$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: 3ftmtk+661qKlo6jIjg2vJ7YqHp9kaC4RlOhFg6i0nM= Subject key identifier: FF:8C:0F:82:7C:65:80:4F:47:92:7B:1D:9C:51:71:9F:B6:17:C0:C6 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 733C66798B190B6DA3B79B28A75F5F0017FAF38C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 015A Signing time: Fri 08 Aug 2025 14:50:51 +0000 Manifest this update: Fri 08 Aug 2025 14:45:51 +0000 Manifest next update: Mon 11 Aug 2025 16:48:51 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: 00ni8td2QXHyXG+Pkr4SlyqohQLK6o8daEH+E1V04hw=) 2: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 3: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) 4: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3c:66:79:8b:19:0b:6d:a3:b7:9b:28:a7:5f:5f:00:17:fa:f3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Aug 8 14:45:51 2025 GMT Not After : Aug 11 16:48:51 2025 GMT Subject: CN=FF8C0F827C65804F47927B1D9C51719FB617C0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:e6:97:6c:8a:3d:1d:69:30:d4:f9:cd:62: 28:b9:23:78:6b:51:9c:ca:68:58:21:da:e1:81:6e: 19:a0:d5:02:48:33:f3:5e:61:10:ba:2d:27:c1:19: 8c:6a:b4:f0:a6:ef:32:ae:ce:a5:d2:8b:1c:bf:9f: 88:55:47:4f:bb:87:1f:33:66:8f:36:68:fd:77:c4: 7e:67:12:23:46:06:f0:1d:34:27:06:b6:85:ab:4f: 7f:d8:5e:c6:62:65:72:b0:ed:49:a3:4e:be:48:2d: cf:eb:cc:2a:88:c6:1e:01:c4:60:aa:a0:ef:56:00: 5b:dc:9f:57:18:20:d3:b9:b0:dd:ec:a9:44:91:84: f9:8a:96:46:b3:12:1e:39:3d:01:1d:92:68:53:72: 86:ca:c0:4c:55:b3:6c:a2:b4:f6:bc:b5:20:49:3b: 89:67:6e:dc:e5:dc:3c:15:b8:9f:01:4f:b2:b2:53: 63:a5:56:a7:d1:15:17:0f:08:37:81:19:fe:3a:44: 45:50:25:99:84:8d:c1:f4:dc:2c:f9:ad:8f:5b:10: af:79:6a:84:f9:1b:f0:72:b9:1b:60:be:30:76:8e: 2b:ea:25:cb:df:99:d1:f0:0b:7a:d4:19:b9:30:25: 5c:8b:71:1e:7d:26:ab:da:44:91:71:92:bd:9b:6c: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:0F:82:7C:65:80:4F:47:92:7B:1D:9C:51:71:9F:B6:17:C0:C6 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5a:81:37:ea:d5:3e:59:c0:63:4f:7d:75:79:85:9e:46:be: c7:c6:06:05:1b:e8:b9:e7:f1:78:28:9e:1e:83:9c:da:2b:7a: 09:41:36:ad:ed:91:04:47:fc:59:3d:cd:c5:0a:a3:25:06:90: 0d:40:67:ca:ef:c9:77:0f:c5:c6:32:d9:4a:a2:9b:09:77:6d: 9b:7a:a2:ff:dc:7a:cc:50:25:f2:1e:49:a2:99:72:7d:ee:60: 76:63:01:90:4e:c1:ad:b0:31:f0:98:7d:5e:fb:04:a7:99:fb: a1:97:35:96:38:57:e8:fe:58:2d:2c:9d:b3:28:56:ea:5b:70: 13:85:e8:0a:cc:64:c7:6c:46:38:c3:fa:c2:1f:99:fb:75:ad: 41:0d:0b:c4:b7:40:32:51:f8:36:74:96:86:f4:1d:d6:f4:85: b7:d2:56:5e:01:46:cf:70:f9:99:44:b6:7b:f3:b1:e6:ca:d9: 09:7d:88:21:f8:1f:fa:52:5d:30:7d:e0:84:dd:6a:93:59:ab: e3:f6:6a:72:c7:71:75:c4:10:a7:7a:af:e2:0b:79:c9:71:91: 90:3c:dd:ec:d3:1d:65:16:cf:4f:e0:29:2a:25:3b:97:5d:ec: 50:04:14:c9:2c:32:0a:39:c2:1e:cb:3b:6c:68:b3:04:2b:13: 19:43:2e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczxmeYsZC22jt5sop19fABf684wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA4MDgxNDQ1NTFaFw0yNTA4MTExNjQ4NTFaMDMxMTAvBgNV BAMTKEZGOEMwRjgyN0M2NTgwNEY0NzkyN0IxRDlDNTE3MTlGQjYxN0MwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahOaXbIo9HWkw1PnNYii5I3hr UZzKaFgh2uGBbhmg1QJIM/NeYRC6LSfBGYxqtPCm7zKuzqXSixy/n4hVR0+7hx8z Zo82aP13xH5nEiNGBvAdNCcGtoWrT3/YXsZiZXKw7UmjTr5ILc/rzCqIxh4BxGCq oO9WAFvcn1cYINO5sN3sqUSRhPmKlkazEh45PQEdkmhTcobKwExVs2yitPa8tSBJ O4lnbtzl3DwVuJ8BT7KyU2OlVqfRFRcPCDeBGf46REVQJZmEjcH03Cz5rY9bEK95 aoT5G/ByuRtgvjB2jivqJcvfmdHwC3rUGbkwJVyLcR59JqvaRJFxkr2bbE/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4wPgnxlgE9HknsdnFFxn7YXwMYwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFagTfq1T5ZwGNPfXV5hZ5GvsfGBgUb6Lnn 8Xgonh6DnNoreglBNq3tkQRH/Fk9zcUKoyUGkA1AZ8rvyXcPxcYy2Uqimwl3bZt6 ov/cesxQJfIeSaKZcn3uYHZjAZBOwa2wMfCYfV77BKeZ+6GXNZY4V+j+WC0snbMo VupbcBOF6ArMZMdsRjjD+sIfmft1rUENC8S3QDJR+DZ0lob0Hdb0hbfSVl4BRs9w +ZlEtnvzsebK2Ql9iCH4H/pSXTB94ITdapNZq+P2anLHcXXEEKd6r+ILeclxkZA8 3ezTHWUWz0/gKSolO5dd7FAEFMksMgo5wh7LO2xoswQrExlDLpc= -----END CERTIFICATE-----Generated at Sat Aug 9 05:50:37 2025 by rpki-client