$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: kQkcVzw//QNFaxB/H7ngTCNSyKyKmd2f6jZmwNmw7pU= Subject key identifier: AD:50:E5:5D:DE:31:8F:0F:A7:2B:81:7A:27:9B:17:F4:A4:BD:26:B5 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 456D4B6C84858FAD154C131D77039887774F5B77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0305 Signing time: Tue 05 Aug 2025 20:41:47 +0000 Manifest this update: Tue 05 Aug 2025 20:36:47 +0000 Manifest next update: Sat 09 Aug 2025 05:44:47 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 2Ert6lYeKfguDsQH05cQDzpVhovxFhxgNo8VD3LyEmA=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 3: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6d:4b:6c:84:85:8f:ad:15:4c:13:1d:77:03:98:87:77:4f:5b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Aug 5 20:36:47 2025 GMT Not After : Aug 9 05:44:47 2025 GMT Subject: CN=AD50E55DDE318F0FA72B817A279B17F4A4BD26B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:8e:b0:94:94:47:4f:66:62:f8:43:68:07: f9:02:35:3d:e5:5c:69:52:1c:f4:75:fe:e9:38:59: 3b:6e:a8:48:24:df:12:c6:0f:e5:a8:82:18:f4:9b: 8d:e2:46:ab:37:ef:c1:ed:4b:04:55:a6:76:c5:ca: 63:49:46:45:a9:14:59:d0:45:cb:b3:08:7e:00:5a: ac:80:9e:0e:9d:94:3d:3f:ab:ef:74:f0:c6:88:6b: 2d:49:8f:f8:0b:a1:81:86:18:a6:8e:93:c9:4c:88: cf:59:ae:75:a8:6e:e3:ee:ba:57:14:b8:29:61:1b: 43:64:f1:19:6d:e6:7a:40:0b:d9:e2:c5:3e:ec:c4: 56:3e:1f:4a:09:1e:7d:6d:2e:d4:d7:dd:a0:11:2e: fa:4b:44:f8:9e:33:83:fd:c7:f3:0e:54:ed:00:91: b5:31:ba:b4:57:eb:44:2e:80:42:fb:13:d9:95:48: b2:27:d3:f1:77:b9:15:57:ac:b7:44:43:42:f0:3a: bc:65:84:c3:5b:ed:3a:03:a4:e1:45:3c:bc:39:01: 79:c8:d2:e6:ec:fc:ba:c2:5b:22:9b:67:96:42:95: 7f:62:d2:e7:c4:7b:74:d7:7f:0a:14:f1:ab:eb:3c: 23:25:0d:80:c2:65:f7:36:a5:fa:6a:b0:5f:0d:9d: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:50:E5:5D:DE:31:8F:0F:A7:2B:81:7A:27:9B:17:F4:A4:BD:26:B5 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:05:0c:58:8c:33:8a:32:5b:cb:28:95:00:88:25:a8:20:86: b6:7f:7a:20:ad:d5:78:22:23:fc:59:84:53:f8:79:22:2d:66: 64:3f:14:90:d6:74:66:df:25:cb:54:b3:e1:35:02:09:24:a2: 32:b7:c3:eb:50:fd:a7:3b:a8:34:ce:17:5e:dd:fb:b6:59:c0: 45:91:b0:d1:a5:15:db:7b:a0:6c:39:c8:19:84:30:d2:a1:22: 1c:d7:23:9c:44:3e:36:94:57:a4:80:28:4d:49:fc:46:0d:b0: c7:1c:42:c2:7f:54:5d:c3:01:89:4a:c7:57:5d:40:6a:63:22: a4:30:89:fe:94:00:64:e0:d0:8e:dd:95:22:68:66:17:4a:f6: 85:a6:b9:01:8c:85:68:44:5c:b0:65:c9:19:42:7f:73:d6:70: 41:7d:c1:86:c8:24:ec:2a:2c:c2:5c:7e:9b:12:3c:04:11:85: 78:80:c2:c2:48:c2:2a:a5:b8:4d:c1:cb:f5:77:27:e6:ee:e0: d0:1f:0e:05:b3:96:7a:35:78:48:9d:78:13:22:cd:a6:77:61: ef:1d:81:a0:a9:23:64:af:45:80:40:f1:37:15:ce:14:56:00: c9:8e:ed:38:09:a5:56:7a:8a:04:00:9d:61:5b:0a:aa:eb:74: 3b:2c:c2:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURW1LbISFj60VTBMddwOYh3dPW3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA4MDUyMDM2NDdaFw0yNTA4MDkwNTQ0NDdaMDMxMTAvBgNV BAMTKEFENTBFNTVEREUzMThGMEZBNzJCODE3QTI3OUIxN0Y0QTRCRDI2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLI6wlJRHT2Zi+ENoB/kCNT3l XGlSHPR1/uk4WTtuqEgk3xLGD+Woghj0m43iRqs378HtSwRVpnbFymNJRkWpFFnQ RcuzCH4AWqyAng6dlD0/q+908MaIay1Jj/gLoYGGGKaOk8lMiM9ZrnWobuPuulcU uClhG0Nk8Rlt5npAC9nixT7sxFY+H0oJHn1tLtTX3aARLvpLRPieM4P9x/MOVO0A kbUxurRX60QugEL7E9mVSLIn0/F3uRVXrLdEQ0LwOrxlhMNb7ToDpOFFPLw5AXnI 0ubs/LrCWyKbZ5ZClX9i0ufEe3TXfwoU8avrPCMlDYDCZfc2pfpqsF8NnRatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVDlXd4xjw+nK4F6J5sX9KS9JrUwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIFDFiMM4oyW8solQCIJagghrZ/eiCt1Xgi I/xZhFP4eSItZmQ/FJDWdGbfJctUs+E1AgkkojK3w+tQ/ac7qDTOF17d+7ZZwEWR sNGlFdt7oGw5yBmEMNKhIhzXI5xEPjaUV6SAKE1J/EYNsMccQsJ/VF3DAYlKx1dd QGpjIqQwif6UAGTg0I7dlSJoZhdK9oWmuQGMhWhEXLBlyRlCf3PWcEF9wYbIJOwq LMJcfpsSPAQRhXiAwsJIwiqluE3By/V3J+bu4NAfDgWzlno1eEideBMizaZ3Ye8d gaCpI2SvRYBA8TcVzhRWAMmO7TgJpVZ6igQAnWFbCqrrdDsswiM= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:24 2025 by rpki-client