$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: DX5xDmWS7W+vVOHkgpyyqRZuhSIMmmmyUpvkPe+I+QU= Subject key identifier: 6C:CD:4B:AF:C4:03:F3:84:C9:1E:31:EF:BA:5C:F7:9E:D2:F5:9D:4D Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 70D891A5C8BCA51A3ECC25B7FDA7BFEB5D760FEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: A9 Signing time: Thu 03 Jul 2025 03:41:32 +0000 Manifest this update: Thu 03 Jul 2025 03:36:32 +0000 Manifest next update: Sun 06 Jul 2025 14:57:32 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: ZQW1ylm0Qvcrj1PS9EVNk2jTnHPf1F9USUHWCRsXbyQ=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d8:91:a5:c8:bc:a5:1a:3e:cc:25:b7:fd:a7:bf:eb:5d:76:0f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Jul 3 03:36:32 2025 GMT Not After : Jul 6 14:57:32 2025 GMT Subject: CN=6CCD4BAFC403F384C91E31EFBA5CF79ED2F59D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:e7:fd:50:cd:01:c7:b8:92:8d:1d:43:58: 25:8e:73:62:c8:69:7c:ae:89:3d:ac:0a:97:5e:f3: b4:b8:25:75:ad:7b:1d:b2:be:0b:bf:eb:d3:41:56: 51:c5:4d:25:99:74:7a:5d:b0:98:7b:ce:a4:96:7f: 9c:0b:a6:68:76:46:16:ff:33:45:6b:92:37:ea:fa: 31:43:79:ef:bc:61:3d:d4:97:6b:75:c6:95:5e:49: 99:40:cd:3b:93:a3:a1:04:54:ae:97:7a:09:b7:36: e3:73:c3:ed:64:80:e4:ed:da:24:49:bc:95:9f:2d: 18:c3:91:05:c7:4b:2b:e1:7f:e1:94:2c:ca:a8:33: 52:1f:02:36:86:98:8b:bd:17:06:82:46:8c:8c:67: 25:d3:b3:d6:05:c7:43:56:0b:a3:33:ab:fa:8d:db: b4:53:b7:74:0c:43:63:ab:8a:e7:74:4b:ce:2d:b0: 65:89:7d:25:5d:cf:a8:f1:90:d0:a1:2a:35:10:ed: f4:2b:c9:01:93:b3:c5:35:40:00:20:b0:46:d5:64: 09:17:d6:df:97:7e:4d:ca:50:7d:15:f9:2a:4f:5a: 5d:43:fb:46:1e:c6:8b:37:e3:ef:07:80:b6:d2:8d: 20:3e:f3:b4:ac:3c:6b:f3:81:18:cb:74:01:58:6a: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CD:4B:AF:C4:03:F3:84:C9:1E:31:EF:BA:5C:F7:9E:D2:F5:9D:4D X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:82:82:fa:6c:01:3f:36:c3:9b:c1:6c:46:1e:2a:19:bb:c6: 68:78:8c:f8:bd:43:3a:e6:f0:1b:4e:c3:21:5f:4d:6e:ef:19: f9:f8:e6:04:2c:0a:6e:fe:0d:8b:39:03:22:5c:cb:08:c5:3e: a5:77:2c:1c:e7:24:00:40:23:df:4d:8d:bf:8b:57:79:23:6a: f3:e6:60:1f:c3:e8:28:f5:d4:2a:35:b2:51:53:5d:55:80:22: aa:5b:17:b0:dc:42:54:16:03:b1:99:ca:6d:da:34:1e:ad:96: 6b:52:c7:13:41:82:2b:42:3d:1a:c5:ff:6d:5f:ee:c4:7f:ea: 93:ba:a0:1b:b0:11:00:69:e1:aa:4f:fc:55:fd:23:b7:75:30: 61:e4:10:61:17:fc:a2:46:ea:57:b3:8a:ee:bb:98:da:f6:c5: a4:66:d7:4c:48:83:98:93:c9:4f:1e:bb:9a:99:83:d4:80:eb: f4:a9:fc:2e:42:fe:98:82:e1:3c:b2:cd:6b:44:6d:2e:2e:3c: 2d:da:a3:84:b1:6b:8c:77:e9:5a:9f:e8:cc:c6:d7:ed:3d:bc: 8b:91:bd:1a:11:57:cb:97:78:de:44:08:20:27:3b:1c:ce:3f: d4:72:65:4d:cd:c5:f7:03:8a:f9:8b:00:ec:87:f6:07:c7:1b: cc:38:a5:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNiRpci8pRo+zCW3/ae/6112D+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA3MDMwMzM2MzJaFw0yNTA3MDYxNDU3MzJaMDMxMTAvBgNV BAMTKDZDQ0Q0QkFGQzQwM0YzODRDOTFFMzFFRkJBNUNGNzlFRDJGNTlENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftOf9UM0Bx7iSjR1DWCWOc2LI aXyuiT2sCpde87S4JXWtex2yvgu/69NBVlHFTSWZdHpdsJh7zqSWf5wLpmh2Rhb/ M0Vrkjfq+jFDee+8YT3Ul2t1xpVeSZlAzTuTo6EEVK6Xegm3NuNzw+1kgOTt2iRJ vJWfLRjDkQXHSyvhf+GULMqoM1IfAjaGmIu9FwaCRoyMZyXTs9YFx0NWC6Mzq/qN 27RTt3QMQ2Oriud0S84tsGWJfSVdz6jxkNChKjUQ7fQryQGTs8U1QAAgsEbVZAkX 1t+Xfk3KUH0V+SpPWl1D+0Yexos34+8HgLbSjSA+87SsPGvzgRjLdAFYalgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbM1Lr8QD84TJHjHvulz3ntL1nU0wHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeCgvpsAT82w5vBbEYeKhm7xmh4jPi9Qzrm 8BtOwyFfTW7vGfn45gQsCm7+DYs5AyJcywjFPqV3LBznJABAI99Njb+LV3kjavPm YB/D6Cj11Co1slFTXVWAIqpbF7DcQlQWA7GZym3aNB6tlmtSxxNBgitCPRrF/21f 7sR/6pO6oBuwEQBp4apP/FX9I7d1MGHkEGEX/KJG6leziu67mNr2xaRm10xIg5iT yU8eu5qZg9SA6/Sp/C5C/piC4TyyzWtEbS4uPC3ao4Sxa4x36Vqf6MzG1+09vIuR vRoRV8uXeN5ECCAnOxzOP9RyZU3NxfcDivmLAOyH9gfHG8w4pbc= -----END CERTIFICATE-----Generated at Thu Jul 3 16:34:03 2025 by rpki-client