$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: 4dLwQdfAToLPqM7UNvnYhzprDM5QEOkoK6k2GV/G/jI= Subject key identifier: 97:92:52:1D:B2:54:0B:A7:10:A5:A2:DD:0E:D3:22:D8:E0:6B:06:1A Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 06D219D35E78FE81F4386410313514576D67BA0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: F9 Signing time: Mon 04 Aug 2025 23:11:35 +0000 Manifest this update: Mon 04 Aug 2025 23:06:35 +0000 Manifest next update: Fri 08 Aug 2025 09:08:35 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: BWE0z5i67ozzbvA+BCywF8LoBNwLTn8Z2hsYig2Qjgg=) 3: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 4: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d2:19:d3:5e:78:fe:81:f4:38:64:10:31:35:14:57:6d:67:ba:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Aug 4 23:06:35 2025 GMT Not After : Aug 8 09:08:35 2025 GMT Subject: CN=9792521DB2540BA710A5A2DD0ED322D8E06B061A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:2b:04:85:67:fd:5a:22:dc:bf:73:a7:5f: 20:ae:89:53:77:11:83:1a:e0:b2:37:cd:d0:25:b2: e6:35:72:30:d3:4c:05:eb:45:ed:dc:f7:4c:a4:8b: 3a:45:4d:10:c0:6c:6a:c1:a5:c2:91:e3:63:00:8d: 50:a1:a5:6f:d5:4c:ce:fd:ef:39:5b:87:44:23:96: cd:ec:1d:e4:50:93:3c:6a:7a:ca:97:31:09:92:f6: 3f:a4:13:ac:c9:78:99:30:f7:71:15:82:86:30:d3: b2:86:7b:5d:f0:77:51:65:97:d2:90:e0:f1:bc:3e: dc:24:5c:a1:1e:8d:55:c5:39:51:39:8c:ca:73:b4: 52:7e:0d:e8:d1:1f:9e:1d:06:df:62:7d:89:99:7e: 23:12:0a:71:42:ca:c8:af:29:4f:9c:d1:4b:78:23: f2:3d:d0:da:4a:3b:2b:35:08:3a:02:b7:2d:a8:3f: 4d:4a:8c:ba:43:fc:ff:70:26:cc:a3:6e:ad:40:22: e1:59:65:df:c4:37:4c:9c:eb:81:3c:cb:ec:e4:cd: b3:5e:5d:99:6e:8d:37:f3:8c:ff:af:68:3b:a2:97: 97:c6:ba:d1:1a:f5:d7:a6:1a:f7:5f:12:6c:51:33: 46:48:c4:67:26:40:de:d5:0f:35:d1:07:25:84:9a: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:92:52:1D:B2:54:0B:A7:10:A5:A2:DD:0E:D3:22:D8:E0:6B:06:1A X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3f:87:64:76:a1:cd:0e:d2:d9:ae:7c:ac:41:ff:70:01:9a: 01:6b:6a:70:4c:30:ad:86:78:fc:ca:93:00:3c:fb:be:de:81: 0c:28:5c:89:86:df:8c:c3:e8:e8:89:6a:8c:c5:63:17:7d:bb: 7c:a8:0e:76:1c:d7:38:a8:9c:18:a0:27:32:80:44:26:bf:8a: e9:25:27:ba:22:2f:48:84:0f:ab:be:7d:ff:c3:48:d6:36:dc: 30:1b:87:2d:19:b0:14:56:0c:f9:07:72:06:7b:ff:c0:ef:ca: 6f:b8:f3:51:91:c2:16:77:d3:0a:a4:5d:51:ec:d5:31:be:ec: a8:26:b9:aa:36:56:76:f2:4b:5d:90:20:86:6c:4a:cc:a6:a7: 00:1e:29:97:ad:e1:04:44:dc:79:fa:c4:99:79:f5:15:5e:fe: 62:2a:d8:58:a3:73:ab:01:34:6e:f6:54:98:df:1d:5d:07:d3: ee:20:1e:84:be:ae:57:9e:12:8c:a7:45:98:ff:ae:b0:88:4b: 45:e2:06:8c:cd:a8:77:2e:e6:c2:b8:a6:44:02:2e:05:d4:b2: f6:96:fa:c1:13:2b:75:99:9f:ff:02:4c:38:4c:38:c3:11:57: e6:bd:c6:45:06:94:2f:91:a9:f3:14:cc:dd:46:b9:87:d7:07: 6b:4b:73:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtIZ0154/oH0OGQQMTUUV21nug4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA4MDQyMzA2MzVaFw0yNTA4MDgwOTA4MzVaMDMxMTAvBgNV BAMTKDk3OTI1MjFEQjI1NDBCQTcxMEE1QTJERDBFRDMyMkQ4RTA2QjA2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yysEhWf9WiLcv3OnXyCuiVN3 EYMa4LI3zdAlsuY1cjDTTAXrRe3c90ykizpFTRDAbGrBpcKR42MAjVChpW/VTM79 7zlbh0Qjls3sHeRQkzxqesqXMQmS9j+kE6zJeJkw93EVgoYw07KGe13wd1Fll9KQ 4PG8PtwkXKEejVXFOVE5jMpztFJ+DejRH54dBt9ifYmZfiMSCnFCysivKU+c0Ut4 I/I90NpKOys1CDoCty2oP01KjLpD/P9wJsyjbq1AIuFZZd/EN0yc64E8y+zkzbNe XZlujTfzjP+vaDuil5fGutEa9demGvdfEmxRM0ZIxGcmQN7VDzXRByWEmirXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5JSHbJUC6cQpaLdDtMi2OBrBhowHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY/h2R2oc0O0tmufKxB/3ABmgFranBMMK2G ePzKkwA8+77egQwoXImG34zD6OiJaozFYxd9u3yoDnYc1zionBigJzKARCa/iukl J7oiL0iED6u+ff/DSNY23DAbhy0ZsBRWDPkHcgZ7/8Dvym+481GRwhZ30wqkXVHs 1TG+7Kgmuao2VnbyS12QIIZsSsympwAeKZet4QRE3Hn6xJl59RVe/mIq2Fijc6sB NG72VJjfHV0H0+4gHoS+rleeEoynRZj/rrCIS0XiBozNqHcu5sK4pkQCLgXUsvaW +sETK3WZn/8CTDhMOMMRV+a9xkUGlC+RqfMUzN1GuYfXB2tLczc= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:00 2025 by rpki-client