$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: g9Z/UAxy9dkHmRzEonlwgaF9puemHua+nK7orc/1vyw= Subject key identifier: 90:04:75:2F:FB:A4:41:9D:37:F6:8F:30:83:58:EB:60:C2:75:67:75 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 09ACB3BD9E8E6E3E7E11F4CD0907184A5A8371EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 020C Signing time: Wed 06 Aug 2025 20:00:02 +0000 Manifest this update: Wed 06 Aug 2025 19:55:02 +0000 Manifest next update: Sun 10 Aug 2025 04:16:02 +0000 Files and hashes: 1: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 2: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 3: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) 4: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 5: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: n77ccbS8wm83ahyoGcmISwsfbSNAMzZ+vB7edMlIOIg=) 6: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ac:b3:bd:9e:8e:6e:3e:7e:11:f4:cd:09:07:18:4a:5a:83:71:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Aug 6 19:55:02 2025 GMT Not After : Aug 10 04:16:02 2025 GMT Subject: CN=9004752FFBA4419D37F68F308358EB60C2756775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:ba:37:4e:0c:00:51:99:65:73:a8:7e:a9: 90:b5:b3:47:c2:2a:d1:73:23:3b:d9:30:35:7f:81: d6:fb:e7:f1:03:66:ac:74:5a:2b:88:c0:21:27:0f: 6b:08:0e:81:e0:6c:fa:4e:e4:99:6e:ff:a1:f6:75: 5b:df:40:0f:9d:ef:3a:9c:ef:1d:eb:1f:19:72:f0: 3f:88:fd:16:8b:77:df:5a:46:24:da:65:ab:1d:17: 5e:2b:79:bc:72:dc:2b:14:d5:42:f4:da:69:a4:e5: d9:ed:6f:58:3e:80:db:73:5f:1a:bb:aa:1d:4a:73: 4f:66:25:80:be:54:4c:bd:45:88:91:99:b1:89:d0: 72:f3:f9:ca:14:60:d6:dc:69:a7:22:4c:1e:36:e6: f8:2d:8e:d0:1e:44:e4:03:63:65:78:40:de:76:44: 29:36:7d:f3:f9:b9:95:ee:36:a7:dc:43:fa:e9:00: 1d:26:f4:d1:1b:01:77:9b:f0:b2:70:a2:43:24:31: ae:a6:8b:4a:69:0f:8b:aa:ee:f1:34:bf:01:93:a2: 06:dd:fc:cd:ab:01:d9:98:4d:9a:9d:3f:83:19:ef: fd:65:40:c1:e7:f6:f5:71:cc:0e:2f:3c:6e:8b:2a: 3f:b0:76:eb:09:8d:f5:d2:bd:84:97:83:60:7c:1e: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:75:2F:FB:A4:41:9D:37:F6:8F:30:83:58:EB:60:C2:75:67:75 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9a:c6:9a:99:08:61:16:46:c7:52:7b:b2:d3:a7:e6:c7:a7: 63:a8:f3:d3:3e:7e:2b:85:74:d7:a4:8d:6b:44:68:4c:e8:b5: 15:20:b6:72:f0:ff:75:e5:4a:18:53:b4:60:7e:97:c4:91:76: e9:a4:b9:f9:2a:0c:a3:ed:9e:72:0b:38:b8:c8:4f:55:30:76: 96:1f:75:ac:71:ce:c9:28:99:80:4f:41:b5:45:75:14:74:28: 46:3d:fd:11:27:c6:de:ae:c5:40:68:0a:3d:86:a9:10:58:1a: a1:bd:e6:09:10:e4:f9:c8:e5:6d:aa:bb:0f:61:af:3d:56:03: c6:82:45:9e:80:71:79:0a:32:c2:a4:bd:cc:69:45:64:66:14: 61:9b:f0:d3:db:7d:34:7f:a5:83:9b:bd:f0:40:e9:a0:01:2a: 9d:77:ad:82:f6:ef:e5:0e:39:85:6d:6c:d1:63:05:8c:e6:b6: e4:75:a1:9e:8c:8f:d3:7d:b3:b4:54:28:f8:f3:e7:35:ee:8f: 4a:52:b1:79:7b:f4:06:63:7e:66:46:0f:8b:67:4e:5b:fb:f4: 5e:c8:00:26:a9:a7:e7:6f:25:6f:a7:b5:d9:14:c3:74:77:92: d6:77:c6:4f:16:50:2e:ae:57:94:72:bf:68:32:b5:1c:e0:be: e6:20:19:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCayzvZ6Obj5+EfTNCQcYSlqDcewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA4MDYxOTU1MDJaFw0yNTA4MTAwNDE2MDJaMDMxMTAvBgNV BAMTKDkwMDQ3NTJGRkJBNDQxOUQzN0Y2OEYzMDgzNThFQjYwQzI3NTY3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41Lo3TgwAUZllc6h+qZC1s0fC KtFzIzvZMDV/gdb75/EDZqx0WiuIwCEnD2sIDoHgbPpO5Jlu/6H2dVvfQA+d7zqc 7x3rHxly8D+I/RaLd99aRiTaZasdF14rebxy3CsU1UL02mmk5dntb1g+gNtzXxq7 qh1Kc09mJYC+VEy9RYiRmbGJ0HLz+coUYNbcaaciTB425vgtjtAeROQDY2V4QN52 RCk2ffP5uZXuNqfcQ/rpAB0m9NEbAXeb8LJwokMkMa6mi0ppD4uq7vE0vwGTogbd /M2rAdmYTZqdP4MZ7/1lQMHn9vVxzA4vPG6LKj+wdusJjfXSvYSXg2B8HrqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkAR1L/ukQZ039o8wg1jrYMJ1Z3UwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6axpqZCGEWRsdSe7LTp+bHp2Oo89M+fiuF dNekjWtEaEzotRUgtnLw/3XlShhTtGB+l8SRdumkufkqDKPtnnILOLjIT1UwdpYf daxxzskomYBPQbVFdRR0KEY9/REnxt6uxUBoCj2GqRBYGqG95gkQ5PnI5W2quw9h rz1WA8aCRZ6AcXkKMsKkvcxpRWRmFGGb8NPbfTR/pYObvfBA6aABKp13rYL27+UO OYVtbNFjBYzmtuR1oZ6Mj9N9s7RUKPjz5zXuj0pSsXl79AZjfmZGD4tnTlv79F7I ACapp+dvJW+ntdkUw3R3ktZ3xk8WUC6uV5Ryv2gytRzgvuYgGTI= -----END CERTIFICATE-----Generated at Fri Aug 8 00:34:52 2025 by rpki-client