$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: tOsPOwdEJ7QylRbSJ48Ch1vPmVbXY3l60X04Gei1NuU= Subject key identifier: DF:49:BE:4B:14:51:06:1A:F9:9B:28:3A:8E:FB:FB:51:9A:74:E1:2C Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 531406A01E53C230099F5750C1B724AF67497365 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: 78 Signing time: Sun 31 Aug 2025 08:21:17 +0000 Manifest this update: Sun 31 Aug 2025 08:16:17 +0000 Manifest next update: Wed 03 Sep 2025 19:28:17 +0000 Files and hashes: 1: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: FsxidMWi3PbtgwnQqTxXORTOu5NjOd7otWIGNFVCDpE=) 2: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: 66g0GBTdSeAme2H37nLc01yyifW6eVqeoyuhCfgsCgA=) 3: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: UdR2VsrcQEJLqL8yqAOv5eiXRwXBi0l4fctRzRTejQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:06:a0:1e:53:c2:30:09:9f:57:50:c1:b7:24:af:67:49:73:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Aug 31 08:16:17 2025 GMT Not After : Sep 3 19:28:17 2025 GMT Subject: CN=DF49BE4B1451061AF99B283A8EFBFB519A74E12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c3:e9:db:7e:36:5f:a5:f9:cb:aa:38:ce:10: a5:bb:e1:58:0b:d7:77:f5:2b:b9:ad:7e:36:3d:89: 17:63:17:f3:ee:2c:c1:2e:49:bb:ce:04:1d:24:dd: 78:eb:89:a3:bf:85:18:66:31:e1:24:4c:d7:f0:20: f2:e7:15:77:1a:41:0c:8c:9d:a6:c9:0e:6e:d5:f1: 03:a3:0c:52:8b:55:ba:d5:9a:aa:4e:cf:2c:05:db: de:e0:65:eb:a9:bd:21:e3:85:9b:8a:49:ff:56:61: 81:ac:e1:b9:0c:1f:d6:0e:33:48:7c:34:c9:2a:7f: d5:69:84:ce:c5:8e:d5:16:86:b4:87:14:90:1d:e4: 92:86:33:ab:d7:13:17:05:c5:a7:06:de:af:6f:7a: 3c:05:3e:0c:a8:6c:3c:32:9f:34:7a:99:d6:7f:70: b5:10:54:e4:fd:37:af:90:9e:e2:17:d6:1f:d4:4a: bc:b3:71:42:b1:a9:ca:ed:2e:ef:5a:26:e1:0d:0c: d4:77:fe:04:da:c6:e8:cc:26:46:c9:41:aa:4f:e3: 72:9f:89:af:96:e9:fa:34:3b:d2:e8:07:7f:99:6b: 6a:a4:ac:64:39:3d:df:9b:23:1e:76:36:f5:ba:53: a6:cc:c7:51:00:c0:10:c3:9d:74:7d:72:46:10:76: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:49:BE:4B:14:51:06:1A:F9:9B:28:3A:8E:FB:FB:51:9A:74:E1:2C X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e7:ee:fc:5f:b2:44:87:91:f2:0b:bb:91:ba:44:bf:8b:3f: 9a:92:ac:93:87:1c:24:13:9e:3e:61:7a:35:f9:d4:6f:08:16: c6:19:fd:44:86:12:5b:91:01:30:22:5e:6f:55:93:0f:b8:a3: 7c:01:f3:98:bd:c3:ab:68:3c:38:bc:9a:0b:0b:94:c8:d0:13: 35:7e:6b:24:c4:03:f9:ca:a9:04:19:2b:0a:94:16:0b:da:f9: 71:1f:2e:da:f8:75:7d:dd:0d:dd:99:64:a3:b3:20:88:cf:42: 5a:49:04:8d:1c:1a:5f:75:02:d5:ff:32:48:3a:d4:8f:a4:d4: 6d:e0:78:5b:1d:d2:28:28:4f:9f:e3:61:89:34:71:71:cb:60: d7:81:46:0a:37:9a:ef:74:57:cf:19:c3:26:e5:8a:ff:bb:ef: 55:a2:c2:ce:3d:67:0e:b2:b6:49:01:5f:c0:0a:33:86:c6:b5: bc:67:a5:97:71:40:a5:2e:7c:9b:52:c7:58:9f:d2:ee:fa:73: 70:ed:47:8e:a1:4b:e9:4e:32:8f:b0:7b:18:c3:dc:a8:a6:7f: df:6b:7e:8f:06:fe:d1:26:0a:e8:6b:d9:62:d3:6b:d0:28:27: 56:4c:1c:44:af:c5:60:42:6e:7e:50:0c:f5:10:dd:7c:b7:db: fa:c4:b5:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxQGoB5TwjAJn1dQwbckr2dJc2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNTA4MzEwODE2MTdaFw0yNTA5MDMxOTI4MTdaMDMxMTAvBgNV BAMTKERGNDlCRTRCMTQ1MTA2MUFGOTlCMjgzQThFRkJGQjUxOUE3NEUxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyw+nbfjZfpfnLqjjOEKW74VgL 13f1K7mtfjY9iRdjF/PuLMEuSbvOBB0k3XjriaO/hRhmMeEkTNfwIPLnFXcaQQyM nabJDm7V8QOjDFKLVbrVmqpOzywF297gZeupvSHjhZuKSf9WYYGs4bkMH9YOM0h8 NMkqf9VphM7FjtUWhrSHFJAd5JKGM6vXExcFxacG3q9vejwFPgyobDwynzR6mdZ/ cLUQVOT9N6+QnuIX1h/USryzcUKxqcrtLu9aJuENDNR3/gTaxujMJkbJQapP43Kf ia+W6fo0O9LoB3+Za2qkrGQ5Pd+bIx52NvW6U6bMx1EAwBDDnXR9ckYQdtJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30m+SxRRBhr5myg6jvv7UZp04SwwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTn7vxfskSHkfILu5G6RL+LP5qSrJOHHCQT nj5hejX51G8IFsYZ/USGEluRATAiXm9Vkw+4o3wB85i9w6toPDi8mgsLlMjQEzV+ ayTEA/nKqQQZKwqUFgva+XEfLtr4dX3dDd2ZZKOzIIjPQlpJBI0cGl91AtX/Mkg6 1I+k1G3geFsd0igoT5/jYYk0cXHLYNeBRgo3mu90V88Zwybliv+771Wiws49Zw6y tkkBX8AKM4bGtbxnpZdxQKUufJtSx1if0u76c3DtR46hS+lOMo+wexjD3Kimf99r fo8G/tEmCuhr2WLTa9AoJ1ZMHESvxWBCbn5QDPUQ3Xy32/rEtZI= -----END CERTIFICATE-----Generated at Sun Aug 31 13:59:12 2025 by rpki-client