$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: r0UWJjg9NvZEiU41sON0z6hilaoPV5+aOxQCx035uH8= Subject key identifier: 79:4F:E5:E3:41:68:3F:B6:70:40:8C:95:71:E3:BD:E6:87:30:CB:AE Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 1B9E16AAC311BF4C8DC5833ACD71B25673D1B021 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 017A Signing time: Sat 18 Oct 2025 16:50:50 +0000 Manifest this update: Sat 18 Oct 2025 16:45:50 +0000 Manifest next update: Wed 22 Oct 2025 04:42:50 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 2: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: kriyoMos9Lr3oUz5Nh91ORoy/bYiGQrh7pgf1Pf5VMU=) 3: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) 4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9e:16:aa:c3:11:bf:4c:8d:c5:83:3a:cd:71:b2:56:73:d1:b0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Oct 18 16:45:50 2025 GMT Not After : Oct 22 04:42:50 2025 GMT Subject: CN=794FE5E341683FB670408C9571E3BDE68730CBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:fd:d6:3f:3f:52:ee:bc:de:1c:f4:2a:8f: 6c:e8:91:fe:c8:73:59:51:63:4b:19:3c:37:b4:88: 20:9e:5a:34:6e:07:8f:30:0f:5d:09:d0:54:29:83: a4:c5:fd:22:7e:7a:e3:0c:66:8f:9b:fe:7c:65:5e: e7:01:c9:5b:94:be:eb:d9:a5:ab:30:31:be:63:a8: 11:26:5d:5b:4f:06:a7:c9:3f:09:29:dc:b5:3c:56: d8:99:9e:d9:d5:83:26:b0:e8:19:f7:86:b4:3f:05: c6:d0:39:fa:86:9f:52:ec:db:56:d7:e8:dd:48:d0: ea:a3:3e:72:fe:79:ee:18:cc:b8:83:73:3e:ab:2c: 52:73:10:a2:e4:76:85:d2:9b:30:ca:10:27:86:c7: de:08:55:c8:4b:7c:c7:a7:13:5c:8f:f0:4b:70:9b: d2:c3:72:8b:55:ab:04:7a:e7:65:d9:d2:29:55:4a: b8:c4:91:46:2f:10:0f:9e:d5:64:33:bd:37:df:11: 63:11:8d:8b:06:38:ec:21:ee:56:1b:d1:fe:a6:6e: 80:19:7c:84:95:0f:04:c6:0f:16:90:40:62:ec:ad: a5:64:4d:9b:11:d5:07:04:05:05:b9:09:e5:84:b1: 43:37:4b:ce:ad:50:05:c8:1c:dd:8f:98:7d:3b:77: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:E5:E3:41:68:3F:B6:70:40:8C:95:71:E3:BD:E6:87:30:CB:AE X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d7:39:3c:df:f6:80:b3:14:20:e6:d9:32:16:f4:c4:12:fd: 03:c2:bf:63:f4:69:92:4e:cb:04:8d:b6:60:56:fc:9c:c2:f8: ec:d6:9b:50:ca:eb:5b:60:1f:da:7d:dc:87:8c:d3:f0:43:43: 3f:08:e0:4a:b0:81:b2:c4:90:6f:3a:5d:1f:29:62:ab:de:a7: ef:ce:fe:eb:0b:6f:cd:ae:bd:78:30:12:2e:1e:cf:90:d6:bc: 9f:78:77:91:b1:30:a9:a8:75:64:69:7a:87:a3:c5:b5:c6:44: a4:50:5a:2a:e9:dd:4a:56:a1:7e:e5:12:1b:f5:d3:6c:4e:5b: 6d:9c:25:63:78:bb:2c:8e:71:e9:38:29:d2:fe:ec:37:ad:d4: c9:4c:6c:b6:43:a8:a1:0f:78:84:b6:37:99:14:3f:fb:03:47: 70:93:f5:c6:1e:44:84:cb:ed:a1:44:05:8c:2b:88:48:a1:42: 77:44:34:48:47:5b:d0:a0:7d:14:75:f9:52:52:08:a6:c8:45: 02:44:24:9f:ec:f7:7e:b7:66:09:78:58:fc:d8:a1:33:97:13: 64:cc:bf:f9:f8:f0:6a:42:26:50:eb:f2:31:9e:fe:6b:2b:2f: 81:c9:9c:f0:cc:7f:55:7b:2c:ed:d7:44:43:dd:81:49:9f:7c: 4f:ad:99:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG54WqsMRv0yNxYM6zXGyVnPRsCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTEwMTgxNjQ1NTBaFw0yNTEwMjIwNDQyNTBaMDMxMTAvBgNV BAMTKDc5NEZFNUUzNDE2ODNGQjY3MDQwOEM5NTcxRTNCREU2ODczMENCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7v3WPz9S7rzeHPQqj2zokf7I c1lRY0sZPDe0iCCeWjRuB48wD10J0FQpg6TF/SJ+euMMZo+b/nxlXucByVuUvuvZ paswMb5jqBEmXVtPBqfJPwkp3LU8VtiZntnVgyaw6Bn3hrQ/BcbQOfqGn1Ls21bX 6N1I0OqjPnL+ee4YzLiDcz6rLFJzEKLkdoXSmzDKECeGx94IVchLfMenE1yP8Etw m9LDcotVqwR652XZ0ilVSrjEkUYvEA+e1WQzvTffEWMRjYsGOOwh7lYb0f6mboAZ fISVDwTGDxaQQGLsraVkTZsR1QcEBQW5CeWEsUM3S86tUAXIHN2PmH07dxBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeU/l40FoP7ZwQIyVceO95ocwy64wHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/XOTzf9oCzFCDm2TIW9MQS/QPCv2P0aZJO ywSNtmBW/JzC+OzWm1DK61tgH9p93IeM0/BDQz8I4EqwgbLEkG86XR8pYqvep+/O /usLb82uvXgwEi4ez5DWvJ94d5GxMKmodWRpeoejxbXGRKRQWirp3UpWoX7lEhv1 02xOW22cJWN4uyyOcek4KdL+7Det1MlMbLZDqKEPeIS2N5kUP/sDR3CT9cYeRITL 7aFEBYwriEihQndENEhHW9CgfRR1+VJSCKbIRQJEJJ/s9363Zgl4WPzYoTOXE2TM v/n48GpCJlDr8jGe/msrL4HJnPDMf1V7LO3XREPdgUmffE+tmWY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:59 2025 by rpki-client