$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: F1GZqVbyt47nXs8ICSLn66bfNJdgB4xX9McPo8AJKa8= Subject key identifier: 91:9B:3E:9F:32:C4:84:25:D3:04:67:CF:DF:46:91:11:42:D8:E7:68 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 6341CC63BEAE56336B3149F92CDCD3F7D44E4569 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: FE Signing time: Wed 06 Aug 2025 16:20:59 +0000 Manifest this update: Wed 06 Aug 2025 16:15:59 +0000 Manifest next update: Sat 09 Aug 2025 21:09:59 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: 2a+sRukfjifnCXek+wArmDHG4u3HDQ1BfZnnCbucDLs=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:41:cc:63:be:ae:56:33:6b:31:49:f9:2c:dc:d3:f7:d4:4e:45:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Aug 6 16:15:59 2025 GMT Not After : Aug 9 21:09:59 2025 GMT Subject: CN=919B3E9F32C48425D30467CFDF46911142D8E768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:b9:45:45:29:c9:b9:f9:a7:47:b2:ad:5d: 36:15:57:5c:ad:71:b0:ce:7d:0a:e9:e4:1b:c6:04: 51:7f:6c:d7:2e:f1:34:f6:da:99:c2:f4:8a:44:90: 6d:29:db:13:8b:f7:11:d1:46:bb:12:f5:a9:d8:cb: 4d:b2:fc:89:a2:e5:fb:c3:4e:e1:3e:dd:91:20:6d: 7e:4b:77:9f:37:e8:d8:1f:00:d6:ed:37:a8:b9:34: 0b:b3:13:91:a0:16:d6:03:99:29:94:21:45:20:39: 30:f8:cd:6c:d2:8b:cf:b5:58:02:2b:27:16:26:b9: fc:fe:d1:74:14:7e:9e:45:d4:60:ef:30:f8:6a:a4: da:67:de:b0:be:d2:f6:67:a4:80:ee:98:14:a1:a7: ce:14:01:b7:8f:94:97:b6:af:19:23:f8:7a:03:40: a4:56:6b:1f:8c:7a:df:ef:3c:23:55:f4:69:ed:81: 6f:41:5c:24:24:78:75:f9:ee:38:e2:ed:45:61:81: 02:2d:dd:4b:23:af:b3:ff:37:46:f7:54:35:38:b3: e1:1b:0e:47:f9:3c:5b:49:71:45:1a:17:25:1e:4d: 78:b2:7d:5f:ce:e0:90:c0:98:63:02:01:16:5d:5e: cb:bc:43:09:fe:fa:28:77:2e:9d:60:6b:67:49:29: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9B:3E:9F:32:C4:84:25:D3:04:67:CF:DF:46:91:11:42:D8:E7:68 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a3:22:2e:d0:d3:e9:76:84:60:1d:ad:97:d1:09:19:71:9b: a2:63:e0:0e:32:eb:b6:d6:3b:46:79:2f:a9:64:9d:5c:e9:b7: 20:94:fe:9a:f3:63:e3:60:65:76:11:f4:9d:61:be:63:e2:1e: 90:db:12:cf:af:d8:eb:f2:4e:9b:f7:b3:54:0a:e1:16:7b:dd: 18:a4:46:ce:cc:1d:0f:2d:28:13:e7:a4:d6:63:84:7d:63:77: 1a:d0:30:5a:39:4a:44:de:0e:b6:38:c2:8b:6e:bd:bd:e6:d3: 65:ca:59:93:7e:0b:7d:79:5c:d2:f1:0d:a9:17:b8:bd:56:b0: 28:b8:57:cc:31:cc:03:2c:77:45:7d:63:71:02:1c:9a:73:00: d5:04:3f:b7:57:74:2d:9b:49:c7:9d:ed:de:f0:58:62:de:d2: 64:15:3f:dc:5b:4b:1c:f9:e4:af:ac:72:18:11:78:fa:98:34: 55:e6:08:87:fa:34:b2:e9:12:fb:80:d1:07:a9:9c:06:0d:18: 82:3c:8a:32:f0:12:45:a6:23:1e:b4:38:c0:c0:90:ec:85:85: 76:a9:41:18:2e:38:11:3b:ba:12:21:fd:a4:11:94:47:3b:da: 60:eb:46:34:8e:a7:05:b7:8d:3c:43:d1:38:63:25:72:b9:76: f1:f1:5b:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0HMY76uVjNrMUn5LNzT99RORWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA4MDYxNjE1NTlaFw0yNTA4MDkyMTA5NTlaMDMxMTAvBgNV BAMTKDkxOUIzRTlGMzJDNDg0MjVEMzA0NjdDRkRGNDY5MTExNDJEOEU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsrlFRSnJufmnR7KtXTYVV1yt cbDOfQrp5BvGBFF/bNcu8TT22pnC9IpEkG0p2xOL9xHRRrsS9anYy02y/Imi5fvD TuE+3ZEgbX5Ld5836NgfANbtN6i5NAuzE5GgFtYDmSmUIUUgOTD4zWzSi8+1WAIr JxYmufz+0XQUfp5F1GDvMPhqpNpn3rC+0vZnpIDumBShp84UAbePlJe2rxkj+HoD QKRWax+Met/vPCNV9GntgW9BXCQkeHX57jji7UVhgQIt3Usjr7P/N0b3VDU4s+Eb Dkf5PFtJcUUaFyUeTXiyfV/O4JDAmGMCARZdXsu8Qwn++ih3Lp1ga2dJKQlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZs+nzLEhCXTBGfP30aREULY52gwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFejIi7Q0+l2hGAdrZfRCRlxm6Jj4A4y67bW O0Z5L6lknVzptyCU/przY+NgZXYR9J1hvmPiHpDbEs+v2OvyTpv3s1QK4RZ73Rik Rs7MHQ8tKBPnpNZjhH1jdxrQMFo5SkTeDrY4wotuvb3m02XKWZN+C315XNLxDakX uL1WsCi4V8wxzAMsd0V9Y3ECHJpzANUEP7dXdC2bSced7d7wWGLe0mQVP9xbSxz5 5K+schgRePqYNFXmCIf6NLLpEvuA0QepnAYNGII8ijLwEkWmIx60OMDAkOyFhXap QRguOBE7uhIh/aQRlEc72mDrRjSOpwW3jTxD0ThjJXK5dvHxWx4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:18 2025 by rpki-client