$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: jfqOcimZxESAfXuPGwPYDEDfy5xKT7X7Wzr1dl/8k04= Subject key identifier: 2C:15:2D:F9:EE:63:D2:BD:73:52:30:58:AE:FE:CB:19:7B:50:65:33 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 710F9146CD039E47D418BE80DDAD21B7259F9D07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 04B3 Signing time: Wed 23 Jul 2025 10:21:51 +0000 Manifest this update: Wed 23 Jul 2025 10:16:51 +0000 Manifest next update: Sat 26 Jul 2025 21:10:51 +0000 Files and hashes: 1: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 2: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 4: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: 1fQU5+WoEBTXe4yskpZrC4tx4sPiO0G4eR0xjuZW+TA=) 5: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:91:46:cd:03:9e:47:d4:18:be:80:dd:ad:21:b7:25:9f:9d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Jul 23 10:16:51 2025 GMT Not After : Jul 26 21:10:51 2025 GMT Subject: CN=2C152DF9EE63D2BD73523058AEFECB197B506533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:5c:4e:5e:62:db:1d:2e:4d:55:eb:8e:58: 8b:30:f9:95:e1:d6:ee:14:51:4d:99:f0:aa:9a:42: 8a:07:55:4d:fb:a6:a8:6b:33:07:ef:20:9b:97:0e: b8:28:10:9f:43:97:a5:ba:ca:f2:26:0f:eb:22:32: d0:b2:79:dc:8d:cd:b3:bc:7c:d6:82:9e:5f:67:bf: 98:b0:9d:32:6f:41:75:7e:08:78:2d:9a:ec:8d:a3: 84:4f:f9:b3:d5:db:d4:68:84:ba:04:55:f3:20:a2: 20:f9:c8:20:a2:ad:3f:7e:2d:eb:9f:04:eb:55:4f: eb:d8:d5:d6:aa:fc:8f:da:3f:0a:10:60:73:bd:45: ac:15:ca:7c:e9:0f:16:5f:bb:05:e9:97:52:30:e9: 18:bb:b3:b1:fa:2e:0d:b5:30:ee:97:75:49:e1:a2: 1a:1c:19:a1:28:32:09:a0:b9:7e:09:14:9a:4b:41: 7f:0c:d7:2b:0c:fd:73:ce:8c:65:18:21:3a:cf:ea: 79:38:94:b0:75:21:db:a1:54:71:57:f0:d3:0b:e9: 0a:7c:d4:bd:5e:15:f2:59:c9:b4:a9:49:a3:d6:02: ff:51:fc:b5:42:1a:b3:5b:29:00:60:b7:0f:15:34: 7b:32:9f:44:74:85:11:3c:92:40:d7:e9:b9:ec:94: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:2D:F9:EE:63:D2:BD:73:52:30:58:AE:FE:CB:19:7B:50:65:33 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:25:ca:97:59:90:75:c8:58:74:8a:00:21:00:97:93:62:7c: e4:b5:20:05:43:25:f2:36:0f:04:3f:37:c4:48:1a:ff:48:cd: 29:4e:71:e8:5e:d1:7e:08:e6:e9:df:da:97:18:be:63:21:7e: 29:44:d4:cc:a3:85:e9:c5:e5:a1:fa:6a:0d:b5:d3:c2:ec:a5: a1:c6:c7:35:d3:c9:28:87:d8:74:d1:e9:8c:6f:f3:44:33:c2: 8e:b8:7c:1c:2f:bc:55:ae:d5:81:fc:0f:fd:ac:fc:bf:d6:00: 4b:5b:8f:5b:12:c4:11:38:99:ee:31:d1:e2:62:c7:51:2f:7e: 61:67:42:fb:1a:5e:af:54:67:20:f1:a2:fb:2b:2c:71:55:a5: fb:a6:d1:d2:ab:8b:c7:30:76:84:21:a7:2e:7d:f6:92:a6:2d: 7b:2f:b3:a6:bb:73:3a:4e:16:cf:c6:fa:12:7d:66:5b:4c:62: 94:ac:43:a6:19:41:53:14:a4:cb:4f:06:15:c7:26:ca:d3:8f: 21:6b:c1:6b:e5:e0:01:e1:9f:2e:f3:cd:d8:28:ba:44:44:72: e4:2f:7f:67:b6:12:0d:14:ee:97:ef:ad:df:8a:b7:ba:be:93: 71:dc:52:27:ad:40:da:90:e2:84:52:53:0f:c9:c7:1c:e1:2e: 31:57:9f:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQ+RRs0DnkfUGL6A3a0htyWfnQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNTA3MjMxMDE2NTFaFw0yNTA3MjYyMTEwNTFaMDMxMTAvBgNV BAMTKDJDMTUyREY5RUU2M0QyQkQ3MzUyMzA1OEFFRkVDQjE5N0I1MDY1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok1xOXmLbHS5NVeuOWIsw+ZXh 1u4UUU2Z8KqaQooHVU37pqhrMwfvIJuXDrgoEJ9Dl6W6yvImD+siMtCyedyNzbO8 fNaCnl9nv5iwnTJvQXV+CHgtmuyNo4RP+bPV29RohLoEVfMgoiD5yCCirT9+Leuf BOtVT+vY1daq/I/aPwoQYHO9RawVynzpDxZfuwXpl1Iw6Ri7s7H6Lg21MO6XdUnh ohocGaEoMgmguX4JFJpLQX8M1ysM/XPOjGUYITrP6nk4lLB1IduhVHFX8NML6Qp8 1L1eFfJZybSpSaPWAv9R/LVCGrNbKQBgtw8VNHsyn0R0hRE8kkDX6bnslFtzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBUt+e5j0r1zUjBYrv7LGXtQZTMwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACklypdZkHXIWHSKACEAl5NifOS1IAVDJfI2 DwQ/N8RIGv9IzSlOcehe0X4I5unf2pcYvmMhfilE1MyjhenF5aH6ag2108LspaHG xzXTySiH2HTR6Yxv80Qzwo64fBwvvFWu1YH8D/2s/L/WAEtbj1sSxBE4me4x0eJi x1EvfmFnQvsaXq9UZyDxovsrLHFVpfum0dKri8cwdoQhpy599pKmLXsvs6a7czpO Fs/G+hJ9ZltMYpSsQ6YZQVMUpMtPBhXHJsrTjyFrwWvl4AHhny7zzdgoukREcuQv f2e2Eg0U7pfvrd+Kt7q+k3HcUietQNqQ4oRSUw/JxxzhLjFXn7A= -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:47 2025 by rpki-client