$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: ZkQOohh0sEfpO//crDuz2479VOaBHsFwUUeU9HSPO98= Subject key identifier: D3:CC:1F:9F:DC:16:D0:2E:C4:43:24:A7:EE:17:D6:5D:65:D5:2E:8C Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 7CB0A2EF8FB261945F362225FA3F3527D8271424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 01A9 Signing time: Fri 05 Sep 2025 19:32:06 +0000 Manifest this update: Fri 05 Sep 2025 19:27:06 +0000 Manifest next update: Tue 09 Sep 2025 06:28:06 +0000 Files and hashes: 1: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: znoG+tzolSoK4k4/3nWegkyYPSmCV03zZXbpGFh3j3Q=) 2: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: f0SGYOuYC9wlhNvu18Rx/15roii5H8mAD5EFZkRY12E=) 3: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: /gs38bvEvtTUPqYGWalk9dUoQJ0QuMIfX2N2VF3ownQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b0:a2:ef:8f:b2:61:94:5f:36:22:25:fa:3f:35:27:d8:27:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: Sep 5 19:27:06 2025 GMT Not After : Sep 9 06:28:06 2025 GMT Subject: CN=D3CC1F9FDC16D02EC44324A7EE17D65D65D52E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:32:53:18:5e:0d:6e:89:45:a8:7d:49:47: 07:ce:41:52:cd:84:26:ad:d7:09:17:fc:a3:e6:48: ae:ac:b3:8a:2f:c3:53:d0:dd:20:d3:7c:7f:22:c5: 1e:8f:0c:ba:ad:3f:16:20:d5:6e:fc:d0:c2:21:82: b5:06:2b:dc:31:79:6d:3d:a2:04:21:c9:06:8a:72: eb:eb:e6:5e:5b:e5:11:01:51:35:9b:c7:3a:cc:96: ae:ce:57:ae:a5:ab:39:0e:44:b5:4b:2e:0a:ee:e3: b8:6a:9f:2e:d0:ec:2b:25:99:3a:57:1e:2d:68:20: 3a:1a:a4:36:35:32:8d:f5:a9:6d:05:c2:51:20:87: eb:2f:22:7b:19:08:9c:d8:4c:67:13:be:dd:6a:6d: 31:e0:5c:cc:8e:41:6a:df:23:15:75:3f:e8:87:f9: 90:e7:7a:af:9e:73:b6:cb:a2:b5:bd:59:40:c6:20: de:3c:b7:7e:50:e8:05:77:af:6b:27:e1:67:53:0e: 22:0a:6c:c6:ed:a3:4d:0c:37:04:9f:35:d0:79:82: 16:ac:94:7c:83:8a:8c:e7:0e:52:7a:74:b0:32:39: 14:36:02:ee:23:95:44:11:d7:41:44:0d:35:eb:02: 52:00:70:28:98:6d:93:de:c1:a5:6d:80:65:d5:41: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:1F:9F:DC:16:D0:2E:C4:43:24:A7:EE:17:D6:5D:65:D5:2E:8C X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:94:6a:bc:77:34:3b:07:31:f7:4f:b7:b9:15:4c:3d:2e: a3:d5:e2:28:e3:2b:ad:18:0d:d0:ee:57:b7:a7:68:fa:91:07: 3b:6e:0f:94:2e:06:10:f2:44:23:b0:5a:61:e9:86:3d:05:c6: 07:e0:f4:7a:77:9d:ac:97:82:11:b1:5d:44:35:7d:f3:81:97: 48:c9:5c:88:3f:93:aa:2a:80:b2:ff:ff:14:cb:5c:96:4d:bb: 07:f3:3c:b9:6f:6a:76:14:86:b6:00:d5:21:ef:f6:03:4e:ba: c8:32:a1:2e:1c:9f:35:45:fc:d4:ee:25:44:d6:d3:d7:f5:63: 25:57:c8:39:13:57:67:39:ba:4b:b2:99:25:76:f5:a5:6e:18: d0:08:43:21:ed:81:be:45:8c:2b:aa:7c:34:2e:28:c6:38:6f: 64:44:b3:2f:47:36:75:31:ef:b3:a4:29:f0:3f:20:08:33:3c: ba:23:ab:12:f3:1c:14:7f:1f:69:7d:a6:c5:a4:03:7c:f4:45: 1f:2c:d8:3e:ee:95:6b:03:2a:8b:70:16:01:fd:84:e9:38:9e: 22:f1:8a:67:fd:91:5e:e6:e5:ab:15:93:14:3b:fb:7e:67:e3: 55:99:6f:d0:a6:a0:19:5f:eb:82:35:4b:f4:1c:9a:00:33:11: 4c:b1:f8:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLCi74+yYZRfNiIl+j81J9gnFCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNTA5MDUxOTI3MDZaFw0yNTA5MDkwNjI4MDZaMDMxMTAvBgNV BAMTKEQzQ0MxRjlGREMxNkQwMkVDNDQzMjRBN0VFMTdENjVENjVENTJFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEjJTGF4NbolFqH1JRwfOQVLN hCat1wkX/KPmSK6ss4ovw1PQ3SDTfH8ixR6PDLqtPxYg1W780MIhgrUGK9wxeW09 ogQhyQaKcuvr5l5b5REBUTWbxzrMlq7OV66lqzkORLVLLgru47hqny7Q7CslmTpX Hi1oIDoapDY1Mo31qW0FwlEgh+svInsZCJzYTGcTvt1qbTHgXMyOQWrfIxV1P+iH +ZDneq+ec7bLorW9WUDGIN48t35Q6AV3r2sn4WdTDiIKbMbto00MNwSfNdB5ghas lHyDioznDlJ6dLAyORQ2Au4jlUQR10FEDTXrAlIAcCiYbZPewaVtgGXVQXT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08wfn9wW0C7EQySn7hfWXWXVLowwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdKlGq8dzQ7BzH3T7e5FUw9LqPV4ijjK60Y DdDuV7enaPqRBztuD5QuBhDyRCOwWmHphj0Fxgfg9Hp3nayXghGxXUQ1ffOBl0jJ XIg/k6oqgLL//xTLXJZNuwfzPLlvanYUhrYA1SHv9gNOusgyoS4cnzVF/NTuJUTW 09f1YyVXyDkTV2c5ukuymSV29aVuGNAIQyHtgb5FjCuqfDQuKMY4b2REsy9HNnUx 77OkKfA/IAgzPLojqxLzHBR/H2l9psWkA3z0RR8s2D7ulWsDKotwFgH9hOk4niLx imf9kV7m5asVkxQ7+35n41WZb9CmoBlf64I1S/QcmgAzEUyx+H0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:32 2025 by rpki-client