$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: uzvzHbWQBmomHgR7Rbp1iuZa2d+nVY8S54mIC6N9IRc= Subject key identifier: BE:62:6C:80:35:8F:65:51:9D:9F:D6:0F:E9:45:72:5E:CF:C2:6B:19 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 6C94015AAC09762A74F53F2C563AFD61D8DD633C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 01A9 Signing time: Sun 07 Sep 2025 13:41:33 +0000 Manifest this update: Sun 07 Sep 2025 13:36:33 +0000 Manifest next update: Wed 10 Sep 2025 19:40:33 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: X4h2CsYNcyRADmqmn+Tz8aPDErweii7iuFruSawYc24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:94:01:5a:ac:09:76:2a:74:f5:3f:2c:56:3a:fd:61:d8:dd:63:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Sep 7 13:36:33 2025 GMT Not After : Sep 10 19:40:33 2025 GMT Subject: CN=BE626C80358F65519D9FD60FE945725ECFC26B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:2b:e3:7a:fd:63:9d:d8:9a:1b:69:67:8d: a4:56:10:af:64:0c:be:9d:c8:78:e4:f8:4f:27:d0: fb:46:bd:f6:59:2f:96:6b:f4:a3:63:1e:1d:1b:17: fe:a5:65:5e:48:09:87:0b:35:8f:4b:02:7c:0c:29: 5c:2c:23:70:88:72:a5:0a:88:e5:39:43:60:b5:a7: 7b:af:93:0c:0d:c8:93:b7:32:67:48:1b:8f:cd:b7: f2:b4:e8:84:c3:b7:de:d5:ea:79:38:fd:ff:6a:97: f2:8e:98:6c:cd:1f:bc:50:4f:0a:e1:25:8f:f6:76: 1c:f2:4d:ef:75:00:e1:5e:3a:4f:45:bb:fe:9b:82: b2:0e:c6:95:be:a5:4c:d6:dd:96:31:24:10:d0:a5: 43:ab:4a:2d:44:15:b7:ef:a1:9e:26:ee:a2:90:5f: cc:e9:61:09:98:10:7f:f4:7f:4f:f2:f1:4f:ba:c7: 03:e3:d4:61:5e:6a:4d:d5:9c:6d:db:52:e5:f6:8f: f0:47:cb:54:72:ca:8e:3f:20:de:db:dd:6b:d5:e9: 11:2e:95:77:a4:c4:9d:d1:15:41:80:af:42:bb:d2: 5c:7a:41:11:8b:dd:54:84:66:41:9c:4a:98:48:e2: 00:fb:6e:d9:c2:84:39:c3:e7:9d:88:ec:ec:fa:4d: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:62:6C:80:35:8F:65:51:9D:9F:D6:0F:E9:45:72:5E:CF:C2:6B:19 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9a:7d:b8:22:6c:06:96:0e:94:0d:db:4f:83:16:21:3e:e4: 9b:ea:5f:2e:35:47:20:c4:c9:23:01:99:17:ec:44:17:86:35: f2:d1:af:fc:a7:9d:ca:9e:b7:ff:50:d5:1f:01:e5:fd:6a:57: cb:15:66:dd:5a:02:d6:7c:31:70:69:59:33:0a:56:67:e5:99: 20:2b:99:9d:d2:df:0d:e4:2f:f4:1b:b8:ac:7c:de:8c:a5:f1: 24:7a:4e:88:8b:b7:78:51:a6:8a:a2:8b:f0:26:06:fb:23:33: f1:92:17:d4:fe:81:33:f9:30:66:60:78:01:dd:5d:8d:09:3a: 6e:b2:80:77:0b:06:56:30:90:32:90:6b:d3:29:ac:f2:58:ea: d5:62:90:f6:28:4b:8d:a1:30:25:68:bf:8b:3c:a4:fb:27:20: 59:51:68:c7:70:6a:f1:ac:8a:a1:40:45:5d:26:6c:8a:04:81: 44:95:34:b0:6c:59:54:76:af:09:a7:2c:e1:e0:c4:5e:7f:32: cf:7c:c3:8a:e0:e1:6f:5a:07:13:8d:66:a0:d7:60:f5:91:77: 56:10:c6:41:58:db:fc:12:c3:18:46:90:bc:fc:79:e5:6e:ea: df:6f:ee:a5:99:66:c0:4d:a7:93:c2:89:1b:00:77:d7:56:18: 98:55:0d:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJQBWqwJdip09T8sVjr9YdjdYzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA5MDcxMzM2MzNaFw0yNTA5MTAxOTQwMzNaMDMxMTAvBgNV BAMTKEJFNjI2QzgwMzU4RjY1NTE5RDlGRDYwRkU5NDU3MjVFQ0ZDMjZCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDivjev1jndiaG2lnjaRWEK9k DL6dyHjk+E8n0PtGvfZZL5Zr9KNjHh0bF/6lZV5ICYcLNY9LAnwMKVwsI3CIcqUK iOU5Q2C1p3uvkwwNyJO3MmdIG4/Nt/K06ITDt97V6nk4/f9ql/KOmGzNH7xQTwrh JY/2dhzyTe91AOFeOk9Fu/6bgrIOxpW+pUzW3ZYxJBDQpUOrSi1EFbfvoZ4m7qKQ X8zpYQmYEH/0f0/y8U+6xwPj1GFeak3VnG3bUuX2j/BHy1Ryyo4/IN7b3WvV6REu lXekxJ3RFUGAr0K70lx6QRGL3VSEZkGcSphI4gD7btnChDnD552I7Oz6TURLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmJsgDWPZVGdn9YP6UVyXs/CaxkwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqafbgibAaWDpQN20+DFiE+5JvqXy41RyDE ySMBmRfsRBeGNfLRr/ynncqet/9Q1R8B5f1qV8sVZt1aAtZ8MXBpWTMKVmflmSAr mZ3S3w3kL/QbuKx83oyl8SR6ToiLt3hRpoqii/AmBvsjM/GSF9T+gTP5MGZgeAHd XY0JOm6ygHcLBlYwkDKQa9MprPJY6tVikPYoS42hMCVov4s8pPsnIFlRaMdwavGs iqFARV0mbIoEgUSVNLBsWVR2rwmnLOHgxF5/Ms98w4rg4W9aBxONZqDXYPWRd1YQ xkFY2/wSwxhGkLz8eeVu6t9v7qWZZsBNp5PCiRsAd9dWGJhVDTo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:51 2025 by rpki-client