$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft File: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft (raw, json) Hash identifier: 43qbhpLrETCwxgLpxYGCAfxy/gZB+SjwlmpxGsvlpfg= Subject key identifier: 79:AC:56:CB:98:9F:E6:46:B6:C6:EB:07:9F:A7:2F:6B:64:C3:C7:E1 Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 0DF3E268DDB722C4A36C70E5A1B1DE270ED78527 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft Manifest number: 044E Signing time: Tue 05 Aug 2025 13:51:09 +0000 Manifest this update: Tue 05 Aug 2025 13:46:09 +0000 Manifest next update: Fri 08 Aug 2025 23:26:09 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: U3Gs6gFYrqKdvd5j47kgxX4NaXmZB4E+Rz3ST2VSWc4=) 2: 9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl (hash: XPk2q5Nyg4JwkZtc/Wu42JmTlCdf+QFol9bg5pH/PuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f3:e2:68:dd:b7:22:c4:a3:6c:70:e5:a1:b1:de:27:0e:d7:85:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Aug 5 13:46:09 2025 GMT Not After : Aug 8 23:26:09 2025 GMT Subject: CN=79AC56CB989FE646B6C6EB079FA72F6B64C3C7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:94:e8:42:dc:da:95:f8:97:8b:6d:0f:48: 55:ee:f3:e8:a3:d2:6b:7c:3b:68:23:ba:0e:97:0c: 28:84:e3:29:5b:66:68:71:73:e4:62:34:2b:9f:f2: d0:aa:e3:12:e1:db:b5:12:e1:a0:46:d3:d9:19:93: 64:13:7b:9a:14:c9:b7:85:f4:27:53:20:dd:60:2a: fd:d6:33:bc:0e:24:59:bb:f9:61:84:dd:11:48:e9: 94:40:c1:20:45:d7:8a:c1:2d:64:10:83:b6:3a:39: 4d:51:0d:b9:f2:85:0d:2d:aa:c1:a8:3f:9a:a4:ae: 24:cf:98:da:ad:30:21:bd:40:dc:40:71:a2:4f:fb: 32:30:32:af:e7:14:3b:0c:1f:6b:b6:5c:69:b3:0b: 01:6f:7f:c7:cd:5d:39:f1:4c:86:d2:c3:9f:7e:92: e3:8e:25:13:3d:85:79:bc:7f:9f:aa:f8:b3:cd:a0: cf:42:ab:92:63:92:b9:6a:4f:f2:40:9e:4c:02:14: 02:b4:4d:61:44:16:a5:d0:f0:e5:ce:71:24:aa:41: 84:dc:77:19:04:2c:b2:0f:16:b5:21:36:91:b0:75: b8:36:1d:af:06:41:7b:5e:35:d3:71:2b:4d:c3:bc: c4:00:82:df:26:eb:e1:2e:23:a8:e0:2c:08:6e:5c: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AC:56:CB:98:9F:E6:46:B6:C6:EB:07:9F:A7:2F:6B:64:C3:C7:E1 X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:95:c0:1c:95:7e:a2:dd:14:4e:f7:6e:7b:df:1b:8c:38:60: 2d:fb:6f:1c:8c:56:bd:0f:cc:8b:b3:50:da:52:d8:51:e0:fa: 2a:af:aa:7a:3d:0c:99:18:fe:a3:28:ce:68:c1:b7:a3:11:59: 5b:e2:53:3f:64:2a:b1:1f:d4:bb:89:03:f5:c5:45:c1:73:a8: d1:22:19:93:52:d5:a3:d3:c5:0e:d2:dc:16:34:7a:bf:2a:c0: 13:27:26:75:a8:e5:6b:13:ef:9c:d8:aa:fa:40:7a:da:1a:87: 6a:6f:97:ea:09:01:e7:4c:f0:72:81:9e:b9:37:f9:9a:c4:b1: c1:07:33:82:4a:51:ed:64:ac:75:8f:ee:47:05:0e:aa:1f:c0: 50:ba:e4:33:3c:90:44:b1:65:5a:be:9a:3a:cd:33:04:94:b9: 08:cc:34:bb:65:5c:56:8a:ee:9d:8f:71:32:91:c6:f8:a3:b2: e9:3c:fe:57:8e:dc:60:1a:b6:e8:c8:5e:2c:30:93:01:50:df: 52:ec:6a:7a:4a:8d:97:27:93:f5:20:1f:20:9e:76:9a:97:d1: 9d:9e:4d:87:c8:c8:e6:ec:af:43:a9:a2:55:c0:d3:40:45:30: 5f:7d:fc:c0:9d:90:49:8f:63:6c:26:09:a3:15:ae:fd:92:81: d8:7b:eb:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfPiaN23IsSjbHDlobHeJw7XhScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTA4MDUxMzQ2MDlaFw0yNTA4MDgyMzI2MDlaMDMxMTAvBgNV BAMTKDc5QUM1NkNCOTg5RkU2NDZCNkM2RUIwNzlGQTcyRjZCNjRDM0M3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgZToQtzalfiXi20PSFXu8+ij 0mt8O2gjug6XDCiE4ylbZmhxc+RiNCuf8tCq4xLh27US4aBG09kZk2QTe5oUybeF 9CdTIN1gKv3WM7wOJFm7+WGE3RFI6ZRAwSBF14rBLWQQg7Y6OU1RDbnyhQ0tqsGo P5qkriTPmNqtMCG9QNxAcaJP+zIwMq/nFDsMH2u2XGmzCwFvf8fNXTnxTIbSw59+ kuOOJRM9hXm8f5+q+LPNoM9Cq5JjkrlqT/JAnkwCFAK0TWFEFqXQ8OXOcSSqQYTc dxkELLIPFrUhNpGwdbg2Ha8GQXteNdNxK03DvMQAgt8m6+EuI6jgLAhuXCWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeaxWy5if5ka2xusHn6cva2TDx+EwHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1 QTM2RjYyNzAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSVwByVfqLdFE73bnvfG4w4YC37bxyMVr0P zIuzUNpS2FHg+iqvqno9DJkY/qMozmjBt6MRWVviUz9kKrEf1LuJA/XFRcFzqNEi GZNS1aPTxQ7S3BY0er8qwBMnJnWo5WsT75zYqvpAetoah2pvl+oJAedM8HKBnrk3 +ZrEscEHM4JKUe1krHWP7kcFDqofwFC65DM8kESxZVq+mjrNMwSUuQjMNLtlXFaK 7p2PcTKRxvijsuk8/leO3GAatujIXiwwkwFQ31LsanpKjZcnk/UgHyCedpqX0Z2e TYfIyObsr0OpolXA00BFMF99/MCdkEmPY2wmCaMVrv2Sgdh7600= -----END CERTIFICATE-----Generated at Wed Aug 6 12:27:12 2025 by rpki-client