$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: 6D3FHsReCcYYRs80GqT46GbXzaU4Qxov7C5uMVYfUfA= Subject key identifier: 4F:63:8A:F1:CC:40:08:79:49:7C:71:5D:CD:28:96:66:F2:EB:21:39 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 09682671D413B5358319AF4FD2AD87F54B22EA9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 030C Signing time: Thu 21 Aug 2025 19:31:41 +0000 Manifest this update: Thu 21 Aug 2025 19:26:41 +0000 Manifest next update: Sun 24 Aug 2025 21:21:41 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: +YfS+N0m1jrcV/C68IsRYZejkJ2TEc5ni7a8MhdkmH8=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:68:26:71:d4:13:b5:35:83:19:af:4f:d2:ad:87:f5:4b:22:ea:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Aug 21 19:26:41 2025 GMT Not After : Aug 24 21:21:41 2025 GMT Subject: CN=4F638AF1CC400879497C715DCD289666F2EB2139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:41:7e:2c:a4:d8:58:0f:f8:e5:93:8f:7c: 81:a0:0f:72:77:b4:5a:5c:7a:66:7d:eb:99:08:fc: 13:da:31:2c:4b:21:ec:e6:51:09:65:27:67:f9:d5: 23:54:c4:fc:86:28:5b:67:a8:b3:c0:ed:69:7a:f7: f6:27:b8:6b:93:09:3e:8a:c1:87:ac:c9:38:fe:00: 8e:f5:a3:53:b7:22:f4:7e:df:ed:d3:11:a9:eb:9e: f2:13:33:c2:20:e8:82:df:40:06:1d:72:b3:9d:cd: db:45:9a:83:b6:7e:ec:17:8c:4b:18:dd:28:90:c2: b0:ed:0f:7b:f8:4d:60:bc:55:11:a8:dc:cd:93:a3: 92:63:85:f8:ee:7c:f0:c2:57:bb:f8:ce:87:c7:a9: ee:d0:9c:57:ce:26:4f:26:2e:db:57:70:a7:39:f6: fc:64:04:a3:51:b8:e2:6c:2a:b0:fc:1c:ba:5f:52: 0f:8a:91:be:2a:a8:5c:d7:3e:74:55:a2:9b:ef:92: 94:a4:bd:10:8f:de:be:84:62:09:c4:b7:28:05:75: 73:ed:65:99:10:dd:40:78:43:1f:f3:2c:63:b2:ba: ec:84:ef:8a:55:4d:dc:41:3d:ce:db:58:ef:74:49: 22:bd:4f:b0:ac:0c:48:0b:e6:82:bf:cf:b1:af:94: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:8A:F1:CC:40:08:79:49:7C:71:5D:CD:28:96:66:F2:EB:21:39 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:56:36:57:0b:24:bb:91:ff:c2:61:60:1a:d3:9a:2d:c1:56: 2e:bc:07:6b:9c:11:f3:35:30:2d:d1:44:dc:45:f3:25:09:51: a2:7e:fd:9a:f9:83:89:7b:7d:63:a7:73:5e:6a:46:bd:43:0c: 6f:a6:77:7d:87:a9:38:5b:53:7f:64:fa:d0:b5:f7:02:1c:42: 17:eb:74:1c:1e:86:74:e5:62:47:c1:65:c4:51:51:70:24:4f: 5d:f6:e0:4e:c0:39:67:66:e3:96:aa:98:d7:4b:d5:05:62:ce: b1:83:c0:7f:b4:38:63:be:71:59:81:e4:66:ce:42:ab:9e:f0: 7f:08:1f:43:c4:4a:fa:8c:56:02:cc:53:34:e3:9a:49:7c:6b: ca:45:f3:50:8e:01:33:ec:88:0a:b4:84:c0:e4:e2:92:8e:fc: 48:d8:c1:23:ca:94:f6:51:37:92:81:78:46:55:8b:d9:f3:c7: c1:f5:7e:f5:6d:f8:d4:24:8c:de:5d:21:84:dc:57:e2:b7:c1: 78:2d:c0:37:10:2c:9e:53:40:e3:4f:18:b4:c3:ca:cf:5b:2e: d9:35:4e:5d:94:89:dc:7d:d0:65:96:85:51:76:f3:c5:3b:a1: fa:cf:b5:6d:82:4a:db:f4:fe:d0:ad:c1:53:ca:a6:de:3f:31: bb:e8:32:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWgmcdQTtTWDGa9P0q2H9Usi6powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA4MjExOTI2NDFaFw0yNTA4MjQyMTIxNDFaMDMxMTAvBgNV BAMTKDRGNjM4QUYxQ0M0MDA4Nzk0OTdDNzE1RENEMjg5NjY2RjJFQjIxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeCEF+LKTYWA/45ZOPfIGgD3J3 tFpcemZ965kI/BPaMSxLIezmUQllJ2f51SNUxPyGKFtnqLPA7Wl69/YnuGuTCT6K wYesyTj+AI71o1O3IvR+3+3TEanrnvITM8Ig6ILfQAYdcrOdzdtFmoO2fuwXjEsY 3SiQwrDtD3v4TWC8VRGo3M2To5JjhfjufPDCV7v4zofHqe7QnFfOJk8mLttXcKc5 9vxkBKNRuOJsKrD8HLpfUg+Kkb4qqFzXPnRVopvvkpSkvRCP3r6EYgnEtygFdXPt ZZkQ3UB4Qx/zLGOyuuyE74pVTdxBPc7bWO90SSK9T7CsDEgL5oK/z7GvlE53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2OK8cxACHlJfHFdzSiWZvLrITkwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClWNlcLJLuR/8JhYBrTmi3BVi68B2ucEfM1 MC3RRNxF8yUJUaJ+/Zr5g4l7fWOnc15qRr1DDG+md32HqThbU39k+tC19wIcQhfr dBwehnTlYkfBZcRRUXAkT1324E7AOWdm45aqmNdL1QVizrGDwH+0OGO+cVmB5GbO Qque8H8IH0PESvqMVgLMUzTjmkl8a8pF81COATPsiAq0hMDk4pKO/EjYwSPKlPZR N5KBeEZVi9nzx8H1fvVt+NQkjN5dIYTcV+K3wXgtwDcQLJ5TQONPGLTDys9bLtk1 Tl2Uidx90GWWhVF288U7ofrPtW2CStv0/tCtwVPKpt4/MbvoMlQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:11 2025 by rpki-client