$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: 77cL9me9ShravtioZFWvkBEqxfHulNgE6dSUbB3TjHU= Subject key identifier: 83:53:12:0D:06:2D:7E:45:D7:8D:60:C6:09:BC:23:F9:D2:B2:03:C1 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 362DC3632E7106B1BA05C0AE841719859EB57D6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: A3 Signing time: Tue 05 Aug 2025 19:21:18 +0000 Manifest this update: Tue 05 Aug 2025 19:16:18 +0000 Manifest next update: Fri 08 Aug 2025 22:37:18 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: deLQ9RZpighZ3Q5rcTFiPjKWdDhZqRJOyiPpcX1/LTE=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: uYzs+p1vNU4q3UnY6dxGmF6ROTnds5qtaQgqOkbuJ7s=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: WTE+7ChgCtzWctqna6lhsd8Kl1Ur43QevQNEi2ASl5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2d:c3:63:2e:71:06:b1:ba:05:c0:ae:84:17:19:85:9e:b5:7d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Aug 5 19:16:18 2025 GMT Not After : Aug 8 22:37:18 2025 GMT Subject: CN=8353120D062D7E45D78D60C609BC23F9D2B203C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:2c:49:ac:61:6c:54:dd:96:79:cf:29:04: 32:c9:27:0b:fd:9c:62:06:6d:68:d5:88:32:af:82: 76:de:22:cd:9c:58:a5:97:8c:f8:8f:34:48:56:b4: 04:44:42:77:73:b5:fc:ea:a4:73:bb:57:fe:b7:33: 70:bc:45:d3:13:99:09:22:72:63:9a:25:23:4d:54: b4:7f:89:fd:0e:6b:ce:ab:7b:44:25:c5:9f:d1:f7: 22:8f:18:03:b8:f0:e2:43:fb:89:5f:b8:0d:c8:a7: 8c:10:dd:f5:d4:2c:61:a3:7e:19:d6:f6:07:5d:ab: 50:95:ee:bc:45:63:80:81:de:9c:bb:21:9e:37:8e: ef:5c:e2:75:e9:45:4a:6f:30:5c:a7:20:96:2b:bf: 9f:0e:53:1e:19:d1:51:95:58:4b:62:de:c2:69:f1: ef:b2:ae:83:6f:88:7e:d5:c3:3e:28:a9:e1:c3:b4: 17:b3:51:70:d2:42:47:71:e7:51:97:62:0f:b3:6b: 6a:d7:c8:ce:b2:87:4e:80:09:c4:40:31:67:9c:c5: 5d:7c:e8:aa:eb:1f:3e:57:10:1b:a6:9c:4c:73:b9: 0f:d4:93:da:8b:25:97:d7:d3:c9:e0:10:ae:58:e0: d7:2b:de:d0:8e:a6:7e:dd:c4:4a:78:b0:57:5e:2b: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:12:0D:06:2D:7E:45:D7:8D:60:C6:09:BC:23:F9:D2:B2:03:C1 X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:af:91:63:d5:f1:6f:97:4a:42:a9:bc:47:1a:54:d0:f9: c4:bf:98:44:ed:25:c3:60:b0:39:b6:bb:34:a0:bd:7b:3e:7d: 25:6b:30:56:dc:aa:fb:ad:6d:5e:e8:97:04:35:e1:f9:bb:6b: 16:2f:d6:2a:56:0b:18:4e:fb:b3:99:70:7a:33:64:d4:71:6d: 99:ed:a2:ab:4f:6d:15:97:9c:0f:38:4a:b8:22:bf:19:29:7d: a6:d9:84:b8:bb:75:71:43:33:38:aa:4f:fc:b5:dc:fe:9d:bd: 48:55:e5:9c:95:17:f8:78:79:c9:54:26:7f:76:f3:e5:ad:87: 92:86:d8:85:f2:81:04:c7:1d:f8:ee:74:3c:4b:b7:e0:06:08: 88:ae:7e:43:b9:31:91:fc:82:ce:e9:e8:8a:4b:62:ed:77:56: 5e:0f:fb:4a:0a:bd:b1:f6:40:52:82:8c:3f:4f:38:99:3a:55: 91:58:f7:49:5f:7b:5f:a6:09:1d:4e:83:b3:c8:36:ab:9c:ba: 00:35:81:a2:b0:ea:f2:ef:b6:be:c2:9e:6a:2e:1a:6a:d5:4d: a5:85:0a:c0:f4:a2:68:80:5b:cf:63:3f:f4:02:d3:11:61:a9: ea:90:e0:40:2e:9b:6d:c3:26:c8:25:79:88:5e:28:4c:00:95: 9f:5d:dc:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNi3DYy5xBrG6BcCuhBcZhZ61fW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTA4MDUxOTE2MThaFw0yNTA4MDgyMjM3MThaMDMxMTAvBgNV BAMTKDgzNTMxMjBEMDYyRDdFNDVENzhENjBDNjA5QkMyM0Y5RDJCMjAzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLECxJrGFsVN2Wec8pBDLJJwv9 nGIGbWjViDKvgnbeIs2cWKWXjPiPNEhWtAREQndztfzqpHO7V/63M3C8RdMTmQki cmOaJSNNVLR/if0Oa86re0QlxZ/R9yKPGAO48OJD+4lfuA3Ip4wQ3fXULGGjfhnW 9gddq1CV7rxFY4CB3py7IZ43ju9c4nXpRUpvMFynIJYrv58OUx4Z0VGVWEti3sJp 8e+yroNviH7Vwz4oqeHDtBezUXDSQkdx51GXYg+za2rXyM6yh06ACcRAMWecxV18 6KrrHz5XEBumnExzuQ/Uk9qLJZfX08ngEK5Y4Ncr3tCOpn7dxEp4sFdeK6u/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1MSDQYtfkXXjWDGCbwj+dKyA8EwHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExar5Fj1fFvl0pCqbxHGlTQ+cS/mETtJcNg sDm2uzSgvXs+fSVrMFbcqvutbV7olwQ14fm7axYv1ipWCxhO+7OZcHozZNRxbZnt oqtPbRWXnA84SrgivxkpfabZhLi7dXFDMziqT/y13P6dvUhV5ZyVF/h4eclUJn92 8+Wth5KG2IXygQTHHfjudDxLt+AGCIiufkO5MZH8gs7p6IpLYu13Vl4P+0oKvbH2 QFKCjD9POJk6VZFY90lfe1+mCR1Og7PINqucugA1gaKw6vLvtr7CnmouGmrVTaWF CsD0omiAW89jP/QC0xFhqeqQ4EAum23DJsgleYheKEwAlZ9d3AE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:08 2025 by rpki-client