$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: N/oQJVBM/gFGDTr0/4Mg/2Olf1JlIV8Jx43kCCVvU9w= Subject key identifier: 80:34:4E:78:EF:3A:4C:B1:E6:04:E3:00:1E:0D:4E:CE:97:BB:0E:7C Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 66D19A7CC911B3CE5959C5CE4D074E4FC4622686 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: D9 Signing time: Mon 20 Oct 2025 13:51:35 +0000 Manifest this update: Mon 20 Oct 2025 13:46:35 +0000 Manifest next update: Thu 23 Oct 2025 18:57:35 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: wJstxvjbNZ0uh1vGYzrpQh0BI9oP8jAVMuJh24Bg9so=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d1:9a:7c:c9:11:b3:ce:59:59:c5:ce:4d:07:4e:4f:c4:62:26:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Oct 20 13:46:35 2025 GMT Not After : Oct 23 18:57:35 2025 GMT Subject: CN=80344E78EF3A4CB1E604E3001E0D4ECE97BB0E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:08:e0:52:ee:ef:a9:ff:e8:80:99:0c:9e: 98:39:80:91:d1:50:13:a0:c5:ed:5c:29:b1:83:74: 3a:0b:b3:c3:10:b5:5b:38:03:a6:47:9a:9a:98:d0: 04:8e:0e:9c:c5:6b:62:49:c5:66:2c:19:2b:03:b2: 0c:da:ae:60:9c:66:3a:1f:f3:29:fa:68:94:37:8a: d9:d9:af:73:e6:0a:97:cb:2a:da:c9:14:c8:47:69: f0:60:d7:59:3b:f2:8b:67:3a:c9:87:87:3f:a6:11: 3a:cd:d3:6d:4a:5e:3d:0e:d0:9c:b5:3e:63:0a:4a: 4b:47:de:60:21:2e:81:c2:32:a9:ae:53:36:8f:8c: cd:d0:bc:c1:06:bb:5b:23:4f:e0:2d:53:67:ff:62: c5:aa:7d:f2:cb:12:3e:13:96:00:8a:05:79:63:01: 94:e1:d8:47:77:5e:23:f1:bc:5a:98:96:33:8d:62: 23:72:a6:5a:ea:30:44:94:e2:d7:3d:b3:0c:77:c5: 36:ff:fb:ac:8f:75:c3:a1:06:9d:97:07:3d:b8:c9: 59:1b:1a:fc:5b:66:95:08:6a:ad:a4:f2:2e:b3:4c: 36:8b:fb:ca:70:e3:68:45:b9:e3:b1:08:20:86:08: 49:25:6d:98:fa:43:5b:fa:0f:fe:b7:ba:27:9d:ff: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:34:4E:78:EF:3A:4C:B1:E6:04:E3:00:1E:0D:4E:CE:97:BB:0E:7C X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:24:4a:5c:26:45:8c:10:76:a1:6d:00:7e:9b:1d:8e:17:54: 8a:58:0b:b5:07:57:3a:14:5d:24:b3:5e:9a:00:b4:8b:1a:c9: b3:f6:69:58:91:32:2d:86:b9:3a:2c:06:14:bd:1f:c2:bf:80: 3f:dc:c9:7e:32:11:4a:fc:6c:15:85:32:45:30:35:9c:f5:4c: a6:9e:64:a4:c2:05:d1:92:37:f2:eb:27:0c:a0:22:33:a8:96: 0b:f5:5e:a4:dc:e0:53:59:11:87:d3:34:31:0b:2a:18:4b:30: 8b:d6:ca:86:a4:8b:c7:61:a1:a7:5f:ac:71:dc:4d:7a:15:cd: 6b:0f:1d:9f:38:f5:f3:24:b9:fd:32:70:7e:7e:13:12:45:2b: 69:c2:d7:3b:83:be:59:a7:3c:53:50:28:2d:e5:a1:45:cf:01: d2:0f:b6:1a:ca:53:b5:16:f3:8b:8b:2e:e9:6b:af:7f:d3:d8: 23:f1:10:6d:40:0c:e4:8a:b8:78:30:e5:a0:fa:c7:c2:8a:d7: 94:51:29:16:13:a3:9e:3d:c2:b9:24:06:0c:9d:fa:ee:94:70: 55:10:78:94:0d:02:cb:df:8e:84:17:67:4d:e2:d3:a5:6f:0b: 26:e3:f7:89:8d:90:94:8c:a1:7c:3f:b7:77:5c:63:e1:43:20: b0:93:a2:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtGafMkRs85ZWcXOTQdOT8RiJoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTEwMjAxMzQ2MzVaFw0yNTEwMjMxODU3MzVaMDMxMTAvBgNV BAMTKDgwMzQ0RTc4RUYzQTRDQjFFNjA0RTMwMDFFMEQ0RUNFOTdCQjBFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglwjgUu7vqf/ogJkMnpg5gJHR UBOgxe1cKbGDdDoLs8MQtVs4A6ZHmpqY0ASODpzFa2JJxWYsGSsDsgzarmCcZjof 8yn6aJQ3itnZr3PmCpfLKtrJFMhHafBg11k78otnOsmHhz+mETrN021KXj0O0Jy1 PmMKSktH3mAhLoHCMqmuUzaPjM3QvMEGu1sjT+AtU2f/YsWqffLLEj4TlgCKBXlj AZTh2Ed3XiPxvFqYljONYiNyplrqMESU4tc9swx3xTb/+6yPdcOhBp2XBz24yVkb GvxbZpUIaq2k8i6zTDaL+8pw42hFueOxCCCGCEklbZj6Q1v6D/63uied/xrZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDROeO86TLHmBOMAHg1Ozpe7DnwwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKokSlwmRYwQdqFtAH6bHY4XVIpYC7UHVzoU XSSzXpoAtIsaybP2aViRMi2GuTosBhS9H8K/gD/cyX4yEUr8bBWFMkUwNZz1TKae ZKTCBdGSN/LrJwygIjOolgv1XqTc4FNZEYfTNDELKhhLMIvWyoaki8dhoadfrHHc TXoVzWsPHZ849fMkuf0ycH5+ExJFK2nC1zuDvlmnPFNQKC3loUXPAdIPthrKU7UW 84uLLulrr3/T2CPxEG1ADOSKuHgw5aD6x8KK15RRKRYTo549wrkkBgyd+u6UcFUQ eJQNAsvfjoQXZ03i06VvCybj94mNkJSMoXw/t3dcY+FDILCTogs= -----END CERTIFICATE-----Generated at Tue Oct 21 03:54:22 2025 by rpki-client