$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: AUvI4iv0hNC9lbgGNWsTcfHH6kdX/7IR5Ktxz1dBXQo= Subject key identifier: 5A:09:0A:42:90:92:1D:AC:E0:F3:FF:7B:59:D3:44:8E:25:CD:F4:E8 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 37E661575A2C11AEBA7133D94E841BE3F2FB6224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01B6 Signing time: Wed 06 Aug 2025 22:40:52 +0000 Manifest this update: Wed 06 Aug 2025 22:35:52 +0000 Manifest next update: Sun 10 Aug 2025 01:06:52 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) 3: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: 6fhm6GCrmnJINhuKwQzVJokOq0mTHkvIs2A3cRsHpxw=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e6:61:57:5a:2c:11:ae:ba:71:33:d9:4e:84:1b:e3:f2:fb:62:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Aug 6 22:35:52 2025 GMT Not After : Aug 10 01:06:52 2025 GMT Subject: CN=5A090A4290921DACE0F3FF7B59D3448E25CDF4E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:74:61:c1:e0:56:64:a6:e3:cb:22:71:b8: 6e:e4:73:27:8b:eb:1b:71:3c:d9:cd:67:e2:0e:d9: 19:cc:4f:70:04:c7:2b:f5:52:5b:ee:75:3b:77:47: f1:39:a0:3f:fd:0a:13:c8:7c:20:8e:b3:68:56:28: 37:b7:b6:65:68:60:e8:06:70:07:67:1c:50:20:0f: 89:dd:db:d5:7e:58:38:2a:17:f2:6b:64:09:6e:f6: e1:b5:83:6c:9a:01:1e:75:10:2e:ca:6e:e2:01:48: e7:ad:38:df:58:29:c0:76:47:46:65:c5:4e:30:28: 0f:8c:ab:e4:57:ac:1e:b2:f5:9e:9b:fd:2e:c3:d3: 96:e4:57:71:98:de:91:24:64:ef:35:15:4c:f6:96: 92:4f:60:95:f9:c6:90:54:ed:81:b4:ed:57:30:3e: 8e:c6:9a:df:c7:94:82:07:99:16:84:99:1b:ab:f5: 0f:85:6c:48:5d:aa:4d:50:a0:71:83:7d:d0:f8:ef: aa:39:fd:4a:bb:09:90:ab:b8:cf:22:fd:b0:92:78: 6f:04:9d:f6:ec:7b:39:67:b8:6c:27:16:50:be:79: 51:02:69:5e:6f:43:ac:e2:21:d3:33:ad:0d:ad:97: f2:fa:5d:d5:20:f2:c0:81:df:72:25:6c:b7:57:56: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:0A:42:90:92:1D:AC:E0:F3:FF:7B:59:D3:44:8E:25:CD:F4:E8 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:59:97:52:73:33:d8:c3:43:07:a3:2c:8d:6d:cb:b5:2e:2e: 62:29:a8:07:26:9d:b2:b1:d0:46:12:82:0f:67:dd:4b:8a:22: 4e:56:c6:09:2b:3c:36:f4:93:14:98:2a:51:1a:7c:e2:4d:02: 85:2d:b6:c5:11:59:6e:ce:d9:80:df:c6:bf:fc:08:2e:56:4e: ae:e6:52:2f:3d:e8:ba:5a:c9:6e:9e:19:0b:0f:54:c7:c8:f3: 0d:91:89:0a:b9:c0:2a:69:93:18:07:1c:99:2a:3a:06:8b:eb: e4:a2:31:61:b7:5a:91:fe:40:e8:15:1e:43:be:ba:c1:db:18: c8:81:0f:ce:92:48:ad:a0:d7:14:a4:68:c0:8d:f1:02:62:d8: 0e:10:08:9f:56:19:59:90:1c:d6:df:63:ef:72:cc:ca:1e:63: fc:e6:0c:96:92:bb:68:b1:2c:59:ca:72:bc:6a:03:d0:74:b8: ab:7a:70:2a:f3:ef:2d:aa:1d:61:89:90:fa:ce:74:58:76:b2: a3:3d:85:27:2a:23:7a:66:00:52:3d:46:ba:53:1b:db:34:47: e8:67:bf:c0:cb:3f:bc:83:be:e7:30:22:dc:de:74:de:db:84: 54:98:9e:f7:5f:66:92:c1:9b:09:84:d6:6c:1b:12:aa:fe:8d: 6e:f8:da:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+ZhV1osEa66cTPZToQb4/L7YiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA4MDYyMjM1NTJaFw0yNTA4MTAwMTA2NTJaMDMxMTAvBgNV BAMTKDVBMDkwQTQyOTA5MjFEQUNFMEYzRkY3QjU5RDM0NDhFMjVDREY0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/HRhweBWZKbjyyJxuG7kcyeL 6xtxPNnNZ+IO2RnMT3AExyv1UlvudTt3R/E5oD/9ChPIfCCOs2hWKDe3tmVoYOgG cAdnHFAgD4nd29V+WDgqF/JrZAlu9uG1g2yaAR51EC7KbuIBSOetON9YKcB2R0Zl xU4wKA+Mq+RXrB6y9Z6b/S7D05bkV3GY3pEkZO81FUz2lpJPYJX5xpBU7YG07Vcw Po7Gmt/HlIIHmRaEmRur9Q+FbEhdqk1QoHGDfdD476o5/Uq7CZCruM8i/bCSeG8E nfbsezlnuGwnFlC+eVECaV5vQ6ziIdMzrQ2tl/L6XdUg8sCB33IlbLdXVsoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWgkKQpCSHazg8/97WdNEjiXN9OgwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxZl1JzM9jDQwejLI1ty7UuLmIpqAcmnbKx 0EYSgg9n3UuKIk5WxgkrPDb0kxSYKlEafOJNAoUttsURWW7O2YDfxr/8CC5WTq7m Ui896LpayW6eGQsPVMfI8w2RiQq5wCppkxgHHJkqOgaL6+SiMWG3WpH+QOgVHkO+ usHbGMiBD86SSK2g1xSkaMCN8QJi2A4QCJ9WGVmQHNbfY+9yzMoeY/zmDJaSu2ix LFnKcrxqA9B0uKt6cCrz7y2qHWGJkPrOdFh2sqM9hScqI3pmAFI9RrpTG9s0R+hn v8DLP7yDvucwItzedN7bhFSYnvdfZpLBmwmE1mwbEqr+jW742lI= -----END CERTIFICATE-----Generated at Thu Aug 7 02:08:37 2025 by rpki-client