$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: oiU9k2GT0uJ4Q7FyxnkUQ8gFfwlYHJy41WJZ9r4dHk0= Subject key identifier: C9:1B:42:57:7E:39:60:1A:CA:4D:8C:95:92:2A:50:A3:66:2E:04:F6 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 16A76137597932103A70C96C0E017100547CC28E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: B5 Signing time: Mon 04 Aug 2025 12:52:12 +0000 Manifest this update: Mon 04 Aug 2025 12:47:12 +0000 Manifest next update: Thu 07 Aug 2025 19:13:12 +0000 Files and hashes: 1: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: o8D/SNYyKBZUxFhUOfFr45HTOXE+CHxUbQBJsbfKybw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 19:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a7:61:37:59:79:32:10:3a:70:c9:6c:0e:01:71:00:54:7c:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Aug 4 12:47:12 2025 GMT Not After : Aug 7 19:13:12 2025 GMT Subject: CN=C91B42577E39601ACA4D8C95922A50A3662E04F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:79:5b:0b:b6:d7:a3:0e:62:e9:79:7a:96: 52:d5:a8:ad:b7:2b:5c:22:ae:62:2f:47:2b:db:3f: 36:14:e8:45:a6:7c:cf:5e:b8:bd:f6:4b:48:a0:d5: e1:b3:f1:84:a7:e9:2a:b5:e4:ef:35:1a:15:59:a6: 36:f3:97:89:44:0c:9e:5a:3c:d9:08:e0:9f:2b:13: b5:d0:52:a6:b0:5d:4c:97:5f:f4:e2:a8:70:5e:1e: 56:80:e3:d3:57:67:1e:64:0e:e3:23:51:e5:2b:4a: 27:63:c3:e7:ab:0e:4e:21:9e:ad:ce:10:a0:10:38: 9f:68:4b:b1:90:94:53:cb:71:88:c2:e2:7b:80:78: ff:cd:7c:0c:12:8e:43:96:f8:fc:f8:45:50:00:84: 79:b5:71:e6:86:ba:29:5d:57:8b:c6:b8:cf:4d:b6: 4e:af:dc:92:72:e4:32:3a:92:e8:5f:a4:68:be:71: 5a:d6:85:f6:45:a3:fa:e7:8e:82:01:80:db:7f:e0: c1:32:b1:b5:fd:93:00:17:da:19:bc:5f:57:aa:d4: 72:2c:69:d4:9d:d1:d8:1b:47:fc:27:85:ed:5b:a4: b8:cf:f0:c5:54:10:13:aa:70:f4:90:b9:5d:0d:63: 49:70:ec:5c:a3:fd:b0:57:ee:4c:85:f7:6b:ec:02: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:42:57:7E:39:60:1A:CA:4D:8C:95:92:2A:50:A3:66:2E:04:F6 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8f:72:69:4b:dc:47:53:7c:e7:21:78:60:9d:87:20:08:8f: 76:99:93:be:7a:55:86:51:b8:55:29:c0:06:12:ca:5c:c7:40: 89:f7:ce:5d:cc:3e:7a:54:eb:d4:13:b2:11:1b:0f:a8:a5:22: c1:c2:75:8e:2a:fb:88:d6:fa:d2:cb:63:ba:64:45:0d:6f:20: d1:bd:10:de:70:79:53:7e:9e:e4:a5:f0:82:3a:fa:28:8b:13: c7:8c:71:e4:03:9a:95:aa:02:30:1a:b8:22:53:fc:bc:c9:c4: 5d:06:a5:5f:eb:dd:96:78:9a:78:9d:ce:fa:00:3c:6c:97:b7: 81:aa:af:fd:b3:49:0b:a2:dd:f3:7a:e2:2a:c3:a4:53:19:16: 7a:9b:80:43:e6:4c:4e:0b:00:11:62:c9:15:41:9f:4d:a7:e2: 6b:5f:d6:9a:8b:b3:4b:a5:96:17:de:c9:30:e5:3f:32:7e:d7: 09:47:a0:6e:b1:46:74:54:5b:6c:a4:95:3f:66:11:84:e0:ee: 66:60:57:80:fa:97:34:9a:1f:8c:a8:25:64:fa:70:27:57:ae: c7:36:73:01:68:89:d8:f8:8b:c1:e8:ae:ef:fa:33:67:de:be: 8d:70:ca:0d:a5:c1:df:ab:95:24:53:20:36:74:e4:3d:08:57: 18:1f:c7:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqdhN1l5MhA6cMlsDgFxAFR8wo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA4MDQxMjQ3MTJaFw0yNTA4MDcxOTEzMTJaMDMxMTAvBgNV BAMTKEM5MUI0MjU3N0UzOTYwMUFDQTREOEM5NTkyMkE1MEEzNjYyRTA0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz3lbC7bXow5i6Xl6llLVqK23 K1wirmIvRyvbPzYU6EWmfM9euL32S0ig1eGz8YSn6Sq15O81GhVZpjbzl4lEDJ5a PNkI4J8rE7XQUqawXUyXX/TiqHBeHlaA49NXZx5kDuMjUeUrSidjw+erDk4hnq3O EKAQOJ9oS7GQlFPLcYjC4nuAeP/NfAwSjkOW+Pz4RVAAhHm1ceaGuildV4vGuM9N tk6v3JJy5DI6kuhfpGi+cVrWhfZFo/rnjoIBgNt/4MEysbX9kwAX2hm8X1eq1HIs adSd0dgbR/wnhe1bpLjP8MVUEBOqcPSQuV0NY0lw7Fyj/bBX7kyF92vsAjAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRtCV345YBrKTYyVkipQo2YuBPYwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmPcmlL3EdTfOcheGCdhyAIj3aZk756VYZR uFUpwAYSylzHQIn3zl3MPnpU69QTshEbD6ilIsHCdY4q+4jW+tLLY7pkRQ1vING9 EN5weVN+nuSl8II6+iiLE8eMceQDmpWqAjAauCJT/LzJxF0GpV/r3ZZ4mnidzvoA PGyXt4Gqr/2zSQui3fN64irDpFMZFnqbgEPmTE4LABFiyRVBn02n4mtf1pqLs0ul lhfeyTDlPzJ+1wlHoG6xRnRUW2yklT9mEYTg7mZgV4D6lzSaH4yoJWT6cCdXrsc2 cwFoidj4i8Horu/6M2fevo1wyg2lwd+rlSRTIDZ05D0IVxgfx1w= -----END CERTIFICATE-----Generated at Wed Aug 6 09:22:57 2025 by rpki-client