$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: TOHdUeL/QK5TT95ZOrobmTobUGrsdWNbxdI23c3eNi8= Subject key identifier: 60:44:B1:A7:E2:E8:28:7B:DA:81:54:40:64:1B:B3:5B:B6:D3:57:4C Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 4EA80236341BA76CDF3C78791541BF128CDB0553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0181 Signing time: Mon 03 Nov 2025 01:30:51 +0000 Manifest this update: Mon 03 Nov 2025 01:25:51 +0000 Manifest next update: Thu 06 Nov 2025 08:28:51 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 2: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: JGb95NpyR0hDazzP6xrZ00y23fs7BRsT3AC7Lvn9VSo=) 3: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a8:02:36:34:1b:a7:6c:df:3c:78:79:15:41:bf:12:8c:db:05:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Nov 3 01:25:51 2025 GMT Not After : Nov 6 08:28:51 2025 GMT Subject: CN=6044B1A7E2E8287BDA815440641BB35BB6D3574C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:8b:94:41:1f:04:7e:90:79:dd:c9:e6:82: 0f:9a:ee:c4:72:17:39:c7:e7:04:d5:cc:5d:c3:29: 21:af:4a:61:d2:71:ba:de:f7:e2:a3:1e:f3:cf:85: 21:1c:9c:b5:a2:7d:ec:3b:5c:17:4d:15:d5:44:8f: 6b:97:d9:ac:ab:70:8f:97:9e:53:fd:78:e5:f4:65: 59:d1:a6:1b:0f:f6:9b:07:12:fe:8a:f7:f6:a4:8a: f1:fe:c7:3d:2a:65:83:53:db:75:eb:cc:56:95:ed: 3e:5c:af:f9:01:f5:eb:17:4d:f1:93:c7:5b:9d:9d: 81:4b:98:57:08:16:8e:ca:ff:27:f5:98:36:64:0e: 17:17:c3:6f:49:fb:b6:d7:40:21:1d:13:cb:b9:9a: a9:32:e6:4a:ee:8a:25:7b:5c:24:8c:7d:51:0f:47: 21:51:0b:b8:67:3c:44:54:4b:c7:12:24:ce:fc:6b: 9d:1b:10:ec:ca:00:67:09:99:46:43:86:f4:36:bd: 2b:f7:f1:f1:50:87:31:ec:96:4a:d8:c7:e8:45:db: 42:a7:7b:6b:22:d5:30:da:06:6a:c2:28:03:a7:eb: 0a:5f:9c:36:90:a5:6f:a0:ea:f8:31:57:89:35:92: 94:50:92:3f:40:5e:b7:45:88:25:e5:4f:44:77:fe: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:44:B1:A7:E2:E8:28:7B:DA:81:54:40:64:1B:B3:5B:B6:D3:57:4C X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d0:39:bf:53:17:95:8d:57:fc:91:43:cb:be:de:53:9b:4d: 77:70:be:ac:72:61:55:46:48:e6:c9:7c:30:5f:ec:3f:2b:1a: 08:49:bb:26:8c:28:24:c3:f7:31:cb:62:f2:26:f8:93:a3:80: 8f:01:98:0e:fe:32:a6:55:4f:1e:87:c9:4e:ff:7f:38:d0:ff: 33:e6:2e:e6:f2:38:49:f6:0d:32:0a:39:68:69:71:80:8d:dd: fd:ea:80:95:c1:85:be:33:48:cd:ba:95:46:b8:37:d0:9b:f3: 35:f7:3f:e2:78:d3:23:ab:8a:d0:d4:52:c5:8d:26:9f:fc:60: 48:ef:0d:6e:70:ef:2d:65:a0:ff:d9:ea:50:e2:f9:df:cd:51: 5c:11:63:fc:84:38:c2:2d:3d:82:22:69:f7:67:c1:be:77:a0: a3:41:65:83:13:28:ea:38:08:70:7e:50:7d:cf:2e:3d:93:b6: 69:81:fb:f7:8b:a0:33:8f:5b:12:f2:89:15:73:3d:94:73:02: 21:6d:0d:8a:36:32:76:05:4e:84:8a:ca:a5:69:a2:d6:38:2a: 5e:c8:e7:d5:c2:02:e2:82:3b:79:4f:9b:d2:84:47:c5:12:9f: b0:b9:da:9d:d1:dd:66:af:00:cd:1e:88:51:31:7f:fc:0e:4a: c9:60:0e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqgCNjQbp2zfPHh5FUG/EozbBVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTExMDMwMTI1NTFaFw0yNTExMDYwODI4NTFaMDMxMTAvBgNV BAMTKDYwNDRCMUE3RTJFODI4N0JEQTgxNTQ0MDY0MUJCMzVCQjZEMzU3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCIuUQR8EfpB53cnmgg+a7sRy FznH5wTVzF3DKSGvSmHScbre9+KjHvPPhSEcnLWifew7XBdNFdVEj2uX2ayrcI+X nlP9eOX0ZVnRphsP9psHEv6K9/akivH+xz0qZYNT23XrzFaV7T5cr/kB9esXTfGT x1udnYFLmFcIFo7K/yf1mDZkDhcXw29J+7bXQCEdE8u5mqky5kruiiV7XCSMfVEP RyFRC7hnPERUS8cSJM78a50bEOzKAGcJmUZDhvQ2vSv38fFQhzHslkrYx+hF20Kn e2si1TDaBmrCKAOn6wpfnDaQpW+g6vgxV4k1kpRQkj9AXrdFiCXlT0R3/jE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYESxp+LoKHvagVRAZBuzW7bTV0wwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7QOb9TF5WNV/yRQ8u+3lObTXdwvqxyYVVG SObJfDBf7D8rGghJuyaMKCTD9zHLYvIm+JOjgI8BmA7+MqZVTx6HyU7/fzjQ/zPm LubyOEn2DTIKOWhpcYCN3f3qgJXBhb4zSM26lUa4N9Cb8zX3P+J40yOritDUUsWN Jp/8YEjvDW5w7y1loP/Z6lDi+d/NUVwRY/yEOMItPYIiafdnwb53oKNBZYMTKOo4 CHB+UH3PLj2TtmmB+/eLoDOPWxLyiRVzPZRzAiFtDYo2MnYFToSKyqVpotY4Kl7I 59XCAuKCO3lPm9KER8USn7C52p3R3WavAM0eiFExf/wOSslgDmg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:04 2025 by rpki-client