$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: sFy1jCN/egQYyU8duPFcrLOnTJXyloabjgWJ3xoziag= Subject key identifier: B0:93:CE:24:97:2A:BD:E1:45:66:14:86:62:C6:9C:51:B8:C3:FF:92 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 57FC3FC283163FD1FF86FBCC66E565FED5872930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 0184 Signing time: Mon 16 Jun 2025 12:41:32 +0000 Manifest this update: Mon 16 Jun 2025 12:36:32 +0000 Manifest next update: Fri 20 Jun 2025 00:00:32 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: VrGRf4juNJhoWW3FUzNzj9xGaNfdI5zK5ovYBNFcr6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fc:3f:c2:83:16:3f:d1:ff:86:fb:cc:66:e5:65:fe:d5:87:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Jun 16 12:36:32 2025 GMT Not After : Jun 20 00:00:32 2025 GMT Subject: CN=B093CE24972ABDE14566148662C69C51B8C3FF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:70:5d:54:f6:0a:fa:bf:6a:10:c3:59:f9: fd:9e:b2:c9:62:37:2c:08:81:45:5e:66:53:50:fe: 34:e3:ec:0d:41:1f:83:39:a0:4e:c8:2b:f7:a0:13: 13:e2:0e:82:8b:f7:e6:45:14:13:fc:52:3f:3c:f0: 46:ed:d7:f1:bc:52:fd:38:a0:57:17:e2:93:cd:1d: 7f:84:d9:64:2d:4c:c7:1b:e8:c9:e9:e7:ea:96:d9: c1:1a:e1:8e:00:2b:aa:ec:1e:7d:60:bb:7c:57:58: 35:de:f3:36:a2:63:e4:85:f1:bd:7c:01:ad:bb:3f: 3d:19:3a:83:81:14:e0:19:79:ee:cf:ec:9a:3c:81: 41:9b:b1:9e:25:ef:90:f1:f7:d2:f2:79:e1:09:00: e9:05:56:7f:1d:94:0c:e3:cb:f1:bf:d4:37:54:56: ed:7f:67:a8:c9:f0:05:5b:f3:43:a5:f0:32:2b:35: 7c:7d:ad:70:57:83:d3:d8:3c:28:32:59:05:05:eb: 0d:c7:97:e7:d6:10:34:a9:ec:4b:cb:58:aa:ee:f1: 15:55:8f:38:9e:fa:93:69:bb:11:27:a6:ad:7d:eb: e8:6e:77:53:01:56:23:a6:51:09:a1:75:22:65:0b: 23:f6:fd:1b:6d:2f:ec:4e:e9:c6:c5:cc:6d:db:71: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:93:CE:24:97:2A:BD:E1:45:66:14:86:62:C6:9C:51:B8:C3:FF:92 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8e:40:ea:87:c5:0f:e2:39:72:b4:73:2c:9e:6d:23:59:5f: 38:82:35:26:84:d2:35:03:96:67:c9:27:4e:7e:57:da:c1:b7: 91:27:12:2a:d8:73:98:1d:d0:ac:74:7c:1e:40:a9:df:66:6b: e1:61:4d:4e:91:a2:d1:01:53:6b:f8:67:da:46:91:71:c1:2c: f8:e5:d4:87:df:b2:87:ed:96:d1:8a:27:39:c7:7e:24:f8:ee: 94:41:1b:f6:56:30:b6:0b:f7:ac:ca:7d:05:0a:23:d8:66:0a: 08:59:93:76:38:8b:4f:29:e7:74:5e:5c:31:7f:a7:d0:8d:9b: 99:ea:a8:98:06:37:1a:bd:8b:2b:ab:92:b3:5f:e1:d1:86:7b: 01:af:df:4d:85:16:4c:51:3d:bf:c0:60:a5:9a:54:b5:e7:45: e2:f4:0d:67:17:bb:08:d7:53:42:14:04:3b:93:4e:72:72:98: 37:fa:15:a7:94:82:d6:dc:5c:f2:b6:62:88:7b:c9:af:3e:3d: 12:a8:9f:62:a1:19:20:21:5f:c6:79:ef:cf:72:ea:fa:03:b1: 7f:80:25:65:4c:9f:9a:03:e9:97:7e:4e:da:f5:5d:25:d7:eb: 13:e8:21:ae:7e:f7:e5:ef:a7:33:3e:d1:47:ad:df:50:77:cf: 5c:97:07:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/w/woMWP9H/hvvMZuVl/tWHKTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA2MTYxMjM2MzJaFw0yNTA2MjAwMDAwMzJaMDMxMTAvBgNV BAMTKEIwOTNDRTI0OTcyQUJERTE0NTY2MTQ4NjYyQzY5QzUxQjhDM0ZGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJnBdVPYK+r9qEMNZ+f2essli NywIgUVeZlNQ/jTj7A1BH4M5oE7IK/egExPiDoKL9+ZFFBP8Uj888Ebt1/G8Uv04 oFcX4pPNHX+E2WQtTMcb6Mnp5+qW2cEa4Y4AK6rsHn1gu3xXWDXe8zaiY+SF8b18 Aa27Pz0ZOoOBFOAZee7P7Jo8gUGbsZ4l75Dx99LyeeEJAOkFVn8dlAzjy/G/1DdU Vu1/Z6jJ8AVb80Ol8DIrNXx9rXBXg9PYPCgyWQUF6w3Hl+fWEDSp7EvLWKru8RVV jzie+pNpuxEnpq196+hud1MBViOmUQmhdSJlCyP2/RttL+xO6cbFzG3bcbLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJPOJJcqveFFZhSGYsacUbjD/5IwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+OQOqHxQ/iOXK0cyyebSNZXziCNSaE0jUD lmfJJ05+V9rBt5EnEirYc5gd0Kx0fB5Aqd9ma+FhTU6RotEBU2v4Z9pGkXHBLPjl 1IffsoftltGKJznHfiT47pRBG/ZWMLYL96zKfQUKI9hmCghZk3Y4i08p53ReXDF/ p9CNm5nqqJgGNxq9iyurkrNf4dGGewGv302FFkxRPb/AYKWaVLXnReL0DWcXuwjX U0IUBDuTTnJymDf6FaeUgtbcXPK2Yoh7ya8+PRKon2KhGSAhX8Z5789y6voDsX+A JWVMn5oD6Zd+Ttr1XSXX6xPoIa5+9+XvpzM+0Uet31B3z1yXB2Q= -----END CERTIFICATE-----Generated at Tue Jun 17 15:37:19 2025 by rpki-client