$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: kMk5MyzrgmBQXG/3CNw4xg6G4yy/OwCkJVV4ASUBHa8= Subject key identifier: 32:AF:1F:2D:0D:09:E1:5C:DE:55:00:7B:D6:C2:8D:B5:CA:E4:4D:6D Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 2274B7164218305AC8BB4F165D2B7FD9E122A60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01D9 Signing time: Thu 21 Aug 2025 21:41:37 +0000 Manifest this update: Thu 21 Aug 2025 21:36:37 +0000 Manifest next update: Sun 24 Aug 2025 22:04:37 +0000 Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) 2: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: N6NF9qlkSsONhZnGQ8suDjgMqfYjEhuyzBZrJHR3bwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:74:b7:16:42:18:30:5a:c8:bb:4f:16:5d:2b:7f:d9:e1:22:a6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Aug 21 21:36:37 2025 GMT Not After : Aug 24 22:04:37 2025 GMT Subject: CN=32AF1F2D0D09E15CDE55007BD6C28DB5CAE44D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:67:37:7b:71:db:3d:a0:ae:b2:72:c1:55: 6d:4d:88:b3:4d:c9:57:89:dc:32:e6:52:39:a7:0b: 7d:6e:37:57:4b:0e:c5:ac:10:ba:92:f7:c9:a6:92: 5b:ba:03:f5:ff:c5:96:bf:79:57:a2:76:74:e4:0c: 39:23:43:6c:b6:e6:b2:8e:2f:0e:53:00:54:82:f3: fb:92:16:05:c5:08:9b:18:ce:88:8e:14:b5:7b:da: 22:81:f6:a2:dd:1b:d0:61:75:3a:af:75:ca:a1:6d: 00:a8:76:fb:4d:1f:00:a0:c9:96:6d:cc:97:a3:25: 54:3f:d0:4c:7c:6a:5f:8c:94:7e:15:ab:2c:9f:0b: 2f:6f:67:d0:9a:09:ea:ac:f2:a3:6c:88:9c:eb:0e: 30:4a:0c:4a:85:c5:2f:22:25:f8:33:72:12:9f:d2: 3a:fd:61:ed:f6:cd:e1:62:6b:bc:61:58:cc:0d:eb: f5:1d:bd:a2:86:d7:86:4c:08:28:8b:50:fb:c5:7b: 49:6e:21:77:a5:6d:a8:c6:97:9c:40:43:51:d4:30: c6:f0:2a:ad:ff:cf:be:61:be:fe:f5:3d:55:36:ca: c6:1d:bc:0d:17:24:cd:df:64:1f:b9:4d:28:84:13: 66:4e:d2:03:e2:cd:c6:c5:a3:b0:28:a7:69:5e:cb: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AF:1F:2D:0D:09:E1:5C:DE:55:00:7B:D6:C2:8D:B5:CA:E4:4D:6D X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d0:2f:e8:5a:90:d5:8b:c9:45:2c:44:51:5c:44:9c:a9:6b: d3:09:8b:11:5d:f6:ea:ad:c5:1e:37:fb:8e:9f:3c:b8:3c:98: 5c:b7:b7:a1:62:c8:f0:6d:d2:9e:38:ff:dc:37:87:d2:a3:82: d6:f8:42:4d:0d:9e:8c:08:4b:46:55:b3:a0:0d:eb:1b:81:38: 9f:28:89:fe:74:0d:a4:f0:e5:39:f9:30:fd:5f:bf:58:4d:28: 70:0b:3d:3e:17:a4:34:de:40:f9:a1:35:7b:30:8e:fa:d4:f8: d8:b4:7c:95:2d:9e:48:69:60:18:c7:1e:d5:00:4f:9f:06:0a: 9b:1f:c1:26:6c:c9:f4:71:ec:5a:04:02:75:fb:8f:2e:8d:8a: 84:58:97:3b:19:78:27:de:0c:12:77:fe:b4:5b:38:a1:d4:5a: 0a:18:a3:93:3f:d0:ca:4b:6a:96:35:3e:a6:af:36:4c:06:3a: 3a:66:3c:04:f1:51:3c:92:a2:aa:ab:d3:1f:4f:b8:42:64:e1: fb:b0:1c:e8:0a:54:9b:85:da:e6:56:b2:b5:13:12:6d:0d:f3: 1c:5d:cf:f1:56:06:7e:b2:c1:73:36:e7:f5:88:23:b1:19:0f: 87:9c:87:b2:95:07:a4:59:8c:62:c7:55:f7:12:37:32:59:c5: a6:01:98:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInS3FkIYMFrIu08WXSt/2eEipgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA4MjEyMTM2MzdaFw0yNTA4MjQyMjA0MzdaMDMxMTAvBgNV BAMTKDMyQUYxRjJEMEQwOUUxNUNERTU1MDA3QkQ2QzI4REI1Q0FFNDRENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lGc3e3HbPaCusnLBVW1NiLNN yVeJ3DLmUjmnC31uN1dLDsWsELqS98mmklu6A/X/xZa/eVeidnTkDDkjQ2y25rKO Lw5TAFSC8/uSFgXFCJsYzoiOFLV72iKB9qLdG9BhdTqvdcqhbQCodvtNHwCgyZZt zJejJVQ/0Ex8al+MlH4VqyyfCy9vZ9CaCeqs8qNsiJzrDjBKDEqFxS8iJfgzchKf 0jr9Ye32zeFia7xhWMwN6/UdvaKG14ZMCCiLUPvFe0luIXelbajGl5xAQ1HUMMbw Kq3/z75hvv71PVU2ysYdvA0XJM3fZB+5TSiEE2ZO0gPizcbFo7Aop2ley6jnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMq8fLQ0J4VzeVQB71sKNtcrkTW0wHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnQL+hakNWLyUUsRFFcRJypa9MJixFd9uqt xR43+46fPLg8mFy3t6FiyPBt0p44/9w3h9Kjgtb4Qk0NnowIS0ZVs6AN6xuBOJ8o if50DaTw5Tn5MP1fv1hNKHALPT4XpDTeQPmhNXswjvrU+Ni0fJUtnkhpYBjHHtUA T58GCpsfwSZsyfRx7FoEAnX7jy6NioRYlzsZeCfeDBJ3/rRbOKHUWgoYo5M/0MpL apY1PqavNkwGOjpmPATxUTySoqqr0x9PuEJk4fuwHOgKVJuF2uZWsrUTEm0N8xxd z/FWBn6ywXM25/WII7EZD4ech7KVB6RZjGLHVfcSNzJZxaYBmEk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:07 2025 by rpki-client