$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: Ar/xI5Qz8uCoB/32X+tvbIuns9hxlXfsp92Jq2LkSkE= Subject key identifier: 52:E8:6E:EB:BB:1A:37:56:5C:99:DB:25:BE:47:20:77:45:30:77:6D Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 579AF440E23D266D314F70D4BDCF021792564617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 0136 Signing time: Sat 18 Oct 2025 12:20:41 +0000 Manifest this update: Sat 18 Oct 2025 12:15:41 +0000 Manifest next update: Tue 21 Oct 2025 20:27:41 +0000 Files and hashes: 1: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: FMlAAb4oa/1SAW0ki6G5gnzHtyuWiQvqxUUC0qgRwT4=) 2: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: udxfPqIRp1VlzrX5n0/fiRSZ+nKJ2BZfVc8P92kVhEw=) 3: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=) 4: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) 5: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: mKN81nr9n+EB+Ar0JuYmAgcYDj9oQSxKmUu5BZ5rbmU=) 6: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: 1kyzi1r50RrQw1lh7O746Ykgi+j0sINCWFqBw58oQ98=) 7: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: D/EprNUPLF8eFv8U9U0vjYPYkF94lWCoPvdWdhBn6kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:f4:40:e2:3d:26:6d:31:4f:70:d4:bd:cf:02:17:92:56:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Oct 18 12:15:41 2025 GMT Not After : Oct 21 20:27:41 2025 GMT Subject: CN=52E86EEBBB1A37565C99DB25BE4720774530776D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:f0:c1:9a:ce:ea:33:09:27:01:4a:9b:c1: 17:cd:8c:83:9f:4b:76:76:cb:fa:56:84:ae:ca:5b: 77:5a:3d:3a:28:a9:73:e1:c9:44:fb:00:8d:0e:b2: f8:40:3d:4c:4a:6c:20:55:6e:8a:f6:55:98:cd:dc: 12:c9:44:1f:1c:64:f6:1f:ec:89:b5:f8:05:88:11: 5c:8d:e4:b5:aa:71:71:a7:82:a3:87:7f:12:ef:cf: 8a:6e:ce:e5:79:58:70:c7:71:1e:04:43:45:01:08: f2:16:22:8a:64:95:07:bb:ef:44:17:89:03:45:92: c7:03:83:78:2a:59:a6:99:f8:41:6a:b5:e6:f8:f0: f5:4b:2d:8b:db:f7:72:c9:ae:92:b9:4c:06:e3:f5: f9:da:0b:c1:87:7e:3d:e1:e6:53:40:68:5b:a7:2b: d3:13:ee:86:a8:53:ee:16:0e:87:61:31:46:a7:0b: 47:af:f0:14:ea:be:32:71:37:50:6d:bb:71:ba:eb: ab:ef:b2:27:0e:45:44:e8:f1:58:cb:bc:68:6d:a5: 1b:e1:1c:35:47:53:da:30:a0:c0:fc:a1:49:c1:f3: f8:e0:2d:f5:32:2a:72:23:54:9b:55:ed:e4:2f:31: 16:01:e2:8b:12:73:ba:90:b8:7d:e8:2c:36:0b:9e: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:6E:EB:BB:1A:37:56:5C:99:DB:25:BE:47:20:77:45:30:77:6D X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:df:27:6b:9f:6b:f0:9e:2b:25:07:e4:b1:0a:78:42:a6:a1: 69:60:44:c4:ea:8c:71:0e:e9:88:d5:c9:54:1e:0a:8a:47:0d: a6:96:56:7a:3a:35:da:78:44:b3:36:24:ce:a4:0f:a1:b1:95: 14:1f:5e:4f:0c:1f:b0:a3:ae:d1:20:9c:4b:17:b9:f9:e7:36: 72:41:61:b3:d6:99:81:9c:7f:42:e7:1a:9c:bf:7c:ef:3b:1d: 47:bf:21:31:80:c8:ad:03:25:00:3b:5f:35:19:ca:03:71:30: e4:8f:f0:1b:be:81:14:10:7e:d1:16:a7:31:24:12:05:4a:76: 60:b4:49:bd:b5:d0:6d:d2:dc:4e:ce:56:72:ac:1d:e1:19:4c: 75:b4:4a:b0:55:0e:a7:c5:06:2c:6f:5c:5c:c6:4a:b2:63:e6: a3:ac:77:e4:f5:a6:66:cf:1d:58:16:c3:22:5d:43:b9:c0:33: 29:bf:bf:e4:b9:23:67:7a:f9:6c:f4:23:ca:4e:59:f1:b7:96: 5f:c9:14:0b:a2:67:fa:8e:f9:88:51:c1:e7:af:55:03:2c:71: bc:e5:7d:a7:cc:b5:04:a1:e9:89:be:59:bd:f5:3f:29:7c:4d: f9:46:7a:d4:f7:15:16:8f:1b:4b:a2:dc:d9:60:2c:01:ad:db: 7b:11:c9:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5r0QOI9Jm0xT3DUvc8CF5JWRhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTEwMTgxMjE1NDFaFw0yNTEwMjEyMDI3NDFaMDMxMTAvBgNV BAMTKDUyRTg2RUVCQkIxQTM3NTY1Qzk5REIyNUJFNDcyMDc3NDUzMDc3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5fDBms7qMwknAUqbwRfNjIOf S3Z2y/pWhK7KW3daPTooqXPhyUT7AI0OsvhAPUxKbCBVbor2VZjN3BLJRB8cZPYf 7Im1+AWIEVyN5LWqcXGngqOHfxLvz4puzuV5WHDHcR4EQ0UBCPIWIopklQe770QX iQNFkscDg3gqWaaZ+EFqteb48PVLLYvb93LJrpK5TAbj9fnaC8GHfj3h5lNAaFun K9MT7oaoU+4WDodhMUanC0ev8BTqvjJxN1Btu3G666vvsicORUTo8VjLvGhtpRvh HDVHU9owoMD8oUnB8/jgLfUyKnIjVJtV7eQvMRYB4osSc7qQuH3oLDYLnpKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuhu67saN1Zcmdslvkcgd0Uwd20wHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHfJ2ufa/CeKyUH5LEKeEKmoWlgRMTqjHEO 6YjVyVQeCopHDaaWVno6Ndp4RLM2JM6kD6GxlRQfXk8MH7CjrtEgnEsXufnnNnJB YbPWmYGcf0LnGpy/fO87HUe/ITGAyK0DJQA7XzUZygNxMOSP8Bu+gRQQftEWpzEk EgVKdmC0Sb210G3S3E7OVnKsHeEZTHW0SrBVDqfFBixvXFzGSrJj5qOsd+T1pmbP HVgWwyJdQ7nAMym/v+S5I2d6+Wz0I8pOWfG3ll/JFAuiZ/qO+YhRweevVQMscbzl fafMtQSh6Ym+Wb31Pyl8TflGetT3FRaPG0ui3NlgLAGt23sRyfw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:45 2025 by rpki-client