$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: QAWY1086Ji1Rwah9z2iSOVI6YXGlDq3MoCFzBuC0CYc= Subject key identifier: 33:83:96:89:A6:5A:CF:61:A9:FB:FF:9C:EB:6E:58:27:07:DA:B2:1C Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 671F58B5FEE7AB91BFB25E4B60EB53BC55DD1972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02A1 Signing time: Sun 19 Oct 2025 00:01:08 +0000 Manifest this update: Sat 18 Oct 2025 23:56:08 +0000 Manifest next update: Wed 22 Oct 2025 04:42:08 +0000 Files and hashes: 1: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 3: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 4: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 5: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) 6: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: LcPxKj+obvNDEUn/Cnz4ZrRj/2/FyV2rF8B/QU5nxQE=) 7: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1f:58:b5:fe:e7:ab:91:bf:b2:5e:4b:60:eb:53:bc:55:dd:19:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Oct 18 23:56:08 2025 GMT Not After : Oct 22 04:42:08 2025 GMT Subject: CN=33839689A65ACF61A9FBFF9CEB6E582707DAB21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:77:46:38:33:60:3c:7e:4d:32:7f:60:51: c1:db:29:ef:f1:17:89:99:39:c9:90:41:6f:97:bf: 88:89:99:be:95:d5:cd:36:4c:0c:af:85:c3:20:e3: 3c:cf:15:44:e3:65:b4:42:f6:7e:83:7d:c5:a2:5c: d8:7c:4b:8a:65:64:c7:47:e5:b7:a8:60:51:f1:5b: 8d:7f:0c:91:f7:6d:b5:16:99:a2:db:f0:88:29:f2: ad:6b:f0:03:fa:06:a4:35:23:24:b2:12:90:93:d7: 31:e6:a4:14:61:16:73:12:2d:7b:6c:73:f9:4b:cd: e2:cf:1c:fd:8e:8c:05:5e:a7:e8:92:88:2a:fa:85: bc:78:bd:bd:e3:4d:57:fa:f0:27:8a:b7:6f:73:fb: 4e:2f:80:0b:1f:28:a4:2c:4f:e8:ec:bd:76:9f:94: 50:55:5b:8d:0f:4f:21:46:3d:73:c3:2d:50:87:10: 71:2e:bc:9e:f2:9c:cb:84:8a:17:46:5b:aa:55:74: db:c6:07:9e:8e:35:76:5b:05:27:da:a3:f6:c3:19: 61:66:9a:96:ed:01:74:f2:c9:be:56:3b:14:5f:f8: 78:b4:6b:2f:1c:d8:7a:87:01:d0:9d:eb:35:4e:90: ba:75:32:91:b7:e5:1c:ba:75:08:29:98:16:3b:17: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:83:96:89:A6:5A:CF:61:A9:FB:FF:9C:EB:6E:58:27:07:DA:B2:1C X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:52:c8:1a:c4:8d:f8:da:48:a6:d3:c5:0d:4a:0e:b6:77:af: a1:02:23:4f:66:62:ad:08:e2:85:0e:ab:98:cf:8c:4a:ff:fe: 49:9c:08:cd:a3:40:89:49:c8:4b:64:3c:5f:48:51:6f:e7:f3: ce:d4:0c:ca:30:40:c2:9a:15:ef:9e:77:2e:e2:30:75:2e:9b: 83:d8:9c:d4:00:bc:6f:35:38:2f:49:c2:aa:a8:a0:14:fa:aa: 2c:16:cd:33:fa:1f:68:4a:34:62:7c:8b:c4:72:a7:12:03:88: b5:be:95:33:df:d6:0a:79:6c:35:10:1b:5c:4f:c9:66:e5:0c: 24:35:e4:26:a6:25:6a:f1:4e:45:01:ed:fd:60:7e:77:3d:00: 41:f5:e3:05:0e:b6:68:19:d6:55:4e:a1:2d:38:cf:4f:2a:3d: 4a:61:f6:d1:9c:85:b4:e9:1f:bd:ff:6e:a2:2a:df:5b:f9:38: 39:5d:1a:5a:4c:0d:b7:78:63:42:c1:f7:29:a0:e5:af:8d:f2: 71:95:01:67:b1:36:c3:7c:10:81:8e:49:e1:33:26:6c:96:8a: b4:b9:d9:27:92:27:69:5e:25:62:67:17:38:cc:33:f4:84:59: 31:46:81:1b:36:89:2e:ac:f0:af:48:c9:26:58:c2:b6:7f:bf: fc:09:aa:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZx9Ytf7nq5G/sl5LYOtTvFXdGXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTEwMTgyMzU2MDhaFw0yNTEwMjIwNDQyMDhaMDMxMTAvBgNV BAMTKDMzODM5Njg5QTY1QUNGNjFBOUZCRkY5Q0VCNkU1ODI3MDdEQUIyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yXdGODNgPH5NMn9gUcHbKe/x F4mZOcmQQW+Xv4iJmb6V1c02TAyvhcMg4zzPFUTjZbRC9n6DfcWiXNh8S4plZMdH 5beoYFHxW41/DJH3bbUWmaLb8Igp8q1r8AP6BqQ1IySyEpCT1zHmpBRhFnMSLXts c/lLzeLPHP2OjAVep+iSiCr6hbx4vb3jTVf68CeKt29z+04vgAsfKKQsT+jsvXaf lFBVW40PTyFGPXPDLVCHEHEuvJ7ynMuEihdGW6pVdNvGB56ONXZbBSfao/bDGWFm mpbtAXTyyb5WOxRf+Hi0ay8c2HqHAdCd6zVOkLp1MpG35Ry6dQgpmBY7F5UBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4OWiaZaz2Gp+/+c625YJwfashwwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpSyBrEjfjaSKbTxQ1KDrZ3r6ECI09mYq0I 4oUOq5jPjEr//kmcCM2jQIlJyEtkPF9IUW/n887UDMowQMKaFe+edy7iMHUum4PY nNQAvG81OC9JwqqooBT6qiwWzTP6H2hKNGJ8i8RypxIDiLW+lTPf1gp5bDUQG1xP yWblDCQ15CamJWrxTkUB7f1gfnc9AEH14wUOtmgZ1lVOoS04z08qPUph9tGchbTp H73/bqIq31v5ODldGlpMDbd4Y0LB9ymg5a+N8nGVAWexNsN8EIGOSeEzJmyWirS5 2SeSJ2leJWJnFzjMM/SEWTFGgRs2iS6s8K9IySZYwrZ/v/wJqts= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:26 2025 by rpki-client