dHkIynFsFdp+VkUu+7DAHhT3UPkgoLw97rGC yCKQHD54iVR+vif3U3cgeyJGAYWjq3zLLPYhkWPBVNDZ1t50uzaR2k8iAzpH2UzE 4LPfLF4HmYUJbPn+R0+qt/udMWrNVtqVT72vj5LAQZAupxHPEb7v3mpc/4IUfe93 4F0HegsuWUDliaqaVrF4MUOdUC8y8yrALH8+oL7CxOMV9J9QW4HeLZqqGAk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2aA9P1I4GNqReSCDSQiujB0Uhh8wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyICfOwDOTFhkj71CnOmTc+4SoXkwgxFzum KQtHHwv4YcY99H9OL3yUb7nTLYHe+44zgnhEFgNsTHUIT3v4Rt0ZJVdf38yy+EFO r12fZ2AicHhyNX2QJfna3G+UhkhLOS9A+7SzfYxF5oQjRtiZHlLgeEEogw76/+wr 7pJKq/L58szcw1WyCQwT0DBDFVVrUX1K9aXDquVqwzusEW6c38G3kIglAc6y85H1 YBow/BevowT5r8pVQ1UoH6vO3X9/11wWD3FTEgZxrVcEBitefXq0XwNxxmVKxA8G tm3K7xskQOVQVwqfwz1dkK5+xHAn8Q4P0PHdoHWMKUYAzr2TAvk= -----END CERTIFICATE-----Generated at Tue Jul 1 18:22:52 2025 by rpki-client