$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: 4d3pFbEgRBZ66SO+COVOQcTVIJ28tbGIwmj8RJoKky0= Subject key identifier: FE:F5:29:43:76:FB:1F:51:5E:69:96:36:EA:3F:A8:E7:9C:DC:E6:84 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 49BB1BEEBCB2E8BE5E0C55402D619FCDB0321C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 01E6 Signing time: Sun 20 Jul 2025 14:22:17 +0000 Manifest this update: Sun 20 Jul 2025 14:17:17 +0000 Manifest next update: Thu 24 Jul 2025 00:35:17 +0000 Files and hashes: 1: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: l6tpes5rzT9fLNjdAJ64z/GyGHsmvC+Q4+X4crx+b98=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bb:1b:ee:bc:b2:e8:be:5e:0c:55:40:2d:61:9f:cd:b0:32:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Jul 20 14:17:17 2025 GMT Not After : Jul 24 00:35:17 2025 GMT Subject: CN=FEF5294376FB1F515E699636EA3FA8E79CDCE684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:cc:e0:c2:ae:90:d7:fb:23:c5:b5:6a:b2: 01:11:43:14:cb:43:6d:85:87:62:40:98:74:43:5e: 3e:24:5b:b7:83:39:f7:cd:0b:6a:3e:db:49:73:f2: 5c:cf:84:1b:8a:af:a1:ad:2a:46:27:74:5b:da:74: 5d:ec:70:f1:0b:22:0c:57:1d:a5:ca:0a:89:12:9a: b9:a9:70:e1:fd:5b:21:8d:b8:72:a6:36:1e:c1:4c: 3d:eb:16:25:57:b9:82:80:dc:12:7f:a6:26:9c:10: 65:e8:5b:32:15:33:35:c9:e1:14:63:dc:9e:ad:44: a9:82:39:99:39:4e:a8:aa:b5:d5:54:7f:11:8e:69: c9:15:b2:9e:00:9a:52:87:57:32:22:a0:28:62:d0: 50:1e:11:62:ea:07:fb:d0:d1:b7:42:25:08:2f:5c: 69:97:c1:e2:47:ba:60:ad:f3:6b:f7:9c:c8:8f:13: 79:60:dd:72:34:4d:b2:ce:f2:07:62:a8:03:3e:d8: 69:84:13:26:af:dc:0f:b5:ad:c3:0d:06:3e:3d:be: 4d:1f:6f:40:b6:13:61:30:54:2e:93:6f:11:c2:38: 0c:71:56:b6:51:c5:95:fc:64:87:f5:fa:bd:43:78: 31:da:f2:8a:76:d1:ca:6b:9e:18:f0:c8:4b:39:fb: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:29:43:76:FB:1F:51:5E:69:96:36:EA:3F:A8:E7:9C:DC:E6:84 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:09:cc:e6:e0:d9:c1:ca:87:13:62:52:40:77:c8:58:a5:f1: 72:1c:92:73:e8:52:94:7a:43:20:c1:de:b0:3e:a7:0e:22:f9: db:79:7d:63:c0:ea:92:dc:b4:e8:51:d8:d8:f6:ef:98:3a:f5: c9:5f:ce:48:cd:0c:8e:71:0a:df:c1:cc:f9:4b:45:c5:f9:46: 41:fe:f3:3f:63:ad:15:d3:92:1c:e1:6d:42:31:79:ed:d4:1f: 64:0a:7e:65:67:0e:ec:b3:e5:6c:13:f8:43:30:2a:3a:b3:ea: 85:4d:b5:f8:39:c2:94:61:e3:77:17:43:39:97:4b:32:98:60: bb:c6:3e:0d:b6:d7:1d:4f:86:a3:d3:86:65:8d:d4:93:23:f3: 7f:55:3c:23:95:b1:57:61:8b:9b:26:92:0a:36:09:7c:2d:9a: 0e:49:62:5b:45:af:ea:3b:73:cc:a2:7f:fe:45:6d:76:99:dc: c8:59:3c:52:bd:21:1f:72:f8:9c:96:f3:23:49:6e:3a:71:39: e3:29:fd:a0:12:3e:1c:7b:6a:2a:5c:33:d9:0a:52:4b:6b:72: 73:4e:a6:43:36:43:2e:68:7c:26:d5:3e:06:2f:2a:18:05:4e: f8:9b:60:65:06:eb:70:7c:2d:0f:2f:82:40:63:cf:f9:23:99: bc:8e:91:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbsb7ryy6L5eDFVALWGfzbAyHJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNTA3MjAxNDE3MTdaFw0yNTA3MjQwMDM1MTdaMDMxMTAvBgNV BAMTKEZFRjUyOTQzNzZGQjFGNTE1RTY5OTYzNkVBM0ZBOEU3OUNEQ0U2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3szgwq6Q1/sjxbVqsgERQxTL Q22Fh2JAmHRDXj4kW7eDOffNC2o+20lz8lzPhBuKr6GtKkYndFvadF3scPELIgxX HaXKCokSmrmpcOH9WyGNuHKmNh7BTD3rFiVXuYKA3BJ/piacEGXoWzIVMzXJ4RRj 3J6tRKmCOZk5TqiqtdVUfxGOackVsp4AmlKHVzIioChi0FAeEWLqB/vQ0bdCJQgv XGmXweJHumCt82v3nMiPE3lg3XI0TbLO8gdiqAM+2GmEEyav3A+1rcMNBj49vk0f b0C2E2EwVC6TbxHCOAxxVrZRxZX8ZIf1+r1DeDHa8op20cprnhjwyEs5+/TDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vUpQ3b7H1FeaZY26j+o55zc5oQwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIJzObg2cHKhxNiUkB3yFil8XIcknPoUpR6 QyDB3rA+pw4i+dt5fWPA6pLctOhR2Nj275g69clfzkjNDI5xCt/BzPlLRcX5RkH+ 8z9jrRXTkhzhbUIxee3UH2QKfmVnDuyz5WwT+EMwKjqz6oVNtfg5wpRh43cXQzmX SzKYYLvGPg221x1PhqPThmWN1JMj839VPCOVsVdhi5smkgo2CXwtmg5JYltFr+o7 c8yif/5FbXaZ3MhZPFK9IR9y+JyW8yNJbjpxOeMp/aASPhx7aipcM9kKUktrcnNO pkM2Qy5ofCbVPgYvKhgFTvibYGUG63B8LQ8vgkBjz/kjmbyOkXg= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:47 2025 by rpki-client