$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: tQj4pD+DVTvUD0/yFNS7VE/+dauJkn53jD21dVyVlEk= Subject key identifier: 18:EF:1D:E5:8B:64:7A:5D:EF:CE:27:1C:9A:2F:DD:73:38:C2:D6:1B Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 4D55B7A8FD93FA77D0548F745F36BFE773BFA8A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: C6 Signing time: Sun 07 Sep 2025 00:13:05 +0000 Manifest this update: Sun 07 Sep 2025 00:08:05 +0000 Manifest next update: Wed 10 Sep 2025 10:48:05 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: KB9ip4Zvu6qUlcvuuqStlw8YSgB4Non3odoZZbQv8Nk=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:55:b7:a8:fd:93:fa:77:d0:54:8f:74:5f:36:bf:e7:73:bf:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Sep 7 00:08:05 2025 GMT Not After : Sep 10 10:48:05 2025 GMT Subject: CN=18EF1DE58B647A5DEFCE271C9A2FDD7338C2D61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:ac:ef:ba:68:77:70:7e:d9:37:ae:51:f1: 4e:a7:18:7f:fe:4d:f2:1d:4f:f7:b9:b3:eb:7a:15: 3c:01:73:bb:f3:05:6c:b6:f5:68:2e:7c:f4:67:02: d0:0d:7b:82:28:42:26:26:2c:a4:5b:26:bf:ba:df: e2:83:6c:66:8a:7a:35:55:4c:87:61:b4:d8:de:8f: 80:34:17:96:1e:6f:66:ef:14:24:d4:9a:78:35:c1: 6f:91:08:21:17:fd:a4:74:cf:88:96:a8:6b:d3:43: eb:f1:39:de:ed:77:93:47:5a:38:d5:f1:cc:63:35: e1:41:a7:df:02:5e:c5:1b:39:6a:df:e2:2c:4c:06: a7:e2:92:94:cd:9a:36:d3:02:2c:d5:63:aa:97:21: 6e:9a:25:56:79:8a:38:57:75:d7:ce:ba:2b:51:fe: 09:b7:e1:2b:f5:f0:e1:88:0e:2a:36:5e:f5:d5:51: 22:96:39:ea:fa:4b:cb:87:c8:fb:be:79:4e:e9:f3: 56:fa:74:3f:a5:5e:5c:23:e7:6b:8e:5c:67:9e:d9: 56:a4:8c:a6:11:13:42:e7:4a:c3:90:c7:a8:8e:13: 6e:67:d5:6e:ba:17:df:3a:a3:c6:14:7b:4f:54:bd: f5:cc:10:74:81:3c:20:e7:6e:48:b4:4b:04:d7:d8: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EF:1D:E5:8B:64:7A:5D:EF:CE:27:1C:9A:2F:DD:73:38:C2:D6:1B X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c3:b0:b8:0e:75:f5:37:f5:b0:c6:95:7a:1a:41:4c:e4:10: ca:f1:35:64:f0:3b:e9:fa:40:b9:4b:94:f4:fd:54:85:44:61: 21:0e:a2:ac:30:fc:a8:40:30:9c:04:d8:fb:1b:04:e2:8c:df: e7:f5:71:d4:55:63:44:67:52:40:6e:b0:62:6a:cf:08:ff:95: 90:8c:3a:9f:66:d5:a4:f4:57:32:8c:21:04:68:06:61:40:68: 73:9e:df:07:13:8b:8c:2b:6b:da:01:6a:9b:1c:f0:1d:32:31: 06:d7:d0:ab:b0:21:ea:92:20:f2:3f:14:2d:60:f5:eb:9d:7e: 8f:e6:8a:77:9f:3e:90:92:4d:a9:05:a7:14:16:63:0d:ed:6e: 4b:a0:b9:37:51:cc:93:36:9f:b1:6b:85:a6:a4:0b:35:92:df: c8:f4:70:45:83:8f:c0:1c:e1:88:5f:a1:e5:96:58:0a:60:73: 63:55:fb:d0:dc:2d:27:e4:03:75:ef:98:6d:a2:7a:7f:b7:66: d0:9f:da:06:d3:eb:c7:d6:aa:92:b0:35:4f:28:e7:35:ce:ac: e5:dc:4b:ca:db:f5:8d:2b:36:74:37:fc:3e:8a:29:c1:ce:f4: c3:16:d4:38:e8:06:65:3c:b6:cb:4d:15:27:e2:fb:f8:fd:8d: 41:81:68:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVW3qP2T+nfQVI90Xza/53O/qKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA5MDcwMDA4MDVaFw0yNTA5MTAxMDQ4MDVaMDMxMTAvBgNV BAMTKDE4RUYxREU1OEI2NDdBNURFRkNFMjcxQzlBMkZERDczMzhDMkQ2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj66zvumh3cH7ZN65R8U6nGH/+ TfIdT/e5s+t6FTwBc7vzBWy29WgufPRnAtANe4IoQiYmLKRbJr+63+KDbGaKejVV TIdhtNjej4A0F5Yeb2bvFCTUmng1wW+RCCEX/aR0z4iWqGvTQ+vxOd7td5NHWjjV 8cxjNeFBp98CXsUbOWrf4ixMBqfikpTNmjbTAizVY6qXIW6aJVZ5ijhXddfOuitR /gm34Sv18OGIDio2XvXVUSKWOer6S8uHyPu+eU7p81b6dD+lXlwj52uOXGee2Vak jKYRE0LnSsOQx6iOE25n1W66F986o8YUe09UvfXMEHSBPCDnbki0SwTX2OGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGO8d5Ytkel3vziccmi/dczjC1hswHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrDsLgOdfU39bDGlXoaQUzkEMrxNWTwO+n6 QLlLlPT9VIVEYSEOoqww/KhAMJwE2PsbBOKM3+f1cdRVY0RnUkBusGJqzwj/lZCM Op9m1aT0VzKMIQRoBmFAaHOe3wcTi4wra9oBapsc8B0yMQbX0KuwIeqSIPI/FC1g 9eudfo/minefPpCSTakFpxQWYw3tbkuguTdRzJM2n7FrhaakCzWS38j0cEWDj8Ac 4YhfoeWWWApgc2NV+9DcLSfkA3XvmG2ien+3ZtCf2gbT68fWqpKwNU8o5zXOrOXc S8rb9Y0rNnQ3/D6KKcHO9MMW1DjoBmU8tstNFSfi+/j9jUGBaHs= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:54 2025 by rpki-client