$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: g2KkImntRzmVthr8d/f8J/139+O08RTNlkibQEpaZks= Subject key identifier: B0:63:9D:F3:93:9B:A4:92:55:B0:95:4E:0E:BD:10:BE:CB:D6:0D:A6 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 58071EA489EAB7F11CC63B1FE10A63C8C248DB16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 010B Signing time: Sun 20 Jul 2025 21:50:41 +0000 Manifest this update: Sun 20 Jul 2025 21:45:41 +0000 Manifest next update: Thu 24 Jul 2025 04:17:41 +0000 Files and hashes: 1: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) 2: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: T9MvJsw1vGBZuR/CM4am9sHoBnr0G/T/nytYreocY8U=) 3: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: ri6zVldaGRpOaYEv3osVBPZnxBBgRNJX89+3uDFPHP8=) 4: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:07:1e:a4:89:ea:b7:f1:1c:c6:3b:1f:e1:0a:63:c8:c2:48:db:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Jul 20 21:45:41 2025 GMT Not After : Jul 24 04:17:41 2025 GMT Subject: CN=B0639DF3939BA49255B0954E0EBD10BECBD60DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:9f:18:60:e8:d0:32:37:16:d8:f4:82:22: 2c:8c:a8:b0:c8:32:a8:c6:c7:a4:19:b8:af:48:2e: 35:10:1c:04:ca:13:80:0b:bb:b4:4c:7e:03:7b:ff: 7b:32:36:99:ad:d5:d7:97:71:78:7d:a3:55:80:8b: 7c:1e:8a:d2:31:91:64:8b:8f:89:1c:ba:83:d1:3e: 31:a7:26:da:e3:ef:dc:5c:72:07:52:00:a9:f5:69: d3:5b:18:19:e8:00:f6:84:f1:41:a9:78:d1:a2:c2: 1a:d1:08:2a:ea:ad:ad:81:f4:f2:eb:63:2f:ba:ba: e3:98:61:ad:79:28:3b:e5:a9:19:78:54:06:4a:b3: ae:ad:32:73:90:8c:02:d6:3d:54:19:9a:11:62:e4: 39:7e:a2:e9:bf:27:5b:0d:36:fd:ea:54:9c:fa:ce: a0:d5:6b:86:3f:6f:1e:fa:67:3e:ad:be:1d:a9:61: 50:0c:c6:b7:ea:5c:dc:68:25:43:3e:db:5a:81:ca: 4e:61:3e:1d:53:9e:1d:b6:94:79:f0:56:0c:e4:f4: 90:41:87:f6:2b:67:c5:f1:64:e4:3a:9d:c8:80:0e: a3:7f:5a:b4:d9:11:d4:92:ae:ee:47:a1:37:9e:60: cf:09:e6:cf:62:39:49:e0:c1:b9:f3:a8:44:c7:82: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:9D:F3:93:9B:A4:92:55:B0:95:4E:0E:BD:10:BE:CB:D6:0D:A6 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9d:78:89:41:a8:a1:20:8c:bf:f4:5d:24:01:47:3b:b1:93: 25:c2:21:29:75:c0:61:43:17:21:cc:ac:6c:01:55:bc:d5:9e: 9c:73:6f:ad:48:43:18:51:85:18:b8:4f:7a:62:7e:27:af:18: af:fc:50:08:b1:43:74:e7:a4:be:ab:f3:2f:67:5e:56:ff:cf: b9:08:f3:2a:ff:07:f8:f2:65:5f:a5:81:9c:da:71:16:8c:36: 52:8e:3a:22:8b:06:7b:e3:1a:77:68:12:0b:3e:fb:3d:86:94: 4a:6e:ac:3a:ae:fb:53:ec:a2:9b:3e:2c:90:ac:59:b5:62:a5: 0c:70:c1:32:63:62:67:04:83:b5:95:16:08:18:ca:6c:50:b2: d6:74:9b:35:97:6b:bd:2e:82:29:99:26:d2:24:19:18:24:b1: bc:1e:8a:a1:2e:ea:aa:4d:b4:a6:69:7f:f0:59:f9:7e:f7:13: 9c:a9:c6:59:68:68:b9:54:93:36:b7:e8:30:85:1c:05:df:98: f7:11:53:cf:c9:55:9e:57:b8:2d:e1:65:26:43:00:17:63:55: 7d:02:4b:1d:84:b9:f8:79:bb:0a:ae:14:eb:5f:6b:92:bc:cf: c8:28:79:e8:73:a0:bf:2d:a1:b8:2b:29:84:dc:6b:d7:7f:73: 1f:bd:f9:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAcepInqt/Ecxjsf4QpjyMJI2xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA3MjAyMTQ1NDFaFw0yNTA3MjQwNDE3NDFaMDMxMTAvBgNV BAMTKEIwNjM5REYzOTM5QkE0OTI1NUIwOTU0RTBFQkQxMEJFQ0JENjBEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Up8YYOjQMjcW2PSCIiyMqLDI MqjGx6QZuK9ILjUQHATKE4ALu7RMfgN7/3syNpmt1deXcXh9o1WAi3weitIxkWSL j4kcuoPRPjGnJtrj79xccgdSAKn1adNbGBnoAPaE8UGpeNGiwhrRCCrqra2B9PLr Yy+6uuOYYa15KDvlqRl4VAZKs66tMnOQjALWPVQZmhFi5Dl+oum/J1sNNv3qVJz6 zqDVa4Y/bx76Zz6tvh2pYVAMxrfqXNxoJUM+21qByk5hPh1Tnh22lHnwVgzk9JBB h/YrZ8XxZOQ6nciADqN/WrTZEdSSru5HoTeeYM8J5s9iOUngwbnzqETHgvt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsGOd85ObpJJVsJVODr0QvsvWDaYwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADudeIlBqKEgjL/0XSQBRzuxkyXCISl1wGFD FyHMrGwBVbzVnpxzb61IQxhRhRi4T3pifievGK/8UAixQ3TnpL6r8y9nXlb/z7kI 8yr/B/jyZV+lgZzacRaMNlKOOiKLBnvjGndoEgs++z2GlEpurDqu+1Psops+LJCs WbVipQxwwTJjYmcEg7WVFggYymxQstZ0mzWXa70ugimZJtIkGRgksbweiqEu6qpN tKZpf/BZ+X73E5ypxlloaLlUkza36DCFHAXfmPcRU8/JVZ5XuC3hZSZDABdjVX0C Sx2Eufh5uwquFOtfa5K8z8goeehzoL8tobgrKYTca9d/cx+9+Zs= -----END CERTIFICATE-----Generated at Mon Jul 21 00:10:05 2025 by rpki-client