$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: N3nVUgrWTKeQe7gZOu4f5Il/6L+Nh1Hy2b3zMhtl9FA= Subject key identifier: D4:67:3A:E6:03:1B:F8:6B:01:D5:DE:0C:7E:B1:A0:7A:F1:41:FF:79 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 28B7D03244271A35A1D20453D9C47D59B30F1545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: EB Signing time: Sat 06 Sep 2025 11:22:19 +0000 Manifest this update: Sat 06 Sep 2025 11:17:19 +0000 Manifest next update: Tue 09 Sep 2025 15:14:19 +0000 Files and hashes: 1: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: kON71lAsZcOGHc//j8srMo7Z1Pe2S0zHEEVqIrZbRwg=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b7:d0:32:44:27:1a:35:a1:d2:04:53:d9:c4:7d:59:b3:0f:15:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Sep 6 11:17:19 2025 GMT Not After : Sep 9 15:14:19 2025 GMT Subject: CN=D4673AE6031BF86B01D5DE0C7EB1A07AF141FF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:7d:77:08:f0:e6:38:da:9f:8d:10:d4:2c: cb:c5:6e:09:46:53:45:c9:02:42:56:b9:f9:36:8a: d4:4a:a1:e8:84:f4:24:3f:54:82:17:c9:90:19:77: dc:7b:3a:ff:93:f0:af:6e:8c:57:ab:a9:b9:d5:36: c5:3f:03:ed:7e:c3:58:9b:79:4d:08:aa:c4:9a:b1: 71:6b:1a:79:5e:4e:21:6d:18:7d:05:e7:50:4c:dd: b7:03:68:1c:db:cc:52:2d:82:e5:58:90:e1:6e:19: 9f:eb:00:ab:01:12:a3:7d:dc:7e:0a:73:e7:bf:5a: ca:fe:b2:29:55:ee:a2:6d:32:df:c7:59:11:87:a7: 17:40:9e:d6:46:5d:d1:f1:13:49:0d:85:cd:bb:e7: 13:eb:d1:97:42:a3:ba:9a:5a:6d:14:bc:8e:af:30: 36:31:41:cb:ba:a0:87:a9:4d:24:a8:13:7d:59:2f: 82:84:3e:d1:3f:97:24:40:bf:d8:8e:25:f4:f7:37: c1:61:11:46:f9:83:02:dd:e9:3e:7c:2c:89:03:84: d9:df:5e:d2:a7:25:f5:16:01:19:d7:e0:71:39:e6: 1e:aa:d0:7f:bd:d3:10:a5:9d:ad:22:de:b4:e4:3e: 71:98:53:aa:33:69:1b:b7:ce:df:1e:5d:66:be:23: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:67:3A:E6:03:1B:F8:6B:01:D5:DE:0C:7E:B1:A0:7A:F1:41:FF:79 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:ac:a6:85:8a:fb:ed:e0:c6:13:c2:4c:25:f7:ac:15:ca:0d: 2d:79:83:44:59:fe:db:12:2e:51:27:5d:fa:d3:e7:79:dc:67: bd:a5:fb:97:37:47:63:4c:40:da:38:49:87:4e:27:7c:2d:f9: 43:ec:2e:df:90:c3:d5:99:bc:15:79:28:2f:57:cd:42:a7:18: 5a:38:c8:65:8f:0b:bb:c4:b3:62:9b:88:26:1a:cd:bd:70:b0: 23:0e:53:92:68:c8:4d:f4:a9:06:82:a0:31:03:63:36:c2:0f: 6f:59:43:32:de:be:aa:24:12:94:fb:98:04:a7:46:86:c1:68: bb:9c:3c:14:f0:9f:1b:72:8c:a9:ba:f4:b0:0c:5b:99:0d:10: 63:88:58:9b:77:44:72:d1:0a:7b:04:f3:21:b2:f5:18:f3:a9: 13:eb:01:db:ef:8f:a5:56:98:f0:05:4b:36:24:04:55:94:72: 9c:05:d5:90:d8:b5:6d:6a:3c:3e:34:45:0f:21:4e:f8:08:84: 51:11:35:e2:63:16:be:3b:02:44:c0:6a:6c:03:af:2f:39:4c: 04:1a:4b:03:5d:9f:c3:3d:e6:e1:87:09:a6:4c:5b:50:75:f5: b4:85:98:51:64:1c:38:64:75:42:94:e0:5a:20:e7:5f:af:24: 4a:92:48:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLfQMkQnGjWh0gRT2cR9WbMPFUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA5MDYxMTE3MTlaFw0yNTA5MDkxNTE0MTlaMDMxMTAvBgNV BAMTKEQ0NjczQUU2MDMxQkY4NkIwMUQ1REUwQzdFQjFBMDdBRjE0MUZGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHX13CPDmONqfjRDULMvFbglG U0XJAkJWufk2itRKoeiE9CQ/VIIXyZAZd9x7Ov+T8K9ujFerqbnVNsU/A+1+w1ib eU0IqsSasXFrGnleTiFtGH0F51BM3bcDaBzbzFItguVYkOFuGZ/rAKsBEqN93H4K c+e/Wsr+silV7qJtMt/HWRGHpxdAntZGXdHxE0kNhc275xPr0ZdCo7qaWm0UvI6v MDYxQcu6oIepTSSoE31ZL4KEPtE/lyRAv9iOJfT3N8FhEUb5gwLd6T58LIkDhNnf XtKnJfUWARnX4HE55h6q0H+90xClna0i3rTkPnGYU6ozaRu3zt8eXWa+I7CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Gc65gMb+GsB1d4MfrGgevFB/3kwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqspoWK++3gxhPCTCX3rBXKDS15g0RZ/tsS LlEnXfrT53ncZ72l+5c3R2NMQNo4SYdOJ3wt+UPsLt+Qw9WZvBV5KC9XzUKnGFo4 yGWPC7vEs2KbiCYazb1wsCMOU5JoyE30qQaCoDEDYzbCD29ZQzLevqokEpT7mASn RobBaLucPBTwnxtyjKm69LAMW5kNEGOIWJt3RHLRCnsE8yGy9RjzqRPrAdvvj6VW mPAFSzYkBFWUcpwF1ZDYtW1qPD40RQ8hTvgIhFERNeJjFr47AkTAamwDry85TAQa SwNdn8M95uGHCaZMW1B19bSFmFFkHDhkdUKU4Fog51+vJEqSSF0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:44 2025 by rpki-client