$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: 9P8ZZ9V0OqTKwtEySlH71T6cIhlbIvxRadsKmeN5lu0= Subject key identifier: F2:77:E3:26:C4:06:F4:BE:A0:F2:60:DC:B8:46:D9:30:15:12:44:C1 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 6247FA93D2A10286EDEF8B5AFDC06A0DB3FE1D58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0135 Signing time: Sat 23 Aug 2025 07:21:15 +0000 Manifest this update: Sat 23 Aug 2025 07:16:15 +0000 Manifest next update: Tue 26 Aug 2025 09:50:15 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: ZY5DARjaFA7dSMq+jl3chlRnKrLPBBmytR94er9xR0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:47:fa:93:d2:a1:02:86:ed:ef:8b:5a:fd:c0:6a:0d:b3:fe:1d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Aug 23 07:16:15 2025 GMT Not After : Aug 26 09:50:15 2025 GMT Subject: CN=F277E326C406F4BEA0F260DCB846D930151244C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:81:ee:16:2a:36:08:ae:c7:90:b7:53:81: f9:26:9d:15:4f:08:a0:22:36:4b:ad:fa:bb:5d:f2: a6:f7:6a:1f:0e:bb:1b:e8:4c:bb:13:2d:42:3e:20: bc:5a:4b:15:8b:23:9d:3a:e2:04:6f:f8:8b:6f:a0: 15:47:89:92:12:67:12:e9:0f:8e:63:36:d9:03:01: b6:53:f9:ad:3b:7e:79:dd:61:f5:f0:f2:ed:1d:31: 64:f9:26:63:60:fd:47:92:8a:2e:8a:0b:e2:2f:1a: ac:59:fd:b9:b9:97:0c:f1:11:8b:bd:46:f9:b5:d6: a7:be:9f:04:95:1f:ba:10:8e:9c:27:4a:9b:50:4f: 02:5a:c1:b5:c6:39:11:f9:62:db:c7:3b:cd:a1:0a: 6e:4c:80:16:62:5d:5f:8a:c5:19:7e:5f:cb:22:8c: 27:32:98:7b:8e:a8:18:92:5f:26:bf:87:1d:f2:e0: f3:63:fd:ee:a9:eb:05:3a:46:90:58:ff:6c:2c:3f: c4:f9:86:62:08:7d:6e:e9:69:82:90:ea:40:a1:86: 8a:ce:71:77:23:1b:66:db:14:33:cf:9d:36:cb:7b: 52:c9:e7:d5:d3:61:27:2d:57:ad:4d:8b:1a:cc:78: 1f:f1:e5:72:13:17:4b:7c:e3:ed:f1:86:ab:17:a5: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:77:E3:26:C4:06:F4:BE:A0:F2:60:DC:B8:46:D9:30:15:12:44:C1 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d9:0c:4b:cb:41:48:aa:12:21:e7:8f:ce:a7:b7:fd:e7:6c: 7b:f2:0d:4c:3d:9d:80:e3:92:ef:10:e5:a0:40:1f:a3:a8:a4: ec:dd:98:d5:16:08:20:a9:65:6b:9a:bb:17:f9:8e:74:99:87: 3c:fb:a4:12:c1:21:6d:66:76:a3:85:ee:af:b7:b8:d1:5b:74: 03:67:9f:24:e2:b0:81:4f:bd:65:18:7f:2b:0c:65:cb:ce:54: dd:91:bc:6d:01:98:50:46:a7:30:21:94:7d:9b:97:0a:50:f0: 77:81:b2:57:a7:73:0d:c1:8a:a9:b4:c3:04:21:ee:17:f3:d1: 84:48:7a:ff:3f:04:6d:93:38:2e:86:16:2d:9e:e2:e3:90:d5: bb:8e:95:75:ca:ec:76:8e:17:7f:93:e8:35:0a:94:87:1b:0e: a5:ac:0f:fc:b5:91:81:2a:05:8d:fc:87:51:df:70:92:d7:8d: f0:29:31:05:98:50:c5:a5:a8:c8:3a:a9:c4:98:33:c5:39:2f: 76:40:b2:11:eb:82:d2:5c:91:12:98:77:ce:a4:3f:e4:6c:58: fe:cd:26:51:73:7d:a6:d4:ef:ce:09:36:29:05:7d:c4:a7:6b: a6:8d:db:fd:f2:3a:65:ad:46:1e:46:86:d8:4e:5d:f5:a7:9f: 22:08:18:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkf6k9KhAobt74ta/cBqDbP+HVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA4MjMwNzE2MTVaFw0yNTA4MjYwOTUwMTVaMDMxMTAvBgNV BAMTKEYyNzdFMzI2QzQwNkY0QkVBMEYyNjBEQ0I4NDZEOTMwMTUxMjQ0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAYHuFio2CK7HkLdTgfkmnRVP CKAiNkut+rtd8qb3ah8OuxvoTLsTLUI+ILxaSxWLI5064gRv+ItvoBVHiZISZxLp D45jNtkDAbZT+a07fnndYfXw8u0dMWT5JmNg/UeSii6KC+IvGqxZ/bm5lwzxEYu9 Rvm11qe+nwSVH7oQjpwnSptQTwJawbXGORH5YtvHO82hCm5MgBZiXV+KxRl+X8si jCcymHuOqBiSXya/hx3y4PNj/e6p6wU6RpBY/2wsP8T5hmIIfW7paYKQ6kChhorO cXcjG2bbFDPPnTbLe1LJ59XTYSctV61NixrMeB/x5XITF0t84+3xhqsXpX87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nfjJsQG9L6g8mDcuEbZMBUSRMEwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfZDEvLQUiqEiHnj86nt/3nbHvyDUw9nYDj ku8Q5aBAH6OopOzdmNUWCCCpZWuauxf5jnSZhzz7pBLBIW1mdqOF7q+3uNFbdANn nyTisIFPvWUYfysMZcvOVN2RvG0BmFBGpzAhlH2blwpQ8HeBslencw3Biqm0wwQh 7hfz0YRIev8/BG2TOC6GFi2e4uOQ1buOlXXK7HaOF3+T6DUKlIcbDqWsD/y1kYEq BY38h1HfcJLXjfApMQWYUMWlqMg6qcSYM8U5L3ZAshHrgtJckRKYd86kP+RsWP7N JlFzfabU784JNikFfcSna6aN2/3yOmWtRh5GhthOXfWnnyIIGLI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:56 2025 by rpki-client