$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: XTjp1Kp01DnGSV2q/yrTdVJyBuxBGNitY+bbUfkWToY= Subject key identifier: 0F:2F:52:E7:8A:E1:51:56:DB:DD:63:F4:FF:A9:24:00:9F:1F:92:1F Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 15CB3C09C676BACB12ADEFDC5E50F7F13965DEC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: C9 Signing time: Sun 10 Aug 2025 02:52:19 +0000 Manifest this update: Sun 10 Aug 2025 02:47:19 +0000 Manifest next update: Wed 13 Aug 2025 11:04:19 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: Zpjc/jpqOcMdLgZolmqqFCUsghOVpxVVQj8yx1vETAw=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 11:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:3c:09:c6:76:ba:cb:12:ad:ef:dc:5e:50:f7:f1:39:65:de:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Aug 10 02:47:19 2025 GMT Not After : Aug 13 11:04:19 2025 GMT Subject: CN=0F2F52E78AE15156DBDD63F4FFA924009F1F921F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:32:ca:07:d6:49:11:66:96:f4:f5:b4:23: 2c:36:3a:9d:36:a1:37:c5:06:5b:72:b8:80:a9:d1: 32:b1:b1:c1:08:56:99:d9:99:81:61:e2:38:86:59: 55:66:43:d1:c3:1d:4e:26:fa:cb:0d:7f:ce:40:07: 96:5d:79:6e:a8:b7:7f:5e:98:93:3a:1e:31:cf:c2: f3:40:ec:5e:bf:fc:30:08:b3:a2:ef:86:da:b4:3f: 1a:44:54:fc:46:42:e5:9d:4d:c9:a9:ba:bb:8a:77: 7d:38:61:3f:dc:aa:e0:79:10:42:2c:b4:ec:2a:6a: ac:7e:0c:4e:15:20:36:2e:f3:ac:bf:a6:15:62:dd: 7e:a6:de:a8:72:f9:3e:46:8e:c1:2a:76:af:2f:8c: dd:e7:27:df:bf:69:a5:7b:f8:21:55:8f:39:c8:88: ea:78:dc:98:c8:1b:76:8e:68:a0:b8:22:7f:9c:2a: 2d:05:26:8a:e1:5d:0d:9a:6b:4b:36:a9:43:18:1a: 34:db:79:86:cb:60:93:c6:68:b7:44:c7:0d:94:36: 6c:1c:7f:df:48:34:2c:78:c2:fb:7c:18:54:38:28: 8e:a6:d8:15:df:96:33:1b:09:55:23:02:15:e4:b8: df:06:63:d5:2f:6a:6e:e1:36:c5:96:ba:60:23:1a: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:52:E7:8A:E1:51:56:DB:DD:63:F4:FF:A9:24:00:9F:1F:92:1F X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:10:30:43:76:97:b9:b9:8a:70:a6:f8:68:d4:80:ac:48: c7:ef:a8:c8:c4:22:7e:e2:87:4d:f8:5e:62:07:aa:04:73:75: e0:ae:04:69:4e:e6:60:a8:f2:47:ea:45:71:b2:c9:fd:dd:49: 86:1f:1e:e6:76:25:4f:23:76:b5:47:d3:a4:50:44:98:94:aa: 73:11:28:d8:21:cf:ae:eb:04:34:00:26:ec:47:c8:85:4b:81: 22:ce:26:2a:14:26:c3:e7:0e:c8:ce:3f:bf:6b:10:9f:10:06: 44:b5:65:0a:b9:6d:43:ec:78:3e:fe:6f:97:31:e1:c0:9d:1b: 09:7d:9c:93:68:79:58:dc:23:3f:22:52:e9:94:7e:ec:82:9c: 0c:78:90:9c:50:9a:18:53:02:16:00:4d:73:39:0b:87:8e:20: 14:b9:a3:bc:ef:3e:ea:be:f3:06:67:9d:bd:d7:62:c1:13:bc: df:32:e9:25:62:e4:ac:b9:00:8e:43:09:4d:0f:9b:19:e7:f7: 93:45:d1:b0:58:31:67:32:e2:7f:69:c0:80:0d:1e:ec:8e:34: 9b:eb:df:c3:28:e6:d1:c2:27:18:67:67:37:97:5f:e7:57:56: 7d:60:83:7f:ce:39:1a:f4:c2:37:9e:b5:c0:f2:2a:d4:4e:0a: c7:f3:ea:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcs8CcZ2ussSre/cXlD38Tll3sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA4MTAwMjQ3MTlaFw0yNTA4MTMxMTA0MTlaMDMxMTAvBgNV BAMTKDBGMkY1MkU3OEFFMTUxNTZEQkRENjNGNEZGQTkyNDAwOUYxRjkyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCDLKB9ZJEWaW9PW0Iyw2Op02 oTfFBltyuICp0TKxscEIVpnZmYFh4jiGWVVmQ9HDHU4m+ssNf85AB5ZdeW6ot39e mJM6HjHPwvNA7F6//DAIs6Lvhtq0PxpEVPxGQuWdTcmpuruKd304YT/cquB5EEIs tOwqaqx+DE4VIDYu86y/phVi3X6m3qhy+T5GjsEqdq8vjN3nJ9+/aaV7+CFVjznI iOp43JjIG3aOaKC4In+cKi0FJorhXQ2aa0s2qUMYGjTbeYbLYJPGaLdExw2UNmwc f99INCx4wvt8GFQ4KI6m2BXfljMbCVUjAhXkuN8GY9Uvam7hNsWWumAjGijFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDy9S54rhUVbb3WP0/6kkAJ8fkh8wHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADljEDBDdpe5uYpwpvho1ICsSMfvqMjEIn7i h034XmIHqgRzdeCuBGlO5mCo8kfqRXGyyf3dSYYfHuZ2JU8jdrVH06RQRJiUqnMR KNghz67rBDQAJuxHyIVLgSLOJioUJsPnDsjOP79rEJ8QBkS1ZQq5bUPseD7+b5cx 4cCdGwl9nJNoeVjcIz8iUumUfuyCnAx4kJxQmhhTAhYATXM5C4eOIBS5o7zvPuq+ 8wZnnb3XYsETvN8y6SVi5Ky5AI5DCU0Pmxnn95NF0bBYMWcy4n9pwIANHuyONJvr 38Mo5tHCJxhnZzeXX+dXVn1gg3/OORr0wjeetcDyKtROCsfz6o8= -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:18 2025 by rpki-client