$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: Q7/GiC7KFTXvAfZpGQtl0CdgDtY4ju+dXCjvS4Gem20= Subject key identifier: AB:1E:A1:4D:1F:31:B6:24:C0:2D:10:9E:D5:D2:64:CB:A4:65:99:24 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 1C6628EDDC6ABD0925AC48B243271396247F1448 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 07:31:19 +0000 Manifest this update: Fri 22 Aug 2025 07:26:19 +0000 Manifest next update: Mon 25 Aug 2025 09:22:19 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: 0lBAAEuGGAWBnHhm/pTlEhZI4yZqAG052BoiwO5kYG0=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:66:28:ed:dc:6a:bd:09:25:ac:48:b2:43:27:13:96:24:7f:14:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Aug 22 07:26:19 2025 GMT Not After : Aug 25 09:22:19 2025 GMT Subject: CN=AB1EA14D1F31B624C02D109ED5D264CBA4659924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:ba:84:2c:dc:47:d6:46:7c:91:f6:0f:c5: b1:36:3f:0f:83:2f:39:12:83:f6:c0:07:3c:d3:85: a5:08:63:2b:c1:37:85:c4:b5:21:e3:2c:21:da:32: 1b:9a:de:6c:b5:4f:bc:6d:88:25:d5:d0:6e:4b:c5: c7:af:ae:97:7a:ca:80:03:17:b7:77:60:b8:13:f1: fa:8d:e0:99:5c:b3:bf:da:a3:42:60:88:42:6c:51: 54:23:83:25:01:62:4a:77:7d:a6:e6:16:4a:78:70: 71:5f:a5:15:e3:4e:90:38:21:8c:de:b1:57:8f:40: e8:67:96:23:94:35:65:1c:5d:f9:f1:0a:09:9e:95: d0:2d:25:0c:75:cb:23:92:44:c1:25:38:95:f9:a0: 11:03:dc:f8:fe:d0:fd:f5:5c:4b:65:f7:73:6e:0e: 00:e2:c3:9d:5e:12:de:0d:43:b9:88:f5:9f:d5:18: c8:cc:7e:a1:a5:77:e2:5b:1e:56:50:05:80:7d:3c: d3:58:8d:bb:01:13:c9:8f:52:d5:31:54:c1:15:35: c6:0f:aa:6d:ba:2d:84:27:f7:85:39:46:96:a5:18: bd:fb:c4:d0:b5:e2:b4:f7:3b:16:4d:e2:03:d5:27: 59:75:fc:42:52:6d:e3:d6:bc:b8:a8:f8:74:45:63: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:A1:4D:1F:31:B6:24:C0:2D:10:9E:D5:D2:64:CB:A4:65:99:24 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:17:10:18:d6:9b:fa:c5:fb:20:3b:1d:20:89:f1:00:c9:d1: c6:81:c4:5b:8a:c5:42:0d:71:1c:1f:df:b1:ff:bc:1a:7b:e3: 58:6e:0f:97:aa:70:5b:7e:09:b0:8d:2a:f1:e9:58:93:af:e0: f8:50:dc:7f:a9:a5:df:77:d4:ef:77:e1:0b:5a:5c:63:bc:98: 7e:de:5a:b6:60:3f:1e:4e:1d:ca:d5:f9:0c:a5:77:4e:49:b5: 5b:2b:b3:99:76:30:7a:3e:a0:73:9f:9c:25:23:92:34:9a:30: d6:f9:4a:d5:9a:18:b2:4f:89:f0:74:1d:07:d4:c6:04:0c:cc: db:6b:e5:64:5c:c4:38:4a:c8:6f:87:66:cb:09:52:d3:3b:0e: 17:cf:69:b7:8e:07:8c:1a:4c:0c:31:3e:6f:e2:80:08:87:cc: 29:4c:a3:8c:e1:c0:c9:13:0b:9e:ac:00:da:3b:a2:e8:f9:0b: 5e:e6:e7:83:8a:2f:fa:35:76:e4:a7:75:20:8c:7b:46:cb:c3: 42:97:32:78:43:64:89:6f:42:4e:89:fc:ad:4a:f0:75:f5:45: 48:33:1c:56:ba:55:a2:5e:cc:69:c5:bb:4b:18:05:c3:9e:42: 3a:38:6d:d8:eb:00:36:0d:4e:94:9d:fa:e2:f7:1a:2c:45:b6: bc:b3:3f:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGYo7dxqvQklrEiyQycTliR/FEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA4MjIwNzI2MTlaFw0yNTA4MjUwOTIyMTlaMDMxMTAvBgNV BAMTKEFCMUVBMTREMUYzMUI2MjRDMDJEMTA5RUQ1RDI2NENCQTQ2NTk5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClELqELNxH1kZ8kfYPxbE2Pw+D LzkSg/bABzzThaUIYyvBN4XEtSHjLCHaMhua3my1T7xtiCXV0G5Lxcevrpd6yoAD F7d3YLgT8fqN4Jlcs7/ao0JgiEJsUVQjgyUBYkp3fabmFkp4cHFfpRXjTpA4IYze sVePQOhnliOUNWUcXfnxCgmeldAtJQx1yyOSRMElOJX5oBED3Pj+0P31XEtl93Nu DgDiw51eEt4NQ7mI9Z/VGMjMfqGld+JbHlZQBYB9PNNYjbsBE8mPUtUxVMEVNcYP qm26LYQn94U5RpalGL37xNC14rT3OxZN4gPVJ1l1/EJSbePWvLio+HRFY/pPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqx6hTR8xtiTALRCe1dJky6RlmSQwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcXEBjWm/rF+yA7HSCJ8QDJ0caBxFuKxUIN cRwf37H/vBp741huD5eqcFt+CbCNKvHpWJOv4PhQ3H+ppd931O934QtaXGO8mH7e WrZgPx5OHcrV+Qyld05JtVsrs5l2MHo+oHOfnCUjkjSaMNb5StWaGLJPifB0HQfU xgQMzNtr5WRcxDhKyG+HZssJUtM7DhfPabeOB4waTAwxPm/igAiHzClMo4zhwMkT C56sANo7ouj5C17m54OKL/o1duSndSCMe0bLw0KXMnhDZIlvQk6J/K1K8HX1RUgz HFa6VaJezGnFu0sYBcOeQjo4bdjrADYNTpSd+uL3GixFtryzP8Y= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:53 2025 by rpki-client