$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: WKWEEnLPWhCpL8PynrvRYBtk01NMVUtCC5In2LQeqqk= Subject key identifier: 61:7D:B0:A0:43:85:2D:25:92:E3:7A:55:19:B6:25:A8:31:0A:3F:52 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 07D6828A1B5D213721FF4DD47ED64DE8F77AD670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0152 Signing time: Mon 21 Jul 2025 20:40:54 +0000 Manifest this update: Mon 21 Jul 2025 20:35:54 +0000 Manifest next update: Fri 25 Jul 2025 06:07:54 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: tZP9mIi2oWCzJmhBjUOKxeDIXrEk+WelzF1AtygcBE0=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d6:82:8a:1b:5d:21:37:21:ff:4d:d4:7e:d6:4d:e8:f7:7a:d6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Jul 21 20:35:54 2025 GMT Not After : Jul 25 06:07:54 2025 GMT Subject: CN=617DB0A043852D2592E37A5519B625A8310A3F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:fe:43:68:d7:3b:90:da:a2:df:01:5a:4f: d8:f3:5c:52:88:bb:39:9b:ce:97:f6:b9:e4:f1:a4: b6:e8:07:a6:65:0e:f6:8f:58:32:8f:a4:63:a8:e2: cb:11:ca:23:b3:18:63:f2:14:c0:34:cc:e9:94:86: c5:a3:5c:0a:ed:4a:ca:e0:e6:13:ed:e1:a1:bb:86: 93:48:79:6e:cb:2e:2c:ed:d1:0e:53:f6:c9:0a:03: 4f:71:d5:e9:1b:f9:05:6f:a4:ed:a6:f0:08:86:39: a4:f4:aa:84:f2:f0:84:c4:a2:54:a6:ba:7d:59:03: 98:47:8e:9a:19:1e:c8:79:44:4c:22:92:70:16:67: 22:92:53:55:28:e3:b7:b7:c1:03:96:99:52:e1:72: aa:c4:aa:cb:f0:7c:ae:f7:21:76:ec:1e:93:8a:51: 67:60:ec:e9:e3:8e:e9:80:76:27:a0:8c:5e:aa:e8: 20:10:59:bb:c2:8f:80:d5:92:82:f9:34:98:71:97: 4e:00:98:63:d1:d7:28:ed:af:f8:43:06:4e:94:48: 93:47:e4:0f:c8:b6:c8:6d:20:34:b6:11:c8:ec:8e: c1:c9:1b:ac:6f:c8:56:2a:f5:30:43:b4:96:67:21: 9d:9c:f4:83:16:17:11:95:4b:1d:dd:0d:dd:29:c0: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7D:B0:A0:43:85:2D:25:92:E3:7A:55:19:B6:25:A8:31:0A:3F:52 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:57:0a:23:8f:23:8a:3a:18:ed:99:99:95:8e:c6:93:d8:ec: 7d:fa:de:e9:73:62:a5:e7:c0:1f:3e:01:01:7a:5d:f0:c2:56: 9d:7a:c2:84:e6:29:12:2c:47:38:f4:70:d5:96:61:df:b6:1a: 21:4d:35:66:4d:c7:ec:49:87:55:10:ee:21:57:7e:4f:84:6a: d6:bb:d4:56:52:25:2c:7b:0b:fe:d9:93:15:22:7c:b7:8c:b8: 9b:7b:cd:ef:8d:b4:42:e2:b8:4d:df:82:ff:7f:2b:ea:20:04: b4:18:77:9c:78:c7:8b:67:39:a6:3a:6b:e1:52:91:99:b7:a6: 1b:65:73:46:84:a8:5c:39:e1:6c:3d:44:3d:db:e9:46:a3:fd: 7f:a9:76:90:7c:1b:1c:0b:f5:f7:59:80:8a:3a:10:5d:50:d3: 82:72:6c:78:85:0d:36:0c:cd:88:5a:f0:b6:46:f6:24:f1:8d: 37:71:35:4a:fd:c2:46:99:59:98:18:b8:f5:14:b9:c0:01:e4: e2:35:a1:d1:56:f8:09:35:3a:74:bb:2c:28:36:75:6b:d3:5d: 7b:b1:0f:39:5b:84:d0:cc:c7:11:85:a9:11:f6:ba:ca:60:92: e3:a4:b4:ce:67:5f:7e:0b:9d:5b:3d:e7:c3:19:ae:92:24:07: 73:5f:9f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9aCihtdITch/03UftZN6Pd61nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA3MjEyMDM1NTRaFw0yNTA3MjUwNjA3NTRaMDMxMTAvBgNV BAMTKDYxN0RCMEEwNDM4NTJEMjU5MkUzN0E1NTE5QjYyNUE4MzEwQTNGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBb/5DaNc7kNqi3wFaT9jzXFKI uzmbzpf2ueTxpLboB6ZlDvaPWDKPpGOo4ssRyiOzGGPyFMA0zOmUhsWjXArtSsrg 5hPt4aG7hpNIeW7LLizt0Q5T9skKA09x1ekb+QVvpO2m8AiGOaT0qoTy8ITEolSm un1ZA5hHjpoZHsh5REwiknAWZyKSU1Uo47e3wQOWmVLhcqrEqsvwfK73IXbsHpOK UWdg7OnjjumAdiegjF6q6CAQWbvCj4DVkoL5NJhxl04AmGPR1yjtr/hDBk6USJNH 5A/ItshtIDS2EcjsjsHJG6xvyFYq9TBDtJZnIZ2c9IMWFxGVSx3dDd0pwKIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYX2woEOFLSWS43pVGbYlqDEKP1IwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdXCiOPI4o6GO2ZmZWOxpPY7H363ulzYqXn wB8+AQF6XfDCVp16woTmKRIsRzj0cNWWYd+2GiFNNWZNx+xJh1UQ7iFXfk+Eata7 1FZSJSx7C/7ZkxUifLeMuJt7ze+NtELiuE3fgv9/K+ogBLQYd5x4x4tnOaY6a+FS kZm3phtlc0aEqFw54Ww9RD3b6Uaj/X+pdpB8GxwL9fdZgIo6EF1Q04JybHiFDTYM zYha8LZG9iTxjTdxNUr9wkaZWZgYuPUUucAB5OI1odFW+Ak1OnS7LCg2dWvTXXux DzlbhNDMxxGFqRH2uspgkuOktM5nX34LnVs958MZrpIkB3Nfn/E= -----END CERTIFICATE-----Generated at Tue Jul 22 05:49:05 2025 by rpki-client