$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: 1FivvmZgwPuFaVAkjKaU/stD5TU6KgeHztqkGxqMNuY= Subject key identifier: 7E:11:50:9D:DD:D4:B0:C1:81:79:B5:60:A7:E3:17:1F:A1:A5:FD:6C Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 2764D8AE983AD5BC0F4BCD9C596892A61B6E95D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 027F Signing time: Tue 05 Aug 2025 12:41:06 +0000 Manifest this update: Tue 05 Aug 2025 12:36:06 +0000 Manifest next update: Fri 08 Aug 2025 14:29:06 +0000 Files and hashes: 1: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 2: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 4: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 5: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: V2bCWfBA0DCDghJUaZAkv+LwRgAdLyCiqLMUYsCiOYU=) 6: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 7: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:64:d8:ae:98:3a:d5:bc:0f:4b:cd:9c:59:68:92:a6:1b:6e:95:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Aug 5 12:36:06 2025 GMT Not After : Aug 8 14:29:06 2025 GMT Subject: CN=7E11509DDDD4B0C18179B560A7E3171FA1A5FD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a8:38:3f:60:6d:ed:3e:60:67:bb:ab:ce:04: e8:44:5a:23:ea:6f:93:b8:1a:88:1d:e8:23:83:8d: 92:94:34:f4:9b:a5:e2:3a:2e:39:ce:31:0c:e2:60: 1a:12:19:1a:ac:17:34:ec:6f:8e:d7:b8:a6:84:2f: 69:1d:ea:71:2d:e0:58:7b:cf:e5:1f:55:e3:b9:57: 9a:c8:00:95:31:bf:c0:79:a4:6d:1f:1f:64:3d:bb: 8c:15:6b:9d:f3:62:74:f3:88:e4:f6:55:33:c4:3f: b1:4f:06:b2:de:42:68:b5:85:81:b9:42:01:a4:36: fb:09:49:45:e5:2d:0f:7c:45:fe:0b:5c:4d:b8:52: 22:a3:3a:f3:3d:4d:28:e2:20:10:81:43:cc:f1:1b: d5:fb:36:61:72:8e:77:2f:a8:cb:c2:23:17:04:e1: 19:28:cb:28:7a:aa:31:4a:89:0b:19:24:7b:96:c4: 73:30:95:bb:8d:07:06:07:90:d8:6b:16:71:02:c8: ab:44:03:06:cb:db:dd:99:fd:49:38:b1:a6:ac:e5: 12:b4:0f:f8:da:3c:06:42:26:6f:2b:46:72:a6:e3: 56:3f:db:31:4c:45:e1:89:82:f5:38:04:4f:7b:f9: 90:df:a5:b4:a3:f5:84:87:8a:10:8e:2e:fa:60:22: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:50:9D:DD:D4:B0:C1:81:79:B5:60:A7:E3:17:1F:A1:A5:FD:6C X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5e:94:87:6a:c2:07:a3:ed:1d:f8:3e:1b:73:c4:fd:de:a2: 26:d5:06:89:2a:4d:fc:10:c3:de:df:50:56:e5:a9:05:2a:db: 33:46:cc:c0:62:66:81:0f:97:09:35:dd:65:08:c0:04:48:d7: 26:ba:a9:0e:0d:e5:d5:e8:35:9c:79:75:ca:46:9c:eb:36:ad: f5:d1:b6:7d:95:ac:14:06:d8:a9:03:a1:e3:ec:49:a7:52:e4: 43:5d:36:e5:63:ae:8b:61:77:a4:55:89:ee:34:21:81:83:14: ae:b9:60:71:d3:f3:63:9f:c6:d3:ab:8b:02:30:6a:33:ef:d1: fe:09:ee:da:61:b2:70:a4:6c:a9:4a:a6:9e:0e:e5:66:49:1c: fd:ff:92:a6:d5:53:8f:3f:0e:8a:e5:e9:d1:18:d6:5c:fb:c2: e2:f0:c7:9c:d1:74:69:52:a3:0a:5e:29:35:70:92:46:fc:ad: da:bf:88:3e:75:59:3e:76:56:72:de:b7:58:7c:47:d7:9e:e0: b1:4d:8d:86:29:77:ce:d0:ee:d4:98:18:3b:2c:ad:2d:40:d7: fa:f2:33:84:4f:a8:d0:0f:57:a7:17:17:bd:8e:1a:9b:f3:f8: e2:e9:3d:24:98:2c:5f:cb:a0:d7:0a:ce:76:95:67:e4:e6:eb: c2:0e:ae:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2TYrpg61bwPS82cWWiSphtuldEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA4MDUxMjM2MDZaFw0yNTA4MDgxNDI5MDZaMDMxMTAvBgNV BAMTKDdFMTE1MDlERERENEIwQzE4MTc5QjU2MEE3RTMxNzFGQTFBNUZENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcqDg/YG3tPmBnu6vOBOhEWiPq b5O4Gogd6CODjZKUNPSbpeI6LjnOMQziYBoSGRqsFzTsb47XuKaEL2kd6nEt4Fh7 z+UfVeO5V5rIAJUxv8B5pG0fH2Q9u4wVa53zYnTziOT2VTPEP7FPBrLeQmi1hYG5 QgGkNvsJSUXlLQ98Rf4LXE24UiKjOvM9TSjiIBCBQ8zxG9X7NmFyjncvqMvCIxcE 4Rkoyyh6qjFKiQsZJHuWxHMwlbuNBwYHkNhrFnECyKtEAwbL292Z/Uk4saas5RK0 D/jaPAZCJm8rRnKm41Y/2zFMReGJgvU4BE97+ZDfpbSj9YSHihCOLvpgIg0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhFQnd3UsMGBebVgp+MXH6Gl/WwwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClelIdqwgej7R34PhtzxP3eoibVBokqTfwQ w97fUFblqQUq2zNGzMBiZoEPlwk13WUIwARI1ya6qQ4N5dXoNZx5dcpGnOs2rfXR tn2VrBQG2KkDoePsSadS5ENdNuVjrothd6RVie40IYGDFK65YHHT82OfxtOriwIw ajPv0f4J7tphsnCkbKlKpp4O5WZJHP3/kqbVU48/Dorl6dEY1lz7wuLwx5zRdGlS owpeKTVwkkb8rdq/iD51WT52VnLet1h8R9ee4LFNjYYpd87Q7tSYGDssrS1A1/ry M4RPqNAPV6cXF72OGpvz+OLpPSSYLF/LoNcKznaVZ+Tm68IOrig= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:16 2025 by rpki-client