$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: 8U/Psc8o4erg09v/eIz9kvoyjy/BV++5RclYqUuP2jg= Subject key identifier: B0:EF:40:32:0A:40:81:A4:7F:31:94:43:61:17:A2:29:53:F1:F9:63 Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 4A86D6A709F4E8F3FC789E9FB972C5A9FAF5C15C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 0265 Signing time: Tue 05 Aug 2025 11:00:03 +0000 Manifest this update: Tue 05 Aug 2025 10:55:03 +0000 Manifest next update: Fri 08 Aug 2025 11:33:03 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: SMUXRvtfNi7m6TWntr0XsrZd7UmYMQGRBW++4EJYnOk=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: QBXD74h7LerS3b5hyt7UDcm5BwsgJAInDueuy9QBQbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:86:d6:a7:09:f4:e8:f3:fc:78:9e:9f:b9:72:c5:a9:fa:f5:c1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Aug 5 10:55:03 2025 GMT Not After : Aug 8 11:33:03 2025 GMT Subject: CN=B0EF40320A4081A47F3194436117A22953F1F963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:32:ac:ba:94:ba:17:02:6d:0c:71:a0:5b: e4:3a:ba:56:6f:bb:5f:3c:a0:7e:4b:ed:37:55:c0: f7:33:7a:22:73:9f:54:e6:2d:16:79:7e:1d:92:4a: 85:dd:13:f7:fc:8d:11:b3:c8:05:66:75:2a:d9:9f: 9c:75:15:9e:e5:cb:58:94:ec:88:e6:a5:62:83:16: d4:68:c5:37:51:a9:a9:a3:00:21:37:99:4c:d4:f4: 7c:5d:2f:2b:a1:c8:27:a6:f5:0d:dd:5f:39:1c:ab: 3b:f5:71:b6:60:2d:e0:42:20:be:3f:8e:8f:a6:bd: e9:62:c8:49:a2:d4:69:04:03:66:6c:cc:27:e9:ff: 44:17:65:c4:ef:6b:5d:da:3c:d9:31:b1:b0:95:a2: 84:a2:60:b8:6d:67:0e:e2:c2:16:b0:f0:31:29:5d: 54:66:40:c3:d0:74:ac:b4:22:44:98:2f:1a:f2:b4: c9:c2:50:9b:78:ae:5f:58:50:d5:dd:7a:65:70:da: 80:7d:9f:72:f3:b9:09:33:51:1b:87:1c:12:9c:ea: e8:4c:8b:06:9b:d8:7f:6a:1f:a7:88:47:50:5b:1c: 2e:08:60:8c:de:01:0f:d3:87:64:43:23:f7:87:69: 28:8e:6a:80:5e:30:d7:6d:25:fb:cc:33:2d:71:6f: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:40:32:0A:40:81:A4:7F:31:94:43:61:17:A2:29:53:F1:F9:63 X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c2:9b:8a:48:04:c8:4d:a9:69:0b:7d:86:c1:28:43:28:a4: 8b:7a:99:e6:18:b2:b0:00:b6:a6:99:1b:f3:d5:04:c9:96:45: bc:4c:ec:b6:4d:2f:96:8c:b6:5c:8a:d7:10:38:37:60:70:ef: 63:e9:6a:a7:ec:fe:9f:93:d1:2a:ff:0c:55:39:b5:f9:53:57: 0b:b5:54:75:d4:90:fa:71:41:e2:55:f5:d6:c9:f0:58:47:b6: 98:a4:fd:b2:c9:07:9c:37:c2:c8:b3:cc:7b:96:67:85:c0:d1: 03:b5:d0:ba:b0:9e:12:c4:d0:45:85:54:67:d2:d5:5e:bf:f1: fd:b5:40:f0:ea:5b:ee:d1:7b:e0:11:da:14:94:3a:2f:89:40: 7f:5a:4e:57:28:c9:91:46:17:d8:3a:a6:54:a1:ef:76:c1:b5: c6:f5:26:7d:88:65:67:0a:98:77:1a:13:c1:db:4f:08:62:0b: 24:24:2e:0f:56:8d:d6:db:2b:90:3d:93:8d:d6:f3:40:b8:f6: 35:34:fa:78:a9:ee:29:a1:a0:b1:70:ce:a0:04:13:62:14:34: db:bb:6b:5d:b4:e4:3d:34:10:ba:a5:06:63:1b:a0:a4:d1:46: 78:00:77:17:58:21:c5:81:29:02:de:01:5d:6f:39:fe:5d:45: 60:f0:54:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSobWpwn06PP8eJ6fuXLFqfr1wVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNTA4MDUxMDU1MDNaFw0yNTA4MDgxMTMzMDNaMDMxMTAvBgNV BAMTKEIwRUY0MDMyMEE0MDgxQTQ3RjMxOTQ0MzYxMTdBMjI5NTNGMUY5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApDKsupS6FwJtDHGgW+Q6ulZv u188oH5L7TdVwPczeiJzn1TmLRZ5fh2SSoXdE/f8jRGzyAVmdSrZn5x1FZ7ly1iU 7IjmpWKDFtRoxTdRqamjACE3mUzU9HxdLyuhyCem9Q3dXzkcqzv1cbZgLeBCIL4/ jo+mveliyEmi1GkEA2ZszCfp/0QXZcTva13aPNkxsbCVooSiYLhtZw7iwhaw8DEp XVRmQMPQdKy0IkSYLxrytMnCUJt4rl9YUNXdemVw2oB9n3LzuQkzURuHHBKc6uhM iwab2H9qH6eIR1BbHC4IYIzeAQ/Th2RDI/eHaSiOaoBeMNdtJfvMMy1xbyVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsO9AMgpAgaR/MZRDYReiKVPx+WMwHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbCm4pIBMhNqWkLfYbBKEMopIt6meYYsrAA tqaZG/PVBMmWRbxM7LZNL5aMtlyK1xA4N2Bw72Ppaqfs/p+T0Sr/DFU5tflTVwu1 VHXUkPpxQeJV9dbJ8FhHtpik/bLJB5w3wsizzHuWZ4XA0QO10LqwnhLE0EWFVGfS 1V6/8f21QPDqW+7Re+AR2hSUOi+JQH9aTlcoyZFGF9g6plSh73bBtcb1Jn2IZWcK mHcaE8HbTwhiCyQkLg9WjdbbK5A9k43W80C49jU0+nip7imhoLFwzqAEE2IUNNu7 a1205D00ELqlBmMboKTRRngAdxdYIcWBKQLeAV1vOf5dRWDwVDM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:05 2025 by rpki-client