$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: LaYih6romuhe8nDvVAcBym73awI5G9QJZ82gVvXVE2s= Subject key identifier: D2:FF:18:C5:76:26:9F:B8:D6:6E:0C:42:F6:E7:7E:37:40:A4:98:E3 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: D8E24370AB380F5A5D63A53F89516EBF5E117D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 0142 Signing time: Mon 16 Jun 2025 10:40:51 +0000 Manifest this update: Mon 16 Jun 2025 10:35:51 +0000 Manifest next update: Thu 19 Jun 2025 11:11:51 +0000 Files and hashes: 1: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 2: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: RK9IPJex6L4pcwge1HlXBy3byhMiv+C9jfL6m7D14r0=) 3: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 4: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d8:e2:43:70:ab:38:0f:5a:5d:63:a5:3f:89:51:6e:bf:5e:11:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Jun 16 10:35:51 2025 GMT Not After : Jun 19 11:11:51 2025 GMT Subject: CN=D2FF18C576269FB8D66E0C42F6E77E3740A498E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:1b:ec:38:98:b3:62:87:ef:be:be:c5:fe: 70:14:5c:e8:ce:25:d6:cf:13:0f:31:25:2e:37:b1: b1:d4:f7:85:3f:33:38:15:e2:76:79:70:aa:d7:f4: fe:4a:9c:d1:58:31:2b:41:40:d4:22:e2:67:37:c4: 94:d4:6d:06:72:e5:da:82:ef:9e:3c:d1:a4:65:8a: 1e:68:89:0a:bb:e4:59:ce:e7:6c:54:77:09:7d:48: 7b:85:eb:ef:9f:9b:aa:6d:1d:a0:63:27:33:2a:a6: fc:64:8e:70:e1:fa:d6:be:fd:57:e1:b3:e4:e3:b3: 45:e8:d0:24:54:48:9e:ff:fa:43:77:e6:3f:ec:cd: 9f:36:cb:ee:62:5f:53:58:5d:91:9a:75:02:60:75: 81:d1:39:c8:45:d3:58:e8:74:42:84:a5:c0:e9:ed: 42:42:60:0c:30:c5:ac:13:3b:db:86:34:be:c2:4b: ca:72:77:77:b4:83:95:dc:02:8b:72:33:77:5e:f0: 9c:f9:5f:34:d5:32:f3:a3:df:54:15:db:dc:31:81: ab:5c:8f:12:27:bd:d7:ee:ab:56:24:5e:50:fe:c3: a8:d6:43:d4:de:15:7a:58:08:4f:12:a0:45:04:37: d1:a4:bc:84:7c:d7:64:3d:15:da:78:2f:41:7e:ca: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:18:C5:76:26:9F:B8:D6:6E:0C:42:F6:E7:7E:37:40:A4:98:E3 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:da:61:a7:43:a2:7d:36:a4:7d:d0:91:f9:b1:0e:30:b3:eb: a8:9d:d9:ee:c1:fb:a1:1a:29:96:95:55:81:79:a5:c6:04:32: 59:ad:74:df:3a:ea:70:3b:b5:cf:97:42:fa:f4:dd:e8:f7:6a: ba:4d:34:d5:aa:e8:03:36:6d:e8:71:c9:c9:ad:26:a2:97:c1: 9a:e5:12:63:8f:ef:61:cf:f2:32:d7:e5:78:52:b8:76:01:bc: e8:9a:b9:dd:54:1b:9d:f0:8f:3f:ad:99:d5:c2:69:ff:23:08: f8:9d:d8:16:e2:08:2e:a5:2a:22:03:ee:d5:c4:ae:fc:66:3e: 79:1f:76:2c:f7:65:73:c5:b1:b1:ca:10:9f:60:be:f2:c4:83: 94:36:27:3e:c0:e3:7f:0e:fc:d9:17:6a:4c:a3:a1:3f:ba:38: 43:5a:fc:cc:6e:aa:38:ee:c0:8e:a1:2f:c1:e9:06:89:f3:81: 87:4d:8d:b2:d6:29:18:82:83:9d:66:f2:9c:ee:d5:e8:d4:1f: 94:13:6e:b9:ee:3d:74:db:14:cc:cf:a1:79:97:ae:9b:82:36: 15:59:f9:de:68:e7:8d:70:07:07:06:ba:bc:25:cd:52:c5:1d: ab:50:ed:49:e1:d4:a0:46:17:31:b9:03:f2:d3:b5:78:6b:72: f8:f3:4e:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANjiQ3CrOA9aXWOlP4lRbr9eEX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA2MTYxMDM1NTFaFw0yNTA2MTkxMTExNTFaMDMxMTAvBgNV BAMTKEQyRkYxOEM1NzYyNjlGQjhENjZFMEM0MkY2RTc3RTM3NDBBNDk4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsBvsOJizYofvvr7F/nAUXOjO JdbPEw8xJS43sbHU94U/MzgV4nZ5cKrX9P5KnNFYMStBQNQi4mc3xJTUbQZy5dqC 75480aRlih5oiQq75FnO52xUdwl9SHuF6++fm6ptHaBjJzMqpvxkjnDh+ta+/Vfh s+Tjs0Xo0CRUSJ7/+kN35j/szZ82y+5iX1NYXZGadQJgdYHROchF01jodEKEpcDp 7UJCYAwwxawTO9uGNL7CS8pyd3e0g5XcAotyM3de8Jz5XzTVMvOj31QV29wxgatc jxInvdfuq1YkXlD+w6jWQ9TeFXpYCE8SoEUEN9GkvIR812Q9Fdp4L0F+yloVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v8YxXYmn7jWbgxC9ud+N0CkmOMwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPaYadDon02pH3QkfmxDjCz66id2e7B+6Ea KZaVVYF5pcYEMlmtdN866nA7tc+XQvr03ej3arpNNNWq6AM2behxycmtJqKXwZrl EmOP72HP8jLX5XhSuHYBvOiaud1UG53wjz+tmdXCaf8jCPid2BbiCC6lKiID7tXE rvxmPnkfdiz3ZXPFsbHKEJ9gvvLEg5Q2Jz7A438O/NkXakyjoT+6OENa/Mxuqjju wI6hL8HpBonzgYdNjbLWKRiCg51m8pzu1ejUH5QTbrnuPXTbFMzPoXmXrpuCNhVZ +d5o541wBwcGurwlzVLFHatQ7Unh1KBGFzG5A/LTtXhrcvjzTmM= -----END CERTIFICATE-----Generated at Tue Jun 17 12:52:35 2025 by rpki-client