$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: oKrP4+AK4uVfCMUK8QhgmRkaFlLTaCn3zZfHCjZQ6Tg= Subject key identifier: 93:77:A1:F5:A7:76:67:A7:80:07:69:8B:97:E1:22:6F:59:83:B9:97 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 0BB719D6B2BF946A35BB1E5F7BC2DD83E34282D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 02D1 Signing time: Thu 07 Aug 2025 00:01:09 +0000 Manifest this update: Wed 06 Aug 2025 23:56:09 +0000 Manifest next update: Sun 10 Aug 2025 05:14:09 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: 3Ca0SrdL+0ols3cvbryG+tBJXXO+HPoFckz5KvpHSHQ=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b7:19:d6:b2:bf:94:6a:35:bb:1e:5f:7b:c2:dd:83:e3:42:82:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Aug 6 23:56:09 2025 GMT Not After : Aug 10 05:14:09 2025 GMT Subject: CN=9377A1F5A77667A78007698B97E1226F5983B997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:5c:84:95:f1:f2:9d:b5:5b:df:ac:b1:da: e7:6f:52:13:2b:55:92:f5:91:69:ea:82:8b:a2:09: 63:84:1f:91:a6:f3:bd:f1:47:b2:9f:e2:11:b8:6a: f5:30:d9:e1:cc:27:64:9a:0c:ce:d9:e1:37:4b:cc: f0:b1:4f:73:1d:1c:44:6e:52:3c:27:6c:9e:ec:02: 61:8c:20:a4:e7:e7:6b:8b:10:14:e2:11:c4:d7:78: fb:b4:90:3a:c9:cd:b6:50:3f:4c:d5:64:1a:3c:75: 87:c6:90:17:3f:b3:fd:18:8e:07:af:45:7b:45:de: bc:2a:60:f1:7f:00:6f:09:82:e8:5e:07:aa:83:2b: 7f:82:46:98:d9:5f:4c:e2:d6:a7:5a:eb:3f:86:be: 58:b9:51:1a:96:59:6b:c2:0e:78:ef:89:98:c5:39: b1:41:9f:94:3f:fe:42:c4:fc:8d:9f:04:e0:48:7d: 18:d9:74:ef:30:68:e4:0d:82:e8:ae:8c:2c:2b:44: 9f:a3:a1:5f:8c:67:fa:4e:48:cd:20:8a:36:19:56: 8e:65:0f:b6:6f:01:bc:cf:5f:1e:d4:a4:c4:ba:b7: d7:ce:f7:ab:0b:35:08:82:57:89:62:e1:f9:4a:46: 62:5c:b8:23:a3:96:84:41:e1:e1:23:1e:9d:64:9f: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:77:A1:F5:A7:76:67:A7:80:07:69:8B:97:E1:22:6F:59:83:B9:97 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f3:51:57:17:1a:d4:dc:4d:68:d9:a4:c0:73:29:e6:28:42: 67:2d:ad:c4:cf:58:9b:d1:9f:ad:b7:14:37:fe:6e:6e:6c:91: 45:b2:21:a1:d9:c5:fe:28:c7:6c:02:3e:dc:a0:f9:a0:b1:2d: 47:4f:26:76:96:2e:0a:0e:f2:a8:ba:23:63:bb:d3:9e:44:e2: 0c:33:42:54:e5:49:b2:ac:61:ff:d1:4a:3a:75:89:c3:a2:dd: 11:3b:63:69:3b:79:f6:5a:2f:d0:17:bf:18:bd:bc:22:1a:12: 44:ff:99:77:ba:93:8a:47:aa:24:49:8b:d2:33:32:2c:ec:fb: 51:77:fd:a4:83:be:e6:00:cb:c7:2f:f0:e9:3e:44:60:cf:7c: 42:c1:26:51:20:1f:6c:8b:90:ef:8c:95:18:98:e0:d8:d4:14: c1:90:72:3b:82:70:32:52:81:13:52:5a:8a:72:c4:a3:fa:c9: eb:66:13:82:2e:d7:fc:64:76:5a:ee:e5:b9:1f:30:d1:5b:fd: 6a:a2:0a:4b:7b:6d:1f:aa:5c:5a:bb:4c:57:c2:19:c4:ca:48: ee:fa:29:24:d6:e0:a8:88:a7:40:f8:ba:69:f6:58:74:76:bc: 5f:23:50:68:a0:5a:ab:32:7c:ff:80:15:61:af:f7:32:44:0f: 40:36:80:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7cZ1rK/lGo1ux5fe8Ldg+NCgtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNTA4MDYyMzU2MDlaFw0yNTA4MTAwNTE0MDlaMDMxMTAvBgNV BAMTKDkzNzdBMUY1QTc3NjY3QTc4MDA3Njk4Qjk3RTEyMjZGNTk4M0I5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw91yElfHynbVb36yx2udvUhMr VZL1kWnqgouiCWOEH5Gm873xR7Kf4hG4avUw2eHMJ2SaDM7Z4TdLzPCxT3MdHERu UjwnbJ7sAmGMIKTn52uLEBTiEcTXePu0kDrJzbZQP0zVZBo8dYfGkBc/s/0Yjgev RXtF3rwqYPF/AG8JguheB6qDK3+CRpjZX0zi1qda6z+Gvli5URqWWWvCDnjviZjF ObFBn5Q//kLE/I2fBOBIfRjZdO8waOQNguiujCwrRJ+joV+MZ/pOSM0gijYZVo5l D7ZvAbzPXx7UpMS6t9fO96sLNQiCV4li4flKRmJcuCOjloRB4eEjHp1kn/7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3eh9ad2Z6eAB2mLl+Eib1mDuZcwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXzUVcXGtTcTWjZpMBzKeYoQmctrcTPWJvR n623FDf+bm5skUWyIaHZxf4ox2wCPtyg+aCxLUdPJnaWLgoO8qi6I2O7055E4gwz QlTlSbKsYf/RSjp1icOi3RE7Y2k7efZaL9AXvxi9vCIaEkT/mXe6k4pHqiRJi9Iz Mizs+1F3/aSDvuYAy8cv8Ok+RGDPfELBJlEgH2yLkO+MlRiY4NjUFMGQcjuCcDJS gRNSWopyxKP6yetmE4Iu1/xkdlru5bkfMNFb/WqiCkt7bR+qXFq7TFfCGcTKSO76 KSTW4KiIp0D4umn2WHR2vF8jUGigWqsyfP+AFWGv9zJED0A2gJs= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:07 2025 by rpki-client