$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: GmPFxOXZbWe5/AP5+sIxeGs5+zDs0YnsrtfA1DDzOeI= Subject key identifier: 58:DB:B3:1C:4E:39:2A:FE:67:4F:C5:71:60:34:78:CC:29:90:E5:FA Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 51F62AD4BB2EDA5B3FA2C244533311F9AB4CEBFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04A8 Signing time: Sat 20 Sep 2025 02:11:02 +0000 Manifest this update: Sat 20 Sep 2025 02:06:02 +0000 Manifest next update: Tue 23 Sep 2025 03:26:02 +0000 Files and hashes: 1: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 2: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) 3: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: HiCR/H8deBEMf7eoWSRrAtAs4HoEKmulXozsHpny3PQ=) 4: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 03:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f6:2a:d4:bb:2e:da:5b:3f:a2:c2:44:53:33:11:f9:ab:4c:eb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Sep 20 02:06:02 2025 GMT Not After : Sep 23 03:26:02 2025 GMT Subject: CN=58DBB31C4E392AFE674FC571603478CC2990E5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:93:7f:7c:03:bb:57:46:59:e8:72:20:2e: 48:08:cd:a2:fc:e5:81:6a:50:d9:d0:e5:78:07:f1: 62:55:b2:cb:ac:00:dd:3c:ae:88:86:0b:69:7a:cc: fa:1f:af:f1:c0:b0:47:24:a7:eb:da:ce:90:e5:14: 4f:3d:85:b9:40:dd:5b:52:04:d2:6c:33:fa:12:b9: 00:53:b7:9a:3c:38:8d:d5:88:3b:df:18:dc:c7:a3: 91:ef:ef:79:52:36:cb:7c:0b:62:aa:3d:97:96:56: 9c:c3:9f:61:c8:ff:b3:14:ff:c0:ce:a4:e6:53:9c: 76:53:d2:44:b6:ec:de:96:d8:3a:f0:73:58:a3:1a: 05:bf:e7:95:9f:5b:c4:c6:1e:40:ae:4b:4d:3f:5a: a8:7f:ba:46:c4:5d:af:0d:bc:34:9b:11:c7:5c:af: 1e:dc:f4:69:13:44:2b:62:9c:6a:d7:58:7b:ea:39: 21:ae:49:66:1e:02:d5:82:72:f4:5d:72:4a:70:4c: a4:f4:aa:2d:66:1f:85:60:d4:bf:1a:b3:2c:e4:3e: 9a:e5:eb:14:ff:7f:87:88:24:6a:b0:45:65:ee:fb: 4a:fc:5b:26:3d:a5:05:c1:3f:a9:22:c0:12:b5:41: ac:98:e3:5a:7c:5c:af:fd:2f:8a:a0:5c:77:2a:bb: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:B3:1C:4E:39:2A:FE:67:4F:C5:71:60:34:78:CC:29:90:E5:FA X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:86:d3:54:8c:6c:99:82:8c:63:c6:07:eb:2e:a0:d5:1f:65: 8d:10:b1:b2:d2:74:6f:56:92:b9:e0:71:4d:41:28:72:d6:a6: 9b:05:ef:a5:2c:f3:99:b5:d2:90:38:ff:94:ae:df:23:6b:0f: be:c8:86:7c:79:ae:0f:47:bb:3e:1c:6a:bb:33:20:19:30:35: f7:f7:ea:92:18:c8:39:52:e2:b6:c0:0c:c5:27:88:2d:2f:10: 2a:21:9d:71:6f:58:59:e5:fb:89:2b:59:01:4c:6b:85:9b:5a: 74:ee:86:94:67:f4:02:c4:0e:37:4a:61:f6:0f:31:fc:03:ed: 3f:36:3d:e3:1c:35:2b:6e:24:5b:cb:1e:36:90:9f:5d:ec:28: d8:f1:7f:21:77:3f:94:97:cc:db:92:97:3f:c4:3f:c2:d3:14: 24:fd:7e:13:b2:0b:af:52:09:c4:d1:3c:c0:7f:eb:6a:9d:ba: bf:38:e7:7e:ba:69:24:bd:76:a6:06:21:61:ff:44:1a:4a:63: e6:da:9b:4f:59:33:52:18:65:29:0e:cc:13:26:12:73:09:94: 85:2b:c6:20:15:97:0e:07:48:86:78:0e:c3:f0:5e:cf:d6:74: 30:05:ac:46:79:12:2f:21:4d:f8:a4:c6:37:81:5d:6f:1f:f1: 69:f4:e6:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfYq1Lsu2ls/osJEUzMR+atM6/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA5MjAwMjA2MDJaFw0yNTA5MjMwMzI2MDJaMDMxMTAvBgNV BAMTKDU4REJCMzFDNEUzOTJBRkU2NzRGQzU3MTYwMzQ3OENDMjk5MEU1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeJN/fAO7V0ZZ6HIgLkgIzaL8 5YFqUNnQ5XgH8WJVssusAN08roiGC2l6zPofr/HAsEckp+vazpDlFE89hblA3VtS BNJsM/oSuQBTt5o8OI3ViDvfGNzHo5Hv73lSNst8C2KqPZeWVpzDn2HI/7MU/8DO pOZTnHZT0kS27N6W2Drwc1ijGgW/55WfW8TGHkCuS00/Wqh/ukbEXa8NvDSbEcdc rx7c9GkTRCtinGrXWHvqOSGuSWYeAtWCcvRdckpwTKT0qi1mH4Vg1L8asyzkPprl 6xT/f4eIJGqwRWXu+0r8WyY9pQXBP6kiwBK1QayY41p8XK/9L4qgXHcqu2nZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWNuzHE45Kv5nT8VxYDR4zCmQ5fowHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeG01SMbJmCjGPGB+suoNUfZY0QsbLSdG9W krngcU1BKHLWppsF76Us85m10pA4/5Su3yNrD77Ihnx5rg9Huz4carszIBkwNff3 6pIYyDlS4rbADMUniC0vECohnXFvWFnl+4krWQFMa4WbWnTuhpRn9ALEDjdKYfYP MfwD7T82PeMcNStuJFvLHjaQn13sKNjxfyF3P5SXzNuSlz/EP8LTFCT9fhOyC69S CcTRPMB/62qdur845366aSS9dqYGIWH/RBpKY+bam09ZM1IYZSkOzBMmEnMJlIUr xiAVlw4HSIZ4DsPwXs/WdDAFrEZ5Ei8hTfikxjeBXW8f8Wn05tI= -----END CERTIFICATE-----Generated at Sat Sep 20 05:32:20 2025 by rpki-client