$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: RnaSAcO8a2Nb91QjTMmB3udX5ThuKyXrXiSaxcD3F60= Subject key identifier: 60:94:15:2E:D3:2A:07:45:E5:3E:6B:02:37:7B:0F:44:66:06:BE:F3 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 0F36FC7B7170C5B0F2F2ABE954E7E47C3D6061FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 6D Signing time: Sun 03 Aug 2025 22:51:32 +0000 Manifest this update: Sun 03 Aug 2025 22:46:32 +0000 Manifest next update: Thu 07 Aug 2025 09:14:32 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: 0kJ4jfGaG5665yB24VxeMxwzGMg/WMbMe5FRhjOkZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 09:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:36:fc:7b:71:70:c5:b0:f2:f2:ab:e9:54:e7:e4:7c:3d:60:61:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Aug 3 22:46:32 2025 GMT Not After : Aug 7 09:14:32 2025 GMT Subject: CN=6094152ED32A0745E53E6B02377B0F446606BEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:cc:31:84:c3:52:b5:e1:8f:3c:79:6b:99: 1d:c0:4d:68:14:e1:5c:db:80:8c:99:17:53:61:ff: b8:d7:6a:96:1f:c7:92:fa:23:21:8f:81:d1:f3:5c: fb:f1:39:0d:6b:45:aa:34:87:4f:77:48:bb:99:a7: 24:f4:80:2a:72:51:86:82:c3:91:96:20:1f:89:3b: 47:29:9d:20:e4:19:60:f0:81:c0:0e:a9:4e:59:10: 8a:bd:f5:bd:ba:6e:63:25:af:28:ae:3b:40:cd:27: 90:c9:df:08:cc:b6:d9:57:a8:37:fc:b1:6d:9a:67: 5c:0e:23:09:cf:47:a9:b3:7e:91:58:5a:52:2f:02: 91:82:86:0a:92:6d:d6:f3:f9:77:e8:4a:d0:3a:8a: ae:0a:cd:c6:00:b1:0c:e8:da:bc:7a:98:9e:a1:48: 2d:b7:e4:bf:5d:26:74:fb:9c:a1:60:75:e5:de:f9: 8e:87:23:58:41:62:82:b3:32:0c:24:a8:22:1c:72: 22:d9:cc:7f:94:e8:c9:14:eb:d2:47:7a:e2:f5:37: a2:7e:bd:df:46:db:98:6c:b1:7c:be:7a:02:4b:53: e6:06:0d:75:50:f0:9a:b9:d5:8d:ee:0e:a7:3d:20: 68:97:75:0d:4e:71:00:18:34:98:54:72:69:74:46: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:15:2E:D3:2A:07:45:E5:3E:6B:02:37:7B:0F:44:66:06:BE:F3 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c5:9d:01:4d:3e:d1:ff:9a:42:9b:ce:7c:46:58:67:dc:72: ae:ae:5a:3b:24:bf:bb:06:e1:49:8a:93:2d:81:2c:d7:55:60: cb:f3:71:2d:18:12:93:57:25:ad:bf:af:57:55:9d:4a:d2:7a: f2:f8:96:cc:7d:db:c1:d6:5f:9b:03:88:0b:3c:a5:ce:d2:6d: d7:a8:7d:35:4c:3b:1b:3e:5c:f7:bd:22:5e:7e:38:40:c3:b2: e2:37:9d:a1:40:38:b9:bb:da:f7:5c:1c:2c:08:c2:b1:59:c5: 1f:28:14:0e:1c:89:71:04:ef:a7:e3:80:20:e6:f4:c5:91:21: 9b:4f:4a:f6:3e:81:5e:29:4d:53:c1:a8:9a:95:91:b3:c4:fc: 58:ff:b6:1b:cc:99:0b:db:f1:9a:ae:4b:ed:e3:c6:ad:fe:03: 4d:0a:9e:7f:b0:ea:52:98:c1:8e:dd:c0:48:f5:ac:5b:b7:eb: b1:a7:23:9e:47:1b:f2:ca:8c:96:0c:f4:ab:25:5b:25:97:fb: 36:bd:23:c7:07:38:77:e0:8d:49:9d:2f:8f:80:80:12:29:d1: 85:f7:17:83:79:3c:21:4d:6e:bf:14:15:fc:16:ad:97:eb:c1: 02:4e:29:20:3f:eb:3a:19:6c:b1:b7:b6:89:97:ca:46:be:67: 47:7e:63:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzb8e3FwxbDy8qvpVOfkfD1gYf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA4MDMyMjQ2MzJaFw0yNTA4MDcwOTE0MzJaMDMxMTAvBgNV BAMTKDYwOTQxNTJFRDMyQTA3NDVFNTNFNkIwMjM3N0IwRjQ0NjYwNkJFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLcwxhMNSteGPPHlrmR3ATWgU 4VzbgIyZF1Nh/7jXapYfx5L6IyGPgdHzXPvxOQ1rRao0h093SLuZpyT0gCpyUYaC w5GWIB+JO0cpnSDkGWDwgcAOqU5ZEIq99b26bmMlryiuO0DNJ5DJ3wjMttlXqDf8 sW2aZ1wOIwnPR6mzfpFYWlIvApGChgqSbdbz+XfoStA6iq4KzcYAsQzo2rx6mJ6h SC235L9dJnT7nKFgdeXe+Y6HI1hBYoKzMgwkqCIcciLZzH+U6MkU69JHeuL1N6J+ vd9G25hssXy+egJLU+YGDXVQ8Jq51Y3uDqc9IGiXdQ1OcQAYNJhUcml0RvxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYJQVLtMqB0XlPmsCN3sPRGYGvvMwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTFnQFNPtH/mkKbznxGWGfccq6uWjskv7sG 4UmKky2BLNdVYMvzcS0YEpNXJa2/r1dVnUrSevL4lsx928HWX5sDiAs8pc7Sbdeo fTVMOxs+XPe9Il5+OEDDsuI3naFAOLm72vdcHCwIwrFZxR8oFA4ciXEE76fjgCDm 9MWRIZtPSvY+gV4pTVPBqJqVkbPE/Fj/thvMmQvb8ZquS+3jxq3+A00Knn+w6lKY wY7dwEj1rFu367GnI55HG/LKjJYM9KslWyWX+za9I8cHOHfgjUmdL4+AgBIp0YX3 F4N5PCFNbr8UFfwWrZfrwQJOKSA/6zoZbLG3tomXyka+Z0d+Y0A= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:43 2025 by rpki-client