$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: BWmD4eNAajkgVM8m7occr/Gpr3ebH/TEAA7RMYWCvqw= Subject key identifier: 86:4B:B8:00:CA:96:6B:2A:23:A8:51:01:A6:07:31:08:F7:0E:66:3A Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 3AFBBAE14A38DC2A9F488B65AF469D6D3B3BDF51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0148 Signing time: Sun 29 Jun 2025 17:20:49 +0000 Manifest this update: Sun 29 Jun 2025 17:15:49 +0000 Manifest next update: Wed 02 Jul 2025 19:59:49 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: 37ifOHv5SMSjDtddqod+zUhuci7FaHmE10ecrdsd+rU=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fb:ba:e1:4a:38:dc:2a:9f:48:8b:65:af:46:9d:6d:3b:3b:df:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Jun 29 17:15:49 2025 GMT Not After : Jul 2 19:59:49 2025 GMT Subject: CN=864BB800CA966B2A23A85101A6073108F70E663A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:38:7c:e0:8a:63:5f:4e:bf:13:9d:fb:4f: cd:ee:ab:62:05:00:dd:72:6b:c6:fb:1c:4d:58:eb: 00:66:49:95:72:aa:a3:81:ee:4d:14:b3:0e:a1:3a: e0:9a:8a:e8:34:23:11:ba:7b:45:89:2c:74:f5:ea: 59:30:55:c9:da:13:7b:b1:70:79:c9:a3:cb:36:ed: 3e:b0:cc:6a:4c:85:a3:05:e7:34:11:b1:58:2a:c2: 46:1b:44:3b:e5:fd:bd:38:0c:7c:49:74:cf:2c:51: 7a:56:26:ef:d2:fb:cc:de:fc:83:24:d1:d6:72:ea: 41:28:9b:1b:5e:56:8e:4e:9b:ed:20:6a:7c:25:89: a1:fc:6b:27:79:65:72:63:af:ba:fb:f1:50:e3:a3: fe:13:1b:14:e7:0d:59:e8:f9:1e:c3:2c:1a:1e:da: cc:fa:e9:ea:c6:89:d0:fa:ee:c1:96:c9:79:61:a2: 65:41:d0:d1:44:ee:1d:92:ef:75:e6:b5:4c:a2:8b: 0e:48:4c:af:fe:a7:d2:d0:90:7d:97:77:6b:f3:d1: b2:55:79:66:49:51:8a:62:3f:69:cb:d9:d6:9f:58: af:5a:57:0f:c2:a6:e1:28:42:dd:bd:2c:3a:81:c1: e9:0b:95:44:95:66:4a:cf:d3:98:be:d1:85:96:d4: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4B:B8:00:CA:96:6B:2A:23:A8:51:01:A6:07:31:08:F7:0E:66:3A X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:99:0c:4d:63:a9:82:e8:f2:56:2a:0c:f5:b2:83:21:fe:0f: ce:f1:00:f1:5f:02:96:9b:b8:6b:3b:ad:ab:a1:8d:a1:47:e4: 11:d6:d7:25:ac:c8:a2:3a:ad:9c:96:9d:8b:19:1e:ef:75:38: 2d:e7:e8:55:2f:a2:c4:25:ff:52:49:58:4f:fb:40:82:85:7f: 41:c7:3c:f6:d6:2c:99:7f:59:91:c4:80:78:27:3f:81:03:84: 38:a7:d2:fa:1f:47:bf:89:b2:b7:e8:92:4c:82:c4:09:23:10: a4:ec:c8:e6:80:be:74:46:66:08:01:ee:ec:56:73:ad:64:30: 53:cf:b9:65:dc:fa:dd:57:6f:84:90:4e:5c:2e:47:53:93:90: 95:cb:e5:fa:8f:f1:f5:d9:23:36:63:cd:8b:02:c2:1e:e9:9f: 07:31:d5:83:4b:bb:00:fb:c4:2d:36:a1:4d:d6:8b:3b:cc:cf: 0a:f9:a1:bd:88:e9:32:24:f4:bd:56:43:24:5d:83:15:b0:08: 0e:74:ec:09:cf:d6:57:11:6a:25:bc:13:f1:c8:bb:6c:11:88: 52:6f:23:36:ae:2e:ff:a6:51:00:90:b1:91:6d:3b:db:a9:f3: 94:51:e9:46:a3:7b:17:2b:22:d2:e3:71:ef:95:09:12:f6:cd: 26:97:31:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvu64Uo43CqfSItlr0adbTs731EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA2MjkxNzE1NDlaFw0yNTA3MDIxOTU5NDlaMDMxMTAvBgNV BAMTKDg2NEJCODAwQ0E5NjZCMkEyM0E4NTEwMUE2MDczMTA4RjcwRTY2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnDh84IpjX06/E537T83uq2IF AN1ya8b7HE1Y6wBmSZVyqqOB7k0Usw6hOuCaiug0IxG6e0WJLHT16lkwVcnaE3ux cHnJo8s27T6wzGpMhaMF5zQRsVgqwkYbRDvl/b04DHxJdM8sUXpWJu/S+8ze/IMk 0dZy6kEomxteVo5Om+0ganwliaH8ayd5ZXJjr7r78VDjo/4TGxTnDVno+R7DLBoe 2sz66erGidD67sGWyXlhomVB0NFE7h2S73XmtUyiiw5ITK/+p9LQkH2Xd2vz0bJV eWZJUYpiP2nL2dafWK9aVw/CpuEoQt29LDqBwekLlUSVZkrP05i+0YWW1GH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhku4AMqWayojqFEBpgcxCPcOZjowHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqZDE1jqYLo8lYqDPWygyH+D87xAPFfApab uGs7rauhjaFH5BHW1yWsyKI6rZyWnYsZHu91OC3n6FUvosQl/1JJWE/7QIKFf0HH PPbWLJl/WZHEgHgnP4EDhDin0vofR7+JsrfokkyCxAkjEKTsyOaAvnRGZggB7uxW c61kMFPPuWXc+t1Xb4SQTlwuR1OTkJXL5fqP8fXZIzZjzYsCwh7pnwcx1YNLuwD7 xC02oU3WizvMzwr5ob2I6TIk9L1WQyRdgxWwCA507AnP1lcRaiW8E/HIu2wRiFJv IzauLv+mUQCQsZFtO9up85RR6UajexcrItLjce+VCRL2zSaXMTk= -----END CERTIFICATE-----Generated at Mon Jun 30 10:40:19 2025 by rpki-client