$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: O75uDURnXNbquI/49Z5fT9U7GwX8fKknDfxjOq8P6Do= Subject key identifier: CA:EA:FC:89:F3:1E:38:EC:07:DE:46:62:1B:F4:52:F4:44:F8:73:6B Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 23D14AA0E42A21F9B20D30F09002CECC36FE333B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: 93 Signing time: Fri 08 Aug 2025 10:21:26 +0000 Manifest this update: Fri 08 Aug 2025 10:16:26 +0000 Manifest next update: Mon 11 Aug 2025 20:54:26 +0000 Files and hashes: 1: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: Tpz/hJE4AJ8kjSwHQxgkpwswJ+j3MyNVa0ri3rvZuIQ=) 2: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: bN9NbqyRu4lQ+Okmxo+MD9ITEKt3VwrIkrq6ODkSbg0=) 3: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: CFUPD+5VevYKSpAUr4/yA/IYEJr/9pewXF0HRLkN4A0=) 4: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: lhB3pO2JkMAJtQ5Oday4j/dSwCn2fIqeR0/VOPmin9U=) 5: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: tGDYZbZFfyUoLXzylO+/DvmkP5V0ufi3ajLXIvohhx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d1:4a:a0:e4:2a:21:f9:b2:0d:30:f0:90:02:ce:cc:36:fe:33:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Aug 8 10:16:26 2025 GMT Not After : Aug 11 20:54:26 2025 GMT Subject: CN=CAEAFC89F31E38EC07DE46621BF452F444F8736B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:c8:e0:73:5f:12:f7:a9:d0:4b:c9:46:c8: 55:d4:1d:96:73:ea:7a:b2:b5:24:fa:5a:0b:9d:ad: 9e:11:43:0c:ec:37:4e:99:53:d6:22:a5:2b:9a:bb: a9:09:62:9b:64:2b:e2:7d:61:7d:d0:93:c6:95:45: 80:6e:8a:34:9d:75:58:0c:50:80:d1:26:aa:f4:d4: f1:2d:d6:5d:23:fb:dc:1c:7f:bb:29:7a:81:a2:91: 7c:f8:06:a2:ca:94:eb:89:1e:2c:29:db:68:70:7e: 57:6d:05:45:b7:e8:8b:0d:99:bb:24:e2:a5:ef:79: 36:5b:15:0e:7a:71:17:3a:70:98:9b:49:36:d5:59: b9:45:5b:c5:0b:7e:f6:f9:8a:e9:35:f7:3f:3b:43: de:ce:6b:8f:b3:3d:e6:73:dc:49:ef:00:00:18:80: bd:89:43:2a:28:73:e3:0c:09:c6:cc:6e:02:0c:6a: 86:70:33:25:5d:1e:30:f0:58:13:59:07:23:2d:c3: c6:ea:e5:89:ba:7d:06:7c:93:1a:02:44:e8:97:61: 95:1a:ea:68:02:70:15:c2:6e:10:f6:b6:cf:60:01: c2:0e:17:69:0c:2b:28:36:64:c8:17:02:42:72:e7: 89:ac:81:00:10:1e:67:69:cf:bb:d1:cb:a0:d0:8c: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:FC:89:F3:1E:38:EC:07:DE:46:62:1B:F4:52:F4:44:F8:73:6B X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:35:5e:2d:bd:5b:b8:f4:92:5a:9a:51:01:1b:a3:93:05:1d: 04:a0:ad:45:b3:07:f3:12:96:f8:93:99:80:73:8c:4a:cf:c9: 64:13:39:b6:c0:a7:d7:4e:48:ab:5d:f4:c4:9b:f2:14:dd:cf: a7:47:f5:d0:c8:22:c8:73:45:d5:86:22:b0:05:a9:38:0a:55: 96:26:8a:31:cb:8f:fb:fe:3d:28:db:2f:1b:4e:8b:01:d8:7f: 51:02:f5:f1:2b:9b:e9:b5:53:ab:aa:33:1f:7f:f1:57:45:31: dc:2a:72:ee:f5:97:67:d3:91:8a:eb:6e:f2:c8:e7:62:35:08: 5a:d9:c7:0a:64:02:fe:f4:7d:ff:d9:09:fa:91:02:d2:47:c7: 6b:45:51:4e:47:e1:30:fd:ec:09:b0:9d:94:08:bd:ac:61:57: 03:c9:8f:b2:d9:12:08:83:9d:e2:c8:08:61:65:0f:0c:8a:09: f9:b6:bf:8a:c9:d8:a4:17:21:1f:54:61:7f:64:59:ac:ca:7b: b8:74:a0:d8:79:28:45:57:65:d5:1f:45:fb:0f:be:d3:f3:4e: 0a:b9:c5:e1:7a:87:e3:ef:88:d9:6c:a6:60:de:4e:f4:9e:e9: 62:27:b8:12:a7:6b:7b:18:2e:52:af:e2:98:31:02:25:4e:d9: cb:73:bb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9FKoOQqIfmyDTDwkALOzDb+MzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTA4MDgxMDE2MjZaFw0yNTA4MTEyMDU0MjZaMDMxMTAvBgNV BAMTKENBRUFGQzg5RjMxRTM4RUMwN0RFNDY2MjFCRjQ1MkY0NDRGODczNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7r8jgc18S96nQS8lGyFXUHZZz 6nqytST6WgudrZ4RQwzsN06ZU9YipSuau6kJYptkK+J9YX3Qk8aVRYBuijSddVgM UIDRJqr01PEt1l0j+9wcf7speoGikXz4BqLKlOuJHiwp22hwfldtBUW36IsNmbsk 4qXveTZbFQ56cRc6cJibSTbVWblFW8ULfvb5iuk19z87Q97Oa4+zPeZz3EnvAAAY gL2JQyooc+MMCcbMbgIMaoZwMyVdHjDwWBNZByMtw8bq5Ym6fQZ8kxoCROiXYZUa 6mgCcBXCbhD2ts9gAcIOF2kMKyg2ZMgXAkJy54msgQAQHmdpz7vRy6DQjNF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyur8ifMeOOwH3kZiG/RS9ET4c2swHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH41Xi29W7j0klqaUQEbo5MFHQSgrUWzB/MS lviTmYBzjErPyWQTObbAp9dOSKtd9MSb8hTdz6dH9dDIIshzRdWGIrAFqTgKVZYm ijHLj/v+PSjbLxtOiwHYf1EC9fErm+m1U6uqMx9/8VdFMdwqcu71l2fTkYrrbvLI 52I1CFrZxwpkAv70ff/ZCfqRAtJHx2tFUU5H4TD97AmwnZQIvaxhVwPJj7LZEgiD neLICGFlDwyKCfm2v4rJ2KQXIR9UYX9kWazKe7h0oNh5KEVXZdUfRfsPvtPzTgq5 xeF6h+PviNlspmDeTvSe6WInuBKna3sYLlKv4pgxAiVO2ctzu9s= -----END CERTIFICATE-----Generated at Fri Aug 8 13:11:06 2025 by rpki-client