$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: vmlRPxlfcTSZ0Z6q//lZ45a+b91xJDIG98PrChGU6yY= Subject key identifier: 0B:FB:D6:BC:6F:64:69:B8:7C:C0:2C:C6:F6:95:ED:37:79:A8:D0:64 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 72D896E0C7E1327A1000EBDFED3D5009B00B713C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 019A Signing time: Sun 07 Sep 2025 13:41:07 +0000 Manifest this update: Sun 07 Sep 2025 13:36:07 +0000 Manifest next update: Wed 10 Sep 2025 15:06:07 +0000 Files and hashes: 1: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: GXFMe8pzRHoZLCLwN5/xto4lu1oK5u7qLNorGzv1o5M=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d8:96:e0:c7:e1:32:7a:10:00:eb:df:ed:3d:50:09:b0:0b:71:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Sep 7 13:36:07 2025 GMT Not After : Sep 10 15:06:07 2025 GMT Subject: CN=0BFBD6BC6F6469B87CC02CC6F695ED3779A8D064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:29:7c:46:ed:84:94:41:d4:1d:4a:30:e7:fb: 7e:7d:c9:52:d4:47:f0:70:56:bc:8c:6e:69:b2:2a: 7d:31:1c:4a:3a:ba:32:82:09:78:16:55:80:3c:13: a0:5c:f4:b2:f7:a7:2c:d6:2e:ac:a0:6c:66:7c:1c: 51:54:90:e4:d6:f7:2d:0b:e8:d9:ab:20:ab:94:2f: a2:3b:f0:64:93:01:89:c2:f3:55:0c:cb:9f:3c:6c: ad:78:4c:e3:3d:ad:a1:17:b3:1f:9d:49:60:0a:6d: b7:93:23:45:1e:a1:fd:d5:b4:24:b7:ab:83:6a:f4: 03:7c:26:85:05:35:0d:f8:c6:c1:87:b5:c1:19:71: 5e:e4:6f:79:7b:8b:ab:d0:75:19:24:9c:f0:3c:29: ea:3b:f6:c9:61:96:65:b8:4d:9f:78:24:76:37:e9: bb:59:64:8b:c3:b8:2c:18:08:31:b8:42:83:13:f2: f2:b4:47:b9:80:ed:9d:1f:53:8f:af:45:4f:7b:a1: aa:f0:e0:77:74:30:5f:9f:47:21:08:4c:ca:e5:6f: 92:a4:dc:07:57:a7:2e:7d:f4:cc:4d:3d:74:ef:1d: e6:47:0e:d4:1a:76:3e:a1:82:dd:42:c0:eb:a6:6e: 9f:5d:fc:50:17:08:9a:97:49:65:54:27:b5:26:5c: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:D6:BC:6F:64:69:B8:7C:C0:2C:C6:F6:95:ED:37:79:A8:D0:64 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ef:59:5e:fd:dc:07:c0:c6:34:f9:46:bd:e2:68:96:71:2b: 26:4d:a3:9e:98:fe:0a:68:c7:d1:5a:cb:78:ef:a3:2c:bf:0e: 77:d1:bd:58:ee:33:a3:13:c3:c5:63:7a:49:28:87:98:42:c5: fc:a7:e2:09:d6:be:4a:f1:fa:2e:9d:bd:2b:69:4f:be:69:f5: c9:0e:f4:15:f7:2d:63:48:bd:8e:f2:07:f8:a9:ed:9f:ed:0f: 40:59:5d:10:1c:47:05:b0:b2:7e:90:61:da:f5:74:4f:f6:95: 2c:b1:e5:01:1e:15:3b:cf:42:ec:87:f8:53:80:d6:ed:67:e5: b4:f6:e5:10:4f:70:3d:36:17:3d:fb:e2:52:5d:d5:7a:7e:15: 6b:ab:56:aa:3f:a6:87:10:66:d2:d1:1c:69:e2:47:db:10:f1: 96:a8:65:a9:43:0a:01:38:fd:69:a3:6c:5a:41:2e:6d:b0:61: ec:a0:f9:9b:18:e6:d3:18:de:3c:1b:4c:d1:26:14:31:3a:06: 8c:db:92:ff:aa:f8:90:e1:bb:31:0e:78:62:05:d5:9b:66:bb: f3:7c:d0:62:79:72:d2:19:f3:54:83:e5:9c:8e:ee:6d:a7:16: f7:13:53:3a:24:44:0b:01:29:d4:34:ae:c5:de:64:b9:65:f7: 30:73:45:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctiW4MfhMnoQAOvf7T1QCbALcTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA5MDcxMzM2MDdaFw0yNTA5MTAxNTA2MDdaMDMxMTAvBgNV BAMTKDBCRkJENkJDNkY2NDY5Qjg3Q0MwMkNDNkY2OTVFRDM3NzlBOEQwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKXxG7YSUQdQdSjDn+359yVLU R/BwVryMbmmyKn0xHEo6ujKCCXgWVYA8E6Bc9LL3pyzWLqygbGZ8HFFUkOTW9y0L 6NmrIKuUL6I78GSTAYnC81UMy588bK14TOM9raEXsx+dSWAKbbeTI0Ueof3VtCS3 q4Nq9AN8JoUFNQ34xsGHtcEZcV7kb3l7i6vQdRkknPA8Keo79slhlmW4TZ94JHY3 6btZZIvDuCwYCDG4QoMT8vK0R7mA7Z0fU4+vRU97oarw4Hd0MF+fRyEITMrlb5Kk 3AdXpy599MxNPXTvHeZHDtQadj6hgt1CwOumbp9d/FAXCJqXSWVUJ7UmXLQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/vWvG9kabh8wCzG9pXtN3mo0GQwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrvWV793AfAxjT5Rr3iaJZxKyZNo56Y/gpo x9Fay3jvoyy/DnfRvVjuM6MTw8Vjekkoh5hCxfyn4gnWvkrx+i6dvStpT75p9ckO 9BX3LWNIvY7yB/ip7Z/tD0BZXRAcRwWwsn6QYdr1dE/2lSyx5QEeFTvPQuyH+FOA 1u1n5bT25RBPcD02Fz374lJd1Xp+FWurVqo/pocQZtLRHGniR9sQ8ZaoZalDCgE4 /WmjbFpBLm2wYeyg+ZsY5tMY3jwbTNEmFDE6Bozbkv+q+JDhuzEOeGIF1Ztmu/N8 0GJ5ctIZ81SD5ZyO7m2nFvcTUzokRAsBKdQ0rsXeZLll9zBzRe4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:20 2025 by rpki-client