$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: vEEuxMjTE7eWYcqcNyTl93sHr0YOtNryFPyTW23gXAM= Subject key identifier: F4:F1:F6:2D:ED:B9:8B:83:30:59:46:20:8A:F1:1B:BA:56:64:B1:EC Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 11C44C75B74615B29CE1E3CF4E0FE7AA1A400CF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 019B Signing time: Wed 06 Aug 2025 18:50:52 +0000 Manifest this update: Wed 06 Aug 2025 18:45:52 +0000 Manifest next update: Sat 09 Aug 2025 21:36:52 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) 2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: sAIIyFA4+s62e3FBFDTlsyYw4hULSyKzdn9sRYngMZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c4:4c:75:b7:46:15:b2:9c:e1:e3:cf:4e:0f:e7:aa:1a:40:0c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Aug 6 18:45:52 2025 GMT Not After : Aug 9 21:36:52 2025 GMT Subject: CN=F4F1F62DEDB98B83305946208AF11BBA5664B1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:5d:de:2d:bd:1f:9f:7a:31:e5:e2:cb:e6: 4c:71:ea:c0:42:e3:5b:7a:e9:40:54:8b:d0:cf:37: 55:6b:35:4d:74:06:ff:c9:ff:50:fc:67:f5:46:44: 43:7a:58:2b:67:36:67:58:ed:79:f6:70:12:25:25: 6d:66:bd:ec:e4:e4:1c:ca:9a:84:12:3a:35:46:6b: 41:a6:f6:0d:dd:9d:e6:d5:8b:cf:cc:91:ad:6c:6b: cf:c2:b0:4e:0b:79:2c:b5:4e:85:d7:bd:48:ea:a0: a3:97:39:bc:ab:6a:be:66:7e:e2:21:56:fa:b5:3b: b6:7b:ae:f3:e1:38:68:39:84:1b:87:74:fb:78:4f: c3:29:74:5d:b1:00:c1:39:51:76:b5:0f:df:12:fb: 70:12:29:15:a2:a3:47:bd:d0:8d:64:77:b0:6d:18: a5:eb:44:6e:81:14:5a:4d:f1:1a:36:41:e9:88:e4: ae:5a:85:43:22:99:e2:55:bd:cf:b5:c2:fd:6b:dc: df:a5:ba:bf:89:61:63:84:7a:64:7c:31:e5:11:ea: 40:33:99:54:15:db:42:33:71:d8:3b:45:df:a5:8e: d0:94:42:44:f2:03:dd:10:20:2f:de:51:8f:b9:cd: ea:da:10:b0:ba:93:b8:d4:87:09:d5:65:1e:09:fb: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:F6:2D:ED:B9:8B:83:30:59:46:20:8A:F1:1B:BA:56:64:B1:EC X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:03:82:1f:53:52:7d:a9:46:9a:09:8f:5f:21:c5:f6:ee:87: 34:3f:12:a8:13:2b:02:b7:54:11:87:67:35:c6:25:f2:5f:db: 2d:6a:9c:f0:f2:f0:2c:01:2f:f2:0d:59:05:56:1f:0d:c3:d0: c8:51:09:84:53:e6:5a:bf:ba:e6:b2:11:19:25:e5:67:20:bd: 69:e0:c8:ed:04:e0:1f:07:ce:92:10:30:00:02:d5:e7:70:9f: e5:40:2e:5c:10:e8:dd:6f:be:f7:19:e0:93:a0:eb:7c:51:a1: 7b:f3:42:3d:2c:62:87:91:a1:26:36:59:8c:b2:c8:cd:0f:4a: 8c:aa:cd:1c:e6:7f:9b:34:21:45:94:38:f5:53:93:7a:2e:17: 86:7a:03:82:a4:c6:77:9e:c6:2a:9d:7a:a0:3c:2d:c0:82:b4: fa:cb:48:29:12:26:d1:99:6f:e5:f7:ee:7e:73:ee:fd:86:75: fd:d9:3e:ee:39:e2:7e:94:1f:fb:2e:f6:67:9d:6f:6f:e1:f2: 8e:3d:ba:72:d7:a8:8e:5f:52:68:65:ac:ba:76:f9:08:7f:eb: 84:54:4c:b7:b4:16:3a:d1:56:a9:a3:03:21:e4:08:d6:ef:c6: e2:55:d7:6c:7b:91:79:60:d0:b2:0a:b1:3a:62:1d:42:40:fc: 56:c5:d1:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcRMdbdGFbKc4ePPTg/nqhpADPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA4MDYxODQ1NTJaFw0yNTA4MDkyMTM2NTJaMDMxMTAvBgNV BAMTKEY0RjFGNjJERURCOThCODMzMDU5NDYyMDhBRjExQkJBNTY2NEIxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNl3eLb0fn3ox5eLL5kxx6sBC 41t66UBUi9DPN1VrNU10Bv/J/1D8Z/VGREN6WCtnNmdY7Xn2cBIlJW1mvezk5BzK moQSOjVGa0Gm9g3dnebVi8/Mka1sa8/CsE4LeSy1ToXXvUjqoKOXObyrar5mfuIh Vvq1O7Z7rvPhOGg5hBuHdPt4T8MpdF2xAME5UXa1D98S+3ASKRWio0e90I1kd7Bt GKXrRG6BFFpN8Ro2QemI5K5ahUMimeJVvc+1wv1r3N+lur+JYWOEemR8MeUR6kAz mVQV20Izcdg7Rd+ljtCUQkTyA90QIC/eUY+5zeraELC6k7jUhwnVZR4J+zkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PH2Le25i4MwWUYgivEbulZksewwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsDgh9TUn2pRpoJj18hxfbuhzQ/EqgTKwK3 VBGHZzXGJfJf2y1qnPDy8CwBL/INWQVWHw3D0MhRCYRT5lq/uuayERkl5WcgvWng yO0E4B8HzpIQMAAC1edwn+VALlwQ6N1vvvcZ4JOg63xRoXvzQj0sYoeRoSY2WYyy yM0PSoyqzRzmf5s0IUWUOPVTk3ouF4Z6A4KkxneexiqdeqA8LcCCtPrLSCkSJtGZ b+X37n5z7v2Gdf3ZPu454n6UH/su9medb2/h8o49unLXqI5fUmhlrLp2+Qh/64RU TLe0FjrRVqmjAyHkCNbvxuJV12x7kXlg0LIKsTpiHUJA/FbF0RE= -----END CERTIFICATE-----Generated at Thu Aug 7 11:18:53 2025 by rpki-client