$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: h27632I5Cwt/vgCeygqGkR10BU3zqqRjys44l6vX1/0= Subject key identifier: 03:59:81:E1:F2:C6:A5:BD:E0:C9:A8:95:B7:76:DF:36:09:86:F0:17 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 592AA301F8344B80E09D8A23E5B873610FB948C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 75 Signing time: Fri 22 Aug 2025 04:21:32 +0000 Manifest this update: Fri 22 Aug 2025 04:16:32 +0000 Manifest next update: Mon 25 Aug 2025 05:30:32 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: hYISpvjq+9q/H3Kb4v9HfzC5UKtqotTgD5NJ4MxgqH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2a:a3:01:f8:34:4b:80:e0:9d:8a:23:e5:b8:73:61:0f:b9:48:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Aug 22 04:16:32 2025 GMT Not After : Aug 25 05:30:32 2025 GMT Subject: CN=035981E1F2C6A5BDE0C9A895B776DF360986F017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:99:a1:27:41:b6:e3:e1:7c:58:6c:1a:96: 40:cb:94:df:a3:04:d4:eb:3e:a5:8f:e2:c7:ce:d9: 7f:91:4c:b5:53:fe:c7:36:aa:18:6a:54:0a:cb:db: 0f:09:22:3c:28:b1:f5:24:9a:bf:77:d5:14:7c:4d: 33:26:7e:c2:e9:48:3f:fc:50:85:a9:89:dd:ac:04: bf:03:3e:5f:4d:a1:05:ed:ee:08:f9:d7:45:ad:03: 3b:c0:7d:53:eb:d9:93:b6:ee:5c:19:1a:05:13:58: c9:8d:67:d5:ce:7d:f7:8a:5b:61:42:26:60:dd:fd: 8d:3c:3a:73:6c:cd:d4:b5:e1:55:f5:46:35:0e:9d: b5:a3:70:52:5b:bc:7d:d6:17:9b:f5:ac:24:80:89: e5:19:3d:bd:7b:cc:71:45:7e:fd:22:13:e0:14:45: 07:98:ca:bd:5d:7d:cd:99:82:b0:a9:2d:61:e7:ec: 8f:ae:da:b0:48:9c:4c:a1:81:99:1e:43:a6:ec:c1: 80:32:3c:59:89:41:fe:79:15:8c:1b:6c:ae:49:c2: 56:3d:a6:43:5b:69:38:e7:88:de:32:51:d9:2c:4b: 22:a4:83:57:da:ea:22:2e:65:31:7f:46:39:60:6b: 84:a2:e7:ae:30:d0:85:dd:24:20:30:00:c8:4f:a2: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:81:E1:F2:C6:A5:BD:E0:C9:A8:95:B7:76:DF:36:09:86:F0:17 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:07:ab:fa:c1:1d:49:5e:c7:f9:26:61:c5:ba:d0:60:01:88: 0e:e4:2e:ae:d1:43:2e:7a:2d:d7:d7:b6:48:31:b0:1d:69:e2: 4a:3e:e2:bf:20:b5:57:a7:d5:ea:30:d5:ab:77:4e:c4:b9:16: f6:e0:8a:a0:17:ac:4c:1b:c8:a6:1b:04:04:08:f2:fc:d8:e6: 13:28:d9:57:5a:70:d5:ac:df:20:20:b8:3a:38:86:90:a7:c2: ed:3f:fe:33:93:37:4e:38:7c:ea:a9:46:a5:b3:ea:f5:ee:64: 9a:d7:36:07:b0:94:c7:a5:c8:38:b4:27:7f:37:f6:2b:a2:30: 67:64:f1:9f:6c:9b:a9:72:74:95:2b:55:f6:3d:2e:3c:af:cf: a2:22:94:e7:09:f5:bf:bd:6c:17:9a:26:14:d5:66:0a:fa:b0: 6b:87:aa:ea:e9:7b:0d:f4:93:89:1d:1d:94:5d:ba:0a:a6:3a: de:01:08:ee:26:4a:78:f1:c2:35:d0:0d:f5:38:2f:86:36:d8: a6:a0:1e:05:b7:29:65:a9:7f:2f:9a:72:b0:2d:48:1c:3a:e8: 4a:2c:dd:2e:62:1b:a2:38:73:8e:b4:e7:f5:76:b0:8d:88:00: ed:04:0e:7c:1a:ab:5c:00:6e:6e:65:c4:9d:03:ec:10:17:09: a3:2b:0e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSqjAfg0S4DgnYoj5bhzYQ+5SMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA4MjIwNDE2MzJaFw0yNTA4MjUwNTMwMzJaMDMxMTAvBgNV BAMTKDAzNTk4MUUxRjJDNkE1QkRFMEM5QTg5NUI3NzZERjM2MDk4NkYwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC505mhJ0G24+F8WGwalkDLlN+j BNTrPqWP4sfO2X+RTLVT/sc2qhhqVArL2w8JIjwosfUkmr931RR8TTMmfsLpSD/8 UIWpid2sBL8DPl9NoQXt7gj510WtAzvAfVPr2ZO27lwZGgUTWMmNZ9XOffeKW2FC JmDd/Y08OnNszdS14VX1RjUOnbWjcFJbvH3WF5v1rCSAieUZPb17zHFFfv0iE+AU RQeYyr1dfc2ZgrCpLWHn7I+u2rBInEyhgZkeQ6bswYAyPFmJQf55FYwbbK5JwlY9 pkNbaTjniN4yUdksSyKkg1fa6iIuZTF/Rjlga4Si564w0IXdJCAwAMhPorChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1mB4fLGpb3gyaiVt3bfNgmG8BcwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsHq/rBHUlex/kmYcW60GABiA7kLq7RQy56 LdfXtkgxsB1p4ko+4r8gtVen1eow1at3TsS5FvbgiqAXrEwbyKYbBAQI8vzY5hMo 2VdacNWs3yAguDo4hpCnwu0//jOTN044fOqpRqWz6vXuZJrXNgewlMelyDi0J383 9iuiMGdk8Z9sm6lydJUrVfY9Ljyvz6IilOcJ9b+9bBeaJhTVZgr6sGuHqurpew30 k4kdHZRdugqmOt4BCO4mSnjxwjXQDfU4L4Y22KagHgW3KWWpfy+acrAtSBw66Eos 3S5iG6I4c4605/V2sI2IAO0EDnwaq1wAbm5lxJ0D7BAXCaMrDoE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:46:27 2025 by rpki-client