$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: CCz6biuVNmYOhPx2kyfCaRyqykL+kJ1etnANTFMJ5OM= Subject key identifier: CA:9E:3A:6D:2D:FB:77:0B:49:5A:FF:0C:AB:E7:FD:28:20:0F:4A:A8 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 12DDE3676CC688AD016337485BD8A94986B2D9E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 07:21:14 +0000 Manifest this update: Sat 23 Aug 2025 07:16:14 +0000 Manifest next update: Tue 26 Aug 2025 13:29:14 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 2: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 3: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: IruZp0Hrh/y6dMnqoHlfQA7yOL5oYICJ3q3KJTbfPnQ=) 4: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:dd:e3:67:6c:c6:88:ad:01:63:37:48:5b:d8:a9:49:86:b2:d9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Aug 23 07:16:14 2025 GMT Not After : Aug 26 13:29:14 2025 GMT Subject: CN=CA9E3A6D2DFB770B495AFF0CABE7FD28200F4AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:85:78:8b:f0:a1:e6:b7:49:08:f5:54:6e: 02:52:68:83:b9:6f:eb:71:14:4e:6c:a2:41:9f:09: f8:e2:ea:77:72:20:f9:5f:db:c1:da:10:27:a2:be: eb:9b:cf:d8:3e:59:64:17:3d:af:f7:fb:8d:82:0e: db:10:45:78:74:85:9b:56:c2:19:47:d9:7c:41:d6: 1e:21:07:62:e9:47:f5:96:68:e6:43:6b:23:15:35: d0:4c:96:a0:e3:5a:ab:57:97:d4:68:39:df:75:f8: 58:f5:e2:f1:4e:05:78:78:00:13:0a:42:ee:1a:73: 4b:9a:f3:ac:e9:f7:f9:de:57:5c:1f:ac:b8:50:5d: d0:55:4a:32:b6:e5:77:e3:b5:a4:de:aa:db:d9:be: 34:e1:d9:2b:04:63:44:af:ba:3c:45:2a:d8:03:12: 1a:c0:a2:bf:4e:87:4f:cd:dc:21:3f:b1:f9:f2:b4: 27:5b:03:24:21:79:43:cb:bb:84:82:b0:a3:6c:d4: e8:fb:70:d4:a3:b8:0b:53:36:13:6d:c8:f8:07:8d: 1c:25:6d:24:ca:6f:a3:e6:a0:f7:06:97:4b:5f:97: 91:6f:4b:3b:e1:5c:59:67:95:03:db:4a:e2:31:f3: 42:6d:4d:0b:c3:2d:4d:79:8c:28:61:7d:b2:63:8c: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9E:3A:6D:2D:FB:77:0B:49:5A:FF:0C:AB:E7:FD:28:20:0F:4A:A8 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:76:2b:18:eb:ef:b7:95:9c:89:e8:26:61:79:e8:e6:66: 5a:3e:31:93:4d:ac:c4:75:f0:ff:3a:99:2b:96:6e:38:9f:c8: fe:73:4f:84:a4:18:ff:53:c6:40:6b:e7:c0:80:4c:9b:19:8b: 8b:82:9d:e4:42:56:96:c7:fa:e7:a2:7c:27:b2:6e:e8:c4:8d: 7c:b1:98:04:b6:66:3c:a4:0e:fa:cb:5d:80:35:cb:53:ee:29: 31:74:b0:65:7f:a4:7f:3b:f4:ae:ab:34:1c:f9:7a:88:f8:66: 99:e5:a4:ca:39:0a:fc:33:11:b0:3b:b1:ac:73:85:6e:18:3e: 53:22:d4:fb:b5:6b:75:e2:df:78:1e:1b:28:44:98:c3:f9:88: 35:cd:9b:10:65:98:bc:09:54:ba:85:59:21:33:14:ea:70:cf: 52:7e:83:64:10:df:c9:77:c5:45:1c:f7:9d:05:ab:84:65:c2: b7:e8:13:ee:ff:57:a1:96:da:df:a4:02:94:d8:38:7f:6d:d3: 08:b8:70:00:3c:02:44:c5:2a:9f:8b:a3:17:fb:8e:69:65:d1: 26:64:eb:25:21:20:05:ec:12:a4:4a:78:57:fd:b1:50:f4:af: 4c:0a:7f:eb:f9:92:2d:98:f3:c6:21:c6:3c:52:d1:d1:19:95: 1d:c0:c3:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEt3jZ2zGiK0BYzdIW9ipSYay2eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA4MjMwNzE2MTRaFw0yNTA4MjYxMzI5MTRaMDMxMTAvBgNV BAMTKENBOUUzQTZEMkRGQjc3MEI0OTVBRkYwQ0FCRTdGRDI4MjAwRjRBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdYV4i/Ch5rdJCPVUbgJSaIO5 b+txFE5sokGfCfji6ndyIPlf28HaECeivuubz9g+WWQXPa/3+42CDtsQRXh0hZtW whlH2XxB1h4hB2LpR/WWaOZDayMVNdBMlqDjWqtXl9RoOd91+Fj14vFOBXh4ABMK Qu4ac0ua86zp9/neV1wfrLhQXdBVSjK25XfjtaTeqtvZvjTh2SsEY0SvujxFKtgD EhrAor9Oh0/N3CE/sfnytCdbAyQheUPLu4SCsKNs1Oj7cNSjuAtTNhNtyPgHjRwl bSTKb6PmoPcGl0tfl5FvSzvhXFlnlQPbSuIx80JtTQvDLU15jChhfbJjjJtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyp46bS37dwtJWv8Mq+f9KCAPSqgwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTkdisY6++3lZyJ6CZheejmZlo+MZNNrMR1 8P86mSuWbjifyP5zT4SkGP9TxkBr58CATJsZi4uCneRCVpbH+ueifCeybujEjXyx mAS2ZjykDvrLXYA1y1PuKTF0sGV/pH879K6rNBz5eoj4ZpnlpMo5CvwzEbA7saxz hW4YPlMi1Pu1a3Xi33geGyhEmMP5iDXNmxBlmLwJVLqFWSEzFOpwz1J+g2QQ38l3 xUUc950Fq4RlwrfoE+7/V6GW2t+kApTYOH9t0wi4cAA8AkTFKp+Loxf7jmll0SZk 6yUhIAXsEqRKeFf9sVD0r0wKf+v5ki2Y88YhxjxS0dEZlR3AwxI= -----END CERTIFICATE-----Generated at Sat Aug 23 09:46:54 2025 by rpki-client