$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: 5Z6a+3uUctNDIDFmT1RcvczLRse+DvpcOE+HA5FR2r0= Subject key identifier: 18:B3:4A:E3:5B:00:59:F2:75:26:42:02:E0:CA:97:E0:FE:B0:63:58 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 1036DDFEE683B8B6ECD613F44828C83C28D23C6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: C9 Signing time: Tue 05 Aug 2025 09:41:14 +0000 Manifest this update: Tue 05 Aug 2025 09:36:14 +0000 Manifest next update: Fri 08 Aug 2025 17:35:14 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 2: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 3: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) 4: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: 89AiyH+LnyNyaZR5mMYnzeHKModKoHz6ocAajGnCI+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:36:dd:fe:e6:83:b8:b6:ec:d6:13:f4:48:28:c8:3c:28:d2:3c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Aug 5 09:36:14 2025 GMT Not After : Aug 8 17:35:14 2025 GMT Subject: CN=18B34AE35B0059F275264202E0CA97E0FEB06358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:c0:b7:ec:31:48:f6:d1:3c:bf:9f:ff:5e: 1e:3e:9c:5a:ed:b4:34:f8:80:dd:ae:ed:36:af:83: 84:e7:c6:e0:7f:df:d1:be:dc:ab:ae:35:1a:9a:40: 20:70:60:2f:9a:a2:f2:37:3c:fb:61:05:18:12:3d: 61:3c:7c:ed:33:6b:d1:96:1f:26:1f:d5:76:3e:70: e4:4c:6d:d2:e3:77:2e:1c:9c:49:9a:60:8b:8d:ee: 38:63:2b:04:92:be:0f:48:fe:42:f1:f4:44:b6:b9: 95:13:da:07:42:c0:0c:25:9e:1a:96:e0:8e:e4:13: 79:e5:dd:27:e7:16:c2:fb:87:62:4b:7c:3f:8c:0d: 55:2f:da:07:4e:d3:4c:ed:f3:89:fc:7c:4a:08:e8: 99:4a:f2:29:de:62:b0:b6:30:f5:5c:90:3e:5d:be: 97:8d:5a:54:ec:eb:93:0e:98:c8:79:a8:bd:50:81: 1f:c6:2b:10:00:1c:f1:cd:18:89:89:c3:8e:4c:3e: c7:e9:8b:6e:cd:61:bd:42:19:ff:53:f6:8e:be:6d: 33:55:99:70:54:39:2e:41:93:38:8b:8b:4c:2c:18: 3e:bf:0f:cf:4d:f7:82:9f:d7:db:23:ee:67:1a:ef: 35:09:08:8f:ec:ad:ea:eb:3f:15:7d:76:a6:cf:95: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:4A:E3:5B:00:59:F2:75:26:42:02:E0:CA:97:E0:FE:B0:63:58 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:a8:2e:a1:f5:50:ec:55:de:6f:1c:79:7f:b7:42:68:43: a1:e1:63:2f:67:a5:62:1b:7e:40:40:65:5f:69:ad:60:5c:f1: bb:32:ac:3c:ab:b9:27:db:92:d6:71:bc:2e:59:5f:bc:45:72: 52:57:11:1c:45:9e:23:7d:42:e1:70:3b:69:69:74:07:88:09: d5:02:9e:af:ab:39:37:37:85:c3:f9:61:9b:5f:4f:5c:fb:23: 9c:f2:58:ff:45:92:57:f7:83:d1:f9:28:71:c3:6e:36:7c:24: 21:98:d8:a6:b7:cc:c4:0f:df:ce:3c:8c:8f:77:88:40:78:49: 65:c1:0e:a3:35:25:1d:d9:2c:2b:e2:6d:ce:11:b3:4c:5f:55: 40:fe:ea:1b:ab:e5:8a:fc:9c:53:63:91:9c:09:f7:2f:34:88: 2b:37:8a:0f:de:a7:77:09:5d:90:82:27:cb:cc:8c:2e:ce:e5: a1:d1:48:d7:ae:63:ba:8e:50:ff:8b:14:8c:fa:b9:c8:9d:27: b2:16:79:1c:16:cb:fc:41:ca:39:05:23:28:1e:45:79:a0:66: 34:45:8f:83:6b:0e:df:45:bb:3c:0e:7c:10:a1:da:20:db:18: 91:a9:b0:86:ae:76:55:f6:69:ef:47:22:d0:c8:74:c9:0a:4a: 65:c4:fd:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDbd/uaDuLbs1hP0SCjIPCjSPGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA4MDUwOTM2MTRaFw0yNTA4MDgxNzM1MTRaMDMxMTAvBgNV BAMTKDE4QjM0QUUzNUIwMDU5RjI3NTI2NDIwMkUwQ0E5N0UwRkVCMDYzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3esC37DFI9tE8v5//Xh4+nFrt tDT4gN2u7Tavg4TnxuB/39G+3KuuNRqaQCBwYC+aovI3PPthBRgSPWE8fO0za9GW HyYf1XY+cORMbdLjdy4cnEmaYIuN7jhjKwSSvg9I/kLx9ES2uZUT2gdCwAwlnhqW 4I7kE3nl3SfnFsL7h2JLfD+MDVUv2gdO00zt84n8fEoI6JlK8ineYrC2MPVckD5d vpeNWlTs65MOmMh5qL1QgR/GKxAAHPHNGImJw45MPsfpi27NYb1CGf9T9o6+bTNV mXBUOS5BkziLi0wsGD6/D89N94Kf19sj7mca7zUJCI/srerrPxV9dqbPlT61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGLNK41sAWfJ1JkIC4MqX4P6wY1gwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0GqC6h9VDsVd5vHHl/t0JoQ6HhYy9npWIb fkBAZV9prWBc8bsyrDyruSfbktZxvC5ZX7xFclJXERxFniN9QuFwO2lpdAeICdUC nq+rOTc3hcP5YZtfT1z7I5zyWP9Fklf3g9H5KHHDbjZ8JCGY2Ka3zMQP3848jI93 iEB4SWXBDqM1JR3ZLCvibc4Rs0xfVUD+6hur5Yr8nFNjkZwJ9y80iCs3ig/ep3cJ XZCCJ8vMjC7O5aHRSNeuY7qOUP+LFIz6ucidJ7IWeRwWy/xByjkFIygeRXmgZjRF j4NrDt9FuzwOfBCh2iDbGJGpsIaudlX2ae9HItDIdMkKSmXE/XA= -----END CERTIFICATE-----Generated at Tue Aug 5 20:19:01 2025 by rpki-client