$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: pqQxmUj30203sd5/FTwdyBgeW+Gpxqla8Rxf2bcZFqM= Subject key identifier: 87:08:C4:8B:95:53:72:EC:38:C8:E0:29:92:70:58:B7:BE:58:A1:0A Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 4875C609C05ECFA710678B7428CD503C17467FAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 013A Signing time: Wed 03 Sep 2025 07:41:14 +0000 Manifest this update: Wed 03 Sep 2025 07:36:14 +0000 Manifest next update: Sat 06 Sep 2025 14:53:14 +0000 Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) 2: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: hicVNM7e0Nykz03+sGlpu0ZnI6UjzrPla8mfYbYhujM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:75:c6:09:c0:5e:cf:a7:10:67:8b:74:28:cd:50:3c:17:46:7f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Sep 3 07:36:14 2025 GMT Not After : Sep 6 14:53:14 2025 GMT Subject: CN=8708C48B955372EC38C8E029927058B7BE58A10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:f7:ca:5b:9c:04:b0:00:12:27:39:9f:31: 1f:b6:22:29:8a:26:8c:85:3d:a3:ff:a8:ef:8a:cc: cd:cb:6c:64:f7:c9:66:5d:08:d0:70:9b:3e:5f:bb: 84:56:9e:25:d2:93:c8:52:1a:2e:b2:19:97:2d:71: 9c:70:f5:21:98:93:72:69:a7:09:da:32:7e:9e:1d: f4:3f:6a:a5:30:7f:59:92:fc:6b:3a:2a:9c:ff:15: 66:34:80:3b:76:7b:12:b6:8d:2d:0b:ae:28:ab:b8: 7c:a8:a4:74:3d:04:f7:72:35:45:e2:0e:47:6d:70: 7d:ee:ec:85:46:f4:e1:51:07:6a:0b:42:f0:02:2b: 53:78:36:86:e3:06:a5:66:8b:03:86:85:23:fb:ce: 37:80:90:0d:f2:a2:ad:94:04:d3:8f:cb:7b:6e:9a: de:c5:eb:76:d6:ea:76:60:95:25:eb:37:4f:ab:7b: 7d:26:6e:f9:38:f5:07:08:57:e2:f2:7b:20:b6:ba: 19:c1:7c:02:ba:52:76:d6:3a:40:a4:4e:47:51:ba: 42:84:56:4a:1c:c7:14:ee:5d:c1:35:2d:23:fe:8e: f3:90:1f:e6:c3:0e:41:85:ba:37:31:cc:1a:ac:70: 24:d0:de:84:d7:83:52:84:3b:cc:34:b4:9a:42:33: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:08:C4:8B:95:53:72:EC:38:C8:E0:29:92:70:58:B7:BE:58:A1:0A X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:26:b7:b5:df:ea:27:a8:d8:71:26:29:e0:13:f4:e2:2a:e2: 8c:79:8f:24:04:ba:49:79:07:e8:b9:5b:73:8b:ff:27:ab:0c: 90:73:6b:cf:22:5f:99:71:3d:e2:2f:92:a2:35:ac:3d:ae:02: 40:78:83:35:dd:93:05:c0:a7:27:2b:d8:c9:88:f9:9d:3c:b6: e6:04:d3:eb:6a:0e:a6:3b:3f:bb:9c:68:99:9b:e4:fb:dd:57: 9b:fa:46:8d:f5:2f:16:f7:0c:e9:64:13:ca:7f:ca:8d:2c:2a: 99:e4:b6:b7:71:57:59:4a:ec:29:8b:8c:52:ac:07:28:ae:2d: df:42:e6:aa:08:77:fc:8f:96:85:b1:1e:b8:aa:6f:79:9e:a3: 9a:e4:82:07:03:d5:8b:42:e0:b9:41:65:ba:8c:e8:69:98:9d: 43:ab:e3:2e:da:36:0e:ec:c8:ad:29:4d:64:3c:a8:ea:0b:7e: f1:d4:e2:ff:4c:f2:a6:9e:c4:0e:4f:df:24:1b:b4:16:70:08: 5f:11:57:5b:df:cb:32:50:87:b6:48:93:1c:66:33:cf:0f:7b: 9f:13:4b:c0:08:32:2b:97:56:ff:8a:07:3d:d7:36:39:76:fd: 39:58:4c:4b:16:37:e1:5e:d9:09:6f:b8:b7:e8:6b:e1:48:a9: 37:c9:47:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHXGCcBez6cQZ4t0KM1QPBdGf6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA5MDMwNzM2MTRaFw0yNTA5MDYxNDUzMTRaMDMxMTAvBgNV BAMTKDg3MDhDNDhCOTU1MzcyRUMzOEM4RTAyOTkyNzA1OEI3QkU1OEExMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZffKW5wEsAASJzmfMR+2IimK JoyFPaP/qO+KzM3LbGT3yWZdCNBwmz5fu4RWniXSk8hSGi6yGZctcZxw9SGYk3Jp pwnaMn6eHfQ/aqUwf1mS/Gs6Kpz/FWY0gDt2exK2jS0LriiruHyopHQ9BPdyNUXi DkdtcH3u7IVG9OFRB2oLQvACK1N4NobjBqVmiwOGhSP7zjeAkA3yoq2UBNOPy3tu mt7F63bW6nZglSXrN0+re30mbvk49QcIV+LyeyC2uhnBfAK6UnbWOkCkTkdRukKE VkocxxTuXcE1LSP+jvOQH+bDDkGFujcxzBqscCTQ3oTXg1KEO8w0tJpCMw6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhwjEi5VTcuw4yOApknBYt75YoQowHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQmt7Xf6ieo2HEmKeAT9OIq4ox5jyQEukl5 B+i5W3OL/yerDJBza88iX5lxPeIvkqI1rD2uAkB4gzXdkwXApycr2MmI+Z08tuYE 0+tqDqY7P7ucaJmb5PvdV5v6Ro31Lxb3DOlkE8p/yo0sKpnktrdxV1lK7CmLjFKs ByiuLd9C5qoId/yPloWxHriqb3meo5rkggcD1YtC4LlBZbqM6GmYnUOr4y7aNg7s yK0pTWQ8qOoLfvHU4v9M8qaexA5P3yQbtBZwCF8RV1vfyzJQh7ZIkxxmM88Pe58T S8AIMiuXVv+KBz3XNjl2/TlYTEsWN+Fe2QlvuLfoa+FIqTfJR/4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:30 2025 by rpki-client