$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: tfX/jNGfSI56FS9K9bS/6E4dJh1904EckJPZt0COOMM= Subject key identifier: 19:81:5D:84:95:5D:FC:F2:03:5C:8D:48:72:F9:BE:5B:B4:95:5D:E8 Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 599AD63EE60A792BF8BEC589349E898E137698E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 01EF Signing time: Sun 10 Aug 2025 06:02:17 +0000 Manifest this update: Sun 10 Aug 2025 05:57:17 +0000 Manifest next update: Wed 13 Aug 2025 13:58:17 +0000 Files and hashes: 1: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: Y/Fzu1F44bDpczEYEftf3BQ3KT7/GG2VLM6Y9+nAjBY=) 2: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9a:d6:3e:e6:0a:79:2b:f8:be:c5:89:34:9e:89:8e:13:76:98:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Aug 10 05:57:17 2025 GMT Not After : Aug 13 13:58:17 2025 GMT Subject: CN=19815D84955DFCF2035C8D4872F9BE5BB4955DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:96:10:ef:9d:37:f5:c2:1a:50:6b:8e:b7: 8c:89:29:b5:69:a0:a4:e0:cc:4a:ad:4b:ef:f5:4b: 67:bb:a4:f8:88:e7:88:c7:c4:b2:6c:59:35:a3:18: 9b:ae:28:a3:45:71:45:97:68:d2:7a:2a:93:77:a8: 84:55:29:d2:b8:1e:ac:1c:ea:83:8b:e6:8a:d1:7a: f5:13:49:10:11:2a:4b:11:a4:90:12:e7:6d:ec:7b: bd:25:3c:b1:6a:dd:50:aa:13:34:14:bc:89:7e:9c: e2:01:41:c4:93:74:aa:31:65:62:17:23:52:9d:a2: b7:85:f8:3b:50:90:5d:56:55:5f:6c:38:44:ed:75: 12:6c:36:0d:87:0b:02:ae:f2:2d:6c:b3:b5:56:3f: eb:c7:20:ab:35:a2:20:98:e2:12:27:f9:b7:d2:b8: fc:55:18:a1:07:de:9c:13:03:3a:38:64:96:32:59: e4:2e:82:92:db:e4:6a:84:27:4c:b8:d2:6f:ad:e9: 27:5f:4c:01:be:aa:03:0f:ec:bd:1a:8e:3c:42:67: b3:a5:a0:08:a8:08:ca:cf:de:51:17:53:fe:6e:69: 8f:9f:1b:b7:e1:4c:a8:c6:9b:92:17:20:e9:24:df: 8c:d6:a3:d4:2a:41:7a:36:f1:7a:68:cd:53:f0:46: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:5D:84:95:5D:FC:F2:03:5C:8D:48:72:F9:BE:5B:B4:95:5D:E8 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:39:0f:4f:31:07:bd:1f:8b:f0:76:58:56:4e:a0:b2:b4:bd: e7:ee:84:ae:ea:4b:26:64:8f:d3:aa:de:f0:c2:ea:0c:56:61: 85:d5:84:87:83:d8:83:5c:31:a9:0f:bd:c0:17:6e:dc:32:15: 84:3b:aa:7b:80:aa:93:5b:c6:f9:a9:e5:4e:2a:e8:46:57:6f: 7e:79:3d:f9:2c:52:26:41:4b:b1:23:7b:35:31:1b:98:24:4d: 43:8d:78:9c:1f:26:4f:76:d9:30:f1:3e:2b:0b:d9:c2:3e:b5: 34:b5:04:08:46:1f:d2:46:f2:e4:c2:4e:6b:f5:2b:93:cf:17: ec:b2:f1:01:25:b6:f7:44:24:09:1c:39:de:6d:57:94:46:21: 8d:d1:4f:88:e2:17:f8:a1:da:13:b9:e6:66:05:50:34:d4:60: 90:d9:8c:97:de:02:ce:a1:8d:0c:d8:9c:c5:47:23:b5:ad:90: 59:50:24:c4:cc:15:b6:bc:13:e5:29:fb:da:9c:49:6f:61:1a: c5:1d:ad:e9:61:9a:08:18:30:8d:c0:37:e5:27:b1:fa:1c:e9: 2d:64:be:e9:03:6c:e0:8c:5d:1d:f9:69:0d:da:ab:d9:65:ea: f5:7e:8c:a8:ec:9c:d8:e2:8a:c4:ef:e4:74:fb:74:66:60:ee: fb:7e:5a:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZrWPuYKeSv4vsWJNJ6JjhN2mOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNTA4MTAwNTU3MTdaFw0yNTA4MTMxMzU4MTdaMDMxMTAvBgNV BAMTKDE5ODE1RDg0OTU1REZDRjIwMzVDOEQ0ODcyRjlCRTVCQjQ5NTVERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6pYQ75039cIaUGuOt4yJKbVp oKTgzEqtS+/1S2e7pPiI54jHxLJsWTWjGJuuKKNFcUWXaNJ6KpN3qIRVKdK4Hqwc 6oOL5orRevUTSRARKksRpJAS523se70lPLFq3VCqEzQUvIl+nOIBQcSTdKoxZWIX I1KdoreF+DtQkF1WVV9sOETtdRJsNg2HCwKu8i1ss7VWP+vHIKs1oiCY4hIn+bfS uPxVGKEH3pwTAzo4ZJYyWeQugpLb5GqEJ0y40m+t6SdfTAG+qgMP7L0ajjxCZ7Ol oAioCMrP3lEXU/5uaY+fG7fhTKjGm5IXIOkk34zWo9QqQXo28XpozVPwRlIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYFdhJVd/PIDXI1Icvm+W7SVXegwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU5D08xB70fi/B2WFZOoLK0vefuhK7qSyZk j9Oq3vDC6gxWYYXVhIeD2INcMakPvcAXbtwyFYQ7qnuAqpNbxvmp5U4q6EZXb355 PfksUiZBS7EjezUxG5gkTUONeJwfJk922TDxPisL2cI+tTS1BAhGH9JG8uTCTmv1 K5PPF+yy8QEltvdEJAkcOd5tV5RGIY3RT4jiF/ih2hO55mYFUDTUYJDZjJfeAs6h jQzYnMVHI7WtkFlQJMTMFba8E+Up+9qcSW9hGsUdrelhmggYMI3AN+Unsfoc6S1k vukDbOCMXR35aQ3aq9ll6vV+jKjsnNjiisTv5HT7dGZg7vt+WuY= -----END CERTIFICATE-----Generated at Sun Aug 10 10:42:11 2025 by rpki-client