$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: 5FI2gNCN606+gE1ev0+pHtBm9IXmBU4s5zlT6R7ELWw= Subject key identifier: 57:07:0D:03:C8:63:D2:B5:1D:B6:A2:EF:F6:92:CE:1C:D5:68:CE:BE Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 75056397B8FF2C8F064AEBDB4CAEE56A3CA900FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 0287 Signing time: Fri 22 Aug 2025 21:11:09 +0000 Manifest this update: Fri 22 Aug 2025 21:06:09 +0000 Manifest next update: Tue 26 Aug 2025 08:49:09 +0000 Files and hashes: 1: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: h9rFHgjZ+kPhBR4yOo1dCi55bwdwz6NbRXIjzjojGdw=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 3: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 4: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 5: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 6: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 7: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:05:63:97:b8:ff:2c:8f:06:4a:eb:db:4c:ae:e5:6a:3c:a9:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Aug 22 21:06:09 2025 GMT Not After : Aug 26 08:49:09 2025 GMT Subject: CN=57070D03C863D2B51DB6A2EFF692CE1CD568CEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:5c:63:46:4b:ce:ac:92:32:30:56:4e:b0: e6:72:b5:bb:7d:17:24:a2:cb:c9:7e:51:90:10:c7: 94:52:42:61:41:b9:e8:1a:7d:85:c7:5e:49:4f:ca: 3e:cd:5e:84:51:3e:4c:23:d3:8d:b3:f0:ba:3d:cd: f1:59:2c:8c:f8:b4:bf:ac:ef:db:b7:69:9d:aa:7f: f5:55:f4:62:12:85:da:97:1f:ae:18:e1:d9:32:68: e0:d3:5a:44:7a:9b:f8:2c:0f:c7:c9:7e:58:3d:57: 95:ac:26:40:fb:37:46:fb:d3:9d:d5:57:94:c4:e3: 2d:4a:38:e4:30:e1:48:55:f4:1b:8e:a7:d0:65:40: 08:d5:99:17:80:63:51:06:24:bd:91:de:43:a3:79: 79:4c:88:6f:a2:0f:b9:1b:34:70:03:72:0e:3b:d4: 79:24:d4:70:f9:5b:07:a6:9f:ce:a2:fa:e9:7a:2b: 35:1e:79:de:89:ba:f3:7b:e8:5b:fc:66:9f:34:cc: a3:54:ed:9e:28:7b:0e:a3:77:6b:34:6c:b4:ce:80: 8f:40:dd:30:76:bb:f2:24:f4:62:95:73:e8:34:bf: c7:d8:5a:9e:ee:8b:15:b0:b8:97:ef:23:6e:f7:a4: d1:74:a2:e3:58:de:0d:8b:74:0a:30:2b:3c:8b:ac: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:0D:03:C8:63:D2:B5:1D:B6:A2:EF:F6:92:CE:1C:D5:68:CE:BE X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e1:a3:9d:0b:6a:85:ba:32:97:4c:93:3d:7f:82:bd:3a:6b: 06:11:0d:10:95:a2:43:bc:f9:52:8d:ae:63:f7:5d:15:3e:7f: da:59:72:cc:d2:f4:1b:53:3b:9c:61:96:db:40:66:e8:7c:3b: bd:38:ab:fb:9e:04:53:fa:ca:80:7c:34:ba:e3:d9:c1:17:70: 26:cc:e4:92:dd:c0:a5:97:b7:ab:c5:36:9f:68:9c:c4:7a:53: d9:f7:5d:9e:73:c7:a3:59:cb:03:11:cf:98:84:d2:d5:77:cb: dd:a9:82:10:26:ca:0d:ba:5c:d8:03:27:ac:9e:09:be:88:b8: ee:d4:94:51:5e:da:9b:2a:00:2f:90:71:78:35:23:be:5d:fb: 21:59:41:3b:32:7c:47:94:4b:b7:28:e9:b0:21:e8:4c:e1:0f: 25:57:c0:ae:8a:2c:7f:98:a1:4d:7e:7f:d9:25:74:ae:d9:2d: 15:dd:9d:dc:27:37:d4:e1:6e:1b:56:08:98:1c:50:93:c1:04: 98:c6:00:a6:c9:9b:93:19:e3:fb:58:42:75:b3:05:6b:cb:79: 09:d2:49:d0:10:60:e2:56:8f:d8:fa:cc:fb:c8:2d:ef:f2:77: 46:2b:af:dd:93:9f:82:f5:08:d8:c0:31:58:48:84:c2:2c:3b: 48:32:16:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQVjl7j/LI8GSuvbTK7lajypAP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA4MjIyMTA2MDlaFw0yNTA4MjYwODQ5MDlaMDMxMTAvBgNV BAMTKDU3MDcwRDAzQzg2M0QyQjUxREI2QTJFRkY2OTJDRTFDRDU2OENFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSVxjRkvOrJIyMFZOsOZytbt9 FySiy8l+UZAQx5RSQmFBuegafYXHXklPyj7NXoRRPkwj042z8Lo9zfFZLIz4tL+s 79u3aZ2qf/VV9GIShdqXH64Y4dkyaODTWkR6m/gsD8fJflg9V5WsJkD7N0b7053V V5TE4y1KOOQw4UhV9BuOp9BlQAjVmReAY1EGJL2R3kOjeXlMiG+iD7kbNHADcg47 1Hkk1HD5Wwemn86i+ul6KzUeed6JuvN76Fv8Zp80zKNU7Z4oew6jd2s0bLTOgI9A 3TB2u/Ik9GKVc+g0v8fYWp7uixWwuJfvI273pNF0ouNY3g2LdAowKzyLrAyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwcNA8hj0rUdtqLv9pLOHNVozr4wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnho50LaoW6MpdMkz1/gr06awYRDRCVokO8 +VKNrmP3XRU+f9pZcszS9BtTO5xhlttAZuh8O704q/ueBFP6yoB8NLrj2cEXcCbM 5JLdwKWXt6vFNp9onMR6U9n3XZ5zx6NZywMRz5iE0tV3y92pghAmyg26XNgDJ6ye Cb6IuO7UlFFe2psqAC+QcXg1I75d+yFZQTsyfEeUS7co6bAh6EzhDyVXwK6KLH+Y oU1+f9kldK7ZLRXdndwnN9ThbhtWCJgcUJPBBJjGAKbJm5MZ4/tYQnWzBWvLeQnS SdAQYOJWj9j6zPvILe/yd0Yrr92Tn4L1CNjAMVhIhMIsO0gyFt0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:07 2025 by rpki-client