$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: DS1DdHXo8uFOXbDLULyUEmaqLOMctLQbEkT5PySFtZo= Subject key identifier: E3:0C:0F:1B:9C:E0:C4:BF:04:C6:1D:76:E5:24:F8:3D:04:02:9D:36 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 73C0E0BF0F2831502435D79449B89D88F9155827 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0160 Signing time: Thu 21 Aug 2025 21:00:50 +0000 Manifest this update: Thu 21 Aug 2025 20:55:50 +0000 Manifest next update: Mon 25 Aug 2025 04:35:50 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 2: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 3: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: YG9pCEgbvDE+Cg4ZcsgrxgHaLgZKD+DoFydZOJZMvpQ=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c0:e0:bf:0f:28:31:50:24:35:d7:94:49:b8:9d:88:f9:15:58:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Aug 21 20:55:50 2025 GMT Not After : Aug 25 04:35:50 2025 GMT Subject: CN=E30C0F1B9CE0C4BF04C61D76E524F83D04029D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:6d:ad:59:f5:49:0e:3c:97:dc:32:dd:47: d3:d6:e7:f2:89:34:78:a2:b6:22:39:86:50:2b:9e: ee:13:85:f6:c6:1c:49:85:1f:95:8d:b1:f5:9d:54: 56:6f:e2:f9:35:13:da:20:70:86:31:f8:c4:f5:ab: af:93:90:20:fd:02:69:39:4f:93:d8:32:b1:34:a8: b4:22:d2:cc:b2:2b:64:12:d1:38:2f:21:e3:cc:5e: 63:3f:36:02:8c:6b:f2:8d:d4:e1:5c:be:25:67:a7: 44:a2:b4:46:65:6b:b2:99:07:60:94:ae:b7:23:01: bc:12:5f:c4:77:7c:6c:fd:02:aa:61:51:26:f4:2c: ea:1d:48:bb:12:45:5f:05:a0:aa:f6:94:b4:cd:9d: 50:ed:45:64:70:cb:e8:ff:61:7c:46:d9:5c:15:03: f3:8f:e7:17:00:74:01:57:2a:f2:82:50:42:53:8c: b7:8d:c4:5b:04:cd:67:c0:b8:f7:20:0f:56:62:01: 8f:c1:51:ad:b7:c7:55:44:bc:d1:c3:7a:1b:43:65: d6:27:92:db:33:e8:46:d4:fe:4b:ac:c3:0e:73:c2: 51:0b:d1:13:7d:44:4c:48:81:e2:a3:b0:49:6b:7f: 36:64:2f:9f:96:66:73:a9:79:c1:c1:4b:e2:ed:fc: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:0F:1B:9C:E0:C4:BF:04:C6:1D:76:E5:24:F8:3D:04:02:9D:36 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:0c:9e:9c:fd:d0:53:5a:b0:18:e9:2b:d7:f4:22:6a:06: 09:d7:b5:4c:10:9a:21:e2:ea:2d:95:17:78:f4:e8:22:79:2b: 1e:64:22:a6:2e:9f:43:63:01:2e:f4:4c:41:20:42:c6:61:e6: 60:af:87:a6:22:6c:64:10:13:4e:f3:a4:c5:4f:b5:ac:5e:e4: 96:49:d8:66:77:49:37:b2:03:5f:64:71:96:64:98:cc:19:b9: e3:86:ab:28:7c:d6:5e:53:bc:65:1b:6a:ee:1f:90:c7:4d:21: 16:38:cb:8c:7d:38:ca:cd:8c:4e:85:44:ac:49:fa:1d:0c:a0: 61:e5:c0:1d:48:04:a6:ca:93:6b:f4:53:fd:e6:10:f4:ab:32: 5e:d8:5b:f7:f0:59:e0:86:5d:11:f9:17:7f:f4:bf:78:b1:fd: 40:cb:36:34:4f:81:3c:84:b0:a2:96:9e:53:d5:50:b9:ad:3f: d4:d6:14:94:bd:1f:b6:9e:c8:bb:2a:64:a4:3e:37:e8:cd:b7: 9b:4e:c8:58:39:d1:a7:24:0b:e3:4a:50:4f:bb:83:e3:eb:ad: 3c:a2:45:96:66:46:aa:b2:f4:9b:1a:fb:3b:49:c2:df:d4:be: 07:05:82:d6:3a:47:cd:f5:d8:70:e6:a0:95:5e:12:9f:6f:77: cc:1c:af:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8Dgvw8oMVAkNdeUSbidiPkVWCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA4MjEyMDU1NTBaFw0yNTA4MjUwNDM1NTBaMDMxMTAvBgNV BAMTKEUzMEMwRjFCOUNFMEM0QkYwNEM2MUQ3NkU1MjRGODNEMDQwMjlEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRP22tWfVJDjyX3DLdR9PW5/KJ NHiitiI5hlArnu4ThfbGHEmFH5WNsfWdVFZv4vk1E9ogcIYx+MT1q6+TkCD9Amk5 T5PYMrE0qLQi0syyK2QS0TgvIePMXmM/NgKMa/KN1OFcviVnp0SitEZla7KZB2CU rrcjAbwSX8R3fGz9AqphUSb0LOodSLsSRV8FoKr2lLTNnVDtRWRwy+j/YXxG2VwV A/OP5xcAdAFXKvKCUEJTjLeNxFsEzWfAuPcgD1ZiAY/BUa23x1VEvNHDehtDZdYn ktsz6EbU/kusww5zwlEL0RN9RExIgeKjsElrfzZkL5+WZnOpecHBS+Lt/LxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4wwPG5zgxL8Exh125ST4PQQCnTYwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlADJ6c/dBTWrAY6SvX9CJqBgnXtUwQmiHi 6i2VF3j06CJ5Kx5kIqYun0NjAS70TEEgQsZh5mCvh6YibGQQE07zpMVPtaxe5JZJ 2GZ3STeyA19kcZZkmMwZueOGqyh81l5TvGUbau4fkMdNIRY4y4x9OMrNjE6FRKxJ +h0MoGHlwB1IBKbKk2v0U/3mEPSrMl7YW/fwWeCGXRH5F3/0v3ix/UDLNjRPgTyE sKKWnlPVULmtP9TWFJS9H7aeyLsqZKQ+N+jNt5tOyFg50ackC+NKUE+7g+PrrTyi RZZmRqqy9Jsa+ztJwt/UvgcFgtY6R8312HDmoJVeEp9vd8wcrzI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:27 2025 by rpki-client