$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: mB5sYwXPPtGwMpf71Vi90s3/Uddt/wxbu8Y6gSbB6fI= Subject key identifier: A1:A8:FD:A8:80:91:27:56:A7:EF:04:20:0C:FD:08:BC:A1:01:33:3D Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 7E005709060A6F6573AB046DC47A21195868C573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02FE Signing time: Sun 20 Jul 2025 20:21:43 +0000 Manifest this update: Sun 20 Jul 2025 20:16:43 +0000 Manifest next update: Thu 24 Jul 2025 04:06:43 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: jd3mxa+9Q14JLa/r7X/XGcqWoM2C8lEASaOQjqbrTXQ=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:00:57:09:06:0a:6f:65:73:ab:04:6d:c4:7a:21:19:58:68:c5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jul 20 20:16:43 2025 GMT Not After : Jul 24 04:06:43 2025 GMT Subject: CN=A1A8FDA880912756A7EF04200CFD08BCA101333D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:66:4c:ca:4b:e9:59:76:a8:31:d9:be:97:4e: 85:58:e3:a4:ef:d0:ab:85:c5:22:2e:c9:15:77:d6: b7:1d:d1:52:44:73:47:0b:04:d9:48:52:36:6d:29: 57:78:07:ee:d1:bb:0f:3d:c7:92:38:b8:38:05:2c: 8a:5c:87:0d:85:56:a3:3e:37:e1:1c:fb:78:4a:a0: 56:a8:99:fe:65:dd:66:19:33:ad:a9:c6:9c:52:64: 89:62:c7:12:09:04:2e:3b:cd:5b:67:ca:29:a7:5d: 5b:90:77:6b:52:57:c3:da:01:81:cf:47:23:f0:f3: 8d:8a:8c:a2:75:18:d6:c7:c5:60:1c:52:d8:1e:75: 19:32:8b:e8:ed:f0:46:10:fe:9b:81:ca:99:3f:34: 8e:14:5b:e0:82:d1:b6:cf:6f:88:e5:ef:b9:87:73: c9:16:77:98:f1:22:0b:db:13:78:ac:11:a1:36:1c: 38:af:0d:40:44:7f:6c:71:77:0d:0b:6a:f0:91:f0: 96:1b:0d:e0:61:3c:1e:b6:4f:10:54:e0:f8:1d:c2: 22:fa:1a:f3:69:2c:d3:e7:0d:ef:4a:ac:3c:44:ed: 9d:af:5a:36:96:5d:2b:f0:37:07:bf:c8:b5:9b:cb: f1:be:58:96:8e:e0:57:ec:d9:5b:6e:cb:e2:b0:9e: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A8:FD:A8:80:91:27:56:A7:EF:04:20:0C:FD:08:BC:A1:01:33:3D X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:f9:64:0d:78:42:0b:01:ed:2d:37:00:51:10:4c:8c:00: fe:9f:4d:f7:2c:04:dc:e1:43:6c:f4:55:98:26:63:f0:44:ae: 43:2c:e5:88:f7:32:42:98:f8:39:ab:d6:1b:29:0d:d1:be:51: 76:4c:24:45:71:49:31:a6:e2:bc:41:2c:35:ac:50:22:a3:5e: 1f:1a:d1:31:97:3b:22:67:ef:58:0c:04:2c:a6:7f:7f:2a:84: 82:2c:87:79:9b:87:16:9c:f0:06:ea:2d:66:c7:d3:d0:bf:ef: 2e:c8:1c:d5:b6:83:64:4c:4f:c0:bc:6a:7c:71:d1:3d:9b:ff: 62:7f:6a:b5:ac:48:9f:3d:af:52:96:d0:c7:c7:16:7b:92:87: bd:3e:b9:8e:fe:fd:f4:ad:61:41:82:5c:78:34:f1:d3:d0:e7: 1d:f7:72:39:04:f0:26:05:ec:ee:74:a8:67:26:60:f9:a0:08: aa:8f:23:49:51:b2:b0:4b:ea:b6:c4:90:10:ab:6c:59:12:ad: 28:b6:7f:b9:2d:67:7d:12:e3:48:58:26:3f:3f:22:18:ae:53: 5a:cf:45:07:83:e1:f5:47:3f:e6:6e:04:ef:96:57:b7:03:6c: 17:12:49:f7:44:be:06:36:c6:58:d8:59:20:59:5c:cb:1c:30: 66:e0:cb:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgBXCQYKb2VzqwRtxHohGVhoxXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA3MjAyMDE2NDNaFw0yNTA3MjQwNDA2NDNaMDMxMTAvBgNV BAMTKEExQThGREE4ODA5MTI3NTZBN0VGMDQyMDBDRkQwOEJDQTEwMTMzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZkzKS+lZdqgx2b6XToVY46Tv 0KuFxSIuyRV31rcd0VJEc0cLBNlIUjZtKVd4B+7Ruw89x5I4uDgFLIpchw2FVqM+ N+Ec+3hKoFaomf5l3WYZM62pxpxSZIlixxIJBC47zVtnyimnXVuQd2tSV8PaAYHP RyPw842KjKJ1GNbHxWAcUtgedRkyi+jt8EYQ/puBypk/NI4UW+CC0bbPb4jl77mH c8kWd5jxIgvbE3isEaE2HDivDUBEf2xxdw0LavCR8JYbDeBhPB62TxBU4PgdwiL6 GvNpLNPnDe9KrDxE7Z2vWjaWXSvwNwe/yLWby/G+WJaO4Ffs2Vtuy+KwnrqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoaj9qICRJ1an7wQgDP0IvKEBMz0wHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmI+WQNeEILAe0tNwBREEyMAP6fTfcsBNzh Q2z0VZgmY/BErkMs5Yj3MkKY+Dmr1hspDdG+UXZMJEVxSTGm4rxBLDWsUCKjXh8a 0TGXOyJn71gMBCymf38qhIIsh3mbhxac8AbqLWbH09C/7y7IHNW2g2RMT8C8anxx 0T2b/2J/arWsSJ89r1KW0MfHFnuSh70+uY7+/fStYUGCXHg08dPQ5x33cjkE8CYF 7O50qGcmYPmgCKqPI0lRsrBL6rbEkBCrbFkSrSi2f7ktZ30S40hYJj8/IhiuU1rP RQeD4fVHP+ZuBO+WV7cDbBcSSfdEvgY2xljYWSBZXMscMGbgy3I= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:43 2025 by rpki-client