$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: exEokQDGvX/xs+MkF6vlI+0BFkrVuZIzfRfsag20x/U= Subject key identifier: 57:D9:B8:48:81:BC:8F:F4:ED:BC:9D:28:86:A6:D9:B9:FA:99:70:C6 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 17B9A3A6FAAE736D80C0C4256CF944504D9B81AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 026F Signing time: Sun 29 Jun 2025 22:31:05 +0000 Manifest this update: Sun 29 Jun 2025 22:26:05 +0000 Manifest next update: Thu 03 Jul 2025 09:25:05 +0000 Files and hashes: 1: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) 2: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 4: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) 5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: tlVnkj3Aa3D/iTgu4uhe3rscNeRJFFmGdqqYzdDYokg=) 6: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) 7: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b9:a3:a6:fa:ae:73:6d:80:c0:c4:25:6c:f9:44:50:4d:9b:81:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Jun 29 22:26:05 2025 GMT Not After : Jul 3 09:25:05 2025 GMT Subject: CN=57D9B84881BC8FF4EDBC9D2886A6D9B9FA9970C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:e5:b6:04:3e:16:f0:ae:e4:b4:4a:98:cb: 32:5f:de:59:ab:97:51:23:86:a4:f1:09:97:87:6c: a0:05:e4:e9:28:42:c3:98:0e:a4:bd:49:b1:e4:47: d6:fb:3a:7f:a9:66:bc:83:ce:ea:d0:4e:e9:84:9c: 18:50:77:64:c6:67:31:d3:35:86:7b:7f:d3:8c:fa: e6:8c:1e:76:8e:64:04:b8:23:fc:4c:b2:3c:00:08: a5:97:85:8f:0e:3c:ca:df:12:7d:f8:a2:06:61:ce: 7f:15:aa:6d:c8:c2:bd:c0:9f:fb:33:40:e1:29:ee: e1:e0:ef:b6:e0:43:24:9e:70:88:2b:9f:e2:b3:8e: 67:ff:24:ec:ec:6a:56:82:e5:a4:12:f1:a6:a1:21: 64:5e:ee:b7:d7:7a:b2:13:48:e2:88:83:ec:93:37: c1:24:01:1c:31:46:6a:21:2a:af:13:ee:ea:cd:f9: 19:b0:50:e7:42:d3:3a:f3:21:6f:e4:ea:75:b1:e1: 7b:10:29:a3:66:5a:37:90:d7:7b:8f:60:84:10:72: 46:33:ff:45:bd:37:38:ad:7a:dc:39:c0:bf:ae:34: 92:3e:4c:10:cf:c0:5f:67:50:00:cc:35:dd:01:0e: 4a:7a:63:dd:32:95:b2:c1:98:4d:80:46:c5:6d:8b: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D9:B8:48:81:BC:8F:F4:ED:BC:9D:28:86:A6:D9:B9:FA:99:70:C6 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:26:d7:85:99:76:3d:06:00:8e:22:dd:89:93:23:4a:b6: a0:12:58:eb:b1:55:31:46:ff:50:71:10:6b:70:5a:9e:be:a0: 0a:86:0b:16:ed:0b:5f:bf:6a:25:aa:00:f6:2b:86:ea:1c:b3: 65:2b:5d:a4:83:d3:7f:76:47:a9:a9:5c:87:54:30:3c:c2:50: 31:e8:9b:f5:dd:02:f0:c1:5b:8c:1c:12:81:29:44:f0:78:5b: 1f:21:12:ec:28:1a:c6:4a:22:0d:05:f5:90:79:50:00:67:bf: b4:4d:78:e2:3f:d2:ce:ef:33:13:16:64:a4:a2:50:b4:ed:32: e4:90:23:de:4c:54:ba:8a:23:0b:d9:71:20:af:a0:89:9a:a2: 5b:48:4c:d4:61:2d:e7:c6:d3:b4:d3:1f:c7:76:b3:bb:22:65: 39:d8:6f:c5:c9:f8:af:ba:65:e5:4a:22:ab:95:fa:e1:ec:47: 9e:7c:87:d1:63:82:ab:a8:63:4b:65:af:0b:50:57:d4:20:18: 86:7a:05:08:9a:fe:6b:e3:cb:11:8f:8d:2c:33:6a:86:15:81: 55:d4:88:5d:23:f3:9b:26:54:be:cc:c8:7f:72:91:33:d9:a3: f7:ee:b7:7a:69:67:8c:f8:61:60:c3:cf:60:c6:6e:c8:6b:e6: 30:19:f7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7mjpvquc22AwMQlbPlEUE2bgaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA2MjkyMjI2MDVaFw0yNTA3MDMwOTI1MDVaMDMxMTAvBgNV BAMTKDU3RDlCODQ4ODFCQzhGRjRFREJDOUQyODg2QTZEOUI5RkE5OTcwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1+W2BD4W8K7ktEqYyzJf3lmr l1EjhqTxCZeHbKAF5OkoQsOYDqS9SbHkR9b7On+pZryDzurQTumEnBhQd2TGZzHT NYZ7f9OM+uaMHnaOZAS4I/xMsjwACKWXhY8OPMrfEn34ogZhzn8Vqm3Iwr3An/sz QOEp7uHg77bgQySecIgrn+Kzjmf/JOzsalaC5aQS8aahIWRe7rfXerITSOKIg+yT N8EkARwxRmohKq8T7urN+RmwUOdC0zrzIW/k6nWx4XsQKaNmWjeQ13uPYIQQckYz /0W9Nzitetw5wL+uNJI+TBDPwF9nUADMNd0BDkp6Y90ylbLBmE2ARsVti1Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV9m4SIG8j/TtvJ0ohqbZufqZcMYwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3jJteFmXY9BgCOIt2JkyNKtqASWOuxVTFG /1BxEGtwWp6+oAqGCxbtC1+/aiWqAPYrhuocs2UrXaSD0392R6mpXIdUMDzCUDHo m/XdAvDBW4wcEoEpRPB4Wx8hEuwoGsZKIg0F9ZB5UABnv7RNeOI/0s7vMxMWZKSi ULTtMuSQI95MVLqKIwvZcSCvoImaoltITNRhLefG07TTH8d2s7siZTnYb8XJ+K+6 ZeVKIquV+uHsR558h9FjgquoY0tlrwtQV9QgGIZ6BQia/mvjyxGPjSwzaoYVgVXU iF0j85smVL7MyH9ykTPZo/fut3ppZ4z4YWDDz2DGbshr5jAZ96I= -----END CERTIFICATE-----Generated at Mon Jun 30 19:05:52 2025 by rpki-client