$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: xqeDiP1dE5jbbV6vlYkbrNPHkHUgXI/wvpNQnmhWwPA= Subject key identifier: 3D:2D:A2:23:4B:2F:E4:37:3A:DF:C5:68:BC:58:88:AE:27:23:CB:53 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 287360870FF9E29A51A190D2CC0FBC8796F2743F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 018E Signing time: Sat 06 Sep 2025 22:12:08 +0000 Manifest this update: Sat 06 Sep 2025 22:07:08 +0000 Manifest next update: Tue 09 Sep 2025 23:25:08 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: 9/96DotB8MGfZGaAsC30iILwfOA5VaKcWmRXWOwqnos=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:73:60:87:0f:f9:e2:9a:51:a1:90:d2:cc:0f:bc:87:96:f2:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Sep 6 22:07:08 2025 GMT Not After : Sep 9 23:25:08 2025 GMT Subject: CN=3D2DA2234B2FE4373ADFC568BC5888AE2723CB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:16:d9:97:9e:d6:46:e1:b5:cc:a2:5d:db: af:70:f5:08:e0:db:34:72:00:ba:21:5e:cd:96:ce: 87:44:1a:4e:2f:8d:75:45:5d:83:28:e5:62:9b:63: 83:58:59:19:78:26:25:fa:97:ec:65:f5:12:1e:22: 28:e4:86:f5:f2:6e:bb:09:c1:70:05:67:89:2a:cd: 8a:df:45:e5:81:19:35:4f:35:5d:91:1a:d1:32:6a: ca:1f:9a:96:dd:91:78:41:18:63:ca:29:f6:99:18: 7b:49:55:2c:12:42:90:be:56:57:56:a4:b3:61:ef: ca:b8:64:de:9b:b5:da:72:63:fa:7c:c5:a1:c7:4a: a8:cc:8a:13:e2:3f:15:b5:98:2b:24:fa:7a:f4:25: e9:96:e9:34:e7:ca:11:38:8a:f1:a5:f0:79:e2:ce: e9:40:ce:78:01:0c:fd:91:c3:aa:02:3f:ec:41:fb: 13:b0:ca:dd:ca:b0:70:b0:11:ef:8d:f0:be:b7:14: c4:a9:68:de:b3:0b:ca:2d:83:ad:a8:85:23:0b:14: 97:ed:53:63:b2:96:7e:7c:97:07:92:3c:1a:0d:f4: 8f:62:cd:ec:11:7d:1d:2c:19:e1:fa:b1:d1:36:9c: 30:87:38:84:26:0f:e1:fd:f1:35:6b:3d:0e:d5:74: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:A2:23:4B:2F:E4:37:3A:DF:C5:68:BC:58:88:AE:27:23:CB:53 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:7c:31:2a:cc:d7:45:06:08:3f:bb:9f:d6:22:ee:d7:57: 5d:f8:47:1e:5a:95:59:a6:7e:9d:3f:aa:dc:f5:44:61:4b:a0: 13:98:f8:52:9d:0c:7c:31:81:b5:2b:95:9e:68:36:3b:db:8c: 90:8a:99:15:4a:74:8d:7b:ad:fd:3b:f8:8b:d1:8c:33:7b:a9: 58:92:bd:cc:5c:30:fa:5a:9c:b3:ee:d8:c4:f9:ac:55:c5:f6: 82:f0:73:61:17:21:b7:b8:cf:71:8e:f0:32:a1:8a:97:f0:2d: eb:f3:de:7a:02:93:88:25:ac:71:0f:e5:65:07:09:bf:6b:66: db:ec:82:44:19:c2:60:68:19:7b:d9:e8:23:82:46:62:ad:c7: 44:31:8e:2e:c4:a2:2d:e8:51:1e:ba:2f:56:44:b3:fe:cb:cf: 6e:8f:a9:90:79:04:e0:2b:54:f9:9a:8d:cf:33:ee:8d:3d:f2: 20:e5:ed:77:fb:2d:c8:44:1b:1f:db:7c:de:96:6b:cc:3b:a0: 5b:15:04:7f:71:b1:52:58:b7:65:de:55:62:6b:a8:23:d1:57: 43:0f:fb:1b:13:f5:86:bf:e4:70:34:8e:9e:da:0e:7e:dd:25: f2:f2:bc:2a:11:00:ee:b5:9b:cb:71:ad:ef:70:e1:bd:14:1a: fd:86:0d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHNghw/54ppRoZDSzA+8h5bydD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA5MDYyMjA3MDhaFw0yNTA5MDkyMzI1MDhaMDMxMTAvBgNV BAMTKDNEMkRBMjIzNEIyRkU0MzczQURGQzU2OEJDNTg4OEFFMjcyM0NCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkxbZl57WRuG1zKJd269w9Qjg 2zRyALohXs2WzodEGk4vjXVFXYMo5WKbY4NYWRl4JiX6l+xl9RIeIijkhvXybrsJ wXAFZ4kqzYrfReWBGTVPNV2RGtEyasofmpbdkXhBGGPKKfaZGHtJVSwSQpC+VldW pLNh78q4ZN6btdpyY/p8xaHHSqjMihPiPxW1mCsk+nr0JemW6TTnyhE4ivGl8Hni zulAzngBDP2Rw6oCP+xB+xOwyt3KsHCwEe+N8L63FMSpaN6zC8otg62ohSMLFJft U2Oyln58lweSPBoN9I9izewRfR0sGeH6sdE2nDCHOIQmD+H98TVrPQ7VdIXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPS2iI0sv5Dc638VovFiIricjy1MwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSGfDEqzNdFBgg/u5/WIu7XV134Rx5alVmm fp0/qtz1RGFLoBOY+FKdDHwxgbUrlZ5oNjvbjJCKmRVKdI17rf07+IvRjDN7qViS vcxcMPpanLPu2MT5rFXF9oLwc2EXIbe4z3GO8DKhipfwLevz3noCk4glrHEP5WUH Cb9rZtvsgkQZwmBoGXvZ6COCRmKtx0Qxji7Eoi3oUR66L1ZEs/7Lz26PqZB5BOAr VPmajc8z7o098iDl7Xf7LchEGx/bfN6Wa8w7oFsVBH9xsVJYt2XeVWJrqCPRV0MP +xsT9Ya/5HA0jp7aDn7dJfLyvCoRAO61m8txre9w4b0UGv2GDRw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:43 2025 by rpki-client