$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: v/NVz0KH5IfqPdegjAI5YxXd4GEwZhUZI1lzbp377BE= Subject key identifier: 86:05:0B:F9:EF:95:64:95:95:E5:57:3B:EC:7A:05:A6:C6:B7:41:19 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 3F8054F8ABE8471947684E0FD7E61AD9CD7CABA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04A9 Signing time: Thu 03 Jul 2025 11:51:50 +0000 Manifest this update: Thu 03 Jul 2025 11:46:50 +0000 Manifest next update: Sun 06 Jul 2025 14:59:50 +0000 Files and hashes: 1: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: Sv5+dMPwNKNRJQdaNch52pi/y/gtlM6wPg9HidMGHmE=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: heHR6tDdyfcDcl0ayUlIY67JEF5cb4FokE1+/fGTE2c=) 3: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: uKza+NILBuHQRPIg5LCtzuv9seKbjSu4TPPeAiNkPk4=) 4: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: T33iHyaUeCsJrE4FvxXsTgHwlnH7ASgaME31z70pr4A=) 5: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: 5QbcPGy/M7njxIhRGnhFNOXKsrYeYIRjfqDpCIGPyAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 14:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:80:54:f8:ab:e8:47:19:47:68:4e:0f:d7:e6:1a:d9:cd:7c:ab:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Jul 3 11:46:50 2025 GMT Not After : Jul 6 14:59:50 2025 GMT Subject: CN=86050BF9EF95649595E5573BEC7A05A6C6B74119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:c9:b7:09:b9:5d:17:74:f2:30:6b:2a:fe: 9c:b2:87:b3:47:11:6b:f5:86:38:5c:d2:2c:d2:6a: a1:6e:99:07:da:63:5c:65:4d:a2:de:49:bf:7a:07: a8:6c:35:43:b0:2f:52:fc:5d:0d:10:b9:ee:bb:72: 6b:63:93:27:5d:ab:9f:35:97:b7:b6:d1:1a:ac:d1: b4:91:79:bc:cd:4f:e4:f1:0e:a2:89:e3:50:cd:a8: d0:e0:ac:d4:ed:49:fa:73:27:b2:49:3e:01:7e:ae: d4:96:bc:c7:01:6c:00:23:c0:dc:01:27:c7:d3:c0: 6d:aa:36:31:a6:db:12:d6:2b:4c:c6:9f:5b:ae:7d: 82:47:b8:a2:fe:b6:98:85:1c:1d:a7:78:2f:0b:53: b5:8d:e0:cf:d2:5c:62:54:1c:e9:4c:ca:67:17:23: 1c:7b:bc:6e:21:3c:8b:1a:53:88:24:02:7a:32:1d: b2:cd:24:b6:5c:8f:51:10:cc:fd:c7:08:ba:70:9f: 08:c5:21:6e:06:39:c3:f4:96:bf:27:91:d7:d7:c6: 99:29:a6:3d:7e:77:69:de:45:d1:17:8e:5c:79:ce: f1:10:d9:3f:1e:20:17:ce:41:8b:96:0f:32:81:5f: fc:77:d6:6b:d0:05:12:e1:44:a0:7c:03:f5:c4:01: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:0B:F9:EF:95:64:95:95:E5:57:3B:EC:7A:05:A6:C6:B7:41:19 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:21:d6:79:70:90:58:41:d9:ed:65:99:22:77:16:fb:00:ac: cc:9b:04:9a:10:d2:3e:26:30:53:6e:c9:f2:89:6b:d0:c2:c8: 9a:ca:11:ec:27:97:b2:01:42:0e:dc:79:0f:ff:ff:ce:23:58: b0:80:74:04:fe:3e:e6:2b:e0:7e:4f:76:19:d2:88:fd:cf:cf: af:40:85:f8:0d:a0:c0:c6:d0:70:cb:66:de:ed:f5:ec:0d:3f: a3:a4:36:cd:19:9f:f7:50:26:03:70:d5:57:99:60:8e:3a:63: 31:7e:d9:19:e1:9e:79:54:f0:46:b9:15:72:31:db:e8:ad:33: f9:d3:92:41:08:0f:55:e9:98:e8:43:21:13:ae:4d:62:e2:87: c6:8f:9a:a0:42:68:59:b0:e7:ab:70:dd:3e:cd:c5:77:f4:ce: 61:a0:3d:a3:15:2b:36:5d:97:27:29:55:2a:b9:33:e9:36:d8: 57:e6:ec:fa:c7:51:4f:87:39:79:f3:1a:b5:a3:a5:6f:da:da: 87:dc:e6:6e:69:7c:b5:05:c1:0d:8f:a2:c8:58:89:4d:6c:fc: 39:39:b4:f6:37:23:81:b8:69:a7:72:12:1c:ad:4d:df:86:e5: 24:e6:66:63:8e:b2:13:42:c2:74:09:2f:af:cc:5e:e6:9e:3b: b2:55:b9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4BU+KvoRxlHaE4P1+Ya2c18q6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTA3MDMxMTQ2NTBaFw0yNTA3MDYxNDU5NTBaMDMxMTAvBgNV BAMTKDg2MDUwQkY5RUY5NTY0OTU5NUU1NTczQkVDN0EwNUE2QzZCNzQxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEu8m3CbldF3TyMGsq/pyyh7NH EWv1hjhc0izSaqFumQfaY1xlTaLeSb96B6hsNUOwL1L8XQ0Que67cmtjkyddq581 l7e20Rqs0bSRebzNT+TxDqKJ41DNqNDgrNTtSfpzJ7JJPgF+rtSWvMcBbAAjwNwB J8fTwG2qNjGm2xLWK0zGn1uufYJHuKL+tpiFHB2neC8LU7WN4M/SXGJUHOlMymcX Ixx7vG4hPIsaU4gkAnoyHbLNJLZcj1EQzP3HCLpwnwjFIW4GOcP0lr8nkdfXxpkp pj1+d2neRdEXjlx5zvEQ2T8eIBfOQYuWDzKBX/x31mvQBRLhRKB8A/XEAb8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgUL+e+VZJWV5Vc77HoFpsa3QRkwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYh1nlwkFhB2e1lmSJ3FvsArMybBJoQ0j4m MFNuyfKJa9DCyJrKEewnl7IBQg7ceQ///84jWLCAdAT+PuYr4H5PdhnSiP3Pz69A hfgNoMDG0HDLZt7t9ewNP6OkNs0Zn/dQJgNw1VeZYI46YzF+2RnhnnlU8Ea5FXIx 2+itM/nTkkEID1XpmOhDIROuTWLih8aPmqBCaFmw56tw3T7NxXf0zmGgPaMVKzZd lycpVSq5M+k22Ffm7PrHUU+HOXnzGrWjpW/a2ofc5m5pfLUFwQ2PoshYiU1s/Dk5 tPY3I4G4aadyEhytTd+G5STmZmOOshNCwnQJL6/MXuaeO7JVuSU= -----END CERTIFICATE-----Generated at Thu Jul 3 16:44:55 2025 by rpki-client