$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: 45ZMgX/gOG6xsbXK1AmMz8JmjHYZS93P1noWUf+6GWU= Subject key identifier: 8C:4A:DA:F5:00:FD:8C:5C:49:95:AF:A9:C2:BB:DB:94:8F:B4:50:38 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 382381E5E88070BC826D9C6AE0FA07D282DC7095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0107 Signing time: Mon 04 Aug 2025 09:21:20 +0000 Manifest this update: Mon 04 Aug 2025 09:16:20 +0000 Manifest next update: Thu 07 Aug 2025 20:05:20 +0000 Files and hashes: 1: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: xkVbDDh0seD2GWym3drhU1igXZUVDO5nd6uooJB6Ddo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:23:81:e5:e8:80:70:bc:82:6d:9c:6a:e0:fa:07:d2:82:dc:70:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Aug 4 09:16:20 2025 GMT Not After : Aug 7 20:05:20 2025 GMT Subject: CN=8C4ADAF500FD8C5C4995AFA9C2BBDB948FB45038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:cb:cb:cd:24:03:d8:b3:51:4d:ad:74:80: 3a:c6:a3:a9:e2:af:64:12:db:5c:91:4d:fd:4c:8e: 45:75:28:0b:b3:20:54:23:ee:5b:fe:49:88:b6:37: 3f:7a:c3:9f:64:55:d9:d1:74:fa:5a:84:b2:90:b7: 59:72:8f:7a:4d:b0:83:7a:8f:38:e3:0f:35:9e:b6: 26:20:75:c8:b3:5f:82:7d:e1:5d:d5:25:aa:a4:02: b7:97:2e:57:03:6f:74:2b:ba:62:fb:08:b8:9c:92: b9:fb:29:9b:b6:7c:45:ce:5e:8c:66:6a:57:40:13: 3d:c6:84:4e:bc:20:f0:98:c1:47:6a:61:93:ce:a1: c9:89:da:e6:c6:4c:e4:db:f2:c8:69:74:9f:12:4f: 6b:dc:14:c6:b5:30:52:e8:d9:23:c9:00:45:3e:64: 43:53:8d:6f:f9:73:f4:8b:ee:21:5b:f5:5e:da:35: f1:04:fa:d4:f1:8d:44:96:bd:04:d6:10:7d:e9:17: b7:40:d6:f5:89:b2:a2:3f:10:0e:96:26:45:aa:04: 35:01:bb:0f:b1:35:ea:5a:ab:7c:6a:5f:1a:2a:f6: e4:37:3e:6b:77:90:d0:a3:5d:63:d9:7f:f5:ef:a9: 6a:a2:de:f8:4a:39:f6:61:bc:a7:3e:af:45:2c:8d: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4A:DA:F5:00:FD:8C:5C:49:95:AF:A9:C2:BB:DB:94:8F:B4:50:38 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b4:cc:66:e6:bb:33:bf:f8:f1:7c:2d:05:43:a0:4f:dc:3c: 52:57:76:f6:d4:e3:0f:fb:09:cf:51:9c:a5:19:e0:d2:24:a3: 0b:f2:84:43:b6:a8:23:64:eb:86:df:5d:fd:ee:50:ff:14:90: cf:9f:5c:44:bd:e8:70:7f:63:41:a4:83:a3:05:b9:1b:bc:fd: d2:95:cb:59:b3:bd:95:32:18:9f:9a:32:26:9c:3e:f5:57:39: ca:b1:3d:05:85:fa:9a:c2:ff:44:b6:53:e0:86:b3:ed:b5:b6: fb:70:d8:4e:2c:dd:68:2f:32:9c:60:ef:a3:f6:fd:0b:32:a1: 19:7a:7c:2f:a5:3a:e7:bb:7a:22:c0:1c:ee:23:13:d5:a6:82: 25:7f:de:ce:42:69:02:33:40:aa:e4:25:4c:79:8a:64:c7:81: 11:3f:8d:43:4e:95:ef:c3:2a:5f:8f:df:7d:e6:da:fd:fc:aa: d3:ec:29:02:47:22:70:fb:7b:5d:0b:ea:01:57:43:d9:c7:cf: e2:03:b2:6b:07:aa:2b:c9:02:52:b3:c5:ec:6d:07:5e:e4:65: 27:29:48:5f:c0:7b:24:ce:8f:06:c7:ef:8a:65:41:26:e0:e9: 8b:8e:59:c7:af:0c:5f:6b:a5:26:8c:f2:f0:72:ca:7c:51:8c: 3a:49:ee:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCOB5eiAcLyCbZxq4PoH0oLccJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA4MDQwOTE2MjBaFw0yNTA4MDcyMDA1MjBaMDMxMTAvBgNV BAMTKDhDNEFEQUY1MDBGRDhDNUM0OTk1QUZBOUMyQkJEQjk0OEZCNDUwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfMvLzSQD2LNRTa10gDrGo6ni r2QS21yRTf1MjkV1KAuzIFQj7lv+SYi2Nz96w59kVdnRdPpahLKQt1lyj3pNsIN6 jzjjDzWetiYgdcizX4J94V3VJaqkAreXLlcDb3QrumL7CLickrn7KZu2fEXOXoxm aldAEz3GhE68IPCYwUdqYZPOocmJ2ubGTOTb8shpdJ8ST2vcFMa1MFLo2SPJAEU+ ZENTjW/5c/SL7iFb9V7aNfEE+tTxjUSWvQTWEH3pF7dA1vWJsqI/EA6WJkWqBDUB uw+xNepaq3xqXxoq9uQ3Pmt3kNCjXWPZf/XvqWqi3vhKOfZhvKc+r0UsjT/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEra9QD9jFxJla+pwrvblI+0UDgwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW0zGbmuzO/+PF8LQVDoE/cPFJXdvbU4w/7 Cc9RnKUZ4NIkowvyhEO2qCNk64bfXf3uUP8UkM+fXES96HB/Y0Gkg6MFuRu8/dKV y1mzvZUyGJ+aMiacPvVXOcqxPQWF+prC/0S2U+CGs+21tvtw2E4s3WgvMpxg76P2 /QsyoRl6fC+lOue7eiLAHO4jE9WmgiV/3s5CaQIzQKrkJUx5imTHgRE/jUNOle/D Kl+P333m2v38qtPsKQJHInD7e10L6gFXQ9nHz+IDsmsHqivJAlKzxextB17kZScp SF/AeyTOjwbH74plQSbg6YuOWcevDF9rpSaM8vByynxRjDpJ7kA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:30 2025 by rpki-client