$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: vX2PK+zEknhQsZeeEv6M5fxgHXIEEokWcIBTsjx4dco= Subject key identifier: 2B:91:36:54:6B:0C:A9:E5:5E:15:E8:58:B3:26:AE:1E:D9:16:59:34 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 35A6007F1A55A1BFAFD3A69892A894D921076909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0312 Signing time: Wed 03 Sep 2025 19:21:37 +0000 Manifest this update: Wed 03 Sep 2025 19:16:37 +0000 Manifest next update: Sat 06 Sep 2025 23:56:37 +0000 Files and hashes: 1: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: KItgvO5DhM6q8FmSt+Ba8mmAdPehBiwHL/qS10ImvEk=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a6:00:7f:1a:55:a1:bf:af:d3:a6:98:92:a8:94:d9:21:07:69:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Sep 3 19:16:37 2025 GMT Not After : Sep 6 23:56:37 2025 GMT Subject: CN=2B9136546B0CA9E55E15E858B326AE1ED9165934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:61:ad:ab:3e:e9:25:1e:29:e0:2f:9c:f8: 7c:60:5d:76:ac:19:df:98:7a:8c:b7:06:cb:a5:34: 62:1e:8a:63:ff:3e:44:d6:5c:17:22:0e:66:a9:ad: 50:93:1f:92:91:7e:bf:22:af:ff:06:56:f9:07:23: e1:df:17:34:f5:d0:fd:86:1c:65:39:99:1f:bc:2f: 4b:a4:cf:72:82:b3:fe:b3:e4:53:16:6a:fc:f2:33: 47:d0:38:42:20:38:ca:23:a7:bc:ca:c5:e2:02:42: b4:f1:ae:88:b8:75:1e:94:9c:93:67:90:69:59:a7: 37:b6:03:3e:78:92:3a:9e:89:68:f0:e3:7d:94:36: cd:ae:7d:3d:61:0f:de:25:11:c3:98:87:d6:d8:5b: f5:22:af:bb:b0:43:49:0b:40:c7:a3:8c:1c:42:39: 74:89:cd:d1:10:38:63:56:c5:81:4f:a3:a8:42:b2: 39:5c:78:a1:83:8c:7d:d3:a4:7a:b4:51:4e:82:d5: 02:8d:22:5c:d6:66:fd:b9:38:e2:09:a2:23:cd:16: 9e:23:cd:51:ae:8e:0b:62:88:1b:55:7f:f4:5f:e4: 07:dd:d1:fe:2b:af:9d:8f:e1:e4:91:0f:de:4e:86: 52:21:35:f1:ec:fd:4a:76:89:42:fd:6b:73:26:09: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:91:36:54:6B:0C:A9:E5:5E:15:E8:58:B3:26:AE:1E:D9:16:59:34 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:79:03:ac:12:07:97:17:7e:55:90:8d:fb:89:9f:60:2c:6e: df:e6:01:35:25:ec:9d:fa:79:d0:5a:b0:b2:c2:c5:07:86:3d: f8:e9:30:a1:cb:8a:c1:17:5c:a8:7f:6d:0c:46:4f:8a:3c:9e: 6e:02:9d:c3:de:cb:ed:5d:ba:c4:8f:59:fa:55:47:1d:f8:f3: 4d:48:31:8d:e7:89:e4:de:bc:d4:5f:2c:b6:a2:b9:82:fe:85: ef:10:7b:82:e6:65:3d:d4:1a:fb:ca:66:92:b1:f4:0a:5f:23: ed:c1:6d:96:cb:c7:38:4c:e0:44:5b:aa:3d:5f:6e:00:39:6b: a7:39:bd:3d:ad:7a:c3:f2:55:49:af:89:0a:7b:8e:6b:5a:41: 7c:a3:af:b9:c9:b4:a5:13:2d:43:a6:70:ad:fb:f6:11:29:06: 8f:2b:20:17:6c:a3:16:d1:89:e5:82:15:bc:fe:46:72:99:83: 5d:49:4c:39:b4:8e:69:2e:b9:89:76:9b:d3:60:25:7b:00:27: dc:72:c1:6e:67:72:5c:05:97:3f:26:9c:fa:3c:6d:db:8f:8b: 83:9c:5c:86:69:cf:54:60:c5:e1:db:97:a0:cc:05:d0:75:c8: a5:47:a5:ca:3a:22:ea:a6:91:f6:52:33:29:4a:45:a2:8b:93: dc:85:5f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaYAfxpVob+v06aYkqiU2SEHaQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA5MDMxOTE2MzdaFw0yNTA5MDYyMzU2MzdaMDMxMTAvBgNV BAMTKDJCOTEzNjU0NkIwQ0E5RTU1RTE1RTg1OEIzMjZBRTFFRDkxNjU5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC942Gtqz7pJR4p4C+c+HxgXXas Gd+Yeoy3BsulNGIeimP/PkTWXBciDmaprVCTH5KRfr8ir/8GVvkHI+HfFzT10P2G HGU5mR+8L0ukz3KCs/6z5FMWavzyM0fQOEIgOMojp7zKxeICQrTxroi4dR6UnJNn kGlZpze2Az54kjqeiWjw432UNs2ufT1hD94lEcOYh9bYW/Uir7uwQ0kLQMejjBxC OXSJzdEQOGNWxYFPo6hCsjlceKGDjH3TpHq0UU6C1QKNIlzWZv25OOIJoiPNFp4j zVGujgtiiBtVf/Rf5Afd0f4rr52P4eSRD95OhlIhNfHs/Up2iUL9a3MmCd6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5E2VGsMqeVeFehYsyauHtkWWTQwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF5A6wSB5cXflWQjfuJn2Asbt/mATUl7J36 edBasLLCxQeGPfjpMKHLisEXXKh/bQxGT4o8nm4CncPey+1dusSPWfpVRx34801I MY3nieTevNRfLLaiuYL+he8Qe4LmZT3UGvvKZpKx9ApfI+3BbZbLxzhM4ERbqj1f bgA5a6c5vT2tesPyVUmviQp7jmtaQXyjr7nJtKUTLUOmcK379hEpBo8rIBdsoxbR ieWCFbz+RnKZg11JTDm0jmkuuYl2m9NgJXsAJ9xywW5nclwFlz8mnPo8bduPi4Oc XIZpz1RgxeHbl6DMBdB1yKVHpco6IuqmkfZSMylKRaKLk9yFX2M= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:59 2025 by rpki-client