$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft File: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft (raw, json) Hash identifier: jc2zs3C6U+SgjgZ26BpOGFYLbUFegZOb7FYnaBifs9k= Subject key identifier: 61:B7:E8:E3:A6:B2:83:2A:45:C9:39:F7:85:57:98:65:ED:91:B8:28 Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Certificate serial: 5C57CF6B2924192D629FB05165868F03E234B0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft Manifest number: 0120 Signing time: Fri 05 Sep 2025 07:30:41 +0000 Manifest this update: Fri 05 Sep 2025 07:25:41 +0000 Manifest next update: Mon 08 Sep 2025 17:52:41 +0000 Files and hashes: 1: 3130332e3234332e31302e302f32342d3234203d3e20313532303331.roa (hash: NnrAQKq/S9bS3O9ZlatHMfb5HFDnemqWID50FjT9Aug=) 2: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: viUcie98IVd25MWNuFPhXTYdX+mA062KhTOiByYM0Rc=) 3: A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl (hash: goW6kn8s6tgnP7pK/dbJcOIEnJzkJ8vUPSi+kspgxCQ=) 4: 3130332e3234332e31312e302f32342d3234203d3e20313532303331.roa (hash: fMFb9fh0j0vyyDRCfSTBrQgFpLQVi1+4hBCwpbgvgBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:57:cf:6b:29:24:19:2d:62:9f:b0:51:65:86:8f:03:e2:34:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B Validity Not Before: Sep 5 07:25:41 2025 GMT Not After : Sep 8 17:52:41 2025 GMT Subject: CN=61B7E8E3A6B2832A45C939F785579865ED91B828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:14:e5:b3:ba:55:50:d6:a1:f7:12:83:d0: a6:d3:a7:b0:e9:b8:52:9f:c1:ce:f2:ec:4a:71:44: e3:c8:d1:fb:0f:e0:0d:e8:96:22:86:ec:ed:94:a3: f3:94:0c:bb:99:7f:09:68:09:1b:96:70:7c:53:e0: 4a:41:3b:96:9c:3a:5c:34:8b:63:74:55:a9:9c:6b: c4:15:76:1a:d8:cf:10:35:e8:8c:18:0d:9f:b6:2d: 35:47:72:07:42:dd:5e:da:6d:fd:5e:f6:af:c2:79: 01:e3:4c:d7:a5:c9:df:55:00:8a:8b:5f:cd:d2:9b: 34:6a:0e:54:e7:d9:c6:59:4b:1d:d1:f0:51:57:1f: 6e:cd:de:b0:e3:38:b6:f5:27:21:c5:da:fa:b2:4a: a8:ff:7f:6e:ce:08:0e:d4:67:42:11:0a:2a:b1:fb: 05:fc:90:e7:b1:5c:b7:ff:c7:fc:5f:4f:1a:20:66: f9:19:25:e1:f0:c4:ff:ba:3f:e4:96:b8:43:15:e2: 8c:fc:0d:9b:42:bd:1d:67:18:b4:3c:7f:c3:16:51: a7:47:6a:52:e8:7e:a8:ce:2f:68:0a:5d:55:d5:0e: eb:94:0b:10:14:25:9b:c7:74:b0:ec:5c:e5:5e:24: 2b:21:00:71:bc:3b:8b:fa:2d:fc:ac:5a:ee:21:92: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:E8:E3:A6:B2:83:2A:45:C9:39:F7:85:57:98:65:ED:91:B8:28 X509v3 Authority Key Identifier: keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6f:23:2c:be:3b:c9:17:31:99:f2:a8:b4:e9:0d:40:1e:e6: 42:48:86:2f:fc:fe:b7:d8:f0:67:c0:f1:05:6a:08:5d:9a:fe: 51:19:d9:9a:e8:74:12:77:61:a7:6d:19:5a:fd:ed:6e:5f:90: 7b:0a:8f:a2:be:61:6e:8f:c3:9e:74:fc:de:12:d0:aa:f3:0d: cc:3d:e5:e1:dd:46:e6:bc:2d:98:63:15:dd:70:f2:d4:ab:c6: 59:07:59:80:8d:84:14:76:80:cf:cb:76:bc:eb:70:c5:74:69: 0b:88:13:0b:92:51:db:fd:5e:0f:15:66:e6:f6:54:08:e4:c0: 86:db:54:78:c4:32:9d:4f:07:51:d7:46:88:33:73:19:ab:b7: 52:39:7c:25:b1:ce:75:bc:fc:10:85:b9:a2:2e:42:3e:e4:bd: 7e:d0:ea:7f:b7:5e:2b:6a:8a:43:70:40:66:ed:cc:82:e2:5a: 7f:0d:ba:88:2c:bb:e8:e8:b9:3d:c7:cf:8e:4e:77:ac:b8:b8: 1f:26:06:da:28:fe:67:52:d8:81:6c:1f:84:c7:69:14:28:0a: 2a:7e:39:64:dd:42:44:02:21:26:02:80:7b:65:be:f5:0c:53: 6b:e3:93:c2:1c:5e:1d:e3:90:d4:b6:6a:29:8f:55:f1:ef:3e: 7a:0e:d3:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFfPaykkGS1in7BRZYaPA+I0sLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4 MjE2NjE1QjAeFw0yNTA5MDUwNzI1NDFaFw0yNTA5MDgxNzUyNDFaMDMxMTAvBgNV BAMTKDYxQjdFOEUzQTZCMjgzMkE0NUM5MzlGNzg1NTc5ODY1RUQ5MUI4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pRTls7pVUNah9xKD0KbTp7Dp uFKfwc7y7EpxROPI0fsP4A3oliKG7O2Uo/OUDLuZfwloCRuWcHxT4EpBO5acOlw0 i2N0Vamca8QVdhrYzxA16IwYDZ+2LTVHcgdC3V7abf1e9q/CeQHjTNelyd9VAIqL X83SmzRqDlTn2cZZSx3R8FFXH27N3rDjOLb1JyHF2vqySqj/f27OCA7UZ0IRCiqx +wX8kOexXLf/x/xfTxogZvkZJeHwxP+6P+SWuEMV4oz8DZtCvR1nGLQ8f8MWUadH alLofqjOL2gKXVXVDuuUCxAUJZvHdLDsXOVeJCshAHG8O4v6LfysWu4hkuDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbfo46aygypFyTn3hVeYZe2RuCgwHwYDVR0j BBgwFoAUqdRqBm2643dqFemrCabNPIIWYVswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmM3ZGZkNC1lNTEwLTQ3MDctOTgxOC1hMmIxZTJjNmIyMTYvMC9BOUQ0NkEwNjZE QkFFMzc3NkExNUU5QUIwOUE2Q0QzQzgyMTY2MTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNEM0M4MjE2 NjE1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJjN2RmZDQtZTUxMC00NzA3LTk4 MTgtYTJiMWUyYzZiMjE2LzAvQTlENDZBMDY2REJBRTM3NzZBMTVFOUFCMDlBNkNE M0M4MjE2NjE1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxvIyy+O8kXMZnyqLTpDUAe5kJIhi/8/rfY 8GfA8QVqCF2a/lEZ2ZrodBJ3YadtGVr97W5fkHsKj6K+YW6Pw550/N4S0KrzDcw9 5eHdRua8LZhjFd1w8tSrxlkHWYCNhBR2gM/LdrzrcMV0aQuIEwuSUdv9Xg8VZub2 VAjkwIbbVHjEMp1PB1HXRogzcxmrt1I5fCWxznW8/BCFuaIuQj7kvX7Q6n+3Xitq ikNwQGbtzILiWn8Nuogsu+jouT3Hz45Od6y4uB8mBtoo/mdS2IFsH4THaRQoCip+ OWTdQkQCISYCgHtlvvUMU2vjk8IcXh3jkNS2aimPVfHvPnoO05w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:09 2025 by rpki-client