$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: XzTodbJCXbd8CtkU8IY3HobwQB0l+/5D6YCloqw2w8k= Subject key identifier: E6:FA:B7:F2:E2:41:15:0D:AB:13:B5:31:96:8D:FF:89:A6:00:B5:DE Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 1F88B71F872865D8CD69AC95D25A2A41076F88AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0166 Signing time: Thu 04 Sep 2025 08:40:50 +0000 Manifest this update: Thu 04 Sep 2025 08:35:50 +0000 Manifest next update: Sun 07 Sep 2025 11:11:50 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 3: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: 95tUhkGx417zlsdfFpU0pEacRP/7JkDDW8Stnqf07Og=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:88:b7:1f:87:28:65:d8:cd:69:ac:95:d2:5a:2a:41:07:6f:88:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Sep 4 08:35:50 2025 GMT Not After : Sep 7 11:11:50 2025 GMT Subject: CN=E6FAB7F2E241150DAB13B531968DFF89A600B5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:b3:ef:c7:d0:a7:8a:f5:c5:ee:dd:f9:d4: 09:6e:3b:bd:12:9a:02:ae:23:f4:c8:64:4d:45:79: 36:10:15:17:66:8d:01:2c:d5:2b:8f:07:7f:21:4c: a0:28:e3:8c:59:11:56:c5:31:be:03:3c:0f:21:67: a5:b0:55:df:f2:de:b1:c4:b3:be:19:78:35:2b:8d: d5:90:9d:ae:e4:ca:7c:11:c7:05:b1:01:0b:dc:32: cb:92:bc:f3:a4:91:c3:6f:2f:29:ea:05:5e:25:7d: 21:10:eb:67:8e:e8:04:d9:0a:91:bc:bb:02:3a:49: b3:2d:fa:dc:4f:51:7c:58:91:73:00:91:5d:50:0b: ea:c7:c9:24:5c:59:8b:99:2a:ba:47:1f:b4:26:2b: ce:bf:b8:d5:87:36:d0:bf:89:c5:88:be:cc:e2:81: 76:cc:7c:88:66:17:a4:3a:6b:08:b9:13:e3:c5:54: b9:2b:1f:28:a3:0a:ee:43:04:fe:b4:d1:53:d0:90: da:1a:dd:ad:17:28:88:81:a2:d6:1f:0c:c4:a0:cb: 01:ac:05:a5:34:ed:41:af:7c:67:a7:48:86:6c:21: 57:c1:bb:e0:5c:25:65:7b:8d:6c:be:41:ca:aa:c3: 4e:51:39:9a:89:f2:9c:0c:5e:3f:fe:31:05:24:86: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FA:B7:F2:E2:41:15:0D:AB:13:B5:31:96:8D:FF:89:A6:00:B5:DE X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1e:79:50:9f:f5:cd:d9:aa:9b:6b:ed:51:74:a9:7d:dc:c6: ed:18:e5:b3:85:17:08:6a:3d:e7:35:2b:94:67:c6:f9:b7:19: ac:8c:58:5e:13:b2:26:42:bc:67:8d:8c:3f:25:8e:bd:ab:51: a1:1b:ce:c4:46:db:bc:d6:6a:4a:fb:9c:91:52:b6:50:80:0d: c6:91:fc:ce:14:5e:c2:29:dd:bd:fa:55:99:46:fd:22:17:d6: fc:6d:75:55:c4:41:07:39:0c:b1:cc:a1:29:61:bb:d8:60:a0: 53:c2:50:f0:0b:02:47:d0:46:21:a5:9f:e2:e9:b0:89:f5:de: 80:1a:fd:b0:89:b1:fc:f3:f5:eb:19:c0:09:a4:b7:fc:e5:de: 6e:9f:ee:74:80:b6:31:fb:fd:31:3e:8d:88:b6:72:2a:be:cd: b0:25:5e:4b:20:a4:3a:f3:66:d6:cd:a0:f6:fe:c5:a9:00:e4: 57:a1:3a:8f:94:44:b4:fb:9a:23:9b:1e:4c:6a:0e:b0:a5:27: 6f:70:83:05:96:6a:95:a1:6d:0d:7a:6a:1a:f7:79:1d:61:5c: 87:9a:da:94:96:68:3d:06:1d:49:bc:79:f5:16:06:f0:c0:4d: 05:e4:23:31:b3:65:8a:1b:a6:0a:e3:49:30:ac:dd:af:b7:f6: 49:bf:59:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4i3H4coZdjNaayV0loqQQdviK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA5MDQwODM1NTBaFw0yNTA5MDcxMTExNTBaMDMxMTAvBgNV BAMTKEU2RkFCN0YyRTI0MTE1MERBQjEzQjUzMTk2OERGRjg5QTYwMEI1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyLPvx9CnivXF7t351AluO70S mgKuI/TIZE1FeTYQFRdmjQEs1SuPB38hTKAo44xZEVbFMb4DPA8hZ6WwVd/y3rHE s74ZeDUrjdWQna7kynwRxwWxAQvcMsuSvPOkkcNvLynqBV4lfSEQ62eO6ATZCpG8 uwI6SbMt+txPUXxYkXMAkV1QC+rHySRcWYuZKrpHH7QmK86/uNWHNtC/icWIvszi gXbMfIhmF6Q6awi5E+PFVLkrHyijCu5DBP600VPQkNoa3a0XKIiBotYfDMSgywGs BaU07UGvfGenSIZsIVfBu+BcJWV7jWy+Qcqqw05ROZqJ8pwMXj/+MQUkhlO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vq38uJBFQ2rE7Uxlo3/iaYAtd4wHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAeeVCf9c3Zqptr7VF0qX3cxu0Y5bOFFwhq Pec1K5Rnxvm3GayMWF4TsiZCvGeNjD8ljr2rUaEbzsRG27zWakr7nJFStlCADcaR /M4UXsIp3b36VZlG/SIX1vxtdVXEQQc5DLHMoSlhu9hgoFPCUPALAkfQRiGln+Lp sIn13oAa/bCJsfzz9esZwAmkt/zl3m6f7nSAtjH7/TE+jYi2ciq+zbAlXksgpDrz ZtbNoPb+xakA5FehOo+URLT7miObHkxqDrClJ29wgwWWapWhbQ16ahr3eR1hXIea 2pSWaD0GHUm8efUWBvDATQXkIzGzZYobpgrjSTCs3a+39km/WSE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:33 2025 by rpki-client