$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: KN51F9PUfzTwOXLpyMPSatA9GoYomMT7KxkpIPv6zgs= Subject key identifier: 68:F8:EC:00:56:93:6F:8D:4A:87:E3:8E:7B:A4:BB:8E:BD:51:92:EA Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 0BCFBCA904761BE549811146EC18CF869884767F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 0101 Signing time: Sat 28 Jun 2025 10:10:39 +0000 Manifest this update: Sat 28 Jun 2025 10:05:39 +0000 Manifest next update: Tue 01 Jul 2025 21:14:39 +0000 Files and hashes: 1: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) 2: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: ri6zVldaGRpOaYEv3osVBPZnxBBgRNJX89+3uDFPHP8=) 3: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) 4: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: +tD66bAkj4m6W9HhuyFQkd+97CTZKOVhs8NAP09jt3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cf:bc:a9:04:76:1b:e5:49:81:11:46:ec:18:cf:86:98:84:76:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Jun 28 10:05:39 2025 GMT Not After : Jul 1 21:14:39 2025 GMT Subject: CN=68F8EC0056936F8D4A87E38E7BA4BB8EBD5192EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:12:f6:cd:ad:d8:f1:da:5d:00:08:83:e7: 64:77:53:95:b7:8d:2d:dc:b1:20:e5:60:b0:af:20: c7:fd:b4:2a:c1:9b:05:e6:02:0b:51:39:31:e0:50: 00:a0:7a:27:cd:29:0b:69:3e:24:56:84:c5:6d:88: 61:43:c4:ab:e9:11:4c:25:6f:5d:7c:c3:54:6f:33: 78:1d:08:7e:9d:d3:dc:c3:96:1d:d5:8c:2d:ad:5b: 16:3d:47:cc:be:d8:dc:c0:d5:a0:db:6a:d4:08:dd: 01:12:68:b4:d9:5a:7f:ff:cc:73:52:0d:29:5f:1f: bb:b7:f1:73:60:7c:b9:93:d6:af:05:d0:56:b5:52: 27:db:96:24:d0:a2:b1:e3:a5:c2:4a:53:02:73:1c: 43:56:c0:82:88:23:d7:d0:b9:95:12:3e:1e:c3:b6: 11:e8:53:97:31:18:46:c4:4a:a2:9c:16:2c:58:ee: 82:77:d0:1f:3f:1f:e7:b5:67:58:33:99:98:14:2e: ba:b0:1a:45:81:ae:c6:4b:00:69:07:52:59:9b:f4: 75:7c:eb:73:fc:29:82:4b:97:81:52:ae:e6:d9:51: 4b:0a:5a:25:9d:2d:57:ea:1e:b7:5e:5a:20:59:6c: eb:5b:ff:3b:e6:b3:0f:36:12:44:a7:68:4d:0c:dd: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:EC:00:56:93:6F:8D:4A:87:E3:8E:7B:A4:BB:8E:BD:51:92:EA X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:04:d0:bb:79:e8:71:c1:86:04:6c:24:58:7e:00:3b:d0:97: 8d:57:6f:ca:b8:52:63:a7:44:d3:10:e8:dd:33:96:8d:c5:85: dc:31:cf:f0:fb:95:f9:44:3e:c8:1e:cf:63:bb:28:d0:37:de: 79:08:85:72:aa:6e:d6:b1:78:d6:38:c7:25:57:6c:0c:15:ce: 4c:ef:f1:1d:0b:b7:d4:93:60:ee:25:a5:76:63:bd:36:90:e0: df:5c:41:ca:ff:96:35:93:30:c6:3d:1c:14:12:9c:18:c7:49: 10:96:ef:0e:34:27:41:7b:80:98:01:c1:aa:54:83:79:53:0e: d9:83:59:61:59:67:0f:0d:20:56:25:7b:bf:f8:e0:fc:b9:b2: 64:f8:d2:96:b9:d3:40:81:a2:68:05:e6:87:52:d9:94:c4:cc: a3:45:e2:d2:07:d5:ec:bd:aa:9c:7d:98:16:ba:05:d8:24:c7: 54:c1:d7:6f:9c:4d:9c:dd:b2:54:25:9a:42:8b:d2:ff:68:f6: 1f:d9:7c:44:85:6f:b3:86:69:1c:18:f0:3d:a8:3a:08:fd:33: 00:c4:c1:79:1f:73:fb:5a:e3:aa:52:4f:d8:f1:f8:44:89:f2: f1:e1:e9:c4:bf:09:21:a1:34:96:22:69:84:1f:34:18:12:0d: 89:c6:f7:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8+8qQR2G+VJgRFG7BjPhpiEdn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA2MjgxMDA1MzlaFw0yNTA3MDEyMTE0MzlaMDMxMTAvBgNV BAMTKDY4RjhFQzAwNTY5MzZGOEQ0QTg3RTM4RTdCQTRCQjhFQkQ1MTkyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuhL2za3Y8dpdAAiD52R3U5W3 jS3csSDlYLCvIMf9tCrBmwXmAgtROTHgUACgeifNKQtpPiRWhMVtiGFDxKvpEUwl b118w1RvM3gdCH6d09zDlh3VjC2tWxY9R8y+2NzA1aDbatQI3QESaLTZWn//zHNS DSlfH7u38XNgfLmT1q8F0Fa1UifbliTQorHjpcJKUwJzHENWwIKII9fQuZUSPh7D thHoU5cxGEbESqKcFixY7oJ30B8/H+e1Z1gzmZgULrqwGkWBrsZLAGkHUlmb9HV8 63P8KYJLl4FSrubZUUsKWiWdLVfqHrdeWiBZbOtb/zvmsw82EkSnaE0M3a8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPjsAFaTb41Kh+OOe6S7jr1RkuowHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUE0Lt56HHBhgRsJFh+ADvQl41Xb8q4UmOn RNMQ6N0zlo3Fhdwxz/D7lflEPsgez2O7KNA33nkIhXKqbtaxeNY4xyVXbAwVzkzv 8R0Lt9STYO4lpXZjvTaQ4N9cQcr/ljWTMMY9HBQSnBjHSRCW7w40J0F7gJgBwapU g3lTDtmDWWFZZw8NIFYle7/44Py5smT40pa500CBomgF5odS2ZTEzKNF4tIH1ey9 qpx9mBa6Bdgkx1TB12+cTZzdslQlmkKL0v9o9h/ZfESFb7OGaRwY8D2oOgj9MwDE wXkfc/ta46pST9jx+ESJ8vHh6cS/CSGhNJYiaYQfNBgSDYnG9/c= -----END CERTIFICATE-----Generated at Mon Jun 30 01:03:12 2025 by rpki-client