$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: YxSs/8OX4zeWSRsIkVvXVgUWveoKwML+bL6sQg+fYHk= Subject key identifier: 94:F6:3C:27:D5:9C:BE:AF:44:99:FC:80:C7:F7:C5:38:F9:06:A7:36 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 37BABEB4F0849515067863C0A7EF9012DB415625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0197 Signing time: Wed 18 Jun 2025 13:31:30 +0000 Manifest this update: Wed 18 Jun 2025 13:26:30 +0000 Manifest next update: Sat 21 Jun 2025 23:00:30 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 4: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: /RndlVerD8/I3Q1oa1o5gQ6i6e91nbCKmTpS3qjiZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ba:be:b4:f0:84:95:15:06:78:63:c0:a7:ef:90:12:db:41:56:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Jun 18 13:26:30 2025 GMT Not After : Jun 21 23:00:30 2025 GMT Subject: CN=94F63C27D59CBEAF4499FC80C7F7C538F906A736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:ae:1b:b4:93:9c:8b:58:41:6a:96:89:63: 3b:26:8d:bd:b2:5b:7f:ee:dc:92:cd:82:a7:02:e6: f8:0e:37:92:95:d4:48:60:1e:b8:9f:07:f8:cd:0c: 3d:db:0a:dc:83:a0:3c:d9:e4:0e:de:4c:2b:67:43: 64:93:69:ab:c4:e6:ff:ea:ec:20:2b:b2:9b:d2:58: be:7f:a8:25:24:af:64:4e:90:4a:90:cb:48:0d:b1: 78:9b:1e:fe:d7:b9:6f:c0:43:67:e6:e3:4d:e5:6e: 99:9b:ef:28:20:77:d9:49:50:60:5a:f5:04:29:8a: b1:13:96:0e:67:c2:51:f7:67:c1:9d:d8:6c:3e:a3: ea:6b:00:c1:57:52:6d:56:aa:f0:69:96:67:8a:0d: 3a:2c:37:6b:00:1f:de:41:2a:1e:98:38:c0:f1:8c: 0e:a9:1a:cd:43:b3:8d:28:a0:17:1e:7b:d3:63:0a: a0:12:01:40:94:23:03:10:fb:c6:cb:b1:da:f1:a7: c0:5c:04:d2:eb:f6:cd:93:64:26:4c:82:02:72:71: 02:0a:00:43:86:d4:96:78:41:74:d8:df:d4:4e:1a: 68:a9:89:17:be:aa:9b:fe:9b:50:e6:51:fd:2f:24: 83:d0:46:9c:46:ac:38:80:f7:4c:03:46:2f:9e:45: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F6:3C:27:D5:9C:BE:AF:44:99:FC:80:C7:F7:C5:38:F9:06:A7:36 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:18:4e:5a:2b:c8:dc:83:35:b7:ed:0d:91:09:bc:71:66:53: 6b:e8:cd:09:df:cd:7b:93:c8:34:47:f7:31:5e:0b:0f:6a:cd: bc:60:a2:4b:04:ca:84:aa:a9:ac:06:9b:b8:a9:d4:12:03:e7: 26:95:28:20:f6:7a:87:1d:8e:e4:83:4d:30:f9:af:2a:f6:ee: 81:cf:4d:5e:98:e1:a9:35:53:c9:1c:90:14:05:c8:c1:fa:fe: 9d:3d:8d:4e:a1:05:28:bb:1f:f0:fc:ea:4b:91:87:9f:4b:55: bf:e3:ce:df:ce:06:3f:75:ed:28:b2:d8:48:98:c4:98:15:45: ca:53:64:cd:19:95:be:9d:ee:58:c9:14:8a:8e:0e:e2:71:b2: af:00:f7:08:21:dc:39:4e:03:99:39:4f:d2:d1:12:fa:f2:48: 02:f1:9c:94:47:55:34:e4:eb:55:23:dd:f7:bb:14:7c:eb:63: a0:8b:8c:1a:ee:95:cf:0f:4b:44:0f:e6:c3:0a:e3:ed:b6:aa: b8:db:33:96:ee:16:ba:24:c6:29:25:18:fc:24:12:44:41:a0: 31:1b:50:e0:54:26:79:b3:58:ca:db:6a:b2:2d:38:39:88:fc: f0:f1:f2:c0:99:a6:db:93:7a:98:a6:b9:a7:a5:45:f7:73:83: 46:c9:0c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7q+tPCElRUGeGPAp++QEttBViUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA2MTgxMzI2MzBaFw0yNTA2MjEyMzAwMzBaMDMxMTAvBgNV BAMTKDk0RjYzQzI3RDU5Q0JFQUY0NDk5RkM4MEM3RjdDNTM4RjkwNkE3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3a4btJOci1hBapaJYzsmjb2y W3/u3JLNgqcC5vgON5KV1EhgHrifB/jNDD3bCtyDoDzZ5A7eTCtnQ2STaavE5v/q 7CArspvSWL5/qCUkr2ROkEqQy0gNsXibHv7XuW/AQ2fm403lbpmb7yggd9lJUGBa 9QQpirETlg5nwlH3Z8Gd2Gw+o+prAMFXUm1WqvBplmeKDTosN2sAH95BKh6YOMDx jA6pGs1Ds40ooBcee9NjCqASAUCUIwMQ+8bLsdrxp8BcBNLr9s2TZCZMggJycQIK AEOG1JZ4QXTY39ROGmipiRe+qpv+m1DmUf0vJIPQRpxGrDiA90wDRi+eRZxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPY8J9Wcvq9EmfyAx/fFOPkGpzYwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4YTloryNyDNbftDZEJvHFmU2vozQnfzXuT yDRH9zFeCw9qzbxgoksEyoSqqawGm7ip1BID5yaVKCD2eocdjuSDTTD5ryr27oHP TV6Y4ak1U8kckBQFyMH6/p09jU6hBSi7H/D86kuRh59LVb/jzt/OBj917Siy2EiY xJgVRcpTZM0Zlb6d7ljJFIqODuJxsq8A9wgh3DlOA5k5T9LREvrySALxnJRHVTTk 61Uj3fe7FHzrY6CLjBrulc8PS0QP5sMK4+22qrjbM5buFrokxiklGPwkEkRBoDEb UOBUJnmzWMrbarItODmI/PDx8sCZptuTepimuaelRfdzg0bJDPw= -----END CERTIFICATE-----Generated at Thu Jun 19 09:16:16 2025 by rpki-client