$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: LzmsZmN6lElLYGUfh+BBhZvGZBW+v2XedmpHGIDjgDY= Subject key identifier: 87:2B:FB:EE:00:7B:DA:B1:AA:46:EE:A6:C6:05:0B:AA:51:E3:C8:C5 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 65B8783D07E8CE33D2D7845DF8CE99A7D9F07F10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 012E Signing time: Fri 08 Aug 2025 06:21:16 +0000 Manifest this update: Fri 08 Aug 2025 06:16:16 +0000 Manifest next update: Mon 11 Aug 2025 12:21:16 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: 5RjB3p+8a4rbJI5ORh1zEExqw62YAmbKIi4krP5DztM=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b8:78:3d:07:e8:ce:33:d2:d7:84:5d:f8:ce:99:a7:d9:f0:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Aug 8 06:16:16 2025 GMT Not After : Aug 11 12:21:16 2025 GMT Subject: CN=872BFBEE007BDAB1AA46EEA6C6050BAA51E3C8C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:a4:d2:dd:4c:04:be:f9:01:5c:77:40:38: 7d:b9:35:01:b9:8b:b2:86:73:15:f1:d7:af:89:3d: cc:36:21:8a:24:0c:b1:48:3c:d7:6b:86:2c:6c:89: 3f:1b:21:96:66:0c:57:82:7c:31:25:9e:68:0d:80: a5:9a:28:7f:28:c4:a7:c6:b2:13:6d:f2:46:65:68: 78:71:5c:fb:d0:53:51:b0:b5:33:64:35:99:a6:4e: 49:63:13:38:5d:1a:ec:bd:86:82:ba:85:3d:6b:a3: b2:ca:e7:a1:e8:2f:b1:c2:b7:06:08:d7:31:13:22: 02:8d:5a:77:3a:88:48:4d:92:a4:53:4c:6b:7b:be: 90:28:bd:d6:25:82:dd:bd:f9:48:d6:70:b8:df:00: b7:6c:36:db:9c:05:62:70:b3:6c:a5:4e:9a:66:d2: 15:b4:8b:31:79:2d:f8:63:47:60:27:f2:ec:bf:73: b9:98:50:9e:61:2c:38:f2:89:16:7b:bf:42:88:3c: 9a:c2:0d:67:9f:84:23:7e:9a:0b:1f:84:dd:44:98: d5:44:9b:0e:9e:94:e3:7c:4c:27:81:51:40:f0:c7: d8:da:c9:0a:86:ed:17:79:13:d9:25:d5:ff:97:2c: 60:c0:e1:40:c0:b6:22:1c:2b:6e:6b:30:15:ef:1f: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2B:FB:EE:00:7B:DA:B1:AA:46:EE:A6:C6:05:0B:AA:51:E3:C8:C5 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:90:2f:15:81:b7:7a:4f:af:50:96:8a:92:5c:96:d9:bd:7d: 32:c7:3d:31:b8:bf:65:7e:60:d2:04:3f:1c:23:5a:ee:17:9c: 63:5f:e5:5c:81:4d:95:c7:ac:85:96:65:52:3b:55:6e:a4:53: 12:8d:86:f0:ef:25:6d:5e:e6:39:1b:6c:c3:92:b9:f7:fd:c4: 06:23:aa:a1:e3:fe:3b:3b:38:b4:48:6d:3b:70:83:ad:c8:4a: 4e:9c:1c:d3:e3:6b:a3:27:ec:d0:33:12:f6:66:16:f3:3c:25: a5:23:cb:ad:37:4c:39:ae:14:95:ec:d2:94:17:c0:9d:c2:c0: 64:bf:52:d9:1f:ce:2e:1e:1b:00:1f:44:35:7a:8f:2f:e5:93: 55:0a:43:5a:35:da:13:b6:d5:1f:1b:bf:e8:1f:c5:7b:c1:62: 4d:e4:f3:8d:5e:4c:fc:9e:30:1a:04:58:2f:f5:92:d8:67:53: d7:fd:3d:e9:04:d0:74:fb:22:2c:43:91:d3:69:82:f2:7c:3e: 5a:fc:de:36:77:79:9e:a4:f8:5a:c9:8b:be:16:90:ef:5f:dd: fc:cc:c4:6d:a2:ae:92:b5:1d:7e:58:d0:79:48:6c:d9:95:f9: 33:21:f4:0f:ad:bb:94:77:07:96:d4:2d:26:d9:31:6b:dd:e6: 55:44:dc:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbh4PQfozjPS14Rd+M6Zp9nwfxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNTA4MDgwNjE2MTZaFw0yNTA4MTExMjIxMTZaMDMxMTAvBgNV BAMTKDg3MkJGQkVFMDA3QkRBQjFBQTQ2RUVBNkM2MDUwQkFBNTFFM0M4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2aTS3UwEvvkBXHdAOH25NQG5 i7KGcxXx16+JPcw2IYokDLFIPNdrhixsiT8bIZZmDFeCfDElnmgNgKWaKH8oxKfG shNt8kZlaHhxXPvQU1GwtTNkNZmmTkljEzhdGuy9hoK6hT1ro7LK56HoL7HCtwYI 1zETIgKNWnc6iEhNkqRTTGt7vpAovdYlgt29+UjWcLjfALdsNtucBWJws2ylTppm 0hW0izF5LfhjR2An8uy/c7mYUJ5hLDjyiRZ7v0KIPJrCDWefhCN+mgsfhN1EmNVE mw6elON8TCeBUUDwx9jayQqG7Rd5E9kl1f+XLGDA4UDAtiIcK25rMBXvHwUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyv77gB72rGqRu6mxgULqlHjyMUwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOQLxWBt3pPr1CWipJcltm9fTLHPTG4v2V+ YNIEPxwjWu4XnGNf5VyBTZXHrIWWZVI7VW6kUxKNhvDvJW1e5jkbbMOSuff9xAYj qqHj/js7OLRIbTtwg63ISk6cHNPja6Mn7NAzEvZmFvM8JaUjy603TDmuFJXs0pQX wJ3CwGS/Utkfzi4eGwAfRDV6jy/lk1UKQ1o12hO21R8bv+gfxXvBYk3k841eTPye MBoEWC/1kthnU9f9PekE0HT7IixDkdNpgvJ8Plr83jZ3eZ6k+FrJi74WkO9f3fzM xG2irpK1HX5Y0HlIbNmV+TMh9A+tu5R3B5bULSbZMWvd5lVE3M8= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:37 2025 by rpki-client