$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: 9kB+KTfKTVjsyJgVLHxj0YF7A1fWmjJppcYfTCiUx3c= Subject key identifier: 19:AE:C9:B6:A5:05:55:A6:29:01:FB:93:84:B0:ED:6C:6E:9A:EB:B4 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 7D35082F4407BBE846181FE1EA1AAC3A789D9BF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 011A Signing time: Sat 23 Aug 2025 05:10:40 +0000 Manifest this update: Sat 23 Aug 2025 05:05:40 +0000 Manifest next update: Tue 26 Aug 2025 10:18:40 +0000 Files and hashes: 1: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) 2: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: EBo1/3vgJKaix86zyKc1Nx0UcTB90DQ+4f85ZxvRVR4=) 3: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=) 4: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:35:08:2f:44:07:bb:e8:46:18:1f:e1:ea:1a:ac:3a:78:9d:9b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Aug 23 05:05:40 2025 GMT Not After : Aug 26 10:18:40 2025 GMT Subject: CN=19AEC9B6A50555A62901FB9384B0ED6C6E9AEBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3a:d0:32:34:4b:cd:d5:29:4e:3b:a7:c3:41: 46:58:96:3f:69:bb:e0:e6:f9:f4:23:5e:cb:b9:9d: 60:2f:3c:c2:d6:50:cd:ef:86:90:b4:b4:f1:57:91: ba:75:62:ce:24:08:77:5f:c4:37:2c:ff:41:26:f5: 82:5f:5e:67:7a:32:26:18:30:7c:a4:75:20:4b:7a: 1b:6d:5a:f4:52:02:31:9e:ac:aa:52:14:34:63:7d: 4e:7c:40:9b:4f:0a:f8:45:13:b6:f8:19:c5:0a:7c: 37:1e:34:5f:e7:5f:12:87:52:b8:87:93:c9:4f:f9: 2d:ac:b7:9f:dc:d1:1e:95:03:2f:f3:9b:3d:1d:e1: bf:51:37:81:78:91:01:41:83:c9:ce:86:b9:07:a0: b1:53:f0:ee:8e:3d:f4:82:01:c3:c8:46:58:3e:ad: cb:90:75:57:1f:9f:6d:39:98:7f:5b:e8:2c:e8:05: fe:fe:ed:47:f2:76:10:36:22:3e:a3:2d:2b:af:c3: 5c:26:ef:96:38:fa:36:c0:90:b6:ba:da:d0:b1:aa: ce:fa:f4:3d:2c:e6:e1:65:e8:bb:2a:0a:a6:ed:d4: 33:e1:ae:7e:25:6a:b6:7c:d7:54:34:f3:7f:f4:e9: 0d:98:18:0a:54:e8:96:ed:e5:97:2d:24:46:89:f6: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:C9:B6:A5:05:55:A6:29:01:FB:93:84:B0:ED:6C:6E:9A:EB:B4 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1a:a7:1b:56:86:7a:ff:2c:ba:6a:77:c2:e5:35:2b:8e:72: 68:98:84:30:e9:9b:0d:df:a2:e6:8d:8d:46:6a:c5:c8:ad:e5: dc:fa:22:05:49:28:9a:40:13:8e:38:97:73:7f:43:92:cb:db: a9:e0:0e:3a:6c:42:26:14:2d:64:10:9b:de:76:e8:54:bd:78: 48:a5:8b:70:10:fd:53:1b:96:9e:66:fb:11:be:08:d6:88:e4: 69:2e:78:be:2d:de:c1:00:f9:97:cc:45:08:53:8a:a8:26:dd: 2f:30:d9:da:f3:68:c8:4d:1a:0a:37:43:e3:da:94:a5:de:36: 66:39:00:e7:5e:2a:e0:62:e3:72:eb:89:36:56:a3:5d:14:4c: 5b:6f:12:34:6f:50:fd:0b:58:bd:d2:b2:82:c3:d0:ea:98:96: 3f:96:12:20:12:69:f3:a6:06:99:f0:2a:ac:8f:81:69:9f:74: 76:30:9a:04:a8:49:de:79:9a:21:ba:06:19:09:53:2c:c5:c5: 47:02:a2:9f:73:22:a7:42:62:08:ae:e7:f7:85:54:55:5e:96: 20:3a:f2:3a:9c:f8:56:40:bd:7a:f8:5d:b6:05:bc:35:d2:7a: 6e:b8:54:79:25:2b:ba:ca:0a:bb:d9:a0:e2:78:8d:41:d7:ca: 7c:b3:9c:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTUIL0QHu+hGGB/h6hqsOnidm/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA4MjMwNTA1NDBaFw0yNTA4MjYxMDE4NDBaMDMxMTAvBgNV BAMTKDE5QUVDOUI2QTUwNTU1QTYyOTAxRkI5Mzg0QjBFRDZDNkU5QUVCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOtAyNEvN1SlOO6fDQUZYlj9p u+Dm+fQjXsu5nWAvPMLWUM3vhpC0tPFXkbp1Ys4kCHdfxDcs/0Em9YJfXmd6MiYY MHykdSBLehttWvRSAjGerKpSFDRjfU58QJtPCvhFE7b4GcUKfDceNF/nXxKHUriH k8lP+S2st5/c0R6VAy/zmz0d4b9RN4F4kQFBg8nOhrkHoLFT8O6OPfSCAcPIRlg+ rcuQdVcfn205mH9b6CzoBf7+7UfydhA2Ij6jLSuvw1wm75Y4+jbAkLa62tCxqs76 9D0s5uFl6LsqCqbt1DPhrn4larZ811Q083/06Q2YGApU6Jbt5ZctJEaJ9oCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGa7JtqUFVaYpAfuThLDtbG6a67QwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIapxtWhnr/LLpqd8LlNSuOcmiYhDDpmw3f ouaNjUZqxcit5dz6IgVJKJpAE444l3N/Q5LL26ngDjpsQiYULWQQm9526FS9eEil i3AQ/VMblp5m+xG+CNaI5GkueL4t3sEA+ZfMRQhTiqgm3S8w2drzaMhNGgo3Q+Pa lKXeNmY5AOdeKuBi43LriTZWo10UTFtvEjRvUP0LWL3SsoLD0OqYlj+WEiASafOm BpnwKqyPgWmfdHYwmgSoSd55miG6BhkJUyzFxUcCop9zIqdCYgiu5/eFVFVeliA6 8jqc+FZAvXr4XbYFvDXSem64VHklK7rKCrvZoOJ4jUHXynyznJQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:15 2025 by rpki-client