$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: A7PigQsa5M4utvpmIbhMsRS6Ezja7woBLzH90LqX434= Subject key identifier: C7:E5:A0:E0:47:FC:18:55:D8:E9:2D:5D:D5:D3:22:76:5C:E8:2C:A0 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 659CE698C2C687AFCC3812BA9E89842E932D8DCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 01BA Signing time: Fri 22 Aug 2025 18:32:21 +0000 Manifest this update: Fri 22 Aug 2025 18:27:21 +0000 Manifest next update: Mon 25 Aug 2025 19:05:21 +0000 Files and hashes: 1: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: Tjnj3S55UZJKnR7SnXk8azBbwLZq/5TJS2DPS4Ka2sk=) 2: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: 8bvQvtlBe7JNMYj2xQaIWZUm48/28VwMFP7AYXq8A30=) 3: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: UR0TWMWgXqudddMKhRSP7Y5sJnog+ckXeMzXSamPQ84=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: BxFni4q37vbE3vebazdh4uiofig0FsvOhDD9e85jKcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9c:e6:98:c2:c6:87:af:cc:38:12:ba:9e:89:84:2e:93:2d:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Aug 22 18:27:21 2025 GMT Not After : Aug 25 19:05:21 2025 GMT Subject: CN=C7E5A0E047FC1855D8E92D5DD5D322765CE82CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:17:87:5b:fc:79:30:95:59:ea:70:b9:50: 86:ee:8d:8a:b0:65:6d:a0:e8:8f:cb:29:60:4a:6a: 15:c1:22:20:0e:d6:20:13:cd:95:18:36:9a:d5:05: 65:0d:4f:82:37:47:75:d6:13:3a:6a:c2:e1:d8:a9: c7:80:d6:99:35:91:ca:76:bb:3c:39:97:c3:87:c0: 16:b4:62:7c:d7:34:59:ef:0b:7b:d9:e8:6d:d5:05: 35:41:ed:17:c5:cc:53:57:5a:5e:23:35:11:00:16: 66:bc:67:90:14:2c:be:4a:75:70:8d:c9:05:f1:8a: 88:c7:86:a4:81:4d:79:53:43:87:49:d4:59:f0:8a: 73:2a:31:2e:0e:2f:fe:60:da:4c:9b:43:f8:ab:c9: d1:87:21:b2:d4:7a:c9:ae:ab:e7:49:0f:3d:92:84: a4:eb:9a:8d:8c:05:48:87:73:64:5e:3a:6b:ff:55: bc:a5:8a:9a:f9:db:08:43:73:ba:3e:e4:64:71:f4: 56:82:f5:81:31:12:64:52:40:30:d9:ee:fb:3c:44: e8:ea:8a:c5:bd:72:b0:f9:e8:d3:71:fe:a2:c0:7b: bc:f4:1c:70:18:55:dd:8d:52:bd:34:be:0a:d7:c1: 24:ab:7d:b0:8f:d1:6c:c4:07:76:c9:c4:9e:01:47: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E5:A0:E0:47:FC:18:55:D8:E9:2D:5D:D5:D3:22:76:5C:E8:2C:A0 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5c:ab:02:a4:ea:24:1a:47:ee:5b:a2:98:cc:99:d5:aa:21: cd:4a:35:60:47:38:f5:66:77:ab:65:f2:58:d0:75:6c:f1:d1: 1c:11:04:47:ac:d1:15:c8:5b:d7:bf:42:23:9f:00:66:f5:4b: 44:06:6e:00:ec:0d:39:4a:53:13:91:12:7a:89:be:28:78:ba: 66:a0:cd:e6:61:ec:1f:cd:88:ed:4b:4a:91:e4:2f:b1:0e:ef: 8a:b1:32:d5:99:69:91:21:c4:74:e6:47:11:18:fb:86:9e:c1: 2e:98:12:0f:85:5f:7b:3e:08:f5:04:4f:f0:c2:4d:5e:5c:c8: c6:a2:c1:12:11:3f:c5:7b:3b:6d:6c:ce:b5:5b:8a:0e:06:f6: d2:a6:6d:f9:81:9d:e6:1d:fe:f9:15:06:21:ac:6d:39:13:7a: 0b:e8:31:40:a8:37:5d:2a:3c:0d:9e:9d:f8:4e:14:f8:c3:b9: 1d:e7:75:7b:a3:ff:02:37:af:b9:1f:a8:6b:5f:e7:bc:d8:0f: 3c:78:9c:8e:60:46:5b:bd:34:e1:0f:a4:22:00:fb:bf:73:47: 97:a9:81:ee:5b:76:a9:0d:d2:59:9e:a8:b5:f6:b0:92:c8:3c: 93:b3:d1:81:8f:a4:18:62:40:56:ed:75:e7:ab:67:36:35:cf: 84:dc:db:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZzmmMLGh6/MOBK6nomELpMtjc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTA4MjIxODI3MjFaFw0yNTA4MjUxOTA1MjFaMDMxMTAvBgNV BAMTKEM3RTVBMEUwNDdGQzE4NTVEOEU5MkQ1REQ1RDMyMjc2NUNFODJDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2BeHW/x5MJVZ6nC5UIbujYqw ZW2g6I/LKWBKahXBIiAO1iATzZUYNprVBWUNT4I3R3XWEzpqwuHYqceA1pk1kcp2 uzw5l8OHwBa0YnzXNFnvC3vZ6G3VBTVB7RfFzFNXWl4jNREAFma8Z5AULL5KdXCN yQXxiojHhqSBTXlTQ4dJ1FnwinMqMS4OL/5g2kybQ/irydGHIbLUesmuq+dJDz2S hKTrmo2MBUiHc2ReOmv/Vbylipr52whDc7o+5GRx9FaC9YExEmRSQDDZ7vs8ROjq isW9crD56NNx/qLAe7z0HHAYVd2NUr00vgrXwSSrfbCP0WzEB3bJxJ4BR79jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+Wg4Ef8GFXY6S1d1dMidlzoLKAwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENcqwKk6iQaR+5bopjMmdWqIc1KNWBHOPVm d6tl8ljQdWzx0RwRBEes0RXIW9e/QiOfAGb1S0QGbgDsDTlKUxOREnqJvih4umag zeZh7B/NiO1LSpHkL7EO74qxMtWZaZEhxHTmRxEY+4aewS6YEg+FX3s+CPUET/DC TV5cyMaiwRIRP8V7O21szrVbig4G9tKmbfmBneYd/vkVBiGsbTkTegvoMUCoN10q PA2enfhOFPjDuR3ndXuj/wI3r7kfqGtf57zYDzx4nI5gRlu9NOEPpCIA+79zR5ep ge5bdqkN0lmeqLX2sJLIPJOz0YGPpBhiQFbtdeerZzY1z4Tc230= -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:39 2025 by rpki-client