$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: FUiQwGh7Y8wtDbI3geL5jTaowpzZw1+3HsdYGeU1adA= Subject key identifier: 37:36:50:A6:6C:BF:47:4F:DB:2F:F3:78:94:39:39:62:7B:AE:C1:AD Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 210F36D7C4D0E71940372CEF1AF483804592D4A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01AE Signing time: Sat 09 Aug 2025 18:51:32 +0000 Manifest this update: Sat 09 Aug 2025 18:46:32 +0000 Manifest next update: Wed 13 Aug 2025 01:59:32 +0000 Files and hashes: 1: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) 3: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: I2q6nlkvf/TiIvKLCTvFbrPIfS6JgqO+c/EgvNHtyvc=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 01:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0f:36:d7:c4:d0:e7:19:40:37:2c:ef:1a:f4:83:80:45:92:d4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Aug 9 18:46:32 2025 GMT Not After : Aug 13 01:59:32 2025 GMT Subject: CN=373650A66CBF474FDB2FF378943939627BAEC1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:96:dc:9b:11:26:d7:7a:b8:90:d4:5c:55: ad:ec:08:f1:e8:44:f2:b7:1d:b0:e6:dd:80:8c:85: 1e:12:65:6d:0b:c5:1d:87:8b:0b:ef:ea:f9:3a:8b: 98:1b:7f:f7:78:4e:c8:3f:f5:b5:37:a2:3b:45:9c: e1:54:94:33:77:4b:cd:1e:8e:fd:31:30:7a:d6:06: af:ad:64:fd:69:d8:83:3f:d4:05:72:9b:07:08:31: 10:5d:f1:7b:4c:11:61:1f:4a:c4:5a:fb:be:c4:bb: 29:4d:5c:a6:45:11:26:db:0d:58:ce:78:79:8f:ad: 7a:83:13:05:42:f1:40:66:20:27:67:57:b8:b7:a1: 1f:37:e5:10:72:e4:db:05:23:52:d8:9a:c2:39:31: 93:fa:e6:f2:7b:ee:b5:ad:b9:ef:c6:1f:bd:a9:8e: e1:b2:4b:42:15:41:93:84:98:50:c7:20:18:88:6e: fe:a7:f2:98:95:0d:39:fb:ae:c1:db:0a:43:b1:83: 3e:26:29:8b:c7:b3:81:fc:76:03:14:0b:84:50:cb: 5e:e6:cf:96:33:26:38:c9:90:7d:7b:69:3e:f9:82: b7:eb:6a:c7:3c:33:52:08:93:c3:0d:bf:57:e7:02: 31:12:0e:8e:04:4b:cc:72:69:06:91:b0:20:9e:16: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:36:50:A6:6C:BF:47:4F:DB:2F:F3:78:94:39:39:62:7B:AE:C1:AD X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:01:d2:e4:f9:24:32:69:0a:d6:1a:e3:e4:2f:a4:3f:e7:1e: d8:f5:e3:f6:60:22:bf:ee:d1:d7:38:1a:b9:ef:b8:a7:f0:86: 61:7a:d6:40:68:d8:68:a6:d3:96:d5:94:39:3f:62:8e:30:24: 46:c2:04:2d:6e:cd:a3:5a:62:41:6a:68:a6:02:ba:20:bb:67: bf:50:41:06:d8:6a:ac:e4:08:bb:98:f7:d7:d6:b4:58:ba:55: da:0d:7e:50:d4:9f:1f:39:15:00:22:93:9f:3e:52:0a:e6:e6: 94:d4:ce:f8:0d:76:ed:a8:b6:cd:ba:a2:47:be:9c:43:22:8f: 77:f8:52:69:a0:e5:18:39:9c:9c:49:fd:d4:21:de:51:4a:6c: 74:10:dc:cf:5e:8f:40:48:7c:5e:b2:76:c9:fe:d4:46:e3:e5: a3:d7:b4:ef:09:36:a9:3c:37:61:37:8f:48:0b:b5:13:51:39: dc:d4:09:74:ef:07:cc:01:b6:29:7e:f4:b9:09:1c:41:d4:a0: 15:ce:8b:75:d3:14:7d:ce:05:cb:0f:05:24:ca:3f:c9:4e:bc: 54:a7:bf:58:60:2e:99:43:83:77:da:fe:3c:d8:74:56:e0:6e: 08:d0:6b:32:66:d8:a2:e8:8f:4c:45:6f:8b:b2:db:33:49:45: 9e:ff:11:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQ8218TQ5xlANyzvGvSDgEWS1KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA4MDkxODQ2MzJaFw0yNTA4MTMwMTU5MzJaMDMxMTAvBgNV BAMTKDM3MzY1MEE2NkNCRjQ3NEZEQjJGRjM3ODk0MzkzOTYyN0JBRUMxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY5bcmxEm13q4kNRcVa3sCPHo RPK3HbDm3YCMhR4SZW0LxR2Hiwvv6vk6i5gbf/d4Tsg/9bU3ojtFnOFUlDN3S80e jv0xMHrWBq+tZP1p2IM/1AVymwcIMRBd8XtMEWEfSsRa+77EuylNXKZFESbbDVjO eHmPrXqDEwVC8UBmICdnV7i3oR835RBy5NsFI1LYmsI5MZP65vJ77rWtue/GH72p juGyS0IVQZOEmFDHIBiIbv6n8piVDTn7rsHbCkOxgz4mKYvHs4H8dgMUC4RQy17m z5YzJjjJkH17aT75grfrasc8M1IIk8MNv1fnAjESDo4ES8xyaQaRsCCeFiqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNzZQpmy/R0/bL/N4lDk5Ynuuwa0wHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgB0uT5JDJpCtYa4+QvpD/nHtj14/ZgIr/u 0dc4GrnvuKfwhmF61kBo2Gim05bVlDk/Yo4wJEbCBC1uzaNaYkFqaKYCuiC7Z79Q QQbYaqzkCLuY99fWtFi6VdoNflDUnx85FQAik58+Ugrm5pTUzvgNdu2ots26oke+ nEMij3f4Ummg5Rg5nJxJ/dQh3lFKbHQQ3M9ej0BIfF6ydsn+1Ebj5aPXtO8JNqk8 N2E3j0gLtRNROdzUCXTvB8wBtil+9LkJHEHUoBXOi3XTFH3OBcsPBSTKP8lOvFSn v1hgLplDg3fa/jzYdFbgbgjQazJm2KLoj0xFb4uy2zNJRZ7/EZw= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:54 2025 by rpki-client