$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: P89qXL1GCGWMhooTbnVXZxcH23XS7HD5X9+Q1SC6AS8= Subject key identifier: B4:BE:26:5C:06:89:3D:1D:AC:F4:C8:81:27:02:CA:71:C8:B4:73:7C Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 153B38F8BAA094F816844497385E8138AA606917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 028D Signing time: Fri 05 Sep 2025 10:41:07 +0000 Manifest this update: Fri 05 Sep 2025 10:36:07 +0000 Manifest next update: Mon 08 Sep 2025 16:43:07 +0000 Files and hashes: 1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 3: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 4: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: pgC+1YljHM4iU2dN3sB2uqqNa2MdmdateKBCkymj6i8=) 6: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 7: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3b:38:f8:ba:a0:94:f8:16:84:44:97:38:5e:81:38:aa:60:69:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Sep 5 10:36:07 2025 GMT Not After : Sep 8 16:43:07 2025 GMT Subject: CN=B4BE265C06893D1DACF4C8812702CA71C8B4737C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:6d:76:52:c8:75:ff:78:54:df:53:df:de: 03:43:12:86:c5:e7:4d:df:3b:14:bb:c5:fc:4b:2e: 9f:50:ab:e4:fe:5d:55:b7:6a:36:7a:64:91:3d:1a: b6:d8:b9:3e:66:bb:7e:21:68:19:54:f7:20:19:43: 03:8a:12:d5:e6:5c:ec:ad:ab:43:0d:e3:a6:61:23: e7:e5:27:7a:3b:aa:c8:ab:e5:e8:ed:d7:d7:8d:7f: a1:70:a8:b5:4f:9a:d4:f7:c6:b7:d7:95:9e:0e:dd: 77:46:45:4f:5f:74:fa:da:27:71:a0:46:55:cb:a0: 36:30:95:69:42:0e:2a:4d:b9:89:b7:37:cc:b2:c8: 89:4a:eb:a4:df:e8:26:97:fa:fb:2a:30:b4:02:3f: 98:1d:82:1e:07:59:80:84:78:c7:d9:89:cf:24:83: e0:fc:e2:da:f9:d0:46:fc:64:de:7f:c8:42:d4:75: e9:df:0e:4e:2b:ff:28:c5:c4:75:e8:96:df:06:6c: 4f:7c:7d:bc:97:e2:b0:fd:52:7d:37:89:4c:6b:d5: 54:f7:b3:e7:22:92:35:8f:6c:6d:d2:a9:6b:83:2a: 87:dd:48:58:33:9c:c2:81:e3:26:96:87:5a:b1:9a: 5b:7b:b0:db:a3:cf:94:0d:89:74:79:2d:f4:65:8b: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BE:26:5C:06:89:3D:1D:AC:F4:C8:81:27:02:CA:71:C8:B4:73:7C X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:aa:79:3b:93:fa:d4:a3:fd:6d:b6:48:48:dd:e3:6d:80:bb: 6d:b1:7c:6f:c0:0f:0c:8b:ba:45:8d:48:ad:dd:28:b7:7d:2c: 98:b6:00:67:af:27:35:a1:4b:69:13:4d:a3:39:62:f1:b0:5f: 8d:f8:39:02:5a:84:80:d2:4a:b6:50:c8:b6:65:6b:f7:35:4d: 21:78:65:c5:02:56:e3:4e:07:1c:04:95:a2:8b:58:32:04:4f: 17:c2:a9:72:9d:e1:d0:a6:8d:ff:b6:fc:1b:5b:ea:8f:a6:28: 17:d0:e6:6b:17:f2:f0:d2:ae:17:b5:04:0c:84:8d:62:da:d2: 35:e9:6f:36:ad:26:f6:c7:35:45:ec:28:b7:f2:90:9e:f2:1f: 19:13:38:dd:12:e6:c4:41:b9:61:8a:76:83:17:e5:4d:77:e1: 67:93:9d:9a:c0:a2:fb:ae:4f:af:95:e1:66:8e:e9:d8:74:01: 34:ad:0f:f6:b3:87:c3:d8:67:2f:e0:cc:23:63:9d:e2:fc:47: 3e:b2:da:dd:fe:4a:0d:e5:90:2a:c5:19:c9:47:5c:5d:35:e0: 30:7e:f4:4c:59:70:db:dd:64:cf:be:7e:32:3f:2e:94:96:a0: 9f:a0:8d:85:38:1a:a5:95:b3:78:0c:6b:27:80:04:cf:8f:3d: 54:0f:dd:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTs4+LqglPgWhESXOF6BOKpgaRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA5MDUxMDM2MDdaFw0yNTA5MDgxNjQzMDdaMDMxMTAvBgNV BAMTKEI0QkUyNjVDMDY4OTNEMURBQ0Y0Qzg4MTI3MDJDQTcxQzhCNDczN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZ212Ush1/3hU31Pf3gNDEobF 503fOxS7xfxLLp9Qq+T+XVW3ajZ6ZJE9GrbYuT5mu34haBlU9yAZQwOKEtXmXOyt q0MN46ZhI+flJ3o7qsir5ejt19eNf6FwqLVPmtT3xrfXlZ4O3XdGRU9fdPraJ3Gg RlXLoDYwlWlCDipNuYm3N8yyyIlK66Tf6CaX+vsqMLQCP5gdgh4HWYCEeMfZic8k g+D84tr50Eb8ZN5/yELUdenfDk4r/yjFxHXolt8GbE98fbyX4rD9Un03iUxr1VT3 s+cikjWPbG3SqWuDKofdSFgznMKB4yaWh1qxmlt7sNujz5QNiXR5LfRli6NRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtL4mXAaJPR2s9MiBJwLKcci0c3wwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2qeTuT+tSj/W22SEjd422Au22xfG/ADwyL ukWNSK3dKLd9LJi2AGevJzWhS2kTTaM5YvGwX434OQJahIDSSrZQyLZla/c1TSF4 ZcUCVuNOBxwElaKLWDIETxfCqXKd4dCmjf+2/Btb6o+mKBfQ5msX8vDSrhe1BAyE jWLa0jXpbzatJvbHNUXsKLfykJ7yHxkTON0S5sRBuWGKdoMX5U134WeTnZrAovuu T6+V4WaO6dh0ATStD/azh8PYZy/gzCNjneL8Rz6y2t3+Sg3lkCrFGclHXF014DB+ 9ExZcNvdZM++fjI/LpSWoJ+gjYU4GqWVs3gMayeABM+PPVQP3TI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client